Technology Risk Manager – Post Trade Regulatory Reporting

Overview

In this role, you will lead technology risk, control, and regulatory compliance for Regulatory Reporting Solutions Engineering. You’ll shape risk frameworks, advise on control effectiveness, and coordinate governance with engineering, cyber, and audit partners. You’ll translate regulatory requirements into practical controls and oversee risk reporting and remediation. The position sits within a collaborative, change-driven environment focused on regulatory reporting resilience and risk-based decision making.

Pay / Benefits

• healthcare
• retirement planning
• paid volunteering days
• wellbeing initiatives

Responsibilities

• Identify, assess and mitigate technology, cyber, and resilience risks across products and third-party dependencies.
• Coordinate risk and control activities to align with internal policies and standards.
• Lead reviews of risk mitigation plans and track actions to completion.
• Contribute to risk framework maintenance and control standard improvements.
• Provide challenge on control effectiveness, evidence quality, and risk treatment approaches.
• Support regulatory compliance activities including DORA obligations and regulatory reporting expectations.
• Gather evidence for regulatory reviews, SOC 2, audits, and governance forums.
• Embed operational resilience into engineering, production, and change activities.
• Produce risk and control MI for governance forums and executive audiences.
• Track remediation of risk events, findings, and regulatory actions.
• Oversee third-party and technology dependency risk with cloud and supplier risk management.
• Advise engineering and product teams on risk matters and promote a risk-aware culture.

Key requirements

• Degree or equivalent professional experience
• Certifications such as CISM, CISSP, CRISC, ITIL or similar
• Significant experience in technology risk and controls within financial services or regulated environments
• Proven experience supporting regulatory engagement, audits, and governance forums
• Strong understanding of technology control frameworks, cyber security risk, and operational resilience

• Stakeholder engagement
• Clear written and verbal communication
• Collaborative and coaching mindset
• Technology risk management frameworks
• Regulatory risk interpretation and control mapping
• Operational resilience concepts

…