Risk & Assurance Manager - IT & Infosec

Softcat plc.; United Kingdom; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading technology solutions provider in the UK is seeking an experienced Risk & Assurance Manager to manage and enhance its IT and Information Security risk landscape. You will collaborate with senior leaders to implement risk management practices and maintain compliance with industry standards. Ideal candidates have over 5 years of experience in risk management or internal audit, particularly in IT security. This role offers hybrid working and a supportive team environment.

Benefits

Hybrid working model

Flexible working hours

Support for adjustments for disabilities

Qualifications

• Minimum 5 years of experience in second-line risk management or internal audit.
• Experience in consultancy or professional services preferred.
• Demonstrated leadership in delivering IT risk or audit initiatives.

Responsibilities

• Partner with senior leaders to embed risk management practices.
• Maintain IT Risk and Control Matrices (RCMs) aligned with industry standards.
• Lead reviews of IT and infosec risk frameworks.

Skills

Risk management

Information Security

Stakeholder engagement

Leadership

Tools

ISO 27001

NIST

ITIL

Job description

Join to apply for the Risk & Assurance Manager - IT & Infosec role at Softcat.

Would you like to kick start your career in a supportive, collaborative and innovative company?

Do you enjoy working as part of an enthusiastic, passionate, and collaborative team?

Join our Risk & Assurance Team.

As Softcat's business continues to grow and evolve, so have the risks and the regulatory landscape. Softcat Plc has recognised the need to further strengthen its Risk Management and Internal Controls and has created a second line Risk and Assurance function to strengthen the overall three lines model and improve the way in which risks are identified, managed and communicated across the organisation including Board and Audit Committee. The function is led by the Head of Risk and Assurance who reports to the Chief Financial Officer of Softcat Plc.

Success. The Softcat Way.

Softcat is a £1billion+ technology solutions business and trusted partner to names like Apple, Microsoft and Adobe. Offering a growing portfolio of services including software licensing, cyber security and IT infrastructure, we give our technical teams the tools and support to make exciting things happen. This is where to achieve more for your career.

Lead the Charge on IT Risk & Assurance

This role focuses on managing and enhancing the IT and Information Security risk landscape. Reporting directly to the Head of Risk and Assurance, you will play a key role in embedding effective risk management practices across Softcat's technology and cybersecurity domains.

Responsibilities

• Partnering with senior IT, Security, and business leaders to embed risk management practices into operational processes and strategic initiatives.
• Owning and maintaining IT Risk and Control Matrices (RCMs), ensuring they remain current, comprehensive, and aligned with industry standards and audit expectations.
• Reviewing effectiveness of first line functions in testing and validation of key IT controls (e.g., access management, change control, incident response, vulnerability management), ensuring effectiveness and consistency.
• Leading in the review and enhancement of IT and infosec risk and control frameworks (e.g., ISO 27001, ITIL, ISO22301, NIST), ensuring alignment with business objectives and regulatory requirements.
• Coordinating and representing IT risk in internal, external audits and certification processes (e.g., ISO 27001, Cyber Essentials, ISO22301, etc.), acting as the primary point of contact.

Qualifications and Experience

• Minimum 5 years of experience in second-line risk management or internal audit, with a strong focus on IT or Information Security.
• Experience in consultancy or professional services, with a proven ability to support complex transformation or change programmes is preferred.
• Demonstrated leadership in delivering IT risk or audit initiatives, including managing projects, mentoring team members, and driving outcomes.
• Strong knowledge of industry frameworks and standards, such as ISO 27001, NIST, CIS Controls, and regulatory requirements like GDPR.
• Proven ability to engage and influence stakeholders across IT, Information Security, and business functions, building trusted relationships at all levels.

We also acknowledge that the confidence gap and imposter syndrome are a real thing and can get in the way of us meeting fantastic talent, so please don't hesitate to apply – we would love to hear from you!

Work in a Way That Works for You

• Hybrid working – 3 days in the office and 2 days working from home
• Working flexible hours – flexing the times you start and finish during the day
• Flexibility around school pick up and drop offs

Working with Us

Wherever you work, we want you to experience the freedom and autonomy to realise your potential. You will feel supported by a team that celebrates individuality, encourages different perspectives, and embraces every background.

Apply Now

To become part of the success story, please apply now.

If you have a disability or neurodiversity, we can provide support or adjustments that you may need throughout our recruitment process or any mitigating circumstance you wish for us to consider. Any information you share on your application will be treated in confidence.

You can find out more about life at Softcat and our commitments to diversity and inclusion at jobs.softcat.com/jobs/our-culture/.

Here at Softcat, we don't prohibit the use of AI (artificial intelligence) in our application process, as we understand how far it can go to creating a truly equitable candidate experience. That being said, as a culture-driven organisation, we believe that the genuine essence of each person is what truly matters, so we highly encourage you to be as authentically you as possible when submitting your application to showcase your true and whole self.

Seniority level: Not Applicable

Employment type: Full-time

Job function: Accounting/Auditing and Finance

Industries: Computer Hardware Manufacturing, Software Development, and IT Services and IT Consulting