Technology Risk & Controls Manager

Responsibilities

• Partner with the Technology business area to embed the Risk Management Framework, including policies and procedures
• Provide expert input into the design and operation of the technology control framework, including data management, working with stakeholders across Technology to ensure that controls are documented and embedded
• Provide expert input into the vendor management framework, supporting the Vendor Management Team to develop and embed controls to ensure effective management of vendors in line with regulatory requirements
• Testing of existing and new key controls in line with agreed schedule, informing the non-financial risk profile and required management actions
• Support the operational resilience programme, with a focus on technology resilience, feeding into scenario planning and testing
• Support the coordination and facilitation of the bank’s Risk and Control Self-Assessment (RCSA) and administration of the bank’s annual RCSA refresh
• Support the capital calculation for Operational Risk as part of the ICAAP, including scenario analysis
• Hands on support in the update of risk information on the bank’s Risk systems, including ensuring risk events and issues are appropriately raised and managed
• Assembling informed quantitative and qualitative input into First Line Risk Reporting at relevant committees and conducting deep dive reviews into areas of thematic risk

• Strong Risk knowledge and experience including RCSAs, Controls and Risk Libraries, risk event reporting
• Expertise in technology control frameworks and vendor management standards
• Knowledge of ISO
  27001 and SOC2 type controls would be advantageous
• Knowledge of relevant non-financial risk regulatory requirements, e.g. on Operational Resilience, Outsourcing is desirable
• Hands on experience of assurance/monitoring of risks and controls across non-financial risk disciplines
• Willing to be very hands-on and ability to adapt quickly to the workflow in support of the Controls team, with focus on delivering results and meeting deadlines
• Strong written and presentation skills, supported by experience of communication across different levels of seniority
• Ability to provide necessary challenge in a constructive manner
• Strong team player, with focus on ongoing development to support meeting objective of the team
• Overall, 10-12 years of experience in operational risk management, RCSA administration and ICAAP compliance with deep expertise in internal controls
• Proven experience in developing and overseeing vendor risk management frameworks including 3rd party risk assessment, ongoing monitoring and compliance