Job Description

Join us as a Business Controls Partner

If you are a subject matter expert in technology risk and control, then step into a role where you'll help us pinpoint emerging risks and understand their impact across the bank We'll look to you to proactively lead with embedding best-practice standards across the Enterprise-Wide Risk Management Framework, Risk and Control Self-Assessments (RCSAs), and broader risk and control management activities You'll play a crucial role in making sure our tech and digital transformations land smoothly, bringing sharp risk oversight and solid operational resilience to every step We are offering this role at vice president level

What you'll do

------------------


As a Technology Controls Business Partner, you'll help leaders pinpoint and assess material risks and understand how they stack up against our agreed risk appetites. Working with senior stakeholders across the bank, you'll also drive the development and delivery of action plans whenever risks sit outside those tolerances.


On top of this, you'll help foster a culture of continuous improvement, boosting efficiency and productivity through strong people leadership, coaching, and skills development. You'll have an ideal platform for building your network and advancing your career, while helping create a safer environment for the bank, in this highly collaborative role.


You'll also be:

Analysing risk reporting and metrics that guide informed decisions throughout the risk lifecycle Making sure impacts of strategic technology initiatives on the operational risk and control profile are evaluated, managed and mitigated Leading informed, high-impact discussions on technology and digital risks across key business areas and products Educating teams on the operational risk framework and our conduct risk obligations, enabling the bank to operate and embed them with confidence Supporting and regularly engaging with specialist technology stakeholders including second and third lines of defence and functional risk teams

The skills you'll need

--------------------------


We're looking for a highly skilled leader with deep experience in IT risk management, technology control testing, and issue management. Applying risk and control disciplines across technical, operational and strategic environments, and bringing sound judgment to each is critical for this role.


In addition, you'll need proven experience managing internal audits, third-party IT risk, and the full vendor due-diligence lifecycle. You'll also draw on your risk assessment and scenario analysis expertise, paired with solid technology risk advisory experience. Your business acumen and ability to communicate and collaborate effectively will help you influence stakeholders at every level.


Alongside this, you'll demonstrate:

Experience in cyber & information security oversight, governance and compliance such as ISO 27001, NIST 800-53, GDPR and PCI-DSS. CyberSec risk assessment experience in Cloud, SDLC, End Point, IAM and Application Security Technology Incident Management, Problem Management, Cybersecurity services, RCA and Remediation experience * Experience of AI governance and its practical application across technology risk