It risk and control manager

Role: IT Risk and Control Manager Location: Blackburn, BB1 2FA Contract: Full-Time Hours / Permanent Salary: £55,000 - £65,000 (Depending on experience) Company: EG Group About the Role… Based in the UK within our IT Risk and Control Team, a new and exciting opportunity has arisen to work closely with our UK and Global colleagues to design and develop our IT Risk and Control capability in line with our IT control framework. The processes and controls we are creating are designed to enhance maturity and provide enduring solutions to allow us to effectively manage technology risk. The team currently operates as a 1st/2nd line function which involves working very closely with our IT colleagues, Control Owners, and Operators to deliver new IT controls, assess technology risks and continually assess and enhance processes, policies, standards. Working as part of a small but growing team, you will be based at our EG Group Headquarters in Blackburn, Lancashire with flexible-working patterns. This is a great time to join us at a period of significant growth, change and opportunity. Duties Responsibilities Build relationships and become a trusted advisor to our colleagues in all things IT Risk and Control. You will be their go-to person for everything from General IT Risk advice to control implementation on transformation projects or providing valuable support during external audit reviews. Be proactive in driving forwards IT Control implementation in line with EG’s IT Control framework and the ICFR Programme (Internal Controls over Financial Reporting). Support and manage the design, implementation and embedding of new IT controls, including those with a reliance on 3rd party suppliers. Work with the existing IT Controls project teams and IT stakeholders to perform deep dive assessments, plan remediation activities and drive IT Control development through to completion, including routine testing over design and operation of controls. Work with existing transformation projects, to ensure that projects do not introduce avoidable operational risk, track remediation and act as SME throughout the journey. Assist and lead where required in the creation of new or revised policy and standards for IT and ensure the relevant local knowledge and support is provided as needed. Support Control Owners and Operators through 1-2-1 training or group sessions, creating training packs as needed. Assist in the development of risk control reporting and supporting wider Group IT reporting. Liaise with internal/external audit where required and align closely with our business colleagues. Collaborate with different business areas and country units to meet global IT Risk Management requirements. Lead on a variety of IT Risk initiatives and perform IT Risk Assessments as a subject matter expert, providing objective challenge and oversight to ensure that IT and security controls and approaches are observed, and risks and issues identified are reported and escalated in line with the governance framework. Help continue to build the IT Risk Framework, utilising best practice methodology. Drive an effective risk control culture across EG Group, promoting accountability, responsibility, and action, acting as a risk control ambassador to ensure best practices are shared and actions delivered. Proactively look for opportunity to centralise and automate controls and processes to drive efficiency. This list is not exhaustive and may be added to or amended from time to time Candidate Requirements 4+ years’ experience working with or within IT internal audit/external audit teams (essential) Qualified to degree level with CISA, CRISC or equivalent. Confident in designing IT General Controls across access, change and operations domains. IT Controls Framework development or working knowledge of COBIT/ITIL Frameworks IT Controls testing, planning, management, and quality assurance to external audit standards. Comfortable performing IT Risk Assessments across a variety of IT domains. Knowledge of auditing or designing controls for ERP systems particularly SAP is desired. Strong analytical and problem-solving skills Knowledge of Sarbanes Oxley (SOX) (Desirable) Benefits Rewards Performance Based Bonus Scheme Employee Life Assurance EG Group Discounts - up to 15% off at our stores and food to go restaurants ASDA Discount Card – 10% off all ASDA stores EG Cares Benefits - exclusive discounts across 900 retailers Smart Health – 24/7 online GP access, health checks and health and wellbeing support Employee Assistance Programme – access to our Wellbeing Centre which offers emotional practical support including free financial advice Learning Development – access to our Learning Hub, the most extensive online course library in the world to support you with every step of your career at EG Group Waterside Café - freshly prepared meals at affordable prices Free Secure Car Parking Dress Down Fridays Flexi-Time Prayer and Ablution Facilities Shower Facilities Sit / Stand Desk Facilities Work Anniversary Rewards Free Eye Test Who are EG Group? EG Group is one of the world’s leading independent convenience retailers with an extensive network of sites across international markets in the United Kingdom Ireland, Continental Europe, Australia and the United States of America. Founded in 2001 by the Issa family with the acquisition of a single site in the UK, today the company is at the forefront of delivering an innovative approach to forecourt convenience retail. At EG Group, we pride ourselves on being recognised for our investment model, trading performance and more importantly, providing a best-in-class customer experience in Grocery Merchandise, Foodservice and Fuel. Our transformational convenience retail business model has been built upon excellent relationships with an extensive portfolio of leading retail brands, and through strategic network acquisitions supported by a program of new-to-industry developments. Every day, our committed workforce tirelessly delivers our products and services to millions of customers alongside supporting the local communities in which we operate. Please note - the successful applicant will be subject to a DBS check which will be funded by EG Group.