Senior Technology Risk Manager – Cyber & Engineering

Auricoe Limited; City Of London; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

Auricoe is partnering with a leading UK financial services organisation to appoint a Technology Risk Business Partner within its second-line Risk function. This hands-on role works across Engineering, Infrastructure, Cloud and Cyber Security to help teams make better risk decisions.

The position sits in a complex tech environment, focusing on risk assessments, control challenges and pragmatic guidance, with direct exposure to senior technology leadership and Risk Committees.

Qualifications

• Strong experience in Technology Risk, IT Risk, Cyber Risk, Information Security Risk or Technology Risk & Controls.
• Worked directly with Technology, Engineering, Infrastructure or Cyber Security teams.
• Practical understanding of how technology platforms operate and where material risks arise.
• Experience assessing technology risks, challenging controls and influencing remediation or risk acceptance decisions.
• Knowledge of frameworks such as NIST, COBIT or ISO 27001.
• Confidence to challenge technical stakeholders constructively while maintaining trusted working relationships.
• Experience in financial services or another highly regulated environment.

Responsibilities

• Build trusted relationships with Engineering Leads, Technology Platform Owners, Infrastructure, Cloud and Cyber Security teams.
• Identify and investigate emerging Technology and Cyber risks, getting beneath the symptoms to understand underlying issues.
• Provide pragmatic second-line advice, support and independent challenge, helping Technology teams develop workable solutions.
• Assess risks relating to cloud platforms, applications, infrastructure, technology resilience, recoverability and major change programmes.
• Challenge risk assessments, control effectiveness, remediation plans and risk acceptance decisions.
• Work with Technology teams to strengthen RCSAs, risk indicators and control maturity.
• Influence senior stakeholders and communicate complex technical risks clearly to Technology leadership and Risk Committees.
• Take ownership of targeted reviews and emerging risk issues, rather than relying on prescribed assurance checklists.

Skills

Technology Risk

IT Risk

Cyber Risk

Information Security Risk

Technology Risk & Controls

Job description

Senior Technology Risk Manager – Cyber & Engineering

London | Hybrid – 2 days in office | Up to £100,000 + 15% Bonus + Benefits

Technology Risk | Cyber Security | Engineering | Financial Services

Auricoe is partnering with a leading UK financial services organisation to appoint a Technology Risk Business Partner within its second-line Risk function.

We're looking for someone who understands Technology Risk beyond policies, frameworks and controls testing. Someone who can sit down with Engineering, Infrastructure, Cloud and Cyber Security teams, understand the technical challenges they're facing and help them make better risk decisions.

This is a hands-on Technology Risk role built around relationships, technical understanding and practical influence, not checklist-driven assurance.

You'll have the opportunity to work directly with senior Technology leadership, influence important risk decisions and help shape how Technology and Cyber risks are understood and managed.

The opportunity

Working across a complex financial services technology environment, you will:

• Build trusted relationships with Engineering Leads, Technology Platform Owners, Infrastructure, Cloud and Cyber Security teams.
• Identify and investigate emerging Technology and Cyber risks, getting beneath the symptoms to understand the underlying issues.
• Provide pragmatic second-line advice, support and independent challenge, helping Technology teams develop workable solutions.
• Assess risks relating to cloud platforms, applications, infrastructure, technology resilience, recoverability and major change programmes.
• Challenge risk assessments, control effectiveness, remediation plans and risk acceptance decisions.
• Work with Technology teams to strengthen RCSAs, risk indicators and control maturity.
• Influence senior stakeholders and communicate complex technical risks clearly to Technology leadership and Risk Committees.
• Take ownership of targeted reviews and emerging risk issues, rather than relying on prescribed assurance checklists.

What makes someone successful here?

We're particularly interested in candidates who have:

• Strong experience in Technology Risk, IT Risk, Cyber Risk, Information Security Risk or Technology Risk & Controls.
• Worked directly with Technology, Engineering, Infrastructure or Cyber Security teams, rather than exclusively within audit or compliance.
• A practical understanding of how technology platforms operate and where material risks arise.
• Experience assessing technology risks, challenging controls and influencing remediation or risk acceptance decisions.
• Knowledge of frameworks such as NIST, COBIT or ISO 27001.
• The confidence to challenge technical stakeholders constructively while maintaining trusted working relationships.
• Experience in financial services or another highly regulated environment.

First-line and second-line candidates are equally welcome. We're particularly interested in individuals who have worked closely with Engineering or Technology delivery teams and can bring that practical understanding into independent risk partnering.

Experience with cloud risk, technology resilience, infrastructure, RCSA or technology change would be particularly valuable.

Qualifications such as CRISC, CISA, CISM, CISSP or CISMP would be advantageous but are not essential.

Why consider this opportunity?

• A genuinely hands-on Technology Risk position with direct exposure to technical teams and senior leadership.
• The opportunity to influence how risks are managed, not simply report on them.
• A broad remit across Technology, Cyber Security, Cloud, Infrastructure and Change.
• An established financial services organisation offering long-term development.
• An individual contributor position with meaningful autonomy and influence.

Package and location

Salary: Up to £100,000 basic

Bonus: Up to 15% discretionary

Location: City of London

Hybrid: Typically 2 days per week in the office

Employment: Permanent

If you're a Technology Risk professional who enjoys working with engineers, understanding complex technical issues and helping businesses make better risk decisions, we'd be interested in speaking with you.