We are seeking a skilled and experienced Risk Assessment Manager to support the European Technology Office of the CIO. This role is pivotal in coordinating and managing the European Technology Risk and Control Self-Assessment (RCSA) activities, ensuring compliance with policies and standards. The successful candidate will lead risk assessments, oversee issue management, and provide specialist support to embed effective technology risk practices across European business units.

Key Responsibilities:

• Implement and manage the 1LOD European Technology RCSA process across all segments.
• Facilitate workshops to identify, assess, and capture key risks and IT controls, reflecting changes in business initiatives and the external environment.
• Conduct IT risk assessments for new products, services, and technologies.
• Develop remediation plans and oversee the completion of policy exceptions and risk acceptances.
• Identify and recommend improvements to risk policies and processes.
• Provide detailed risk assessment reports and insights for senior stakeholders.
• Collaborate with senior stakeholders to embed risk management and controls into decision-making processes.
• Deliver management information to ensure assurance on risk management effectiveness.

Candidate Profile:

Essential Skills and Experience:

• 5+ years of experience in technology risk management with relevant qualifications.
• Strong knowledge of IT controls, risk assessment frameworks, and regulatory requirements.
• Proven ability to challenge and influence senior stakeholders effectively.
• Hands-on experience in process mapping and designing IT controls and test plans.
• Analytical skills with the ability to research complex processes and communicate findings clearly.
• Experience operating at a group level across multiple jurisdictions and business lines.
• Proven experience in leading projects/programmes within IT and Cybersecurity Risk and Compliance domains, with a strong focus on enhancing technology control environments and improving overall Technology risk posture.
• Strong understanding of risk management principles, technology and cybersecurity frameworks, and regulatory standards including DORA, ISO 27001, and NIST.

Key Competencies:

• Excellent communication and influencing skills, with the ability to simplify complex issues for senior audiences.
• Strong organizational and time management skills, ensuring timely delivery of reports and objectives.
• High attention to detail and problem-solving capabilities.
• Demonstrated ability to manage competing priorities in a dynamic environment.

What’s on Offer:

• Opportunity to work in a pivotal role within a leading financial services organization.
• Exposure to cross-jurisdictional technology risk management in a dynamic, evolving environment.