Senior Technology Risk & Controls Governance Consultant

Hybrid in London·Added today (last checked 10 Nov)

Agency

Salt

72 open roles

Apply

Our summary

Salary: £700 a day
Work mode: Hybrid, London
Contract: Contract role, inside IR35
Experience: Senior level

Skills

Requirements

What we're looking for

Proven experience in IT Risk Management, Technology Risk Governance, IT Controls or Cybersecurity Risk Management.
Strong understanding of technology risk and control frameworks within complex organisations.
Practical experience with RCSA, risk assessments, issue management, remediation tracking and Key Risk Indicators (KRIs).
Experience overseeing technology risks, control deficiencies and remediation programmes.
Strong understanding of the Three Lines of Defence model and risk governance processes.
Experience developing risk reports, management information and governance dashboards.
Ability to analyse risk data, identify trends and communicate meaningful insights.
Excellent stakeholder management skills, including the ability to challenge and influence senior stakeholders.
Strong communication, analytical, organisational and problem-solving capabilities.
Ability to work independently and manage multiple risk and governance activities simultaneously.

Nice to have

Previous experience within banking, financial services, capital markets or other highly regulated environments.
Familiarity with industry standards and regulatory frameworks, including:
DORA - Digital Operational Resilience Act
NIST Cybersecurity Framework
ISO 27001
COBIT
Enterprise Risk Management (ERM)
Experience using GRC platforms such as ServiceNow IRM, RSA Archer or MetricStream.
Exposure to operational resilience, ICT risk management and regulatory compliance.
Experience supporting risk governance transformation, process improvement or reporting automation.
Relevant qualifications such as CRISC, CISM, CISA or ISO 27001 certification.

The role

Senior Technology Risk & Controls Governance Consultant - Banking Client - London

We are currently seeking an experienced Senior Technology Risk & Controls Governance Consultant to join a leading global financial services organisation based in London.

This is an excellent opportunity to play a pivotal role in strengthening Technology Risk Management, Cybersecurity Risk Governance and Control Oversight across a complex, highly regulated technology environment.

Working closely with the Head of IT & Security Risk Management, you will support the ongoing development and effectiveness of the organisation's Technology Risk Management Framework, ensuring risks are appropriately identified, assessed, monitored, reported and remediated.

The successful candidate will combine strong IT risk and control expertise with excellent stakeholder management skills, providing effective governance, constructive challenge and actionable risk insights to senior Technology and Security leadership.

What you'll do

Support the execution, maintenance and continuous improvement of the Technology Risk Management Framework.
Identify, assess, monitor and report on IT, cybersecurity, operational and control risks.
Support Risk and Control Self-Assessments (RCSA), ensuring risks and controls are appropriately documented and assessed.
Promote effective risk governance practices and a strong risk culture across Technology.
Ensure alignment with internal policies, risk appetite and applicable regulatory expectations.
Oversee technology risk issues, control deficiencies and associated remediation activities.
Monitor action plans, challenge overdue remediation activities and escalate material risks where appropriate.
Conduct quality reviews of risk assessments, control effectiveness, issues and findings.
Work with stakeholders to ensure clear ownership, accountability and timely resolution of identified risks.
Identify recurring control weaknesses and opportunities to strengthen the overall control environment.
Develop and maintain high-quality Technology Risk reports, dashboards and management information.
Monitor and analyse Key Risk Indicators (KRIs), emerging risks and control performance trends.
Prepare meaningful risk insights for senior management, governance committees and risk forums.
Ensure risk reporting is accurate, timely, consistent and aligned with governance requirements.
Translate complex technology and cybersecurity risks into clear, business-focused recommendations.

How you'll work

Location: London - Hybrid (8 days onsite per month)
Day Rate: Circa £700 per day
Contract Type: Inside IR35 - Umbrella Company Required
Industry: Financial Services / Banking

The Ideal Candidate

We are looking for a proactive, commercially aware Technology Risk professional who understands how to operate within a complex financial services environment.

You will be comfortable engaging with senior stakeholders, challenging risk owners, monitoring remediation commitments and ensuring Technology Risk Management processes operate effectively.

This is not a hands-on cybersecurity engineering position.

*Rates depend on experience and client requirements

About Salt

Industry: Staffing and Recruiting

In their own words

About the company & team

Act as a trusted advisor to Technology, Cybersecurity and business stakeholders on risk and control matters.
Collaborate with First, Second and Third Lines of Defence to support consistent risk management practices.
Constructively challenge stakeholders to drive accountability and effective remediation.
Support and coordinate risk champions and risk ambassadors across Technology.
Contribute to risk awareness, governance improvements, process optimisation and automation initiatives.

All open roles at Salt