IT Risk and Controls Consultant

IT Risk and Controls Consultant – NFU Mutual

• Join the NFU Mutual IT Risk and Controls team.

• Based at our Stratford-upon-Avon office with excellent facilities and surroundings.

• Hybrid working with the option to work 80% of your hours from home.

Direct message the job poster from NFU Mutual

We’re looking for an experienced IT Risk and Controls Consultant to join our team on a permanent basis. In this key role, you’ll assist in the development and ongoing enhancement of a robust framework for managing IT controls across the IT Division, leveraging our enterprise GRC (Governance, Risk, and Compliance) platform.

In this position, you’ll play a leading role in developing and maintaining a framework for the effective management of IT controls across the IT Division using the organisation’s GRC risk management system. You will be responsible for supporting the design, implementation and automation of the IT controls by working with key stakeholders from the IT division, 2nd line and 3rd line of defence.

You will be assessing the design and operating effectiveness of the IT controls and monitoring remediation efforts of any corrective actions. To promote a strong ownership and controls culture, you will also provide training and awareness of IT risk and controls to stakeholders. The role will require you to contribute to the review and assessment of IT risks, ensuring they are appropriately rated and clearly articulated to enable risk owners to make well‑informed decisions.

You’ll also play a key role in helping the IT Division meet its internal and external audit obligations by supporting ongoing audits and tracking the resolution of audit findings through to completion.

You will also support the reporting of the IT risk landscape to key stakeholder through various reports and meetings.

As an IT Risk and Controls Consultant, you’ll be proactive and have excellent influencing and negotiation skills, ensuring stakeholders understand the importance and value of controls. You’ll be an excellent written and verbal communicator and be confident presenting to virtual and in‑person audiences.

To be successful in this role, you’ll also have:

• Knowledge of relevant frameworks such as NIST, ISO 27001, or COBIT
• Experience of performing IT risk and control‑based reviews
• Proven experience of analytical work in a governance, risk management or similar assurance function
• Proficiency in using risk management tools and software
• Experience in the automation of manual controls and establishing automated control testing
• Professional certifications such as CRISC (Certified in Risk and Information Systems Control) or CISA (Certified Information Systems Auditor). These are preferred but not essential

• Salary – £55,000 – £65,300 depending on experience
• Annual bonus (up to 17.5% of salary)
• Contributory pension scheme, up to 20%, including your 8% contribution
• 25 days annual leave + bank holidays + buy/sell/save holiday trading scheme
• A Family Friendly policy that helps you balance your work and family responsibilities
• Access to savings at High Street brands, travel and supermarkets
• £20 contribution to a monthly gym membership – subject to T&Cs
• Health and wellbeing plan – cashback for dentist, opticians, physio and more
• Access to voluntary benefits, including health assessments, private medical insurance and dental insurance
• Employee Volunteering – volunteer in the community for one day each year
• Unlimited access to Refer a Friend £500 bonus scheme
• Life Assurance cover of 4 × salary
• Employee discounts of 15% on a range of NFU Mutual insurance policies
• Salary sacrifice employee car scheme – subject to eligibility

We’re one of the UK’s leading general insurance and financial services companies. For over 110 years we’ve put our customers at the heart of everything we do. Our people are just as important to us. We pride ourselves on being “a great place to work” and our Gallup Exceptional Workplace 2025 award was not only awarded with Distinction but also named us as the first UK‑based company to receive a Gallup Exceptional Workplace for ten years in a row.

We are also the…