Strategic Technology Risk Partner

JSS; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

JSS in London is seeking a Technology Risk Business Partner to join the second line risk function. The role focuses on independent challenge, risk insight and support across technology and cyber initiatives, while not owning first-line activities.

The ideal candidate has experience in Technology/Cyber/Information Security Risk or Technology Controls, with strong stakeholder management and communication skills, and holds or is pursuing CRISC/CISSP/CISM/CISA qualifications.

Qualifications

• Experience within Technology Risk, Cyber Risk, Information Security Risk or Technology Controls.
• Understanding of recognised frameworks such as NIST, COBIT or CRI.
• Strong stakeholder management and influencing skills.
• Excellent communication and analytical abilities.
• Experience within financial services is advantageous.
• Professional qualifications such as CRISC, CISSP, CISM or CISA would be beneficial.

Responsibilities

• Partner with Technology and Information Security teams to identify, assess and manage technology and cyber risks
• Review and challenge risk assessments, control frameworks and remediation plans
• Support the application of enterprise risk frameworks across technology functions
• Provide risk oversight and input into change, transformation and technology investment initiatives
• Conduct thematic reviews across technology and cyber domains
• Analyse risk events and support root cause analysis activities
• Build strong relationships with business, technology and risk stakeholders
• Promote risk awareness and contribute to the development of risk capability across the organisation

Skills

Technology risk

Cyber risk

Stakeholder management

Influencing skills

Communication

Analytical abilities

Information Security Risk

Education

CRISC

CISSP

CISM

CISA

Job description

JSS in London is seeking a Technology Risk Business Partner to join the second line risk function. The role focuses on independent challenge, risk insight and support across technology and cyber initiatives, while not owning first-line activities.

The ideal candidate has experience in Technology/Cyber/Information Security Risk or Technology Controls, with strong stakeholder management and communication skills, and holds or is pursuing CRISC/CISSP/CISM/CISA qualifications.