Senior Cyber and Technology Risk Manager

Pay.UK; Greater London; On-site; GBP 80,000 - 110,000; Full time

Benefits offered by this job

12% annual bonus

30 days annual leave

Private medical insurance

Dental insurance

Cycle to Work Scheme

Annual fitness subsidy of up to £500

Working from home policy

Job summary

A key player in UK payments is seeking a Senior Cyber and Technology Risk Manager to oversee cyber and technology risk management. The role involves supervising risk frameworks to ensure the safety of national infrastructure while engaging with senior stakeholders. Candidates should have significant experience in technology risk management, a relevant degree, and understanding of regulatory compliance. Join a diverse team committed to fostering an inclusive work environment and making a difference in UK payments.

Qualifications

• Significant experience in cyber, technology, and operational risk in a 2LoD role.
• Demonstrated capability to create, improve, or manage Technology Risk Management Frameworks.
• Understanding of emerging technologies such as AI and related risks.

Responsibilities

• Supervise and assess CNI provider regarding cyber and technology aspects.
• Define and deliver Cyber and Technology oversight and assurance strategy.
• Manage development of cyber and technology oversight frameworks.

Skills

Cyber risk assessment

Technology risk management

Stakeholder engagement

Regulatory compliance

Risk reporting

Education

Degree in relevant field

Tools

ITIL

COBIT

NIST

Job description

Senior Cyber and Technology Risk Manager - Permanent, London

This role serves as the 2nd line cyber and technology risk expert, shaping and maintaining our risk frameworks to protect the organisation as we adopt advanced technologies such as AI and post‑quantum solutions. Your responsibilities will include supervising cyber and technology risks for our crucial national infrastructure and main technology partners, assisting us in our aim to maintain a leading ‘Run’ organisation for UK payments.

As a reliable second line collaborator, you will offer guidance, oversight, and confidence on all issues related to cyber and technology risks. The role reports directly to the Chief Risk Office.

Key Accountabilities

• ies
  Be a trusted 2nd Line partner to whole organisation from a cyber and technology risk perspective, cultivating effective relationships and networks ensuring rapid escalation of technology and cyber risks/issues/incidents across Pa
• y.UKSupervise and assess the CNI provider regarding cyber and technology aspects, confirming they possess suitable measures to uphold their robustness and resili
• enceStay abreast of current technology trends, vulnerabilities and emerging technologies. Continuously monitor advancement in cyber and technology practices utilising relationships with the NCSC and other agen
• ciesDefine and deliver a Cyber and Technology oversight and assurance strategy to help the business attain and support a technology and security pos
• tureManage the development and delivery of the 2LoD cyber and technology oversight and assurance frameworks and policies in line with regulatory requirements and industry good practice, such as NIST, COBIT5 / ITIL
• etcOversee and challenge the Pay.UK cyber and technology risk & control environment, including both Principal and Directorate Risk & Control Self-Assessment (RCSA) processes, ensuring accurate, complete, timely and meaningful reporting to the relevant risk management committees, including attending Risk and Board committees to provide confidence in assurance outc
• omesDeliver a programme of targeted cyber and technology assessment and assurance reviews where necessary, and collaborate with 1LoD SME i
• nputProvide oversight of our innovative technology projects and report in accordance with broader integrated assurance p
• lansSupport cyber and technology issue management and risk acceptance processes together with associated aggregation and reporting activi
• tiesSupport the Pay.UK’s incident & event reporting processes, ensuring that actual/potential losses, fix details and root cause analysis are reported accurately and timely to internal management and our regula
• torsMake cyber and technology risk meaningful and relevant to your stakeholders through training and awareness materials, sharing best practice in clear easy to understand lang
• uageMaintain full awareness of and adherence to the Enterprise Risk Management Framework as well as other relevant Cyber, Technology, Information System and GDPR framewo

Qualifications, Skills and Experience

• ience
  Degree in a relevant field or equivalent professional technology qualifi
• cationSignificant experience in cyber, technology, and operational risk in a 2nd line (2LoD
• ) roleBackground in Financial Services or F
• inTechDemonstrated capability to create, improve, or manage Technology Risk Management Frameworks that adhere to industry best pra
• ctivesComprehensive knowledge of frameworks such as ITIL, COBIT and
• NIST.Understanding of emerging technologies (e.g., AI, post‑quantum) and their associated risks and regulatory expecta
• tions.Skilled in engaging with senior stakeholders and acting as a trusted a
• dvisorSkilled in producing clear, high‑quality risk reporting for Executive and Board aud
• iencesAble to apply technical insight in a practical, balanced and commercially aware
• mannerAble to provide helpful feedback while maintaining professionalism and clarity in communi
• cationHighly organised, with the ability to prioritise and deliver effectively in a demanding enviro
• ment.

At Pay.UK, we value diversity and inclusivity. Research has shown that candidates from underrepresented groups may hesitate to apply unless they meet all the requirements listed. We encourage all qualified candidates to apply, regardless of how closely their skills and experience match the requirements. We are committed to supporting accessibility needs and creating a welcoming environment for all employees. Become part of our team and contribute to the creation of an inclusive work environment that values everyone's unique

We are Pay.UK, maintaining and developing the UK retail payment systems and standards that are core to the economy, allowing it to function on a day‑to‑day basis. From Bacs to Faster Payments and cheques – we act as the single operator for all UK retail payments. We put the needs of consumers and businesses at the heart of everything we do, working in the public interest to ensure that the systems the country relies on for its banking transactions are safe, open, innovative and resilient. Our payment systems underpin the services that enable funds to be transferred between people and institutions. In 2024, the UK’s retail payment systems processed 11 billion transactions worth over £10 trillion through Bacs Direct Credit, Direct Debit, Faster Payments, and cheques, and our Current Account Switch Service has facilitated over 9 million switches since it’s launch in 2013. Every day, individuals and businesses use the services we provide to get their salaries, pay their bills and make online and mobile banking payments. Our vision for the future is to enable a vibrant economy, with Pay.UK delivering the best‑in‑class payment infrastructure and standards for the benefit of consumers and businesses.

Benefits & Additional

• l Information
  12% Non-contri
• y annual bonus30 days annual leave (excluding
• bank holidays)Private medical insurance, life assurance, income protection, health cash plan, dental insurance, Bup
• ance programmeCycle
• to Work SchemeSeas
• on ticket loanAnnual fitness subsidy of up to
• £500 per annumWorking from home policy - minimum 40% in the office (eg. 2 days in the office over a 5 day

Some of our benefits are only available to colleagues upon successful completion of the proba