- Company Name
- Rothstein Recruitment
- Job Title
- Senior Technology & Change Risk Manager - 2LOD - Banking
- Job Description
-
**Job title:** Senior Technology & Change Risk Manager – 2LOD – Banking
**Role Summary:**
Provide independent oversight of technology, data, information security, change management, operational resilience, and intra‑group risk within a major international bank. Deliver second‑line risk assurance, support senior management and regulators, and lead change assurance for large technology and business change programmes.
**Expectations:**
- Deliver robust risk assurance and challenge 1LOD decisions.
- Deliver comprehensive risk reports to portfolio, project steering groups, and board‑level committees.
- Interpret UK/EU regulations and industry best practices.
- Support regulatory returns, material change, and operational resilience engagements.
**Key Responsibilities:**
- Act as trusted advisor to business & technology leadership; translate complex risks into actionable solutions.
- Advise senior management and compliance on regulatory engagements (material change, suppliers, operational resilience).
- Monitor and interpret evolving UK/EU financial services regulations; assist 1LOD interpretation.
- Own annual risk review plan; conduct thematic reviews, deep dives, risk opinions, controls testing, and quality assurance.
- Lead payment‑scheme attestation reviews (CHAPS, LINK, SCA‑RTS, Cyber Resilience Questionnaire).
- Oversee operational resilience self‑assessments and regulator challenge of action plans.
- Lead 2LOD change assurance & oversight for major technology and business change programmes, including legacy platform upgrades and third‑party supplier engagements.
- Develop and present high‑quality 2LOD risk reports and management information to portfolio, project steering groups, material change committee, management, and board risk committee.
- Design, implement, and embed change risk frameworks to improve 1LOD change risk management.
**Required Skills:**
- Expertise in technology, operational, and change risk management within financial services or other regulated environments.
- Deep understanding of cyber risk, resilience, governance frameworks, and shared responsibility for public cloud (IaaS, PaaS, SaaS).
- Knowledge of UK PRA, FCA, ICO, BoE, and EU regulations.
- Strong analytical, risk assessment, report writing, and presentation skills.
- Excellent stakeholder management, influence, and advisory capabilities.
- Experience with risk and control frameworks (ORMF, RMF, RCSA, etc.).
**Required Education & Certifications:**
- Minimum Bachelor’s degree in Finance, Business, Computer Science, or related field.
- Professional credentials such as CISA, CRISC, CISSP, PRINCE2 or equivalent are desirable.