Tech Risk Senior Lead
- Team
- Digital & Tech
- Store
- London Support Office
- Location
- London, Greater London
- Contract type
- Permanent
- Position type
- Full Time
- Salary
- Competitive + Benefits
- Closing date: 28th February 2025
How We Hire
Everyone is welcome at M&S. No exceptions. It’s your background, abilities and differences that make you, uniquely you. And when you’re part of M&S, that individuality has the potential to make waves.
About the role
This section tells you all you need to know about the position and its responsibilities, outlining everything we hope to see in a successful candidate.
All the details
Summary
As a Technology Risk Senior Lead within the First Line of Defense for M&S Digital and Technology (D&T), you will lead Technology Risk Management within the D&T Risk, Audit, and Compliance function, reporting directly to the Head of Risk, Audit, and Compliance. Your core responsibility will involve managing Technology Risk processes across D&T's Products and Platforms. Your primary objective is to ensure that both individual and aggregated Technology Risks are thoroughly identified, assessed, clearly understood, and effectively managed, with robust strategies in place for mitigating both strategic and tactical risks.
You will work closely with the D&T Products and Platforms teams to identify and assess Technology Risks, encompassing Operational, Transformational, Regulatory, and Emerging Risks, and document the findings in the M&S GRC (Governance, Risk Management, and Compliance) platform. Your role is pivotal in ensuring that our Technology Risk Framework operates within regulatory requirements and best practice standards, maintaining the integrity and resilience of M&S’s Technology systems.
To stay close to customers, our support teams are in the office three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected.
What’s in it for you
Being a part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day. We’re an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.
Here are some of the benefits we offer that make working for M&S just that little bit more special…
• After completing your probationary period, you’ll receive 20% colleague discount across all M&S products and
many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our
performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to
develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and
PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away
from work.
What you'll do
- Take the lead in implementing the Risk Assurance Framework across all D&T Product and Platforms.
- Conduct and oversee Risk identification and assessments processes to identify and analyze potential risks to Technology Operations.
- Develop comprehensive risk mitigation plans in response to identified Risks and control weaknesses.
- Support the development and maintenance of Technology Risk Dashboards and reports that provide an executive overview of the Technology risk landscape, including key risk indicators, mitigation progress, and emerging risks.
- Lead and develop a team of Technology risk professionals, fostering a culture of continuous improvement, innovation, and risk-aware decision-making.
Who you are
- Strong experience of IT Risk and Technology Controls Frameworks and the application of Technology Risk best practices and Risk Standards (ISO 31000, ITIL, Cobit 5, IS27001 COSO, NIST 800-53, SOX etc)
- A track record as an experienced Risk and control practitioner in managing digital/technology controls (experience in managing Cloud and Data technology controls is highly desirable)
- High-level analytical approach to complex technical and business problems
- Proven track record in technology control identification and management
- ITGC controls experience preferable
Everyone’s welcome
We are ambitious about the future of retail. We’re disrupting, innovating and leading the industry into a more
conscientious, inspiring digital era. We’re transforming how we work together and offering our most exciting
opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.
We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.
If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.
#LI-LS1
Meet the Team
Being an in-person business
We're at our best when we're close to customers, and for many of us at M&S, that means working in store every day.
To stay close to customers, our support teams are in the office three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected. It also means we can solve problems as soon as they arise, learn and grow as a team, build trust, and get closer to our colleagues.
End of quote slider carousel
Make Your Mark
Upcoming projects
Take part in our M&S Digital & Tech team days. Grow your digital and data skills through our BEAM Academy. Or challenge yourself at one of our business-wide hackathons. We also partner with Women in Data, Databricks and Cajigo to increase opportunities for women in digital and data.
Opportunities to be heard
Your voice and your ideas matter here. Our 8 colleague networks are places to find support, listen to each other and encourage debate. You can pitch ideas ‘Straight to Stuart’, our CEO, or get involved in our BIG (Business involvement Group).
End of slider Colleague Networks carousel
Benefits
How to Apply
Here’s what to expect at each stage of the application process. This can change depending on the role you’ve applied to. If you need any reasonable adjustments made at any stage, let us know and we can help.
Send us your application
Fill in our short application form and hit submit.
Online assessment
Depending on the role you are applying for, you may be invited to do an assessment. Your Talent Acquisition Partner will guide and inform you along the way.
Interview
We'll invite you to join us for an interview. This could be remote or in person. Here, we'll ask you some role based technical questions and examine the behaviours we're looking for.
Decision
After we’ve made our decision, we’ll be in touch. If you’ve been successful, we’ll officially invite you to join the team and let you know the next steps.
Tech Risk Senior Lead
- Team
- Digital & Tech
- Store
- London Support Office
- Location
- London, Greater London
- Contract type
- Permanent
- Position type
- Full Time
- Salary
- Competitive + Benefits
- Closing date: 28th February 2025
- Reference: 77055