Hours:35 Hours per weekHybrid workingSalary: Up to £55,000 depending on experienceClosing Date:Sun, 13 Apr 2025A fantastic new opportunity has arisen within the Group Enterprise & Operational Risk Team for a Senior Information Risk Specialist. This is an exciting time to join the team and work closely with the rest of the business and wider Group to continue to protect our customers. You will be responsible for providing second line risk oversight across IT, information security and operational resilience. You will support the execution of our risk framework, cyber security and operational resilience roadmaps and challenging initiatives and projects.Who Are We?Not just another building society. Not just another job.We're the fourth biggest building society in the UK and what makes us a bit different is that we're a mutual organisation. We don't have shareholders; we're owned by our members.Our colleagues say Skipton's a great place to work, and you could be one of them, bringing with you new ideas on how we can keep customers at the heart of what we do.Whatever your background, and whatever your goals, we'll help you take the next step towards a better fu
ture.What’s In It For You?Skipton values work/life balance and we are proud to support hybrid and flexible working, where possible. We have a newly refurbished head office which offers a vibrant and collaborative working space.We have a range of other benefits available to you including;Annual discretionary bonus scheme25 days standard annual leave + bank holidays + rising 1 day per year of service to a maximum of 30 daysHoliday trading scheme allowing the ability to buy and sell additional annual leave daysMatching employer pension contribution (up to 10% per annum)Colleague mortgage (conditions apply)Salary sacrifice scheme for hybrid & electric carA commitment to training and developmentPrivate medical insurance for all our colleagues3 paid volunteering days per annumDiverse and inclusive colleague networks available for you to join including our Carers and Pride Alliance groupsWe care about your health and wellbeing – we provide a range of benefits that support this including cycle to work initiative and discounted gym membershipWhat Will You Be Doing?Work closely with the wider team to implement and oversee the operation of the Group Risk Management Framework for information risk across the Group. Effective challenge and oversight that information risks (including security, resilience and IT risks) are clearly articulated, mitigated and managed. Provide SME information risk view and challenge when supporting change initiatives and projects.Produce analysis and reporting of the internal and external risk and control environment ensuring timely identification of themes and emerging trends and issues.Perform thematic reviews across the group including reporting to senior management.Deliver high quality reporting for relevant stakeholders, committees and Board as req
uired. Support delivery of risk and control reviews against emerging themes. Support information risk training and awareness activity as required and support the embedding of a strong risk framework and culture.What Do We Need From You?SkillsProficiency in data analysis, including the ability to collate and interpret large volumes of complex data and present this clearly and concisely to a range of stakeholders. Ability to understand technical and business concepts.Ability to understand and articulate IT risk and effective controls.Relevant (academic or professional) risk, IT or security qualifications (for example, CISA, CISM, CISSP)KnowledgeKnowledge of the underlying IT / business technologies and practices used to manage, operate and secure information, systems and networks.ExperienceDelivering committee pack papers, reports and policy and framework documentation
