Technology & Operations Risk Manager | S3 | Chief Information & Resilience Office | Locatio

Technology & Operations Risk Manager

Location:

Unity Place, Milton Keynes or Glasgow, United Kingdom.

This role will provide independent oversight and challenge across technology and cyber risk, ensuring that risks are accurately identified, assessed, and managed within appetite. It is a technically focused First Line of Defence (1

LoD) role, requiring strong expertise in cybersecurity, IT risk, control frameworks, and the ability to analyse risk data, challenge control environments, and drive improvements across Technology & Operations (T&O).

• Providing independent oversight and challenge of Technology & Operations risk, ensuring alignment with Operational Risk Management frameworks.
• Reviewing and challenging Risk & Control Self-Assessments (RCSA), ensuring completeness, accuracy, and robust control design.
• Ensuring quality and integrity of Risk & Control Profiles (RCPs), including risk identification, control mapping, and residual risk assessment.
• Overseeing risk data within tooling (e.g. Heracles), ensuring alignment across risks, issues, events, and risk appetite statements.
• Monitoring adherence to Risk Appetite Statements (RAS), supporting breach management, root cause analysis, and remediation tracking.
• Challenging control effectiveness, thematic reviews, and testing outcomes to identify systemic weaknesses.
• Producing and analysing risk MI and reporting, identifying emerging risks, trends, and control gaps.
• Driving continuous improvement of governance artefacts, processes, and risk engagement models across T&O.

• Experience in technology risk, cyber risk, or operational risk within financial services (Required).
• Experience providing independent oversight, challenge, or audit of control environments (2
  
  LoD or equivalent) (Required).
• Experience working with RCSA, risk frameworks, and control assessment methodologies (Required).
• Experience producing risk reporting and MI for governance forums (Required).

• Undergraduate degree in Cybersecurity, Information Technology, Risk, or related field (Preferred).
• Professional certifications such as CISA, CISSP, CISM, or equivalent (Preferred).

• English (Required).

• Strong knowledge of cybersecurity risk, IT risk, and control frameworks (e.g. NIST, ITIL) (Required).
• Experience with risk tooling and data management (e.g. Heracles or similar platforms) (Required).
• Understanding of risk appetite frameworks, RCSA processes, and control testing methodologies (Required).
• Knowledge of technology architecture, cyber threats, and vulnerability management concepts (Required).
• Experience analysing risk data, events, and trends to identify control weaknesses (Required).
• Familiarity with regulatory expectations (FCA/PRA) and operational risk frameworks (Required).

• Strong analytical thinking and problem‑solving capability (Required).
• Ability to challenge effectively and influence stakeholders across multiple levels (Required).
• Strong communication skills, translating technical risk into business impact (Required).
• High attention to detail and commitment to data accuracy and governance (Required).
• Ability to work across teams and drive collaboration in complex environments (Required).

• Salary Range: £64,000.00 – £96,000.00 per annum (depending on experience); annual salary is based on a standard 35‑hour working week.
• 30 days holiday plus bank holidays, increasing to 31 days after 5 years of service, with the option to purchase up to 5 contractual days per year.
• £6,000 car allowance per year.
• Company‑funded individual private medical insurance.
• Protection for you and your family, with company‑funded death‑in‑service benefit and income protection insurance, and the option to take advantage of discounted rates for additional life assurance and critical illness cover.
• Share in Santander's success by saving or investing in share plans.
• Access to staff products such as Edge Current Accounts and Credit Cards with no fees, and other discounts on Santander products.
• Competitive rewards that reflect the real impact you make and the value you bring.
• Wellbeing support across physical, mental, social, and financial…