IT & Cyber Risk, Controls and Audit Specialist

Senior IT & Cyber Risk, Controls and Audit Specialist

Location: Milton Keynes
Function: Technology Risk & Cybersecurity

About the Role

We are seeking a Senior IT & Cyber Risk, Controls and Audit Specialist to take a leadership role across IT risk, cyber risk, controls assurance, SOX ITGCs, and audit. Reporting into the Head of Technology GRC, you will strengthen the design, operation, testing, and assurance of IT and cyber controls across both cloud and on‑prem environments.

This is a high‑impact role working closely with Technology, Risk, Internal Audit, and External Audit, ensuring regulatory confidence, strong audit outcomes, and robust financial reporting controls.

Key Responsibilities

• Lead the identification, assessment, and management of IT, cyber, and operational risks across infrastructure, applications, data, and platforms
• Design, review, and challenge IT and cyber controls; oversee control testing, issue remediation, and validation
• Act as a senior specialist for SOX IT General Controls, ensuring controls are defined, documented, tested, and evidenced to required standards
• Coordinate with External Audit on IT, cyber, and SOX matters, managing requests, walkthroughs, evidence, and findings
• Provide specialist oversight of risks linked to cloud, automation, and hybrid technology environments

What You'll Bring

• Strong experience in IT risk, cyber risk, IT controls, and SOX ITGCs
• Background in regulated financial services, ideally banking
• Proven ability to work with Internal and External Audit on testing, evidence, and findings
• Strong understanding of cloud and on‑premise technologies and related controls
• Excellent analytical, documentation, and communication skills
• Ability to balance robust control requirements with operational practicality

Qualifications & Certifications

• Degree in IT, Computer Science, Cyber Security, or related discipline (or equivalent experience)
• Professional certifications desirable: CISA, CISSP, CRMP, CIA, or similar
• SOX, audit, or controls‑focused certifications or experience highly advantageous

Apply Now

If you're an experienced risk and controls specialist looking to influence technology governance at scale, apply now!