Technology Risk & Controls Manager

Responsibilities

• ▹Partner with the Technology business area to embed the Risk Management Framework, policies and procedures
• ▹Provide expert input into the design and operation of the technology control framework, including data management
• ▹Provide expert input into the vendor management framework, supporting the Vendor Management Team
• ▹Test existing and new key controls in line with the agreed schedule, informing the non-financial risk profile
• ▹Support the operational resilience programme, with a focus on technology resilience, including scenario planning and testing
• ▹Support the coordination and facilitation of the RCSA and its annual refresh
• ▹Support the capital calculation for Operational Risk as part of the ICAAP, including scenario analysis
• ▹Update risk information on the bank's risk systems, ensuring risk events and issues are appropriately raised and managed
• ▹Assemble input into First Line Risk Reporting at relevant committees, and conduct deep dive reviews into thematic risk areas
• ▹Act as Risk Business Partner for Technology, deputising for the Head of Controls as required
• ▹Help promote a risk-focused culture across the bank

Requirements

• ▹Strong risk knowledge and experience, including RCSAs, Controls and Risk Libraries, and risk event reporting
• ▹Expertise in technology control frameworks and vendor management standards
• ▹Hands-on experience of assurance/monitoring of risks and controls across non-financial risk disciplines
• ▹Willingness to be hands-on and adapt quickly to the team's workflow, with a focus on delivering results and meeting deadlines
• ▹Strong written and presentation skills, with experience communicating across different levels of seniority
• ▹Ability to provide necessary challenge in a constructive manner
• ▹Strong team player with a focus on ongoing development
• ▹Overall 10-12 years of experience in operational risk management, RCSA administration and ICAAP compliance, with deep expertise in internal controls
• ▹Proven experience developing and overseeing vendor risk management frameworks, including third-party risk assessment, ongoing monitoring and compliance

Nice to have

• ▹Knowledge of ISO27001 and SOC2 type controls
• ▹Knowledge of relevant non-financial risk regulatory requirements (e.g. Operational Resilience, Outsourcing)

Soft skills

What we offer

• ▹Full onboarding support and continued development opportunities
• ▹Options for flexible working
• ▹Regular social activities
• ▹Pension contributions
• ▹Discretionary bonus scheme
• ▹Private health cover
• ▹Life assurance
• ▹Family friendly policies including enhanced Maternity & Paternity leave

About the company

Allica Bank is the UK's fastest growing company and the fastest-growing fintech firm ever, focused on serving established SMEs — a segment historically underserved by both traditional high street banks and modern fintech providers.