s is a key role for someone who can strengthen how technology risk is identified, assessed and managed across the business. You’ll own the IT risk register and governance framework, lead policy and compliance activity, and work with teams across the organisation to make sure risks are understood and addressed.

• What you’ll be doingOwn and maintain the IT risk register across ICT and OT, ensuring risks are assessed, prioritised and assigned clear treatment plans.
• Develop and apply a consistent risk assessment approach, tracking actions through to completion and escalating significant or overdue risks.
• Manage the group-wide IT policies, standards and procedures, coordinating reviews and securing approval for updates.
• Ensure projects, systems and new initiatives meet governance and policy requirements.
• Lead compliance activity against ISO 27001, ISO 20000 and the NIST framework, coordinating internal and external audits and maintaining audit-ready evidence.
• Track audit findings and non-conformities through to resolution, with clear owners and timelines.
• Manage IT supplier risk, including onboarding due diligence and ongoing monitoring, working with Procurement and Legal on appropriate security requirements.
• Own IT service continuity and disaster recovery planning, coordinating tests and driving fo
•