обновлено 7 дней назад
Risk Business Partner for Technology
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Risk Business Partner for Technology (Operational Risk and Controls): Embedding the Risk Management Framework and technology control framework across a fintech bank with an accent on RCSA, vendor management, control testing, and operational resilience. Focus on developing technology and third-party risk controls, supporting ICAAP operational risk calculations, and producing quantitative and qualitative risk reporting for governance committees.
Location: London Office, hybrid working
Company
is a UK fintech focused on serving established small and medium-sized enterprises.
What you will do
- Partner with Technology to embed the Risk Management Framework, policies, procedures, and technology controls.
- Develop and maintain controls for data management and vendor management in line with regulatory requirements.
- Test key controls and provide First Line assurance over technology and non-financial risks.
- Support operational resilience scenario planning and testing, including technology resilience.
- Coordinate Risk and Control Self-Assessments, risk events, issues, KRIs, and updates to risk systems.
- Prepare risk analysis and reporting for governance committees, including thematic deep dives and ICAAP operational risk input.
Requirements
- 10–12 years of experience in operational risk management, RCSA administration, ICAAP compliance, and internal controls.
- Strong knowledge of RCSAs, controls, risk libraries, and risk event reporting.
- Expertise in technology control frameworks and vendor risk management, including third-party risk assessment, monitoring, and compliance.
- Hands-on experience assuring and monitoring risks and controls across non-financial risk disciplines.
- Strong written, presentation, stakeholder management, and constructive challenge skills.
- Ability to work hands-on, adapt quickly, meet deadlines, and deputise for the Head of Controls when required.
Nice to have
- Knowledge of ISO 27001 and SOC 2 controls.
- Knowledge of regulatory requirements related to operational resilience and outsourcing.
Culture & Benefits
- Flexible and hybrid working arrangements.
- Full onboarding support and continued development opportunities.
- Pension contributions, private health cover, and life assurance.
- Discretionary bonus scheme and regular social activities.
- Family-friendly policies, including enhanced maternity and paternity leave.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →