Technology Governance & Risk Specialist

4 Months ago • All levels

Risk Management

Job Description

The Technology Governance & Risk Specialist will manage and automate technology risk management processes and IT governance framework. Responsibilities include designing and implementing technology governance processes across various areas, scripting and automating solutions for monitoring risk, creating dashboards for risk visibility, partnering with technology teams for regulatory compliance, coordinating risk assessments and testing programs, leading projects to remediate technology risks, building and maintaining documentation, and preparing management information packs for leadership. This role involves coordinating governance committee meetings and ensuring follow-up on action items. The ideal candidate will be familiar with regulatory standards and auditing processes, possess strong scripting abilities, and be technically literate. They should be organized, have excellent communication skills, and be eager to work with people across different disciplines.

Must Have:

Experience in technology governance, risk, and service management.
Familiarity with regulatory/industry standards (ITIL, NIST, CSF).
Strong scripting abilities (Bash, PowerShell, SQL or similar).
Technically literate with understanding of tech stacks.
Excellent written and verbal communication skills.

Add these skills to join the top 1% applicants for this job

cross-functional

risk-management

internal-audit

powershell

sql

bash

About the Position

We are seeking a Technology Governance & Risk Specialist who can help manage and automate our evolving technology risk management processes and IT governance framework.

In this global role, you’ll join our Technology Governance, Risk and Compliance (GRC) team and work alongside seasoned colleagues across our Technology, Cybersecurity, Business Controls and Compliance teams, helping to coordinate and develop the many moving pieces that keep our systems and processes running smoothly and in compliance with all the relevant rules and regulations.

The regulatory landscape, as it applies to technology within the finance industry, is complex and evolving. Responsibilities of this role include:

Designing, implementing and enhancing technology governance processes across technology service management, disaster recovery and business continuity
Scripting and automating solutions to monitor risk indicators, generate compliance reports and track remediation efforts
Creating dashboards and metrics that provide visibility into our technology risk posture
Partnering with technology teams to ensure regulatory compliance across jurisdictions (SEC, FCA, AFM, SFC, etc.), supporting GDPR activities, answering due diligence questionnaires and coordinating regulatory filings
Coordinating cross-functional risk assessments and testing programmes (business continuity testing, application recovery testing, audits, etc.)
Leading projects to remediate areas of technology risk across the business
Building and maintaining robust documentation, policies and standards aligned with industry frameworks (ITIL, NIST, ISO 27001, etc.)
Preparing concise Management Information packs for leadership, highlighting key risks and trends
Helping coordinate governance committee meetings and ensuring timely follow-up on action items

About You

Have experience in a similar role, ideally with a financial services background, with exposure to technology governance, risk and service management activities, such as:
- Helping align with regulation/industry standards (e.g., ITIL, NIST, CSF)
- Drafting policies and standards
- Facilitating BC/DR assessments and testing
- Responding to due diligence questionnaires and regulatory inquiries
- Dependency mapping
Familiar with the auditing process; have a history of participating in audits with internal teams, independent third parties and regulators
Have strong scripting abilities (Bash, PowerShell, SQL or similar) to automate compliance processes and controls
Technically literate; have a high-level understanding of tech stacks and can have informed discussions with engineers
Motivated self-starter who can handle competing priorities and work effectively in a challenging, fast-paced environment
Organised with a strong attention to detail
Excellent written and verbal communicator with the ability to translate complex technical concepts into clear language, maintain good documentation and tailor messaging to suit the needs of different audiences (e.g., preparing Management Information packs for leadership vs disclosures for regulators vs internal blogs for colleagues)
Eager to meet and work with people across different disciplines
Fluency in English is required