CCO Technology Control Manager – Wealth and Personal Banking

JOB DESCRIPTION

• Manage the end-to-end IT risk and control lifecycle for WPB technology functions, including control identification, design assessment, effectiveness testing, and issue remediation.
• Coordinate and support internal audit, external audit, and regulatory reviews relating to WPB technology and cyber controls.
• Maintain and enhance the WPB technology control framework, ensuring alignment with enterprise-wide governance standards and regulatory expectations.
• Proactively identify control weaknesses, gaps, and emerging risks within the WPB technology estate, escalating material issues appropriately.
• Engage with WPB technology and business stakeholders to embed a strong risk culture and ensure control owners understand their obligations.
• Produce accurate, timely management information on the control environment, risk profile, and audit/regulatory action status.
• Support the execution and documentation of Risk and Control Self-Assessments (RCSA) across WPB technology domains.
• Track and drive closure of audit findings, regulatory actions, and self-identified issues within agreed timeframes.
• Assess new technology change initiatives for control implications, providing risk input into project governance processes.
• Liaise with second-line Risk and Compliance functions and third-line Audit teams to ensure consistency and alignment.
• Contribute to the development of control documentation, policies, standards, and procedures relevant to WPB technology.
• Support senior leadership with risk reporting, committee packs, and governance forums.

Qualifications:

• IT risk and control management expertise
• Operational risk lifecycle knowledge (identification, assessment, mitigation, reporting)
• Audit coordination – internal, external, and regulatory
• Stakeholder management across technology and business functions
• Governance framework design and implementation
• Risk and Control Self-Assessment (RCSA) experience
• Strong analytical, documentation, and reporting skills
• Ability to manage multiple concurrent workstreams.