The opportunity

We are seeking a Technology Risk Leader to join our Group Risk, Compliance & FCC organization in a pivotal senior leadership position reporting to the Group Chief Risk & Compliance Officer.

This is a strategic, high-impact role that will shape how our organization manages and governs the full spectrum of technology-related risks. You will establish and lead the second line of defense oversight framework for technology risk across the Group, spanning security, platform resilience, availability and reliability, and AI and model risk governance.

In this role, you will be the independent voice challenging the first line on the design, operations, and continuous improvement of technology risk management frameworks. You will support our Group's resilience, security, and innovation agenda by ensuring technology risks are appropriately identified, governed, monitored, and reported in line with internal standards and external regulatory expectations. Your expertise, credibility, and influence will be essential in engaging effectively with senior stakeholders across business, operations, security, and technology functions at the highest levels of the organization.

Day-to-day responsibilities

• Lead second line oversight of technology risks across security, platform resilience, availability and reliability, and AI/model governance, providing independent challenge on risk assessments, mitigation strategies, control design, and remediation efforts
• Develop and monitor risk appetite frameworks with clear qualitative statements and quantitative thresholds; establish Key Risk Indicators (KRIs) for tracking adherence and escalate exposures that exceed defined appetite levels
• Ensure appropriate risk identification and escalation of material technology exposures to senior management and Board-level governance bodies, with clear articulation of risk themes, required management actions, and strategic implications
• Oversee security risk management practices covering preventive, detective, and response capabilities, including vulnerability management, identity and access management, endpoint security, network security, and incident response; assess adequacy of governance, ontrol effectiveness and recovery preparadeness
• Challenge operational and infrastructure controls spanning production stability, change and release management, migrations, incident and problem management, capacity planning, and recovery preparedness
• Establish AI and model risk governance across the Group, providing oversight on responsible AI use, governance, transparency, accountability, validation, and monitoring; assess risks associated with advanced analytics, machine learning, and emerging AI tools
• Develop and enhance technology risk policies, standards, and methodologies aligned with recognized frameworks such as NIST and other relevant topics and operational risk standards; design meaningful risk reporting and dashboards for executive and Board visibility
• Build strategic partnerships with technology, security, operations, and transformation leaders; maintain appropriate independence while supporting regulatory engagements, internal reviews, and audit interactions on technology risk matters

Who are we looking for

We look for big thinkers. People who can drive positive change, step up and show what's next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means:

• Extensive and relevant experience in technology, technology risk, operational resilience, or related control roles
• Proven experience in senior technology leadership roles or comparable second line technology risk position within a regulated environment such as a bank, payment services provider, fintech, or other financial institution
• Deep understanding of technology risk and control frameworks across cyber security, change management, production stability, migrations, asset lifecycle management, problem management, and physical infrastructure controls
• Solid knowledge of recognized frameworks and standards such as NIST and other cyber or operational risk frameworks
• Strong understanding of AI, machine learning, and model governance concepts, including emerging risks and control requirements associated with advanced AI use cases
• Demonstrated experience engaging with senior executives, auditors, and regulators on technology risk topics
• Proven ability to operate effectively in matrixed, international organizations

Perks & Benefits

• Hybrid working model offering flexibility between home and office
• Competitive compensation and performance-based incentives
• Comprehensive health insurance coverage
• Continuous learning and professional development opportunities
• Direct exposure to senior executive leadership and strategic decision-making
• Inclusive and collaborative working culture