Technology Risk Associate - CIO | SCIB

Santander; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading financial institution in Greater London is seeking a Technology Risk Associate to enhance their technology risk framework. This role involves identifying and managing technology risks, collaborating with various teams to ensure compliance with regulatory obligations, and conducting risk assessments for technology projects. Candidates should possess relevant experience and certifications in cybersecurity or risk management. The position offers a hybrid working pattern and a competitive benefits package.

Benefits

Discretionary performance-related annual bonus

8% employer contribution to pension

27 days holiday plus bank holidays

Free access to digital health services

Private medical insurance

Qualifications

• Experience in technology risk, IT audit, or operational risk management within a large financial institution.
• Familiarity with regulatory frameworks applicable to EU/UK banking.
• Professional certifications such as CISA, CRISC, CISSP, or similar.

Responsibilities

• Identify, assess, and monitor technology risks across infrastructure and applications.
• Prepare and deliver risk reporting to senior management.
• Evaluate and ensure effectiveness of IT controls.

Skills

Cloud risk management

Data protection governance

Cybersecurity governance

IT governance frameworks

Stakeholder management

Education

Bachelor’s degree in Information Technology, Risk Management, or a related discipline

Tools

COBIT

ISO 27001

NIST

ITIL

Job description

Technology Risk Associate - CIO | SCIB Country: United Kingdom

Join our community.

Santander Corporate & Investment Banking (SCIB) is Santander's global division that supports some of the world's most complex and sophisticated corporate and institutional clients, offering customised services and value-added wholesale products to best meet their needs.

As part of our ongoing commitment to operational excellence and resilience, we are seeking a Technology Risk Associate to strengthen our global technology risk and control framework.

The role will be pivotal in ensuring that technology risks within Santander CIB London Branch are effectively identified, assessed, managed, and reported across the CIB technology landscape. Working closely with IT, cybersecurity, operations, and the Non-Financial Risk (NFR) function, the Technology Risk Associate will help ensure Santander CIB London Branch meets its risk appetite and regulatory obligations while supporting innovation and digital transformation.

Risk Governance & Oversight

• Lead the identification, assessment, and ongoing monitoring of technology risks across infrastructure, applications, and digital platforms.
• Support the implementation of the CIB Technology Risk Framework in alignment with Santander Group’s global Non-Financial Risk (NFR) policies.
• Maintain the technology risk register, ensuring that risks are accurately documented, assessed, and escalated in line with governance processes.
• Prepare and deliver risk reporting and insights to Technology Risk Committees, senior management, and global control forums.

Control Framework & Assurance

• Evaluate the design and effectiveness of IT controls, including access management, change management, system security, and data integrity.
• Partner with second- and third-line teams to support internal and external audits, ensuring findings are addressed with sustainable remediation plans.
• Conduct thematic reviews and deep dives into key risk areas.
• Monitor adherence to Santander Group’s IT Control Standards.

Cybersecurity & Operational Resilience

• Collaborate with the CISO and Operational Resilience teams to ensure technology resilience, continuity, and incident response capabilities are robust.
• Contribute to scenario testing, crisis simulations, and lessons‑learnt exercises.
• Support compliance with regulatory expectations including EBA ICT Guidelines, DORA, and Bank of England’s Operational Resilience Framework (where applicable).

Advisory & Partnership

• Provide risk advisory input for technology projects and new initiatives, ensuring that risk assessments and control design reviews are conducted early in the delivery lifecycle.
• Support the adoption of emerging technologies (e.g. cloud, AI, data analytics) in a controlled and compliant manner.
• Foster a strong risk culture within Santander CIB London Branch through awareness sessions, training, and stakeholder engagement.

Risk Reporting & Metrics

• Produce periodic dashboards and risk trend analyses for CIB senior management, highlighting emerging risks, control gaps, and remediation progress.
• Define and maintain key risk indicators (KRIs) and performance metrics to track risk appetite adherence and technology control maturity.

What you’ll bring:

• Experience in cloud risk management, data protection or cybersecurity governance.
• Professional certifications such as CISA, CRISC, CISSP, ITIL, or COBIT.
• Experience in technology risk, IT audit, or operational risk management within a large financial institution.
• Strong understanding of IT governance and control frameworks (e.g. COBIT, ISO 27001, NIST, ITIL).
• Familiarity with regulatory frameworks applicable to EU/UK banking (e.g. EBA ICT Guidelines, PRA/FCA expectations, DORA, GDPR).
• Excellent communication and stakeholder management skills with the ability to influence and challenge effectively.

It would also be nice for you to have:

• Bachelor’s degree in Information Technology, Risk Management, or a related discipline.
• Knowledge of Santander’s Non-Financial Risk (NFR) Framework and Group control environment is advantageous.

What else you need to know:

This role is based at our offices in Triton Square, London located within easy walking distance from Warren Street and Euston.

We want our people to thrive at work and home, and also be able to deliver the best outcomes for our customers and to help each other develop. To support this, we offer site-based contracts with a hybrid working pattern and our expected level of attendance in an office is at least 3 days a week (pro‑rated for part‑time roles).

Inclusion

At Santander we’re creating a thriving workplace where all colleagues feel they belong and are supported to succeed. We all help to make Santander a workplace that celebrates diversity and attracts, retains and develops the most talented and committed people through living our values of Simple, Personal, and Fair.

How we’ll reward you.

As well as salary, we offer a wide range of benefits that you can choose from and tailor to your needs.

• Eligible for a discretionary performance‑related annual bonus.
• We put 8% of salary into your pension, even if you don’t contribute yourself. We’ll pay in up to 12.5% of salary, if you contribute as well, and you can take some of our contribution in cash if you prefer.
• 27 days’ holiday plus bank holidays, which increases to 28 days after 5yrs service, with the option to purchase up to 5 contractual days per year.
• Free access to a range of digital health services, including GP.
• Protection for you and your family, with company‑funded death‑in‑service benefit and income protection insurance, and the option to take advantage of discounted rates for additional life assurance and critical illness cover.
• 24/7 access to an online employee discount platform including retailers, entertainment, eating out, travel and more.
• Company funded individual private medical insurance.
• Voluntary healthcare benefits at discounted rates such as dental insurance, and health assessments.
• Share in Santander’s success by saving or investing in our shareplans.
• Support your favourite causes through charitable giving and our community partnerships.

Learn more about our benefits and family friendly policies

What to do next:

If this sounds like a role you’re interested in, then please apply.