Technology, Resilience, Security & Risk Manager

Technology, Resilience, Security & Risk Manager

Role overview:
We are pleased to offer a sought‑after opportunity to join our friendly and long‑serving Technology, Resilience and Security (TRS) team based out of our Northwich Centre of Excellence. The role will focus on maturing Trinity Bridge’s Governance and alignment with industry‑standard frameworks, ensuring our ability to resiliently safeguard our clients, our people, and their assets. The role contributes to the ongoing development and evolution of the enterprise‑wide technology, resilience, and security governance strategy, ensuring alignment with business objectives, strategy and regulatory requirements.

This colleague will sit on the TRS leadership team and will be responsible for line 1.5 operational risk outcomes for the CISO and Head of Enterprise Technology. The role currently has no direct reports.

• Own, chair and shape the future of the Cyber and Resilience Risk committee (CRC) and sub‑CRC‑monthly forums. The colleague will uphold the CRC terms of reference and ensure reporting against strategy and risk appetite by bringing to life the information with engaging data packs and presentations.
• Hands‑on responsibility for the governance lifecycle of Trinity Bridge’s TRS policy and standards, monthly risk reporting and KRIs/KPIs, and Risk and Control Registers.
• Develop and maintain TRS risk appetite statements, MI, KPIs and KRIs in conjunction with the Operational Risk team, to ensure Trinity Bridge reports with clarity on operation within the agreed tolerance.
• Produce full gap analysis reports on areas of improvement and risk, to support risk and cost reduction and strategy delivery, recommending thorough mitigation plans including justification for options considered.
• Independent review of problem management, incident management and KRIs to provide proposals and recommendations on continuous improvement and optimal performance of the enterprise function.
• Ownership of TRS risk assessment of third and fourth parties through the established third‑party management team.
• Monitor emerging regulatory requirements and ensure governance frameworks are updated accordingly.

• Work closely with the TRS leadership team to ensure timely and accurate reporting of programme risks.
• Ensure TRS Governance is adhered to throughout business as usual (BAU) operation and business change, utilising the mature operational processes already in place.
• Act as an interface between business change and TRS leadership where deviations to process and risk acceptances may be necessary.

• Responsible for Trinity Bridge’s strong cyber and information security culture, acting as an expert on cyber and information security for the business.
• Independently able to produce comprehensive write‑ups of current risks and threats as they develop, producing expedient updates as situations change and span different threat vectors.
• Proactively report upwards on emerging cyber and data risks and threats, providing a view through a business lens on potential impacts.

• Operate with respect, diversity and inclusion principles as a key tenet of your role.
• Develop a culture of continuous improvement and appraisal as a foundation for excellent organisational performance, including operating within the firm’s people policies and processes.
• Build and develop relationships with organisation‑wide peers.

• Ability to demonstrate an understanding of the regulatory framework relevant to the role, whilst practising effective risk management taking account of outcomes for clients.
• Understand, follow and demonstrate compliance with all relevant internal and external rules, regulations and procedures that apply to the conduct of the business. Follow principles and rules of the Financial Conduct Authority (FCA) and the internal requirements set out in the Compliance Manual, local and Group Compliance and Risk policies.

• A genuine passion for creating engaging, professional risk reporting and presentations. The interview process will…