Technology & Operations Risk Lead (S3)

Santander; Milton Keynes; Hybrid; GBP 64,000 - 96,000; Full time

Benefits offered by this job

30 days holiday

Car allowance

Private medical insurance

Death in service

Income protection

Employee share plans

Staff banking benefits

Job summary

Santander UK is seeking a Technology & Operations Risk Manager to provide independent oversight of technology and cyber risk in a 1LoD role. Based in Milton Keynes or Glasgow, you will assess risk data, challenge controls, and help ensure risk management aligns with regulatory expectations.

You will review RCSA and RCPs, monitor risk appetite, and drive improvements across governance artefacts. Strong knowledge of risk frameworks and tooling (e.g., Heracles) is essential, as is the ability to

Qualifications

• Experience in technology risk, cyber risk, or operational risk within financial services.
• Experience providing independent oversight, challenge, or audit of control environments (2LoD or equivalent).
• Experience working with RCSA, risk frameworks, and control assessment methodologies.
• Experience producing risk reporting and MI for governance forums.

Responsibilities

• Provide independent oversight and challenge of Technology & Operations risk, ensuring alignment with Operational Risk Management frameworks.
• Reviewing and challenging Risk & Control Self-Assessments (RCSA), ensuring completeness, accuracy, and robust control design.
• Ensuring quality and integrity of Risk & Control Profiles (RCPs), including risk identification, control mapping, and residual risk assessment.
• Overseeing risk data within tooling (e.g. Heracles), ensuring alignment across risks, issues, events, and risk appetite statements.
• Monitoring adherence to Risk Appetite Statements (RAS), supporting breach management, root cause analysis, and remediation tracking.
• Challenging control effectiveness, thematic reviews, and testing outcomes to identify systemic weaknesses.
• Producing and analysing risk MI and reporting, identifying emerging risks, trends, and control gaps.
• Driving continuous improvement of governance artefacts, processes, and risk engagement models across T&O.

Skills

Cybersecurity risk

IT risk

Control frameworks

Risk tooling

Data management

Risk appetite

RCSA

Control testing

Technology architecture

Regulatory knowledge

Vulnerability management

Education

Bachelor's degree in Cybersecurity, Information Technology, Risk, or related field

CISA, CISSP, CISM, or equivalent certifications

Tools

Heracles or similar platforms

Job description

Santander UK is seeking a Technology & Operations Risk Manager to provide independent oversight of technology and cyber risk in a 1LoD role. Based in Milton Keynes or Glasgow, you will assess risk data, challenge controls, and help ensure risk management aligns with regulatory expectations.

You will review RCSA and RCPs, monitor risk appetite, and drive improvements across governance artefacts. Strong knowledge of risk frameworks and tooling (e.g., Heracles) is essential, as is the ability to