Technology, Resilience, Security & Risk Manager

TrinityBridge; Northwich; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Flexible working options

Job summary

TrinityBridge is seeking a Technology, Resilience, Security & Risk Manager to mature governance and align with industry frameworks. Based at our Northwich Centre of Excellence, you will lead risk governance, reporting, and data-driven risk insights for the CISO and Head of Enterprise Technology.

You will contribute to enterprise-wide TRS strategy, drive KRIs/KPIs, maintain risk appetite, and partner with senior stakeholders to ensure compliance with FCA and internal policies.

Qualifications

• Experience in risk management roles with sole responsibility for risk areas.
• Fundamental understanding of Cyber/Information Security, resilience and technical risk.
• Excellent writing and verbal communication skills with ability to produce risk reports and dashboards.
• Familiarity with industry standards (ISO27001, SOC I/II, ITIL, COBIT, NIST, DORA).
• CISM or business analysis certification or qualification.

Responsibilities

• Chair and shape the Cyber and Resilience Risk committee (CRC) and monthly sub-CRC forums, reporting against strategy and risk appetite.
• Oversee TRS policy and standards governance, monthly risk reporting, and KRIs/KPIs, and risk/control registers.
• Develop TRS risk appetite statements and KPIs with Operational Risk for clear operation within tolerance.
• Produce gap analysis reports with mitigation plans and options.
• Independent review of problem, incident management and KRIs for continuous improvement.
• Own TRS risk assessments of third and fourth parties via the third‑party management team.
• Monitor regulatory requirements and update governance frameworks accordingly.
• Collaborate with the TRS leadership to ensure timely risk reporting across programs.
• Ensure TRS governance remains active in BAU and change initiatives.

Skills

Cyber risk management

Risk reporting

Data analytics

Regulatory compliance

Stakeholder communication

ISO27001 knowledge

Education

CISM certification

Tools

Microsoft Excel

AI tools

Job description

Technology, Resilience, Security & Risk Manager

Role overview

We are pleased to offer a sought-after opportunity to join our friendly and long-serving Technology, Resilience and Security (TRS) team based out of our Northwich Centre of Excellence. The role will focus on maturing TrinityBridge’s Governance and alignment with industry-standard frameworks, ensuring our ability to resiliently safeguard our clients, our people, and their assets.

The role contributes to the ongoing development and evolution of the enterprise-wide technology, resilience, and security governance strategy, ensuring alignment with business objectives, strategy and regulatory requirements.

This colleague will sit on the TRS leadership team and will be responsible for line 1.5 operational risk outcomes for the CISO and Head of Enterprise Technology.

The role currently has no direct reports.

Key responsibilities

Governance

• Own, chair and shape the future of the Cyber and Resilience Risk committee (CRC) and sub-CRC- monthly forums. The colleague will uphold the CRC terms of reference and ensure reporting against strategy and risk appetite by bringing to life the information with engaging data packs and presentations.
• Hands‑on responsibility for the governance lifecycle of TrinityBridge’s TRS policy and standards, monthly risk reporting and KRIs/KPIs, and Risk and Control Registers.
• Develop and maintain TRS risk appetite statements, MI, KPIs and KRIs in conjunction with the Operational Risk team, to ensure TrinityBridge report with clarity on operation within the agreed tolerance.
• Produce full gap analysis reports on areas of improvement and risk, to support risk and cost reduction and strategy delivery, recommending thorough mitigation plans including justification for options considered.
• Independent review of problem management, incident management and KRIs to provide proposals and recommendations on continuous improvement and optimal performance of the enterprise function.
• Ownership of TRS risk assessment of third and fourth parties through the established third-party management team.
• Monitor emerging regulatory requirements and ensure governance frameworks are updated accordingly.
• Work closely with the TRS leadership team to ensure timely and accurate reporting of programme risks.
• Ensure TRS Governance is adhered to throughout business as usual (BAU) operation and business change, utilising the mature operational processes already in place.
• Act as an interface between business change and TRS leadership where deviations to process and risk acceptances may be necessary.

Communication, Reporting & Culture

• Responsible for TrinityBridge’s strong cyber and information security culture, acting as an expert on cyber and information security for the business.
• Independently able to produce comprehensive write ups of current risks and threats as they develop, producing expedient updates as situations change and span different threat vectors.
• Proactively report upwards on emerging cyber and data risks and threats, providing a view through a business lens on potential impacts.

People

• Operate with respect, diversity and inclusion principles as a key tenet of your role.
• Develop a culture of continuous improvement and appraisal as a foundation for excellent organisational performance, including operating within the firm’s people policies and processes.
• Build and develop relationships with organisation-wide peers.

Regulatory responsibilities | Compliance/T&C

• Ability to demonstrate an understanding of the regulatory framework relevant to the role, whilst practising effective risk management taking account of outcomes for clients.
• Understand, follow and demonstrate compliance with all relevant internal and external rules, regulations and procedures that apply to the conduct of the business. Follow principles and rules of the Financial Conduct Authority (FCA) and the internal requirements set out in the Compliance Manual, local and Group Compliance and Risk policies.

About you | Qualifications, skills and strengths

• A genuine passion for creating engaging, professional risk reporting and presentations. The interview process will ask for an assessment of this skill.
• Experience in working in risk management roles with sole responsibility for risk areas.
• Whilst being hands‑on technical is not required, a fundamental understanding of Cyber/Information Security, resilience and technical risk is required.
• Pragmatic and able to work collaboratively to find solutions.
• Excellent writing comprehension and ability, with a drive to improve existing documents and processes.
• Excellent verbal communication skills, operating with empathy and psychological safety.
• Able to clearly articulate how stakeholders comply with requirements/expectations set by regulators, auditors, organisational risk appetite, senior management and the board.
• Experience in gathering, analysing and structuring data using Microsoft and AI tools.
• Experience in the development and production of dashboards and reports, including MI, KPIs and KRIs.
• Ability to work independently within a defined remit, managing schedule and multiple objectives.
• Ability to collaborate effectively with colleagues at all organizational levels.
• Working as a cyber security and technology risk manager at a financial services organization
• Possess a working understanding of industry standard frameworks and concepts such ISO27001, SOC Type I & II, ITIL, COBIT, Agile, NIST, DSIT, CMMI, DORA
• CISM or business analysis certification or qualification

At TrinityBridge we look to recruit individuals from all different backgrounds and encourage you to apply even if you don’t tick every box. We celebrate diversity, promote inclusivity and are open to discuss flexible work options to help you balance your work and home life.

The Company

At TrinityBridge we are all connected by our mission to be leading UK Wealth Manager, growing trusted client relationships that last for generations.

We believe that everyone should think ahead, have a financial plan and invest wisely. Our clients are professionals, business owners, individuals, charities, families, and employers, who rely on our clear financial advice and investment management services to preserve and grow their long‑term savings and investments.

We are a team of about 900 people based in 15 offices across the UK. Our geographic footprint means we can combine a local approach with face-to-face services to enable strong, long‑term relationships with our clients.

Sustainability is fundamental to our purpose, and we have a responsibility to help address the social, economic and environmental challenges facing our business, colleagues and clients. We strive to do the right thing and are dedicated to helping the charities that matter most to our people.

We offer a wide range of inclusive benefits that provides our people with all the support they need to find a healthy balance in all aspects of their lives. We also invest in the growth of our people providing a sense of belonging and team spirit and the ability to thrive.

We recruit people from all backgrounds and are open to discussing all types of flexible working options, helping our people to balance work and home life and make practical choices for wellbeing while delivering impact where it matters, all of which contributes to our exceptional client experience.

We are committed to ensuring our recruitment process is accessible to everyone. We make adjustments for people who have a disability or long‑term condition so, if you need a job description or application form in an alternative format, or would like to discuss the recruitment process with us, please get in touch at [e-mail].

As an employer, TrinityBridge is committed to equality and valuing diversity within its workforce. We provide equality of opportunity and will aim to ensure that no employee’s or candidates are subject to discrimination on grounds of any characteristics including but not withstanding gender, gender identity, marital status, sexual orientation, race, colour, nationality, religion, age, disability, working pattern, caring responsibilities, political beliefs.