Technology Risk Manager - Post Trade Regulatory Reporting

Job Description for Technology Risk Manager
- Regulatory Reporting Solutions Engineering

Job Title:
Manager, Technology Risk & Controls (Regulatory Reporting Solutions Engineering)

Global Grade: 13

Company / Division:
London Stock Exchange Group
- Markets & Risk Intelligence Engineering

Location:
London

Work Style:
Blended (3 days per week in office
- St Martins Court PSQ)

Role Type:
Individual Contributor

Job Family / Level: Risk (Technology, Cyber & Resilience Risk)

Reports To:
Rupert Thomas
- Director, Technology Risk & Controls

The Manager, Technology Risk & Controls is accountable for leading technology risk, control and regulatory compliance activities across Regulatory Reporting Solutions Engineering. The role applies expert knowledge of technology risk, cyber security, operational resilience and regulatory expectations to ensure risks are identified, assessed, controlled and reported in line with LSEG policy, regulatory standards and industry best practice.

The role will coordinate risk and control activity, produce management information, support governance forums, facilitate reviews, track issue remediation, and partner with engineering, product, production management, cyber, cloud, infrastructure, second-line risk, audit, compliance and legal stakeholders.

Support the identification, assessment, monitoring and mitigation of technology, cyber and resilience risks across products, platforms, services and third-party dependencies.

Coordinate risk and control activities to ensure risks are appropriately recorded, assessed and managed in accordance with internal policies and standards.

Facilitate regular reviews of risk mitigation plans, ensuring actions, issues and control gaps are tracked through to completion.

Contribute to the maintenance and continuous improvement of technology risk frameworks, control standards and supporting processes.

Provide constructive challenge on control effectiveness, evidence quality and risk treatment approaches.

Support implementation of technology, cyber security and operational resilience requirements applicable to Regulatory Reporting Solutions, including DORA obligations and relevant regulatory reporting expectations.

Assist in translating regulatory obligations into practical control requirements and governance processes.

Coordinate evidence gathering and responses for regulatory reviews, ICT risk management assessments, SOC 2 assurance and internal audit activity.

Escalate emerging compliance risks, control weaknesses and potential breaches in a timely manner.

Maintain awareness of relevant regulatory developments and industry best practice.

Embed operational resilience requirements within Regulatory Reporting Solutions engineering, technology, production and change activities.

Contribute to resilience assessments, scenario testing, control validation and remediation activities.

Coordinate resilience-related actions, evidence and reporting to demonstrate compliance with internal and external requirements.

Work with engineering, production management, cyber, infrastructure and business stakeholders to strengthen resilience across regulated reporting services and supporting platforms.

Produce and maintain high-quality risk and control management information for governance forums and senior stakeholders.

Support the preparation of committee materials, risk papers, dashboards and reporting packs.

Monitor and report on key risk indicators, control metrics and remediation progress.

Analyse trends and emerging themes to support risk-informed decision making.

Ensure risk data remains accurate, complete…