Risk Manager – Technology, Data, AI & Resilience

Quilter; City Of London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading wealth management company is seeking a Risk Manager to support risk management across technology operations and compliance initiatives. This role involves working closely with various stakeholders to ensure risk is managed effectively according to regulatory frameworks. Ideal candidates will have experience in technology and risk management within UK financial services, along with knowledge of best practices in data security and resilience.

Benefits

182 hours of holiday (26 days)

Quilter Incentive Scheme

Non-contributory pension scheme

Private Medical Insurance

4x your salary life assurance

75% salary income protection

Qualifications

• Prior experience in technology operations or cloud roles.
• Experienced in data/AI, security, and resilience.
• Ability to communicate technical risks to management.

Responsibilities

• Support the Head of Risk Technology with risk quantification.
• Oversee the development of risk policies.
• Provide oversight on risk management within stated appetite.

Skills

Technology operations/cloud

Data/AI

Information Security

Operational Resilience

Regulatory frameworks familiarity

Education

Certification in IT risk management

Certifications like CRISC, CISA, CISSP

Job description

About the Business

Quilter plc is a leading wealth management business, helping to enable brighter financial futures for every generation.

Quilter oversees £126.3 billion in customer investments (as of August 2025). It has an adviser and customer offering spanning financial advice, investment platforms, multi‑asset investment solutions, and discretionary fund management. The business is comprised of two segments: Affluent and High Net Worth.

Affluent encompasses the financial planning business, Quilter Financial Planning, the Quilter Investment Platform and Quilter Investors, the multi‑asset investment solutions business.

High Net Worth includes the discretionary fund management business, Quilter Cheviot, together with Quilter Cheviot Financial Planning – offering a highly personalised service to private clients, charities, trustees, and professional partners. Quilter Cheviot has presence throughout the UK, Ireland and Channel Islands.

At Quilter we never stand still. Our foundations are rooted in our extraordinary expertise, which is trusted by hundreds of thousands of customers, but we have great ambitions to stay one step ahead and make an even greater difference to the people and communities we serve, including our colleagues.

Our business is transforming, continually modernising, and becoming even more customer centric. So, if you want to be bold in the pursuit of your ambitions, bring new ideas, and challenge and evolve what we do, it’s the perfect time to join us!

About the Role

Level ‑ 4

Department ‑ Risk

Location ‑ Southampton / London

Contract ‑ Permanent

You will work alongside our Risk and Compliance colleagues across the function and have opportunities to learn about other areas of the Quilter business, which are all impacted by this role’s areas of focus across Technology operations (including cloud and third‑party dimensions), Technology‑driven transformation initiatives, Data/AI, Operational Resilience and Information Security. You will directly assess and influence key risk decisions made by Management and work to enhance the overall risk culture of the organisation.

Key responsibilities

Framework and Policies

• Support the Head of Risk Technology, Security & Resilience with quantification and validation of technology, data, security and resilience risks.
• Assist with the development and roll out of Quilter‑wide risk policies, including oversight of the annual refresh and compliance assessments performed by the first line in relation to technology, data/AI, security, and resilience risks, annually reviewing the effectiveness of their operation and providing input into the updating of the policies in line with good practice and regulatory requirements.
• Input into and provide oversight of the development of the technology, data/AI, security and resilience risk scenarios for Quilter, working closely with 1st line stakeholders to ensure that they input where appropriate to the scenario workshops.
• Provision of guidance and advice (subject matter expertise) to 1st line regarding risk framework, policies and procedures including:
• Providing policy owners with support in the application of the Quilter Group Policy Framework.
• Overseeing the exemptions and waivers process for the IT, Data/AI, Information Security (IS) and Resilience Management policies.
• Escalating/communicating effectively with IT, Data/AI, IS and Resilience policy specialist areas of concern to support them in their oversight responsibilities for policy compliance across the Group.
• Contribute to the second line assessment and sign off of the Letter of Representation (LoR) for technology, security and resilience risk.

Oversight and Challenge

• Provide oversight and challenge to 1st line to ensure that risk is being managed within stated risk appetite and supporting the wider Risk team in the provision of effective, efficient, and consistent oversight, challenge, advice and assurance in line with strategy, frameworks, policy and standards for the management of risk. This includes planning and delivery of incisive thematic or deep dive risk reviews as needed.
• Work closely with key stakeholders to ensure all key risks are identified and where appropriate mitigating actions are planned and delivered.
• Overseeing and supporting 1st line risk assessments of Technology, Data/AI, Resilience and Security initiatives, along with challenging subject matter experts on the technical design and effectiveness of key controls where required.
• Keeping up to date with regulatory changes within the Technology, Data/AI, Information Security and Resilience domains e.g., FCA/PRA Operational Resilience, DORA etc.
• Work with 1st line to develop and enhance the suite of risk, control and performance indicators that can be used to monitor and report upon technology, data/AI, security and resilience risk exposures.
• Engage in strategic business development/key change management of technology, data/AI, security, and resilience initiatives to ensure that risk exposures are considered and addressed and driving the risk agenda in support of the achievement of strategic goals.
• Support the wider Risk & Compliance teams with detailed analysis of all material risk events originating from technology, data/AI, security, and resilience, ensuring appropriate mitigating actions are taken.
• Oversee the completion and maintenance of Risk and Control Self Assessments (RCSA) completed by Management for your key risk areas, and act as subject matter expert for any queries from these.

Communication and Stakeholder Engagement

• Communicate the purpose and strategy of the Risk & Compliance team and the Enterprise Risk Framework effectively to stakeholders, across the technology, data/AI, security, and resilience areas.
• Co‑ordinate and collaborate with the COO Business Risk team and SMEs within Technology, Data/AI, Information Security and Operational Resilience to assist with the design and implementation of the Risk Framework and oversight of risk management activities.
• Foster a risk aware culture across the technology, data/AI, security, and resilience community.
• Along with your team, be the key 2nd line point of contact for technology, data/AI, resilience, and security risk expertise and knowledge.

Risk Reporting

• Input to governance forums and senior management in relation to technology, data/AI, security and resilience risk.
• Encourage continuous improvement, regularly reviewing, and optimising the content of technology, data/AI, security and resilience risk management information through engagement, advice, and challenge, and influence the businesses in the adoption of consistent risk reporting standards.
• Support businesses in the development and production of technology, data/AI, security, and resilience Risk MI.
• Oversee the production and review of risk related content of external reporting across the Group, including public reporting and reporting to regulators or other supervisory bodies such as rating agencies.
• Support the Group CRO through the review and challenge of the content of risk reports, management information and risk papers to drive continuous improvement to the quality of content and messaging.
• Provide timely support to the Group CRO, Affluent Director of Risk & Compliance and Executive Management for ad hoc risk reporting e.g., strategy and business planning presentations, external presentations, and training materials.

About You

The successful candidate:

Have prior working experience across at least two of: technology operations/cloud, technology transformation, data/AI, security and/or resilience roles, preferably within UK financial services. A certification in IT risk management, IT audit, Operational Resilience, Data Governance or Information Security (e.g., CRISC, CISA, CISSP) is highly desirable but not essential. Be comfortable discussing and challenging Technology subject matter experts on technical areas of risk, whilst being able to convey those technical aspects to senior management. Familiarity with FCA and PRA regulatory frameworks, for example PRA Operational Resilience principles (Supervisory Statement SS1/21), is advantageous but not essential. Demonstrate a commercial mind‐set, to challenge thinking and practices readily and robustly at all levels to help redefine the business and deliver competitive advantage. Knowledge of Technology, Data/AI, Security and Resilience best practice frameworks is advantageous (e.g., COBIT, NIST, CIS, ISO27001, ISO22301, ISO42001 etc.). Have proven influencing skills at the senior levels of management, with an ability to build long term relationships both internally and externally, along with excellent listening, verbal, and written communication skills.

Inclusion & Diversity

We value diversity and strive to promote inclusivity in all aspects of our culture. We believe in equal opportunities for all, ensuring that no applicant encounters less favourable treatment based on anything but their skills, qualifications, experience, and potential. We celebrate the unique contributions of a diverse workforce and create a respectful, nurturing environment where every colleague can thrive.

Values

Do the right thing: We act with integrity and are proudly committed to going above and beyond in service of our clients and the support we provide our communities.
Always curious: We continuously seek new ideas and knowledge so we’re one step ahead of our clients’ needs. We look for inspiration everywhere and encourage experimentation, recognising that this is how we create brilliant solutions for brighter futures.
Embrace challenge: We aim high to transform our potential into meaningful outcomes. With ambition as our driving force and a steadfast commitment to growth, we succeed for the good of every generation.
Stronger together: Combining our diverse talents, we accomplish more collectively than we ever could do alone. We speak openly, actively listen, and support each other, and constructively challenge and embrace new ideas. We seek empowerment and demonstrate ownership and trust, with the confidence to make impactful decisions.

Core Benefits

Holiday: 182 hours (26 days)

Quilter Incentive Scheme: All employees are eligible to participate in incentive scheme, to incentivise business performance and their contribution.

Pension Scheme: A non‑contributory company pension scheme that can be boosted through personal contributions.

Private Medical Insurance: Single cover as standard with options to increase cover to include your partner or children.

Life Assurance: 4x your salary.

Income Protection: 75% of salary, less state benefits, payable after 26 weeks of absence.

Healthcare Cash Plan: Jersey employees only

In addition to our core benefits, we offer a range of flexible benefits to UK employees that you can choose from and pay for conveniently via a salary deduction.