Geforderte Skills
- IT Risk Management
- Technology Risk Governance
- IT Controls
- Cybersecurity Risk Management
- Risk and Control Self-Assessment (RCSA)
- Key Risk Indicators (KRIs)
- Three Lines of Defence
- Issue Management
- Risk Reporting
- Stakeholder Management
Nice to have:DORANIST Cybersecurity FrameworkISO 27001COBITEnterprise Risk Management (ERM)ServiceNow IRMRSA ArcherCRISCCISMCISA
Sprachen: English
Jobbeschreibung
Senior Technology Risk & Controls Governance Consultant - Banking Client - London Location: London - Hybrid (8 days onsite per month) Day Rate: Circa £700 per day Contract Type: Inside IR35 - Umbrella Company Required Industry: Financial Services / Banking We are currently seeking an experienced Senior Technology Risk & Controls Governance Consultant to join
Project details
- Start: ASAP
- Duration: 8 months
- Remote: hybrid
- Location: London, United Kingdom, GB
- Languages: English
Senior Technology Risk & Controls Governance Consultant
- Banking Client
- London Location: London
- Hybrid (8 days onsite per month) Day Rate: Circa £700 per day Contract Type: Inside IR35
- Umbrella Company Required Industry: Financial Services / Banking We are currently seeking an experienced Senior Technology Risk & Controls Governance Consultant to join a leading global financial services organisation based in London. This is an excellent opportunity to play a pivotal role in strengthening Technology Risk Management, Cybersecurity Risk Governance and Control Oversight across a complex, highly regulated technology environment. Working closely with the Head of IT & Security Risk Management, you will support the ongoing development and effectiveness of the organisation's Technology Risk Management Framework, ensuring risks are appropriately identified, assessed, monitored, reported and remediated. The successful candidate will combine strong IT risk and control expertise with excellent stakeholder management skills, providing effective governance, constructive challenge and actionable risk insights to senior Technology and Security leadership. Key Responsibilities Technology Risk Management & Governance Support the execution, maintenance and continuous improvement of the Technology Risk Management Framework. Identify, assess, monitor and report on IT, cybersecurity, operational and control risks. Support Risk and Control Self-Assessments (RCSA), ensuring risks and controls are appropriately documented and assessed. Promote effective risk governance practices and a strong risk culture across Technology. Ensure alignment with internal policies, risk appetite and applicable regulatory expectations. Risk & Control Oversight Oversee technology risk issues, control deficiencies and associated remediation activities. Monitor action plans, challenge overdue remediation activities and escalate material risks where appropriate. Conduct quality reviews of risk assessments, control effectiveness, issues and findings. Work with stakeholders to ensure clear ownership, accountability and timely resolution of identified risks. Identify recurring control weaknesses and opportunities to strengthen the overall control environment. Risk Reporting & Management Information Develop and maintain high-quality Technology Risk reports, dashboards and management information. Monitor and analyse Key Risk Indicators (KRIs), emerging risks and control performance trends. Prepare meaningful risk insights for senior management, governance committees and risk forums. Ensure risk reporting is accurate, timely, consistent and aligned with governance requirements. Translate complex technology and cybersecurity risks into clear, business-focused recommendations. Stakeholder Engagement & Risk Culture Act as a trusted advisor to Technology, Cybersecurity and business stakeholders on risk and control matters. Collaborate with First, Second and Third Lines of Defence to support consistent risk management practices. Constructively challenge stakeholders to drive accountability and effective remediation. Support and coordinate risk champions and risk ambassadors across Technology. Contribute to risk awareness, governance improvements, process optimisation and automation initiatives. Essential Skills & Experience Proven experience in IT Risk Management, Technology Risk Governance, IT Controls or Cybersecurity Risk Management. Strong understanding of technology risk and control frameworks within complex organisations. Practical experience with RCSA, risk assessments, issue management, remediation tracking and Key Risk Indicators (KRIs). Experience overseeing technology risks, control deficiencies and remediation programmes. Strong understanding of the Three Lines of Defence model and risk governance processes. Experience developing risk reports, management information and governance dashboards. Ability to analyse risk data, identify trends and communicate meaningful insights. Excellent stakeholder management skills, including the ability to challenge and influence senior stakeholders. Strong communication, analytical, organisational and problem-solving capabilities. Ability to work independently and manage multiple risk and governance activities simultaneously. Desirable Experience Previous experience within banking, financial services, capital markets or other highly regulated environments. Familiarity with industry standards and regulatory frameworks, including: DORA
- Digital Operational Resilience Act NIST Cybersecurity Framework ISO 27001 COBIT Enterprise Risk Management (ERM) Experience using GRC platforms such as ServiceNow IRM, RSA Archer or MetricStream. Exposure to operational resilience, ICT risk management and regulatory compliance. Experience supporting risk governance transformation, process improvement or reporting automation. Relevant qualifications such as CRISC, CISM, CISA or ISO 27001 certification. The Ideal Candidate We are looking for a proactive, commercially aware Technology Risk professional who understands how to operate within a complex financial services environment. You will be comfortable engaging with senior stakeholders, challenging risk owners, monitoring remediation commitments and ensuring Technology Risk Management processes operate effectively. This is not a hands-on cybersecurity engineering position. *Rates depend on experience and client requirements
Indexiert von der 9am-Meta-Suche. Du bist Job-Anbieter? Listing beanspruchen oder verwalten
Gefunden auf Salt (WeLoveSalt)