Technology Risk & Controls Manager

📋 Description

• • Partner with the Technology business area to embed the Risk Management Framework, including policies and procedures, ensuring controls are documented and operationalized across technology functions.
• • Provide expert input into the design and operation of the technology control framework, with specific focus on data management, system integrity, and alignment with regulatory expectations.
• • Support the Vendor Management Team by developing and embedding controls to ensure third-party vendors comply with regulatory requirements and internal risk standards.
• • Conduct testing of existing and new key controls according to agreed schedules, feeding findings into the bank’s non-financial risk profile and triggering required management actions.
• • Support the Operational Resilience programme with a technology-focused lens, contributing to scenario planning, testing, and recovery strategy development.
• • Coordinate and facilitate the bank’s annual Risk and Control Self-Assessment (RCSA) process, including administration, data collection, and reporting to senior governance bodies.
• • Provide quantitative and qualitative input for Operational Risk capital calculations as part of the Internal Capital Adequacy Assessment Process (ICAAP), including scenario analysis and data validation.
• • Maintain and update risk information on the bank’s risk management systems, ensuring risk events and issues are accurately logged, tracked, and resolved in line with policy.
• • Prepare and deliver informed risk reporting for First Line Risk Committees, conducting deep-dive analyses on thematic risk areas and presenting findings to senior stakeholders.
• • Act as the primary Risk Business Partner for Technology, providing hands-on First Line of Defence support to ensure proactive risk management and control ownership.
• • Monitor and report on key risk indicators (KRIs), risk events, and control effectiveness across technology domains, ensuring alignment with the bank’s Risk Management Framework.
• • Support the development and enhancement of the technology control framework, including data governance, access controls, and vendor risk management protocols.
• • Provide First Line assurance through control testing, operational resilience assessments, and independent reviews of control design and implementation.
• • Deputize for the Head of Controls at governance meetings as required, representing the Controls function with authority and clarity.
• • Promote a risk-aware culture across the bank by embedding Allica’s values into daily operations and encouraging accountability for risk ownership at all levels.
• • Communicate risk insights effectively across all levels of seniority, using strong written and presentation skills to influence decision-making and drive risk mitigation actions.
• • Adapt quickly to evolving priorities within the fast-moving Controls team, maintaining focus on delivering timely results and meeting strict deadlines.
• • Maintain expertise in operational risk disciplines, including RCSA administration, ICAAP compliance, and non-financial risk regulatory requirements such as Operational Resilience and Outsourcing.
• • Lead the ongoing monitoring and review of vendor risk management frameworks, including third-party risk assessments, ongoing compliance checks, and contract alignment with regulatory standards.
• • Contribute to the continuous improvement of risk systems, processes, and reporting tools to enhance efficiency and accuracy in risk governance.