Risk & Control Subject Matter Expert - Technology Risk Specialism

Why this role is important to us

As a Risk & Control Subject Matter Expert with a Technology Risk Specialism, you will be part of a core group providing specialised knowledge to solve complex risk and control issues across the business. Your expertise will facilitate risk-based decision-making and ensure consistency in the control environment, applying best practices and shared controls.

This is a hybrid role reporting into the Head of Risk & Control SMEs

Work that matters - What you'll do

General Risk Expertise - 70%

• Risk Identification & Management: Collaborate with business partners to manage risks, conducting periodic risk assessments to address vulnerabilities.
• Regulatory Compliance: Ensure compliance with internal policies and external regulations, supporting FCA/ICO notifications and policy gap analyses.
• Customer Outcomes: Challenge the business to ensure customer outcomes are central to all propositions.
• Exposure Management: Manage complex risk-related loss events, conducting root cause analysis and coordinating response plans.
• Collaboration & Stakeholder Management: Promote efficiency in remediation efforts and work with Risk & Control Business Partners, 2LoD teams, and BU Control Specialists.
• Risk-Based Decision Making: Support informed decision-making by providing aggregated risk exposure insights and deploying centralised control strategies.
• Problem Solving: Analyse risk data to identify trends and document control weaknesses with relevant improvement plans.

• Technology Risk Management & Resilience: Provide expertise in technology risk management, assessing IT operations, infrastructure resilience, and cybersecurity vulnerabilities with a knowledge of IT governance frameworks, technology resilience, disaster recovery, and cybersecurity risks.
• Technology Change & Transformation: Integrate risk management practices into technology transformation programs and major IT change programs.
• Regulatory & Compliance Focus: Ensure compliance with key regulatory frameworks such as GDPR, NIST, and ISO 27001.
• Emerging Risk & Industry Trends: Provide insights on AI, machine learning, and automation risks, collaborating with IT teams to implement the best risk and security controls.

• Risk Management Frameworks & Methodologies: Comprehensive understanding of risk management principles and frameworks (COSO ERM, COBIT, SOX, ISO 31000).
• Regulatory & Internal Policy Compliance: Experience in monitoring and adapting to regulatory changes, interpreting policies, and defining business procedures.
• Problem Solving: Strong analytical skills to support risk-based decision-making and enhance operational resilience.
• Communication & Collaboration: Ability to work with different teams and communicate requirements to non-technical colleagues.

• Proficiency in conducting risk assessments and developing mitigation strategies.
• Experience in identifying and mitigating enterprise-wide risks.
• Deploy centralised control strategies and design controls.
• Knowledge of IT governance frameworks and technology risk management.

• Flexible work environment, working hybrid or in the office if you prefer.
• Great compensation package and discretionary bonus plan
• Core benefits include pension, bupa healthcare, sharesave scheme and more
• 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.