About This Role
This role supports the ongoing development of Frasers Group's technology risk and assurance capabilities. You will identify, assess, and monitor technology and cyber risks, ensuring key IT and business controls are effective. Working with various stakeholders, you will help strengthen governance, improve operational resilience, and ensure risks are managed according to industry standards.
Responsibilities
- Deliver technology and cyber risk assessments across enterprise infrastructure, cloud platforms, retail systems, digital applications, and strategic technology initiatives
- Perform controls testing across IT General Controls (ITGCs), automated application controls, and key operational processes to assure the effectiveness of the Group's control environment
- Conduct Identity and Access Management (IAM) assurance activities, including user access reviews, privileged access audits, Joiner-Mover-Leaver (JML) controls, and Segregation of Duties (SoD) assessments
- Support identity audits to ensure access to business-critical systems remains appropriate, compliant, and aligned with security policies
- Maintain the Technology Risk Register, ensuring risks, remediation actions, and control improvements are accurately tracked and reported
- Perform supplier and third-party technology risk assessments, supporting ongoing assurance over strategic technology partners and service providers
- Support Supply Chain Assurance by assessing technology and operational risks across logistics, warehousing, distribution centres, and supplier ecosystems
- Partner with Internal Audit, Internal Controls, and Cyber Security teams to coordinate audits, evidence gathering, and remediation activities
- Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs), and governance reporting for senior leadership and risk forums
- Collaborate with Technology, Retail Operations, Finance, Procurement, Legal, and Supply Chain teams to embed effective risk management and assurance practices across the business
- Support the ongoing development of the Technology Risk Management Framework aligned with recognised standards including NIST Cybersecurity Framework, ISO 27001, and industry best practice
- Drive continuous improvement of governance, risk, and compliance (GRC) processes, reporting, automation, and assurance activities
- Support regulatory, internal, and external audit requirements such as PCI-DSS, ensuring documentation and evidence are maintained to a high standard
Requirements
- 2+ years' experience within Technology Risk, IT Audit, Governance, Risk & Compliance (GRC), Internal Controls, or Cyber Risk
- Experience delivering technology risk assessments and controls testing across enterprise technology environments
- Strong understanding of IT General Controls (ITGCs), technology governance, and operational risk management
