Technology Risk & Controls Manager

BVNK

Technology Risk & Controls Manager embedding risk management framework and overseeing technology controls. Delivering risk assessments and collaborating across functions at fintech company.

Posted 7/3/2026full-timeMilton Keynes • 🇬🇧 United KingdomSeniorLeadWebsite

About the role

Key responsibilities & impact

Partner with the Technology business area to embed the Risk Management Framework, including policies and procedures
Provide expert input into the design and operation of the technology control framework, including data management, working with stakeholders across Technology to ensure that controls are documented and embedded
Provide expert input into the vendor management framework, supporting the Vendor Management Team to develop and embed controls to ensure effective management of vendors in line with regulatory requirements
Testing of existing and new key controls in line with agreed schedule, informing the non-financial risk profile and required management actions
Support the operational resilience programme, with a focus on technology resilience, feeding into scenario planning and testing
Support the coordination and facilitation of the bank’s Risk and Control Self-Assessment (RCSA) and administration of the bank’s annual RCSA refresh
Support the capital calculation for Operational Risk as part of the ICAAP, including scenario analysis
Hands on support in the update of risk information on the bank’s Risk systems, including ensuring risk events and issues are appropriately raised and managed
Assembling informed quantitative and qualitative input into First Line Risk Reporting at relevant committees and conducting deep dive reviews into areas of thematic risk

Requirements

What you’ll need

Strong Risk knowledge and experience including RCSAs, Controls and Risk Libraries, risk event reporting
Expertise in technology control frameworks and vendor management standards
Knowledge of ISO27001 and SOC2 type controls would be advantageous
Knowledge of relevant non-financial risk regulatory requirements, e.g. on Operational Resilience, Outsourcing is desirable
Hands on experience of assurance/monitoring of risks and controls across non-financial risk disciplines
Willing to be very hands-on and ability to adapt quickly to the workflow in support of the Controls team, with focus on delivering results and meeting deadlines
Strong written and presentation skills, supported by experience of communication across different levels of seniority
Ability to provide necessary challenge in a constructive manner
Strong team player, with focus on ongoing development to support meeting objective of the team
Overall, 10-12 years of experience in operational risk management, RCSA administration and ICAAP compliance with deep expertise in internal controls
Proven experience in developing and overseeing vendor risk management frameworks including 3rd party risk assessment, ongoing monitoring and compliance

Benefits

Comp & perks

Full onboarding support and continued development opportunities
Options for flexible working
Regular social activities
Pension contributions
Discretionary bonus scheme
Private health cover
Life assurance
Family friendly policies including enhanced Maternity & Paternity leave

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk Event ReportingNon-Financial Risk MonitoringScenario AnalysisControls TestingRisk Information ManagementQuantitative Risk ReportingQualitative Risk ReportingThird Party Risk AssessmentOperational ResilienceICAAP Compliance

Soft Skills

Strong Written CommunicationPresentation SkillsConstructive ChallengeTeam CollaborationAdaptability