Technology Risk Manager
Job Summary:
- Drive technology, data, and product innovation from a risk perspective.
- Play a key role in identifying, assessing, and governing technology, data, and product risk.
- Operate within the 2nd Line Group Risk function, guiding first-line stakeholders on their approach to risk across IT infrastructure, AI, cloud, emerging technologies, and product lifecycle.
- Advise stakeholders at all levels on control effectiveness, providing independent challenge, oversight, and clear risk insight in decision-making related to digitalisation, data, and products.
- Highlight both risks and opportunities in how the business can take informed risks in these areas.
- Act as a trusted business partner, building strong relationships across the organisation as a go-to expert for technology, data, and product risk.
- Collaborate closely with associated business areas and 2nd and 3rd line functions to ensure effective engagement and alignment.
Key Responsibilities:
- Challenge, support, and work with 1st Line teams on risk identification, assessment, and control adequacy across digital and technology processes, as well as data and products.
- Act as a key point of contact for the business, effectively engaging with the 1st Line as a Risk Business Partner.
- Work with the 1st Line to collate and coordinate updates on risk profiles, ensuring aligned reporting for technology, data, and product risk within Group Risk Reporting.
- Support, challenge, and guide the 1st Line through the RCSA process across technology, data, and product risk.
- Act as Group Risk representative on business projects and initiatives, providing challenge and advice as a Risk Business Partner.
- Attend relevant working groups and committees as required.
- Partner with the 1st Line on operational risk event processes, providing guidance, training, and awareness, and ensuring robust remediation actions to strengthen the control environment.
- Support enhancements to the Technology, Data, and Product Risk Control Framework by identifying and embedding key controls across the lifecycle.
- Monitor the implementation of risk controls across business units and functions, gathering feedback to support continuous improvement.
- Coordinate and prepare reports and presentations for governance forums as part of Group Risk Reporting.
- Stay up to date with regulatory developments and wider industry changes, engaging with Group Risk and the wider business to assess impact and implications.