Job Advert
About the team and the role
At Mencap, our Digital, Data & Technology (DDaT) team provides the systems, services and information that enable our colleagues, supporters and the people and families we serve. Effective technology governance is critical to ensuring our services remain secure, resilient, compliant and trusted.
We're looking for an experienced Technology Risk & Compliance Manager to join our team and lead the development and management of our technology risk and compliance framework. Reporting to the Head of Enterprise Governance, this is a strategic role with significant visibility across the organisation, offering the opportunity to influence decision-making and strengthen governance across a broad technology landscape.
You will work across digital delivery, technology operations, data, architecture, information security, suppliers, accessibility, resilience and emerging technologies, helping ensure technology risks are identified, assessed, managed and reported effectively.
This role is responsible for establishing and maintaining the framework through which technology risks are governed and monitored, while working closely with operational leaders and risk owners to provide oversight, challenge and assurance.
Working Arrangements
This is a home-based role with travel to Mencap locations as required for training, team meetings, workshops, governance forums, collaboration and other business activities on average 2-3 times per month.
What You'll Be Doing
As Technology Risk & Compliance Manager, you will:
- Lead the development and continuous improvement of Mencap's technology risk and compliance framework.
- Maintain the consolidated technology risk register, risk assessment methodology, review cycles and management reporting processes.
- Provide constructive challenge to risk assessments, mitigation plans and risk acceptance decisions, ensuring risks are appropriately managed and escalated.
- Coordinate assurance activities, compliance reviews, control testing and evidence management across DDaT.
- Identify control weaknesses, monitor remediation activity and ensure accountable owners have visibility of findings and actions.
- Lead coordination of technology-related audit activity, maintaining robust evidence and tracking progress against agreed recommendations.
- Work closely with the Information Security Manager to support assurance, audit readiness and compliance activities relating to standards such as ISO 27001 and Cyber Essentials Plus.
- Coordinate governance forums, including monthly Security and Risk Reviews, using operational insights, incidents, audit findings and supplier reviews to strengthen risk management.
- Assess the governance and organisational risk implications of AI and other emerging technologies, ensuring appropriate oversight and accountability.
- Produce meaningful risk reporting and insights for senior leaders, Executive Teams and governance committees.
- Manage delegated budgets and resources within the function, including oversight of specialist third-party support where required.
What You'll Bring
We're looking for someone with strong experience in technology governance, risk management, compliance or audit, who can confidently engage with senior stakeholders and drive effective risk-based decision-making.
Essential Skills and Experience
- Significant experience in technology risk, IT governance, compliance, assurance or audit within a complex organisation.
- Experience designing, implementing or operating technology risk management frameworks across multiple digital and technology domains.
- Strong understanding of technology risk assessment, controls design, assurance methodologies and remediation governance.
- Experience coordinating audits, managing evidence and tracking findings through to completion.
- Knowledge of operational resilience, supplier risk, cloud technologies, infrastructure, identity management, data risk and digital delivery risk.
- Working knowledge of recognised technology risk, information security, governance and service management frameworks.
- Strong understanding of ISO 27001 and Cyber Essentials Plus, including the distinction between control ownership and compliance assurance.
- Ability to provide constructive challenge to senior stakeholders, ensuring decisions are based on robust evidence and informed risk assessment.
- Ability to translate complex technical risks into clear business impacts, including service, financial, safeguarding, regulatory and reputational considerations.
- Experience supporting executive, trustee, audit or risk governance forums through clear and effective reporting.
- Strong analytical skills with the ability to identify interconnected and systemic risks across multiple areas.
- Excellent attention to detail and commitment to professional integrity, evidence-based decision making and independent judgement.
- A pragmatic approach to governance that enables informed decisions while maintaining accountability.
- Experience assessing both the design and effectiveness of controls through proportionate assurance and testing activities.
- A commitment to Mencap's values of being Passionate, Positive, Brave, Kind and Inclusive.
This role will close on 21st October . Interviews will be conducted from the week commencing 2nd November and 9th Nov.
Benefits
Here at Mencap, we offer an impressive range of benefits designed to support and reward our employees to ensure that our teams feel valued and appreciated.
Our benefits package offers 32 days of paid holiday (including bank holidays, pro rata), along with a range of perks such as discounts at leading high-street retailers, access to health cash plans, interest-free loans, and many more exciting offerings.
For more details on what we have to offer, please see the attached document outlining all the fantastic benefits available to you as a member of our team!
About Mencap
Our vision is for the UK to be the best place in the world for people with a learning disability to live happy and healthy lives.
We're here to support people with a learning disability, their families and their carers. We fight for a kinder, fairer and more inclusive society for people with a learning disability to live in.
At Mencap, everyone works with people with a learning disability either providing support or advice, or alongside one another as colleagues.
Belonging at Mencap is for everyone, every day, everywhere.
· Everyone is expected to treat people well and make Mencap an inclusive organisation.
· Every day we grow and learn. It’s okay to make mistakes but we learn from them and make changes
· Everywhere people will feel respected, valued, and safe to be themselves.
We have Belonging network groups that meet online and are open to all colleagues. The groups include people who identify as Black and Asian, LGBTQIA+, disabled or with a long- term health condition, women, parents and carers, and their allies.
We want to encourage everyone to apply to work at Mencap and we offer a variety of different contract types and working patterns. We’re not looking for specific experience. It is your personality and values that will make you a great colleague. We will train and develop you to succeed in the role you’re applying for.
Significant experience in technology risk, IT governance, compliance, assurance or audit; knowledge of ISO 27001 and Cyber Essentials Plus; ability to engage senior stakeholders and manage audits.
Key Responsibilities
- leading risk framework
- coordinating audits
- reporting to governance
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — United Kingdom
- Salary: GBP 54,560 – 54,560 / year
- Languages: English
Benefits
- Generous paid time off
About Mencap
A UK charity supporting people with learning disabilities, their families and carers. — Industry: Non-Profit Organizations and NGOs