x3 Risk & Controls Managers - SOX - ISO 27001

We are AMS. We are a global total workforce solutions firm; we enable organisations to thrive in an age of constant change by building, re-shaping, and optimising workforces. Our Contingent Workforce Solutions (CWS) is one of our service offerings; we act as an extension of our clients' recruitment team and provide professional interim and temporary resources.

Our client, a major UK retail bank, provides every day banking services to over 17 million retail customers. The banks expertise and services span across Business Services, Corporate banking, Wealth Management, Group Functions, Retail and Investment Banking.

On behalf of this organisation, AMS are looking for x3 Operational Risk Managers for contracts running to December 2025 on a hybrid basis (2 days/week in any office; London, Manchester, Edinburgh, Belfast).

Purpose of the Role:

Our client is one of the best known banks in the UK. You will join their Third-Party Risk Management Operations team, supporting critical third-party assurance assessments across SOX, ISO 27001, and security resilience. These contracts run to the end of this year and they will be making at least 3 hires.

Responsibilities of the role:

• Conduct third-party assurance assessments for suppliers, ensuring compliance with SOX and ISO 27001.
• Focus on resilience, covering access control, encryption, data security, and disaster recovery.
• Work collaboratively with business owners and suppliers to identify and mitigate risks.
• Provide management insights to strengthen risk controls.
• Support ongoing regulatory compliance and governance improvements.

What we require from the candidate:

• Experience in risk assessment, information security, or technical audits.
• Proven experience in SOX and ISO-27001 compliance, especially on behalf of large retail and investment banks.
• Strong understanding of third-party assurance and control environments.
• Familiarity with financial services risk frameworks (preferred but not mandatory).
• Certifications like CISSP, CISA, ISO-27001 Lead Auditor (advantageous).

Next steps:

This client will only accept workers operating via an Umbrella or PAYE engagement model.

If you are interested in applying for this position and meet the criteria outlined above, please click the link to apply and we will contact you with an update in due course.

AMS, a Recruitment Process Outsourcing Company, may in the delivery of some of its services be deemed to operate as an Employment Agency or an Employment Business.