Address
Form of work
SalaryBT works in a regulated environment and sells products that require assurance. This role is to define and implement an IT Controls framework that is appropriate for Digital, that meets current needs and is adaptable for future areas of growth.
Digital has risk obligations that cover Data GDPR, Financial statement and Cyber risk. The definition, governance and lifecycle management of a framework is a Risk and assurance requirement.
A breach against the above risks will result in legal action, fines, reputational and shareholder damage to BT.
This is a hybrid model role based in London (3 days a week in the office).
What you'll be doing
- Supporting the Senior managers in Risk and compliance team. Working as part of a small team of ICOFR controls and Assurance Specialists
- Improving and developing the IT Controls Framework that aligns with industry best practice
- Supporting and advising stakeholders around change and development of IT controls within the framework
- Supporting remediation activities and subsequent impact assessment reviews for controls in remediation
- Supporting the onboarding of new applications into the control framework
- Advising on control design & implementation as well as control test preparation
- Horizon scanning for new emerging risk both internally and externally
- Maintaining and improving dashboards for applications and ICOFR Controls to support senior management decision making
- Stakeholders will range from application support teams through to senior managers responsible for ICOFR controls (MDs, Platform Directors and Senior Management Team Members)
- Ensuring that requirements, timelines, quality of information requirements are all understood and delivered by responsible directors
Essential :
- We are looking for an ambitious and well organised manager to grow in this role with a view to leading in Digital's Risk and Compliance journey.
- We don't expect you to be an IT controls expert but to have the appetite to learn. Some training in framework methodology is available.
- To be able to work with business sponsors and IT technical delivery teams to drive complex IT controls. You will be able to demonstrate a track record of getting results from matrixed teams
- To be able to manage stakeholders in a complex environment of business and audit risk demand
- Good knowledge of risk management and BT Enterprise Risk Management practices would be an advantage
- Experience of ICOFR controls, compliance controls and frameworks to ensure assurance through the three lines of defence model is an advantage
- A good grounding in IT tools, Excel, and Access. The ability to develop, present and update a dashboard of IT health status, both applications and IT controls
- CISA, CISSP or similar
- Strong analytical skills
- Experience in audit methodologies (CISA would be beneficial)
- Knowledge of IT frameworks and methodologies ITIL, COBIT, etc
- Knowledge and experience of SAP
- Knowledge of GRC tools (SAP GRC PC in particular)
- Competitive salary
- 25 days annual leave (plus bank holidays)
- 10% on target bonus
- Life Assurance
- Pension scheme
- Direct share scheme
- Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships etc.
- 50% off EE mobile pay monthly or SIM only plans
- Exclusive colleague discounts on our latest and greatest BT broadband packages
- BT TV with TNT Sports and NOW Entertainment
- 50% discount for friends and family on EE SIM Only plans & airtime element off a Flex Pay plan
Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.
Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.
Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.
About us
BT is part of BT Group, along with EE, Openreach, and Plusnet.
Millions of people rely on us every day to help them live their lives, power their businesses, and keep their public services running. We connect friends to family, clients to colleagues, people to possibilities. We keep the wheels of business spinning, and the emergency services responding.
We value diversity and celebrate difference. 'We embed diversity and inclusion into everything that we do. It's fundamental to our purpose: we connect for good.'
We all stick to the same values: Personal, Simple, and Brilliant. From day one, you'll get stuck in to tough challenges, pitch in with ideas, make things happen. But you won't be alone: we'll be there with help and support, learning and development.
This is your chance to make a real difference to the world: to be part of the digital transformation of countless lives and businesses. Grab it.
A FEW POINTS TO NOTE:
Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.
DON'T MEET EVERY SINGLE REQUIREMENT?
Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.
