Risk

• **About the role**
• An exciting opportunity has opened up in our IT division. As an IT Risk analyst, the role is responsible to conduct threat analysis to identify threats and cyber security risks to a company's information systems to ensure that technology, applications, systems, infrastructure, and processes are protected.
• Reporting to the Head to the IS Risk Manager, the Technology Risk Analyst will work as part of a team responsible for the coordination, development, and operation of an enhanced Risk framework for Technology (including security).
• Conduct comprehensive risk assessments to identify vulnerabilities in our IT infrastructure and applications.
• Responsible for efficacy of the IT Risk Management processes including risk tracking, issue management and control assurance.
• Identify threats and conduct risk assessments to address IT and cyber security risks.
• Monitor IT activities, projects, conduct risk audits, and identify areas of vulnerability.
• Collaborate with IT and business units to implement risk mitigation strategies and monitor their effectiveness.
• Maintain risk registers and updates.
• Work with domain and subject matter experts to identify, analyze, and assess key risk scenarios and support stakeholders with risk analysis and reporting.

IT Risk Analyst

• Consult control owners and leaders about the risk profile of their portfolios of processes and applications
• Serve as a trusted risk advisor to aligned Technology leaders
• Identify and address risks before they impact objectives
• Oversee and enable the aligned Technology team’s compliance with existing and new requirements
• Evaluate and consult on the risks associated with strategic priorities or major programs and projects
• Provide actionable information to help prioritize risk-mitigation actions across the portfolio
• Design and enhance effective control environments for technology products and services
• Simplify the existing control environment using process/control re-engineering and automation
• Respond to unexpected events and findings

Technology Risk Manager

• Provide independent oversight to risks associated with equities, derivatives and quantitative strategies, ensuring alignment with organizational goals and risk appetite
• Lead efforts by identifying, analyzing, reporting and mitigating potential investment risks within established risk guidelines
• Understand and enhance risk models for equities and derivatives, utilizing advanced quantitative techniques to assess and manage risk exposure
• Document policies, procedures and standards related to the investment risk oversight and governance of equities and derivatives
• Ensure compliance with regulatory requirements and industry standards related to equity and derivative investments, collaborating with legal and compliance teams
• Effectively communicate risk assessments, mitigation strategies, and performance insights to senior management, committees, board members, and external stakeholders
• Stay abreast of industry best practices and emerging trends in investment risk management, driving innovation and improvement in risk processes
• Collaborate closely with portfolio managers, traders, and other investment professionals to integrate risk management into the investment decision-making process
• Develops periodic goals, organizes the work, sets short-term priorities, monitors all activities, and ensures timely and accurate completion of work

Risk Measurement Specialist

• Lead data discovery and identify all data sources required to support AI use cases
• Define Critical Data Elements (CDEs) and associated metadata, ensuring clear semantic meaning and relationships
• Establish data quality rules and contribute AI-specific requirements into data contracts (e.g. fields, latency, refresh rates)
• Define AI data requirements including accuracy, completeness, timeliness, and availability
• Specify requirements for feature stores, including reusable features, transformation logic, and update frequency
• Define embedding and vector store requirements to support semantic search and contextual AI use cases
• Document end-to-end data lineage to ensure traceability and trust in AI outputs
• Define data lifecycle and retention policies aligned to cost, performance, and compliance needs
• Identify and classify sensitive data, ensuring compliance with GDPR and other regulatory obligations
• Provide input into AI data readiness assessments in collaboration with Data Governance stakeholders

Data Governance Specialist

• Shape IAM business requirements for enterprise authentication and authorization, helping to guide future direction across the organisation.
• Ensure AI systems, agents, and services comply with IAM standards, internal policies, and applicable regulatory and audit requirements.
• Oversee identity and access controls across private cloud, SaaS, and hybrid environments.
• Guide the adoption of modern access models such as zero trust, conditional access, and least privilege.
• Establish and govern API authentication and authorization standards across the enterprise.
• Ensure APIs are protected using consistent, secure identity patterns (token-based access, service authentication, least privilege).
• Partner closely with application, platform, and integration teams to embed IAM controls into API design and development lifecycles.
• Oversee risk management, metrics, and reporting related to API access and service identities.
• Partner with governance teams to ensure IAM requirements are defined, measured, reported, and enforced.
• Ensure compliance with internal policies and external regulatory and audit requirements.
• Provide executive-level reporting on identity risks, control gaps, and remediation progress.
• Support audit engagements, issue remediation, and sustainable control design.
• Build partnerships across GIS, Core Technology, Application Development, Risk, Compliance, Audit, and Third-Party Management.
• Influence solution design and drive adoption through credibility, collaboration, and strong stakeholder engagement.
• Clearly communicate risks, decisions, and tradeoffs to both technical and non-technical audiences.
• Drive alignment across teams operating at different speeds and maturity levels.

Senior Identity, Authentication, Authorization & Governance Analyst

• Oversee adherence to the **Risk Management Framework (RMF)** across the Wealth Transformation programme, including platform delivery and operating model change.
• Lead the identification, assessment, documentation and ongoing monitoring of programme risks and issues, ensuring alignment with enterprise risk policies and standards.
• Act as the **primary 1LOD point of contact** for risk management activities within the Programme / Orchestration Tower.
• Provide independent review and constructive challenge to workstream and divisional activities, ensuring risks, dependencies and control gaps are identified early and mitigated effectively.
• Drive timely escalation and intervention where risk exposures exceed appetite or threaten delivery, customer outcomes, regulatory compliance or operational stability.
• Provide risk insights across programme interdependencies, including alignment with broader enterprise strategy and operating model initiatives.
• Partner with programme leadership, workstream leads and divisional teams to embed risk controls and mitigations into delivery plans, design decisions and key artefacts.
• Facilitate and lead risk workshops, scenario analysis and readiness assessments across technology, data, operations and client migration activities.
• Support risk-informed decision making throughout agile and waterfall delivery lifecycles.
• Produce clear, timely and high‑quality risk reporting and insights for programme governance forums, executive committees and Boards as required.
• Actively participate in programme governance, steering committees and design authorities, providing independent input on risk, control and assurance matters.
• Serve as a key contact for **regulatory, supervisory or external engagements** related to the Wealth Transformation programme.
• Continuously review and enhance programme risk processes, tools and reporting to improve efficiency, consistency and effectiveness.
• Monitor emerging risks, regulatory developments and external drivers relevant to wealth platforms, client outcomes, data, resilience and operating models.
• Support the development and delivery of risk awareness and training sessions for programme and business stakeholders.

First Line of Defence Risk Lead – Wealth & Insurance Transformation

• Comprehensive review of strategy and reputation-related risks, assuring the completeness of related coverage in our existing policy architecture;
• Reviewing and evolving processes, procedures and controls which give operational expressions to our risk policies around strategy and reputation.
• Designing and executing an assurance programme to test existing controls, making recommendations for change including control additions;
• Recording and investigating relevant operational incidents, errors or near misses, evolving controls to mitigate their occurrence into the future;
• Prepare regular risk and control reports for management.

Reputation Risk Lead – Strategy, Brand and Marketing

• Implementing, maintaining and updating our risk management process
• Examine business activity to identify the risks facing the business
• Collect and analyse data on internal and external factors related to business activity to identify risk, then summarise this information in a risk register or other formal way to define the organisation's risk profile
• Analysing the financial impact when risks occur
• Performance of risk assessments and risk evaluation
• Providing strategic advice in regards to implementation of risk management methodologies
• Delivery of the ongoing self assessment of risk management processes and procedures, scoping, agreeing and implementing improvements as required
• Reporting on risk to the relevant stakeholders ensuring
• Individuals understand their accountability for individual risks
• Educating employee on risk awareness
• Assessing the adequacy of insurance policies to address business risks
• Analysing and documenting external risks posed by corporate governance stakeholders
• Review, assess and report significant risks and issues identified or reported by the business in line with the incident management process Support with the development of management plans and policies for projects

Risk Manager

• Track and review invoicing from vendors
• Facilitate client re-billing via complex tracking of multiple source documents
• Act as liaison with finance teams, procurement, vendors, and project managers
• Maintain and deliver monthly and quarterly Project Office executive reports to Management
• Create and enhance executive reporting via industry standard tools such as Power BI
• Support Project resource tracking and planning
• Maintenance of procedure documents as required

See all jobs on JobTailor