Data & Digital Risk Manager

JOB TITLE: Data & Digital Risk Manager

SALARY: £67,023 - £74,470

LOCATION(S): Edinburgh, Bristol, Cardiff or Leeds

HOURS: Full Time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our hub locations.

This is a pivotal role. We're disrupting the market through innovative products and delivering brilliant customer propositions. We also close the gap in customer service using Data & Digital.

Insurance, Pensions and Investments (IP&I) are on an exciting journey. At the heart of our plan is a digital 'waterfront' embedded within our existing apps. It shows what tomorrow looks like for our customers and the steps they can take now to future‑prove their finances.

As we digitise our services and become data‑led, harnessing insights and innovating with AI, our Data Risk profile becomes increasingly complex. We're seeking a Data Risk Management Specialist (Manager).

This 'second line' Risk Function manages risks for the Insurance Group within the Group Risk Management Framework (RMF) within the three lines of defence, mandated throughout Lloyds Banking Group (LBG). The role assists the business in making fast, accurate decisions by providing expert advice, independent oversight and constructive challenge.

The scope of Data Risk covers all aspects of Digitisation, Data Management and Governance, Data Ops and Architecture, Data Privacy, Ethics and Compliance, Data Portability and the responsible use of Data for AI and Advanced Analytics.

This role will support 'agile' delivery, partnering with Platform Teams where you will help identify, assess, manage, and monitor our Data Risk, providing input to Internal Governance, Risk Management, and Reporting processes.

You will also deliver elements of our Oversight Strategy, producing insights that enable clarity and understanding of the Control Environment for Data with a focus on how we manage and use data.

• Monitor metrics for 'Risk Appetite' and 'Management Measures' for Data in IP&I
• Deliver Risk Oversight and Continuous Monitoring of IP&I Data & Digital environments to understand compliance with risk Principles and Policies
• Using the Group Risk Management Framework and Risk Policies, identify and evaluate Data & Digital Risk, assist in applying the Data Policy and related controls within the 1
  
  LOD to manage risks within Risk Appetite
• Providing 'expert advice', support learning and increase awareness for Data Risk
• Collaborate with other Risk Specialists, as part of matrix teams, to enable early understanding of Data Risk inherent in business activities
• Understand the Legal and Regulatory implications when collecting, crafting and using data to deliver services to customers and enabling business operational processes
• Input to Data Breach Response and 'Material Event' processes
• Coordinate consistent recording of Risk via Risk Open Pages; ensure that Risk Management information is consistent and maintained
• Input to MI and Analysis of risk concentrations, emerging trends, risk and loss events near misses and opportunity costs

• A working knowledge and understanding of;
  • Data & Digital Risk including the use of data to deliver 'direct to customer' services via App technologies
  • Cloud data environments including Data Governance and Continuous Control
  • Data Architecture, Data Management, Data Operations and Data Governance, including familiarity with standard frameworks such as DAMA, EDMC etc.
  • Data consumption to enable AI and associated technologies
  • Continuous Control Monitoring (telemetry) for scaled data environments
  • Data sharing and transfer including through supply chain and cross‑border
  • Data Retention, Archiving and Destruction
  • Law and Regulation affecting data and data enabled processes and services in Financial Services (including but not limited to Privacy/GDPR)
• Experience in a Risk Management role
• Experience working with Agile methodologies
• Good communication skills, with the ability to convey complex concepts for non‑technical audiences and produce high-quality written outputs.
• Good organisational skills

We are committed to building an…