At Frasers Group we’re rethinking retail. Through digital innovation and unique store experiences, we’re serving our consumers with the world’s best sports, premium and luxury brands globally. We’re elevating the retail experience for our consumers through our collection of established brands, including Sports Direct, FLANNELS, USC, Frasers, and GAME.

IT at Frasers Group is delivered by the in-house team who are passionate about what they do and are not dependent on outsourced organisations to deliver the core systems. We present an ideal opportunity for someone who is passionate about technology and wants to deliver the absolute best that they can and keep innovation at the forefront. There is a wealth of opportunity for training as well as on the job learning.  We have a £5,000 per head annual training budget within IT, as well as bonus schemes including our Frasers Champion where 8 peer nominated winners earn double their monthly salary for their outstanding performance

This role is based 5 days a week at our Shirebrook HQ

In recognition of the evolution of the Groups governance environment, we are looking for an IT Risk and Control Manager to ensure the diligent management of our IT controls. As the business continues to grow, we need to ensure robust controls are in place to support rapid expansion, as well as provide robust information security.

You will work as part of the Information Security Risk and Governance team to provide first line oversight of IT general controls.

• Defining and documenting control procedures and processes for different business areas
• Collaborating with cross-functional teams to ensure controls are integrated seamlessly into operations
• Performing regular testing and monitoring of controls to assess their effectiveness
• Identifying control deficiencies and work with relevant teams to address and rectify them in a timely manner
• Communicating risk findings and control recommendations to various levels of the organisation
• Continuously assessing the effectiveness of the risk management and control framework and proposing improvements as needed
• Working with both internal and external audit teams to demonstrate ongoing due diligence in line with audit scope
• Liaising directly with IT to understand ongoing risk landscape
• Preparing first line risk reports to internal and external stakeholders

• Experience operating within a first line Risk team and a strong understanding of IT risk management to identify, assess, control, and monitor risks.
• A strong communicator, able to communicate with both technical and non-technical stakeholders and be confident presenting findings to Seniors
• Exposure to environments where Microsoft Azure + AWS are used
• Hands on, prepared to get stuck into the technical detail
• Able to work in a fast paced and ever changing working environment

Desirable tools/methodlogies

• OneTrust for risk and control management
• NIST Control framework
• SOC2
• ISO270001
• ERM Framework

An opportunity like this at Frasers is for the fearless. The potential is massive, the experience unrivalled. To be able to make the most of it you need to live and breathe our principles: 

• Think without limits - Think fast, fearlessly, and take the team with you.
• Own it and back yourself - Own the basics, own your role and own the results.
• Be relevant - Relevant to our people, our partners and the planet.

Check out our Behind the F Video series to get an insight into Tech at Frasers Group