Director LCH Ltd Technology Risk & Controls

ABOUT US: LSEG (London Stock Exchange Group) is a global financial markets infrastructure and data business dedicated to delivering excellence in services and supporting financial stability worldwide.

Responsible for reporting and managing the LCH LTD Technology Risk Profile in the context of its Risk Appetite on behalf of the LCH LTD CIO. Oversees critical intra-group outsourcing arrangements and leads the first-line Technology Risk & Controls function across application, infrastructure, cloud and cyber domains. Ensures control design and operating effectiveness meet CCP obligations and LSEG group standards, drives delivery against key enhancements and assurance, and provides authoritative risk insight to LCH executives and the Board.

• Own the first-line technology controls library (apps, infra, cloud, cyber) for LCH Ltd; define control objectives, procedures and metrics.
• Partner with BSL (Group Infrastructure & Cyber) to track LCH-owned controls and deliver the uplift programmes for identified core controls.
• Co‑chair technology risk reviews in CAB/technical change forums in conjunction with LCH Production Management and Architecture; enforce entry criteria, quality gates, and business approvals.
• Embed Group Delivery Disciplines (architecture‑led, data‑led, engineering‑led, STP design, etc.) into technology risk checkpoints for programmes and releases.

• Coordinate technology risk contributions to Operational Risk Committee and executive risk governance.
• Prepare updates on emerging risks (e.g., quantum/AI).

• Oversee TPRM for external and internal/intra-group technology suppliers—financial stability, Controls/KRI, SII, audit actions, end‑of‑life/patching—working with procurement, TPRM and second line risk.
• Oversee the management of intragroup critical outsourcing arrangements with BSL (Infrastructure and Cyber).
• Integrate cloud risk controls and assurance with LSEG Markets & Risk governance rhythms.

• Build and lead a diverse team (engineering, risk assurance, data) with clear roles and development paths.
• Clarify control ownership and RACI across first/second line; mentor control owners and ensure succession coverage.
• Interact closely with Divisional Risk teams (2
  
  LoD), Group Technology Risk & Control team (1
  
  LoD), and with LCH LTD and 1st line technology teams.
• Emphasise influencing teams to enhance their risk management culture.

• Control Library Alignment & Uplift: deliver prioritized uplift of control design and operating effectiveness to agreed target states.
• Resilient Change Delivery: close gaps in change governance/CAB (entry criteria, quality gates, business accountability) to reduce risk of production incidents linked to change.
• Transparent Risk Reporting: embed residual‑risk and thematic reporting (beyond KPI/RAG) in resilience governance, with consistent sampling/testing guidance.
• Third‑Party & Cloud Risk: strengthen TPRM and cloud risk controls in step with LSEG Markets & RI cadence.
• People & Operating Model: build a high‑performing risk & controls team aligned to the BCO target operating model; clarify control ownership and RACI across first and second lines.

• Senior leadership in Technology Risk/Controls within regulated Financial Market Infrastructure or Tier‑1 financial services.
• Ownership of control libraries and assurance programmes; familiarity with CEP, NIST CSF/CRI, ITIL/COBIT, ISO 27001.
• Hands‑on change governance/CAB leadership in complex platforms; remediation of systemic gaps.
• Operational resilience and incident management expertise; experience presenting to executive and regulatory bodies.
• Cloud risk oversight and third‑party risk management across critical vendors.

• CRISC, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, ITIL Expert.
• Degree in Computer Science/Engineering or equivalent experience.

• Risk intellect with engineering credibility; able to translate risk into design‑level control changes.
• Influence & communication: concise…