Risk & Controls Manager, Technology Controls Business Partner

NatWest Group; City of Edinburgh; On-site; GBP 70,000 - 90,000; Full time

Job summary

A major financial institution in Scotland is seeking a Risk & Controls Manager to oversee technology risk and ensure robust risk oversight for digital transformation initiatives. The role includes collaborating with senior stakeholders to assess material risks, analyzing risk metrics, and fostering a culture of continuous improvement. Ideal candidates will have expertise in IT risk management, cybersecurity governance, and strong leadership skills. This position offers a chance to influence technology risk strategies and contribute to a safer banking environment.

Qualifications

• Experience in managing technology risk in a technical, operational, and strategic context.
• Familiarity with cyber & information security oversight and governance.
• Knowledge of ISO 27001, NIST 800-53, GDPR, and PCI-DSS.

Responsibilities

• Support management in identifying and assessing material risks.
• Drive development and delivery of remedial action plans.
• Analyze risk reporting and metrics for decision making.
• Educate teams on operational risk framework.

Skills

IT risk management

Technology control testing

Issue management

CyberSec risk assessment

Excellent communication skills

Job description

Join us as a Risk & Controls Manager, Technology Controls Business Partner

• If you are a subject matter expert in managing the technology risk and control environment, then join our team in helping to anticipate and assess the potential impacts of risk across the bankWe’ll look to you to proactively lead and embed best practices across the Enterprise-Wide Risk Management Framework (EWRMF), Risk and Control Self-Assessments (RCSAs), and broader risk and control management activities
• In this highly collaborative role, you’ll have an ideal platform for building your network and advancing your career, while helping to create a safer environment for the bank
• You’ll be pivotal in ensuring that technology and digital transformation initiatives are delivered with robust risk oversight and operational resilience

What you'll do

You’ll have the responsibility of supporting management in their identification and assessment of material risks, and in determining their position relative to agreed appetites. Working with senior stakeholders across the bank, you’ll look to drive forward the development and delivery of remedial action plans where identified risks are considered out of appetite.

On top of this, you’ll be supporting a creating a culture of continuous improvement, increasing efficiency and productivity through great people leadership, coaching, engagement and development of skills.

You’ll also be:

• Analysing risk reporting and metrics used to inform decision making
• Ensuring impacts of strategic technology initiatives on the operational risk and control profile are evaluated, managed and mitigated
• Lead informed discussions of technology and digital related risk for relevant business areas and products
• Educating teams on the operational risk framework and our conduct risk obligations, supporting the business in operating and embedding them
• Supporting and regularly engaging with specialist technology stakeholders including second and third lines of defence and functional risk teams

The skills you'll need

We’re looking for a highly skilled IT risk management, technology control testing and issue management leader with experience of applying risk and control management in a technical, operational and strategic context. You’ll need experience in cyber & information security oversight and governance and compliance such as ISO 27001, NIST 800-53, GDPR and PCI-DSS.

In addition, you’ll need experience of managing internal audit, third-party IT risk management and vendor due diligence lifecycle.

You’ll also bring:

• Strong knowledge of risk assessment and scenario analysis methodologies
• CyberSec risk assessment experience in Cloud, SDLC, End Point, IAM and Application Security
• Technology risk advisory experience
• Technology Incident Management, Problem Management, Cybersecurity services, RCA and Remediation experience
• Experience of AI governance
• Strong business or operational experience
• Excellent communication and collaboration skills