Associate Director – Technology Risk

Role Overview & Purpose

Technology Risk SME required to join the 2LoD Chief Risk Office of an award winning global financial services business in a role that can be fully remote / home based.  The purpose of this role is to support the evolution, maintenance and delivery of the firms Enterprise Risk Management Framework (ERMF) to ensure an understanding of the risks arising from the use of technology.

You will provide expertise, advice and independent challenge around the Technology risk and control environment and play a crucial role in developing the technology risk strategy.

Role responsibilities.

• Development and delivery of technology risk strategy in line with the ERMF,  Chief Risk Office roadmap, regulatory requirements and industry best practice.
• Ensure that key Technology related strategic risks are appropriately covered within the ERMF.
• Work with the Chief Risk Office and Technology Leadership to establish robust risk governance for managing Technology risks.
• Lead the 2LoD oversight of the Technology risk and control environment including the identification, assessment, mitigation and monitoring of key strategic risks related to cyber security, cloud infrastructure, AI, data management and wider digital transformation.
• Responsible for 2LoD oversight of the management of technology vendor risks ensuring that key technology vendors have appropriate controls in place to maintain their robustness and resilience.
• Provide subject matter expertise on emerging technology risks and report emerging technology risks within risk governance as part of integrated risk reporting.
• Take a lead role in embedding a strong risk culture across Technology functions.
• Drive risk maturity within Technology functions and regularly assess against Risk Maturity Model, reporting outcomes / areas of focus within risk governance.
• Take a lead role in the challenge of technology, data, AI and cyber security strategies, and be able to articulate and assess the associated risks.
• Act as a subject matter expert on AI including providing effective 2LoD oversight and challenge on the implementation of AI strategy and AI Risk Management Framework.
• Build and maintain strong relationships with colleagues, business contacts and senior stakeholders and be seen as an escalation point for technology risk related queries and advice.

Personal Attributes & Experience

• Prior experience within a financial services environment.
• Educated to degree level in a relevant subject and / or hold a technology or risk related professional qualification.
• Deep technical knowledge of technology related regulation (e.g., DORA, GDPR, EU AI Act).
• Experience with third-party and outsourcing risk, AI and digital transformation risks.
• Experience of developing and operating Technology Risk Management Frameworks such as ITIL, COBIT, NIST, ISO.
• Demonstrable extensive relevant experience of technology risk management in either a 1LoD or 2 LoD capacity (2LoD preferrable).

Applicants must be located and eligible to work in the UK without sponsorship.

Please note, should feedback not be received within 28 days, unfortunately your application has been unsuccessful. In applying for this role, you may be registered on our database so we can contact you about suitable opportunities in future. Your data will be managed in accordance with our Privacy Policy, which can be found on our website.

If you would like this job advertisement in an alternative format, please contact MERJE directly.