Risk Manager

Function: Audit, Risk and Assurance / Finance

Reports to: Head of Risk Management

Location: Colt House, London, UK

Set up: Hybrid

Role purpose

To support the Enterprise Risk Management within Colt by delivering on the risk management plan, providing risk expertise across all aspects of the Risk framework and working with risk owners to deliver “value add” risk management.

This role will be responsible, together with the Head of Risk and the other Risk Managers in the team, for delivering the risk transformation required to ensure Colt Enterprise Risk Management meets the needs of the business and drives a proactive risk management culture across Colt, and business partners through involvement in the decision making process.

Key accountabilities

• Work with the Head of Risk to develop the Colt risk strategy and the annual risk management plan.
• Drive adoption of a more data driven risk methodology, introducing risk modelling into the suite of available risk management tools within Colt. 
• Deliver on specific risk related projects in response to business needs (Eg: provide risk insights in deal bidding process and in key strategic initiatives and projects)
• Support all elements of the risk management process as required :
• conduct regular risk identification, assessment and evaluation with management across the various business units;
• work with Risk Owners to define risk appetite and ensure ongoing monitoring of Colt’s adherence to set appetite;
• work with the business to define controls and action plans required to effectively manage the risks identified;
• drive maturity of the risk management process, ensuring risk information is used to effectively support decision making;
• provide support, education and training to the business to build risk awareness and to promote the right risk culture within the organisation.
• Support the development of risk reporting and relevant material for the Board, the Executive Leadership Team and the Audit Committee.
• Assess and review Colt’s internal practices and regulatory obligations (e.g : anti-bribery and anti-corruption, Fraud, Climate change, UK Corporate Governance reforms).
• Identify opportunities for innovation and continuous improvement in the Risk Process.

Key performance indicators (financial and non-financial)

• Risk Management Process is consistently implemented across the organisation
• Bottom-Up risk consolidation in place, informing Colt top risk register
• Risk modelling and risk data analytics developed and successfully applied to key scenarios to generate insights and drive risk decisions
• Risk information is used to better support decision making across the organisation.

Relationships and key contacts

• Exposure to the EVPs, VPs  and Senior Managers across Colt in all territories.
• Industry regulators and auditors (e.g. ISO, External Auditors)

Role specific requirements

Skills & Experience

• Background – Experienced Risk Manager or Risk Professional, with minimum of 6 years’ experience gained in a Big 4 consultancy/ Global Corporate Organisations / FTSE 100 or similar. Track record of driving risk management maturity and being solution focused. Excellent interpersonal and communication skills .
• Risk Management Experience – Experience and knowledge of risk management framework methodology and practices gained in global corporate organisations or consultancy practices. Track record of enhancing maturity in risk functions and processes.
• Technology Experience – Experience in technology risk management, cybersecurity, or information security roles, with a strong understanding of risk assessment methodologies and industry standards. Demonstrable experience with project based risk identification for system implementations.
• Data Analytics and Risk Modelling – Exposure to data analytics and risk modelling, with the ability to explore data sets to generate meaningful insights.
• Communication and Influencing Skills – Proven track record in developing strong stakeholder relationships, excellent communication (verbal and written) and interpersonal skills.  The successful candidate will be a clear and focussed communicator, with the ability to build rapport and to challenge stakeholders when required. He/she will also have the ability to collate and summarise information in plain English and to design engaging reports for various audiences.
• Problem-solving skills – Ability to identify the nature of a problem, deconstruct it and work with the business to address it.
• Organisational skills – A self-starter who can be relied upon to act on initiative and take full ownership of deliverables and who has the ability to successfully manage many work streams simultaneously.
• Commercial exposure  –  Experience in applying risk management to commercial deals/settings
• Although experience in technology services and telecommunications is not essential, the successful candidate will have a good understanding the sector and associated technologies and products.

Qualifications

• Relevant qualification in risk management (CRMA, Diploma from IRM, C-Risk).
• Bachelor’s degree or a qualification in accounting (ACA,ACCA,CIMA).
• Strong proficiency in Microsoft Excel, PowerPoint, SharePoint and data analytics, ability to present risk information in a compelling way.

Others

Travel opportunities to Europe and/or Asia. Candidate should be able to travel up to 10%.
Flexible and remote working

What we offer

Colt is a growing business that is investing in its people. We offer skill development, learning pathways and accreditation to help our people perform at their best, regardless of role and location. The company supports diversity and inclusion in the workplace and has signed Diversity Charter.

In addition to offering competitive salaries and incentive plans, a range of benefits and local rewards packages are offered to staff. Colt recognises the importance of a work life balance.

Some benefit examples are:

• Hybrid set up
• Pension fund
• Two days annually to spend on volunteering opportunities
• Medical and life insurance
• Full time standard working hours
• Flexible benefits scheme
• Access to a virtual business school for on-going learning
• Business mentoring
• International environment with employees from more than 35 different nationalities

POSITION SPECIFICATION

ROLE   :   Group IT Internal Auditor

LOCATION   :   Near European international airport

OBJECTIVES

• Plans, executes and reports on IT General Controls audits / reviews assigned by the Group Head of Internal Audit & Compliance.
• Interprets policy and procedures and applies professional IT and auditing principles and standards to test and evaluate IT General controls, including IT continuity, IT security, IT change management, IT service delivery and IT governance.
• Develops recommendations which have been agreed with management ensuring that the recommendations are realistic and achievable and cost effective and add value to the business.
• Build positive working relationships with Group Head Office IT and Divisional IT management teams to ensure mutual understanding of the role of internal audit and work with them on business process and internal control improvements.
• Communicate with key external parties such as external auditors, including on ISA315.
• Performs other duties as assigned including ad hoc projects and special investigations as deemed appropriate by the Audit & Compliance Committee.

CANDIDATE PROFILE

QUALIFICATIONS

• The candidate will be a qualified CRISC – Certified in Risk and Information Systems Control and / or a Certified Information System Auditor (CISA) or equivalent.
• The following qualifications are nice to have:
  • CISM – Certified Information Security Manager
  • CISSP – Certified Information Systems Security Professional

EXPERIENCE

• An experienced Internal Audit professional in an international, ideally manufacturing group.
• Has operating in a Big 4 and / or a plc environment for a number of years.
• Has the ability to strike an appropriate balance between independence and common sense.
• Risk based approach.
• Familiarity with IT General Controls auditing.

PERSONAL QUALITIES

• Highly motivated with the ability to work on his / her own initiative.
• High level of personal and professional integrity.
• Able to influence and engage people at all levels across the Group.
• Credible, flexible, personable and team oriented.
• Strong problem solving abilities.
• Sound business judgement and an ability to be decisive.
• Clarity of thought with the ability to analyst complex business situations.
• Good negotiation skills.
• Excellent communication skills both written and oral.
• Able to work to deadlines.

REPORTS TO   :   Group Head of Internal Audit & Compliance

SCREENING PROCESS

1. Phone interview with the Group Head of Internal Audit & Compliance
2. Phone interview with a Group Internal Audit Manager
3. Phone interview with the Group Head of IT
4. Meeting with the Group Head of Internal Audit & Compliance
5. Meeting with the Group CFO

TRAVEL   :   Regular travel (up to 30 weeks / year) will be required to the Group’s overseas subsidiaries

      (+220 manufacturing locations worldwide)

Senior IT Audit Manager (Head-of Position)

EMEA – UK Europe

The role

As the Senior IT Audit Manager, you will establish and lead the global IT internal audit function, working closely with management and leadership teams to deliver impactful audits. You will be a team builder with an appetite for innovation and a proven ability to deliver an effective IT audit function, including data analytics capabilities.

What You’ll Be Doing

• Develop and execute the IT internal audit strategy in line with the company’s overall objectives.
• Lead the IT internal audit function, including the development, delivery, and reporting of the annual IT audit plan, covering ITGCs, process audits (e.g., data, AI, cyber), and integrated audits with the FinOps IA team.
• Track and analyze KPIs to measure audit performance and effectiveness.
• Manage, mentor, and develop team members to build a high-performing audit team.
• Stay updated on IT audit trends and collaborate cross-functionally to ensure best practices.
• Identify key risks and ensure that the IT environment operates efficiently and securely. 
• Utilize data analytics, including continuous monitoring, to assess and mitigate key risks.

What we need to see from you

Skills and abilities:

• Minimum of 8 years of IT Audit experience, including Big-4.
• Data interrogation skills and visualization skills (e.g. Power BI, SQL, or Alteryx are desirable).
• Effective presentation, communication and persuasion skills in English.
• Self-starter and hands-on.
• Ability to travel globally (up to 20%).

Experience and Education:

The ideal candidate will be able to demonstrate the following: 

• Degree in Computer Science, IT, Accounting, or a related field.
• Relevant professional qualifications, such as CIA, CISA, CISM, CISSP, or CRISC.
• Extensive experience in technology auditing and information technology, including ITGCs.
• Strong knowledge of current security and control frameworks and standards (e.g. NIST, ITIL, COBIT).
• Excellent analytical, communication, and interpersonal skills.
• Tech sector experience is a plus.

Why SoftwareOne?

SoftwareOne is redefining how companies build, buy and manage everything in the cloud. By helping clients to migrate and modernize their workloads and applications – and in parallel, to navigate and optimize the resulting software and cloud changes – SoftwareOne unlocks the value of technology.

The company’s 9,000+ employees are driven to deliver a portfolio of 7,500 software brands with sales and delivery capabilities in 90 countries. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange under the ticker symbol SWON. Visit us at https://www.softwareone.com/en