Technology & Operations Risk Manager

Role Overview

• Providing independent oversight and challenge of Technology & Operations risk, ensuring alignment with Operational Risk Management frameworks.
• Reviewing and challenging Risk & Control Self-Assessments (RCSA), ensuring completeness, accuracy, and robust control design.
• Ensuring quality and integrity of Risk & Control Profiles (RCPs), including risk identification, control mapping, and residual risk assessment.
• Overseeing risk data within tooling (e.g. Heracles), ensuring alignment across risks, issues, events, and risk appetite statements.
• Monitoring adherence to Risk Appetite Statements (RAS), supporting breach management, root cause analysis, and remediation tracking.
• Challenging control effectiveness, thematic reviews, and testing outcomes to identify systemic weaknesses.
• Producing and analysing risk MI and reporting, identifying emerging risks, trends, and control gaps.
• Driving continuous improvement of governance artefacts, processes, and risk engagement models across T&O.

Requirements

• Experience in technology risk, cyber risk, or operational risk within financial services (Required).
• Experience providing independent oversight, challenge, or audit of control environments (2LoD or equivalent) (Required).
• Experience working with RCSA, risk frameworks, and control assessment methodologies (Required).
• Experience producing risk reporting and MI for governance forums (Required).
• Undergraduate degree in Cybersecurity, Information Technology, Risk, or related field (Preferred).
• Professional certifications such as CISA, CISSP, CISM, or equivalent (Preferred).
• Strong knowledge of cybersecurity risk, IT risk, and control frameworks (e.g. NIST, ITIL) (Required).
• Experience with risk tooling and data management (e.g. Heracles or similar platforms) (Required).
• Understanding of risk appetite frameworks, RCSA processes, and control testing methodologies (Required).
• Knowledge of technology architecture, cyber threats, and vulnerability management concepts (Required).
• Experience analysing risk data, events, and trends to identify control weaknesses (Required).
• Familiarity with regulatory expectations (FCA/PRA) and operational risk frameworks (Required).
• Strong analytical thinking and problem-solving capability (Required).
• Ability to challenge effectively and influence stakeholders across multiple levels (Required).
• Strong communication skills, translating technical risk into business impact (Required).
• High attention to detail and commitment to data accuracy and governance (Required).
• Ability to work across teams and drive collaboration in complex environments (Required).

Tech Stack

• Cyber Security

Benefits

• 30 days’ holiday plus bank holidays, which increases to 31 days after 5yrs service, with the option to purchase up to 5 contractual days per year
• £6,000 car allowance per year
• Company funded individual private medical insurance
• Protection for you and your family, with company-funded death-in-service benefit and income protection insurance, and the option to take advantage of discounted rates for additional life assurance and critical illness cover.
• Share in Santander’s success by saving or investing in our share plans.
• Competitive rewards that reflect the real impact you make and the value you bring.
• Wellbeing that goes beyond work — we work with a range of wellbeing partners across our 4 pillars of wellbeing (physical, mental, social and financial) to give you access to a suite of apps, discounted gym and fitness access, weekly online classes, flexible healthcare and mental health support.
• Support for every life stage — from menopause and pregnancy to parenthood and beyond, with enhanced family leave, childcare options and tailored wellbeing support.
• Time to give back through volunteering opportunities that let you make a difference in the communities we serve.
• Global growth opportunities to shape your career, learn new skills and explore what’s possible across our international network.