Business Controls Partner, VP

Role Overview

As a Technology Controls Business Partner, you will partner with senior stakeholders across the bank to identify, assess, and manage material technology risks. You will help ensure risks align with the bank's risk appetite and support the delivery of action plans where risks exceed agreed tolerances. In addition, you will foster a culture of continuous improvement by leading, coaching, and developing teams, while providing guidance on technology risk, operational controls, and compliance frameworks.

Key Responsibilities

• Analyse risk reporting and metrics to guide informed decisions throughout the risk lifecycle
• Evaluate the impact of strategic technology initiatives on operational risk and control profiles, and implement mitigation strategies
• Lead high-impact discussions on technology and digital risks across business areas and products
• Educate teams on operational risk frameworks, control obligations, and conduct risk responsibilities
• Collaborate with second- and third-line-of-defence stakeholders, functional risk teams, and other specialist technology stakeholders
• Drive continuous improvement initiatives to enhance efficiency, productivity, and risk management

Required Skills and Experience

• Deep experience in IT risk management, technology control testing, and issue management
• Proven experience managing internal audits, third-party IT risk, and vendor due-diligence lifecycle
• Strong risk assessment, scenario analysis, and technology risk advisory capabilities
• Ability to influence stakeholders effectively across multiple levels of an organisation
• Experience in cyber and information security governance and compliance frameworks such as ISO 27001, NIST 800-53, GDPR, and PCI-DSS
• Cybersecurity risk assessment experience across Cloud, SDLC, End Point, IAM, and Application Security
• Experience with technology incident management, problem management, root cause analysis, remediation, and cybersecurity services
• Knowledge of AI governance and practical applications in technology risk