Senior Technology Risk & Controls Lead

Description:

The Senior Technology Risk & Controls Lead is focused on supporting the business and group technology function in assuring and consulting over Digital & Technology Governance, maturing the group’s IT control environment, preparing for significant regulatory uplift and delivering technology assurance through SSE’s Internal Audit programme.

A key aspect of being the Senior Technology Risk & Controls Lead is to be responsible for overseeing, scoping, delivery and reporting of risk-based technology audits from SSE’s internal audit programme. This includes areas such as IT controls over financial reporting, major technology change programmes, cyber security, digital innovation, IT governance, IT service and performance, supplier security risk and resilience. This involves managing peers, seniors, and business stakeholders to coordinate and collaborate to reach success.

The role requires partnering with senior stakeholders on priority technology governance and change, and frequently sits on priority BU, Group and Programme specific governance and steering boards providing real time input to complex topics and initiatives. This role will provide support and collaborate with the business and IT through change and maturing of the control environment, facilitating an integrated assurance framework through active engagement with IT leadership to understand technology risks across the Group for both BAU and digital change strategies. Being a leading voice in the enhancing of controls, their formality and effectiveness will be a crucial outcome of the role. The role provides a point of accountability and escalation for each BU to support management of all technology assurance activity, including SSE's external auditors.

The Technology Risk team form part of the Governance, Risk & Assurance function led by the Director of Group Risk & Audit. Our team work closely in partnership with the Group Audit & Group Risk teams to perform an essential role in support of SSE’s strategic aims by providing value-add assurance and advice to the SSE Group Executive, Senior Management, Audit Committee and Board.