Job Description

Senior Risk & Control Specialist

• Location: 3-days per week in Sheffield
• Inside IR35

We are partnering with a leading financial services client to recruit an experienced Senior Risk & Control Specialist to play a key role in strengthening technology risk management and ensuring a robust, audit-ready control environment.

This is an excellent opportunity for a risk professional with extensive experience in control design and control operation, combined with a strong understanding of risk and control frameworks. You will be responsible for driving the effectiveness of key technology controls, leading continuous improvement initiatives, and ensuring governance processes remain fit for purpose within a highly regulated environment.

Key Responsibilities:

• Lead the design, operation and continuous improvement of critical technology controls, ensuring they remain effective, efficient and audit-ready.
• Drive the implementation and ongoing enhancement of control frameworks, defining standards, measuring adoption and ensuring successful delivery across the organisation.
• Identify control gaps, assess associated risks and drive remediation activities through to completion, escalating where appropriate.
• Provide oversight of framework adoption, monitoring progress, identifying emerging risks and ensuring effective mitigation plans are in place.
• Partner with senior business and technology stakeholders to influence decision-making, secure alignment and deliver successful outcomes.
• Lead governance activities, ensuring risks, actions and control updates are accurately documented, tracked and reported.
• Communicate control performance, residual risk and emerging themes to senior leadership, providing clear and actionable insights.
• Champion a culture of continuous improvement across risk management and control processes.

Requirements:

We're looking for an experienced risk professional who brings:

• Extensive experience in control design, control operation and continuous control improvement.
• Strong knowledge of risk and control frameworks, technology risk management and governance within a regulated environment.
• A proven ability to identify, assess and remediate control weaknesses while maintaining a strong audit-ready environment.
• Excellent stakeholder management skills, with the ability to influence and challenge senior leaders across business and technology functions.
• Experience operating within complex matrix organisations, driving delivery through influence and effective governance.
• The ability to translate complex risk and control information into clear, meaningful insights for senior stakeholders.
• Experience leading teams, mentoring colleagues or driving capability development.
• Knowledge of Operational Resilience requirements and the regulatory landscape within financial services.
• A degree in Information Technology, Computer Science or a related discipline (or equivalent experience). Relevant professional certifications such as CRISC, CISM or CISA would be advantageous.

More details available on successful application.