Technology Risk Manager (2LOD)

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. 

We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces. 

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count. Want to see us in action? 

The Second Line Technology Risk Team owns the framework for managing technology risk at Zopa, and is responsible for advising and challenging the business to ensure the security and resilience of our technology infrastructure, systems, and data assets. The team is responsible for risk oversight of the first line, training and assurance activity, designed to ensure that defined frameworks and standards are adhered to and that Zopa is managing its technology risk exposure within the bank’s risk appetite. 

We are seeking an experienced second line technology risk manager to support the ongoing development of the technology risk framework and the processes that support it. This position requires a dynamic and analytical thinker who can partner with our various technology and information security teams to provide effective review, challenge, oversight, and assurance of technology risk assessments and decision-making by the business. The role is an exciting opportunity for a technology risk manager motivated by driving change and contributing to responsible growth and a truly customer-centric experience. 

A day in the life:

• You'll be working closely with the Director of Operational Risk, Head of Technology Risk and senior technology and risk leaders from across the business. 

• Developing and implementing technology risk frameworks. 

• Providing oversight and ensuring compliance with tech risk standards and regulations. 

• Conducting independent testing and challenge of technology and information security controls and their effectiveness. 

• Utilising data, analytics and AI to identifyissues, trends and potential vulnerabilities. 

• Working with 1st line risk to embed risk management standards. 

• Improving the quality of discussion and debate around technology and information security risk – ensuring appropriate escalation, a consistently evolving approach to MI and controls and clear expectation setting. 

About you:

• Knowledge and expertise in modern, cloud-based architectures – including networking and security foundations, cloud development patterns, and data management fundamentals. 

• Experience of working in the financial services, banking, or fintech sector. 

• An understanding of the regulatory landscape governing financial institutions, including, cloud service providers, operational resilience, and tech outsourcing (e.g. DORA & CTP). 

• Good working knowledge of security industry frameworks such as ISO27001, SOC2, & NIST. 

• Familiarity with payments best practices and controls including PCI DSS. 

• Knowledge of industry best practice in the design of key technology controls and experience in challenging their effectiveness. 

• An understanding if third party technology risk management, including assessing the effectiveness of vendor and external partner controls. 

• An understanding of incident management practises and experience of challenging the effectiveness of responses to technology and security-related incidents.