The role
Our Financial Services Technology Risk and Resilience team helps FS firms navigate a fast-moving regulatory landscape while helping them to manage robust, future-proof technology estates. From shaping digital resilience frameworks under the Digital Operational Resilience Act (DORA) tohelping firms enhance their technology risk maturity as they list, we combine deep sector insight with leading technology to solve problems alongside our clients.
Key Responsibilities
Working with the engagement manager, leader and broader engagement team, you will support the manager with and at times take responsibility for various areas of the engagement which may include:
1. Delivering fieldwork on technologyrisk and digital resilience engagements.
2. Performing control walkthroughs, sample testing and evidence review across technology risk and resilience domains and designing remediation plans to address any identified gaps.
3. Draft gapanalysis and maturityassessment artefacts aligned to COBIT, ITIL and other frameworks.
4. Support regulatory readiness and assurance projects (including supporting startups as they go. through the authorisations process).
5. Prepare working papers and writing reports for clients, regulators and other internal and external stakeholders.
6. Build trusted relationships with client SMEs and control owners.
7. Contribute to thought-leadership blogs.
8. Supporting business development activities such as preparing responses to tenders, creating proposal documents and supporting in the creation of market facing thought leadership.
9. Ownership of your personal development to ensure you are equipped with the skills relevant to the proposition now and in the future.
10. Coaching junior members of the team, providing support, training and feedback.
11. Engaging with the firm’s digital agenda and tools to help us deliver innovative solutions.
Essential Skills
12. Experience in technology risk, IT audit, digital resilience or related consulting within financial services.
13. Working knowledge of UK and European Technology and Resilience Regulation, as well as frameworks such as COBIT, ITIL, NIST CSF and ISO /.
14. Practical experience of control testing or assurance fieldwork (e.g., evidence sampling, walkthroughs, KRI analysis).
15. Strong communication skills – able to translate technical findings into clear, concise messages for business stakeholders.
16. Possession of strong team working and leadership skills, including the ability to work as a team and under your own initiative
17. A willingness to learn new skills and help develop and innovate new client propositions
18. Strong oral and written communication skills (e.g. running walkthroughs, report writing)
19. Demonstrable experience of using AI in current role
Preferred Skills
20. Progress toward professional certifications such as CRISC, CISA, CISSP, CBCI, ISO Lead Auditor, or Prince2/AgilePM
21. Exposure to regulatory remediation programmes (e.g., s Skilled-Person reviews)
22. Demonstrable experience of working on multiple projects, managing your time effectively to deliver high quality work to tight deadlines;
23. Technical financial services knowledge, including an understanding of the Insurance, Asset Management and Banking industries
24. Commercial acumen and an interest in how complex organisations operate; and
25. Strong analytical, logic and problem-solving skills.