Technology Risk and Controls Manager at LegalAndGeneral

Cardiff, Wales, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

04 Jan, 26

Salary

0.0

Posted On

06 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Technology Risk, Controls Management, Cyber Security, IT Governance, Regulatory Compliance, Risk Assessment, Audit Response, Control Effectiveness, Stakeholder Engagement, Risk Culture, Change Management, Problem Solving, Collaboration, Communication, Framework Implementation, Root Cause Analysis

Industry

Financial Services

Description

Company Description Legal & General (L&G) is a leading UK financial services group and major global investor. We’ve been safeguarding people’s financial futures since 1836, and strive to build a better society, while improving the lives of our customers and creating value for shareholders. We are one of the world’s largest asset managers and provide powerful asset origination capabilities. Together, these underpin our retirement and protection solutions: we are an international player in pension risk transfer, in UK and US life insurance, and in UK workplace pensions and retirement income. Our Group Functions provide the services that all areas of the business need. This requires a talented and diverse team behind the scenes, who enable everyone at L&G to do what they do best. Joining us means helping to improve the lives of our customers and contributing to the success of the business every day. Recruiter: James Shields ([email protected]) Internal Closing Date: 20/10/2025 Job Description We’re recruiting for a Technology Risk and Controls Manager to join us. The Technology Risk and Controls Manager supports risk and control activities within a dedicated L&G business division, embedding risk ownership into technology delivery and operations. The role helps teams identify, assess, manage and report technology risks—covering cyber, IT and third-party areas—while maintaining controls, tracking issues and providing risk challenge and assurance. What you’ll be doing: Supporting the maintenance and monitoring of key technology controls within the dedicated L&G business division, working closely with control owners to ensure control performance is effective and appropriately evidenced for compliance, audit and assurance purposes Supporting business division technology risk identification and assessment activities, including Risk and Control Self-Assessments (RCSAs), to ensure emerging technology risks, material exposures and changes in risk profile are captured and escalated in a timely and accurate manner in accordance with policies and standards Supporting the implementation and operation of key technology controls across the business division, streams and products to ensure control effectiveness and compliance with policies, regulatory requirements and audit expectations Facilitating and guiding business division response and remediation of management-identified technology issues, control failures, technology-related risk events and audit issues to ensure root causes are addressed and sustainable remediation plans are delivered Working closely with technology teams within the dedicated L&G business division, Business Technology Risk Partners and Technical Risk Functional Areas to ensure shared understanding of effective technology risk management processes and supporting the embedding of strong risk culture Providing SME support on IT and change initiatives with respect to delivering improvements to customer support and experience Qualifications Who we’re looking for: Familiarity with technology and security frameworks such as NIST Cyber Security Framework (CSF), COBIT, ISO27001/2 and COSO Good understanding of regulatory requirements relevant to financial services (e.g. FCA/PRA regulations, UK GDPR, DORA) Experience in technology risk, governance or assurance within a complex, regulated environment Experience designing or overseeing technology controls implementation, controls automation, risk frameworks, and audit responses across third party technology, cyber security and information technology Experience working collaboratively with technology and business teams Not essential based on role holder experience; Technology risk and governance related qualifications such as CRISC, CGEIT or CISA IT related qualifications such as ITIL Cyber and information security related qualifications such as CISM or CISSP Whatever your role, we reward performance and behaviour with a package that looks after all the things that are important to you. Here are some of the benefits we offer: The opportunity to participate in our annual, performance -related bonus plan and valuable share schemes Generous pension contribution Life assurance Healthcare Plan (permanent employees only) At least 25 days holiday, plus public holidays, 26 days after 2 years’ service. There’s also the option to buy and sell holiday Competitive family leave Participate in our electric car scheme, which offers employees the option to hire a brand-new electric car through tax efficient salary sacrifice (permanent employees only) There are the many discounts we offer – both for our own products and at a range of high street stores and online In 2023, some of our workspaces were redesigned. Our offices are great spaces to connect and collaborate and have your wellbeing at the heart Additional Information At L&G, we believe it's possible to generate positive returns today while helping to build a better future for all. If you join us, you’ll be part of a welcoming, inclusive culture, with opportunities to collaborate with people of diverse backgrounds, views, and experiences. Guided by leaders with integrity who care about your future and wellbeing. Empowered through initiatives which support people to develop their careers and excel. We care passionately about outcomes rather than attendance and are therefore open to discussing all kinds of flexible working options including part-time, term-time and job shares. Although some roles have limited flexibility due to customer demand, we accommodate requests when we can. It doesn’t matter if you don’t meet every single criterion in this advert. Instead, think about what you excel at and what else you can bring in terms of strengths, potential and connection to our purpose.

Responsibilities

The Technology Risk and Controls Manager supports risk and control activities within a dedicated L&G business division, embedding risk ownership into technology delivery and operations. The role involves identifying, assessing, managing, and reporting technology risks while maintaining controls and providing risk challenge and assurance.