Technology Risk Business Partner

JSS; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

JSS in London is seeking a Technology Risk Business Partner to join the second line risk function. The role focuses on independent challenge, risk insight and support across technology and cyber initiatives, while not owning first-line activities.

The ideal candidate has experience in Technology/Cyber/Information Security Risk or Technology Controls, with strong stakeholder management and communication skills, and holds or is pursuing CRISC/CISSP/CISM/CISA qualifications.

Qualifications

• Experience within Technology Risk, Cyber Risk, Information Security Risk or Technology Controls.
• Understanding of recognised frameworks such as NIST, COBIT or CRI.
• Strong stakeholder management and influencing skills.
• Excellent communication and analytical abilities.
• Experience within financial services is advantageous.
• Professional qualifications such as CRISC, CISSP, CISM or CISA would be beneficial.

Responsibilities

• Partner with Technology and Information Security teams to identify, assess and manage technology and cyber risks
• Review and challenge risk assessments, control frameworks and remediation plans
• Support the application of enterprise risk frameworks across technology functions
• Provide risk oversight and input into change, transformation and technology investment initiatives
• Conduct thematic reviews across technology and cyber domains
• Analyse risk events and support root cause analysis activities
• Build strong relationships with business, technology and risk stakeholders
• Promote risk awareness and contribute to the development of risk capability across the organisation

Skills

Technology risk

Cyber risk

Stakeholder management

Influencing skills

Communication

Analytical abilities

Information Security Risk

Education

CRISC

CISSP

CISM

CISA

Job description

A leading UK financial services organisation is seeking a Technology Risk Business Partner to join its second line risk function in London.

This is an excellent opportunity for a technology risk, or cyber risk professional who enjoys working closely with stakeholders, influencing decision-making and helping businesses manage technology risk in a practical and commercial way.

The role will partner directly with Technology and Information Security teams, providing independent challenge, risk insight and support across a broad range of technology and cyber initiatives. The successful candidate will act as a trusted adviser, helping drive effective risk management without assuming ownership of first‑line activities.

Key responsibilities:

• Partner with Technology and Information Security teams to identify, assess and manage technology and cyber risks


• Review and challenge risk assessments, control frameworks and remediation plans


• Support the application of enterprise risk frameworks across technology functions


• Provide risk oversight and input into change, transformation and technology investment initiatives


• Conduct thematic reviews across technology and cyber domains


• Analyse risk events and support root cause analysis activities


• Build strong relationships with business, technology and risk stakeholders


• Promote risk awareness and contribute to the development of risk capability across the organisation

Person Requirements:

• Experience within Technology Risk, Cyber Risk, Information Security Risk or Technology Controls


• Understanding of recognised frameworks such as NIST, COBIT or CRI


• Strong stakeholder management and influencing skills


• Excellent communication and analytical abilities


• Experience within financial services is advantageous


• Professional qualifications such as CRISC, CISSP, CISM or CISA would be beneficial