Copyright © 2025
Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Howden. For the most up-to-date job details, please visit the official website by clicking "Apply Now."
Location: London
Department: Group Technology and Data Risk
Reports to: Head of Framework and Controls
As part of the growing Group Technology and Data Risk team at Howden Group, the Framework and Controls Manager will support the development, implementation, and maintenance of IT and data control frameworks across the organisation. This role is ideal for a detail-oriented and proactive individual who thrives in a collaborative, fast-paced environment and is looking to grow their career in technology risk and governance.
You will work closely with the Head of Framework and Controls and other senior stakeholders to ensure that risk and control practices are embedded consistently across the Group. This role follows a hybrid working model, with three days per week in the London office.
Assist in the development and maintenance of IT and data control frameworks aligned with regulatory requirements and industry best practices.
Coordinate the implementation of control testing activities and support the analysis and reporting of results.
Monitor and report on Key Control Indicators (KCIs), escalating issues where necessary.
Support the execution of Technology Risk and Control Self-Assessments (RCSA) and ERICCA1 processes, ensuring timely follow-up on findings.
Maintain the lifecycle of technology policies and standards, ensuring documentation is current and accessible.
Contribute to due diligence activities for mergers and acquisitions by gathering and analysing control-related information.
Liaise with internal and external auditors to support audit planning, evidence gathering, and remediation tracking.
Assist in preparing materials for regulatory engagement and ensure accurate documentation of compliance activities.
Collaborate with business units to promote awareness and understanding of control requirements and risk management practices.
Bachelor's degree in Information Technology, Risk Management, or a related field.
Experience in IT risk, audit, or controls within a regulated environment (e.g. insurance or financial services).
Familiarity with control frameworks (e.g. COBIT, ISO 27001) and regulatory expectations.
Strong organisational and communication skills, with the ability to manage multiple priorities.
Comfortable working in a matrixed environment and engaging with stakeholders at various levels.
Travel Requirements: Occasional, as required.
Work Environment: Hybrid - 3 days per week in the London office.