Technology Risk Manager (Post Trade Regulatory Reporting)

London Stock Exchange; Greater London; On-site; GBP 75,000 - 115,000; Full time

Job summary

London Stock Exchange is seeking a Manager, Technology Risk & Controls to lead technology risk, cyber security, operational resilience and regulatory compliance across Regulatory Reporting Solutions Engineering. You will coordinate risk and control activity, produce management information, support governance forums, and track remediation with cross‑functional teams.

The role requires strong knowledge of risk frameworks and regulatory obligations including DORA, and the ability to translate

Qualifications

• Proven experience supporting regulatory engagement, audits, and governance forums.
• Strong understanding of technology control frameworks and cyber risk.
• Experience in regulated financial services environments.
• Ability to translate regulatory obligations into practical controls.
• Excellent written and verbal communication.

Responsibilities

• Lead technology risk, control and regulatory compliance activities across Regulatory Reporting Solutions Engineering.
• Coordinate risk and control activity, produce MI, support governance forums and track remediation.
• Support identification, assessment and mitigation of technology, cyber and resilience risks.
• Embed operational resilience requirements within engineering and change activities.
• Produce governance MI, risk papers, dashboards and reporting packs.
• Manage third-party and technology dependency risk.
• Provide oversight of action delivery and challenge delays where required.

Skills

Regulatory reporting

Technology risk management

Cyber security risk

Operational resilience

Stakeholder engagement

Governance reporting

Education

Degree or equivalent professional experience

Certifications such as CISM, CISSP, CRISC, ITIL or similar

Job description

• The Manager, Technology Risk & Controls is accountable for leading technology risk, control and regulatory compliance activities across Regulatory Reporting Solutions Engineering
• The role applies expert knowledge of technology risk, cyber security, operational resilience and regulatory expectations to ensure risks are identified, assessed, controlled and reported in line with LSEG policy, regulatory standards and industry best practice
• The role will coordinate risk and control activity, produce management information, support governance forums, facilitate reviews, track issue remediation, and partner with engineering, product, production management, cyber, cloud, infrastructure, second-line risk, audit, compliance and legal stakeholders
• Technology Risk & Control Management
• Support the identification, assessment, monitoring and mitigation of technology, cyber and resilience risks across products, platforms, services and third-party dependencies
• Coordinate risk and control activities to ensure risks are appropriately recorded, assessed and managed in accordance with internal policies and standards
• Facilitate regular reviews of risk mitigation plans, ensuring actions, issues and control gaps are tracked through to completion
• Contribute to the maintenance and continuous improvement of technology risk frameworks, control standards and supporting processes
• Provide constructive challenge on control effectiveness, evidence quality and risk treatment approaches
• Regulatory Compliance & Oversight
• Support implementation of technology, cyber security and operational resilience requirements applicable to Regulatory Reporting Solutions, including DORA obligations and relevant regulatory reporting expectations
• Assist in translating regulatory obligations into practical control requirements and governance processes
• Coordinate evidence gathering and responses for regulatory reviews, ICT risk management assessments, SOC 2 assurance and internal audit activity
• Escalate emerging compliance risks, control weaknesses and potential breaches in a timely manner
• Maintain awareness of relevant regulatory developments and industry best practice
• Operational Resilience
• Embed operational resilience requirements within Regulatory Reporting Solutions engineering, technology, production and change activities
• Contribute to resilience assessments, scenario testing, control validation and remediation activities
• Coordinate resilience-related actions, evidence and reporting to demonstrate compliance with internal and external requirements
• Work with engineering, production management, cyber, infrastructure and business stakeholders to strengthen resilience across regulated reporting services and supporting platforms
• Governance, Risk Reporting & MI
• Produce and maintain high-quality risk and control management information for governance forums and senior stakeholders
• Support the preparation of committee materials, risk papers, dashboards and reporting packs
• Monitor and report on key risk indicators, control metrics and remediation progress
• Analyse trends and emerging themes to support risk-informed decision making
• Ensure risk data remains accurate, complete and appropriately evidenced
• Risk Assessment, Issue Management & Remediation
• Coordinate technology risk assessments, control reviews and thematic risk activities
• Support the identification, recording and assessment of technology, cyber and resilience risks
• Track remediation plans for risk events, audit findings, control deficiencies and regulatory actions
• Provide oversight of action delivery, challenging delays and escalating concerns where required
• Ensure remediation activities are appropriately evidenced and sustainably implemented
• Third-Party & Technology Dependency Risk
• Support oversight of technology suppliers, cloud services and other critical dependencies from a risk and control perspective
• Coordinate due diligence, assurance reviews and risk assessments relating to third-party services
• Monitor remediation activity arising from supplier reviews and control assessments
• Promote alignment with enterprise standards relating to cloud, supplier and technology risk management
• Maintain effective stakeholder relationships to support the management of dependency-related risks
• Stakeholder Partnership & Risk Advisory
• Act as a trusted partner to engineering, product and technology teams on risk and control matters
• Provide practical guidance to support risk-informed decision making and delivery outcomes
• Build effective relationships across first-line, second-line and assurance functions
• Communicate complex risk and regulatory topics clearly for both technical and non-technical audiences
• Promote a strong risk and control culture through collaboration, coaching and constructive challenge
• Reports To: Rupert Thomas - Director, Technology Risk & Controls

• Proven experience supporting regulatory engagement, audits, and governance forums
• Degree or equivalent professional experience
• Strong understanding of technology control frameworks, cyber security risk, and operational resilience concepts
• Significant experience in technology risk and controls within financial services or other regulated environments
• Relevant certifications such as CISM, CISSP, CRISC, ITIL or similar
• Regulatory risk interpretation and control mapping
• Stakeholder engagement and influencing without authority
• Governance, MI and executive-level reporting
• Technology and cyber risk management frameworks
• Clear, concise written and verbal communication
• Operational resilience and business service protection
• Knowledge of regulatory reporting services, including trade repository and approved reporting mechanism environments, is desirable
• Experience working in or supporting regulated reporting services, Financial Market Infrastructure or regulated information services
• Familiarity with cloud, third‑party risk, and data resilience control environments