Risk Manager

Our client is a technology-led organisation. They are looking for a Risk Manager to join them on a contract basis running until June 2028, taking ownership of how risk is identified, assessed, reported and managed across their programmes and operations. The successful candidate will build and maintain the risk framework, work with delivery teams and senior stakeholders to identify and assess risks, and make sure mitigation actions are agreed, owned and followed through.

The role includes producing clear risk reporting for leadership, running risk reviews and workshops, and escalating issues that need decisions. This is a position for a risk professional who is comfortable working across technical and business teams and who can turn complex information into clear, practical advice. The contract runs for an extended period, offering the chance to shape risk practice over the longer term and see the impact of that work through to delivery.

Main responsibilities: Develop, maintain and embed the risk management framework, policies and processes; Identify, assess and record risks across programmes, projects and operations, including likelihood, impact and ownership; Run risk workshops, reviews and assessments with delivery teams and stakeholders; Agree mitigation plans with risk owners and track actions through to completion; Maintain risk registers and ensure data is accurate, current and consistently reported; Prepare regular risk reports, dashboards and briefings for senior management and governance forums; Define and monitor risk appetite, tolerances and key risk indicators; Escalate material risks and support decision making on mitigation and acceptance; Support audit, compliance and assurance activity, including evidence gathering and responding to findings; Promote risk awareness across teams and provide guidance on good practice.

Requirements: Essential: Proven experience in a risk management role, including managing risk registers and reporting; Strong knowledge of risk management frameworks and methodologies; Experience facilitating risk assessments and workshops with senior stakeholders; Strong analytical skills and the ability to present complex information clearly; Excellent written and verbal communication skills in English; Ability to work in a hybrid pattern, including time onsite every other week.

Desirable: Experience in technology, IT delivery or programme risk environments; A recognised risk or governance qualification, such as IRM, ISO 31000 or equivalent; Experience with GRC or risk management tools; Experience supporting audit, compliance or regulatory reviews; Experience on long-running programmes or multi-year engagements.

The offer: This is a contract role running from a November – December start until June 2028, on a 40 hour working week. The working pattern is hybrid, with 2 to 3 days onsite every other week. Location, rate and further detail on the team and scope of the role are to be confirmed with candidates.