Technology Risk & Control Manager

Join us as a Technology Risk & Control Manager

• In this key role, you’ll apply effective risk management and decision-making capability, anticipating and assessing the potential impacts of risk associated with technology across the relevant business areas
• You’ll make sure that the impacts of strategic technology and digitisation initiatives on the operational risk and control profile are evaluated, managed and mitigated
• You’ll enjoy a varied and extensive breadth of work in this fast-paced and varied role, and you’ll gain valuable exposure across a broad range of senior level stakeholders

What you’ll do

As a Technology Risk & Control Manager, you’ll support and regularly engage with specialist technology stakeholders including second and third lines of defence, and other relevant stakeholders. Working closely with the Control Testing team, Franchise and Function Control teams and the second line risk, you’ll also provide support on framework execution as a Technology Risk and Control expert, including risk and controls assessments, control design and articulation, control testing and policy compliance, in relation to technology related risks for the relevant business areas.

You’ll lead informed discussions of technology and digital related risk for relevant business areas and products. We’ll look to you to create a culture of continuous improvement, increasing efficiency and productivity through great people leadership, coaching, engagement and development of skills.

Day-to-day, you’ll:

• Produce and assess corporate governance and risk committee packs for technology functions, formulating and articulating technology related risk appetite using the operational risk framework and material risk measures
• Build and manage senior stakeholder relationships with technology and digital specialists and support them with managing their risk and control profile
• Provide an aggregated view of the control environment for the relevant technology and business areas
• Utilise our Enterprise-Wide Risk Management Framework (EWRMF), and assess, design, embed and maintain Technology Controls against key risks to help keep our bank and customers safe.
• Support the relevant technology and digital business area in interactions with second and third lines of defence on risk and audit engagements

The skills you’ll need

To thrive in this role, you’ll need an extensive understanding of the relevant businesses, specifically key products and technology risks, to enable informed discussions of risk. You’ll also bring knowledge of risks and controls associated with Technology, including industry frameworks such as COBIT, CRISC and similar, as well as risks associated with technology outsourcing.

On top of this, you’ll bring:

• Proven ability to deliver high quality outcomes and experience of applying technology and digital risk and control assessments in an operational and strategic context
• Comprehensive experience in technology risk management and audit or control frameworks as well as experience of working in a fast paced technology risk or audit environment where priorities shift rapidly
• Experience with corporate governance and risk committees, formulating and articulating technology and digital related risk profiles using an operational risk framework and material risk measures
• Excellent ability to communicate complex ideas and solutions to support risk management
• Strong senior stakeholder management skills