Job Summary:
* Drive technology, data, and product innovation from a risk perspective.
* Play a key role in identifying, assessing, and governing technology, data, and product risk.
* Operate within the 2nd Line Group Risk function, guiding first-line stakeholders on their approach to risk across IT infrastructure, AI, cloud, emerging technologies, and product lifecycle.
* Advise stakeholders at all levels on control effectiveness, providing independent challenge, oversight, and clear risk insight in decision-making related to digitalisation, data, and products.
* Highlight both risks and opportunities in how the business can take informed risks in these areas.
* Act as a trusted business partner, building strong relationships across the organisation as a go-to expert for technology, data, and product risk.
* Collaborate closely with associated business areas and 2nd and 3rd line functions to ensure effective engagement and alignment.
Key Responsibilities:
* Challenge, support, and work with 1st Line teams on risk identification, assessment, and control adequacy across digital and technology processes, as well as data and products.
* Act as a key point of contact for the business, effectively engaging with the 1st Line as a Risk Business Partner.
* Work with the 1st Line to collate and coordinate updates on risk profiles, ensuring aligned reporting for technology, data, and product risk within Group Risk Reporting.
* Support, challenge, and guide the 1st Line through the RCSA process across technology, data, and product risk.
* Act as Group Risk representative on business projects and initiatives, providing challenge and advice as a Risk Business Partner.
* Attend relevant working groups and committees as required.
* Partner with the 1st Line on operational risk event processes, providing guidance, training, and awareness, and ensuring robust remediation actions to strengthen the control environment.
* Support enhancements to the Technology, Data, and Product Risk Control Framework by identifying and embedding key controls across the lifecycle.
* Monitor the implementation of risk controls across business units and functions, gathering feedback to support continuous improvement.
* Coordinate and prepare reports and presentations for governance forums as part of Group Risk Reporting.
* Stay up to date with regulatory developments and wider industry changes, engaging with Group Risk and the wider business to assess impact and implications.