Executive Risk Partner – Technology and Cyber Risk

Key Responsibilities

• Lead and manage risk assessment and mitigation strategies, ensuring alignment with organisational goals and supporting operational and technology resilience objectives.
• Collaborate with cross-functional teams to identify and address technical risks in projects and operations, including those affecting service availability, continuity and recovery.
• Develop and implement risk management frameworks and policies that embed resilience principles and strengthen end‑to‑end control environments.
• Provide technical guidance and support to teams on risk-related matters, including technology, cyber, and operational resilience considerations.
• Engage with stakeholders to communicate risk and resilience management strategies, findings, and progress.
• Foster a culture of risk awareness, proactive risk management, and resilient-by-design thinking across the organisation.
• Monitor and report on risk management and resilience activities, emerging risks, and outcomes.
• Support the respective directorate by owning and managing the relationship and acting as a key risk and resilience partner.

Technical Requirements

• Strong technical background with expertise in risk assessment, mitigation, and control implementation across technology and operational environments.
• Proficiency in using risk management tools and methodologies, including quantitative and qualitative risk analysis.
• Experience in managing and overseeing technical projects, ensuring compliance with risk management and resilience standards and best practices.
• Ability to analyse complex technical data, identify potential risks, and provide actionable insights and recommendations that improve stability, continuity, and resilience.
• In-depth knowledge of technology and cyber risk at an enterprise level, including emerging threats, vulnerabilities, and resilience expectations in regulated environments.
• Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, and operational resilience regulatory expectations (e.g., DORA, where applicable).

Operational Excellence

• Champion best practices in operational risk management, resilience, and continuous improvement across first and second lines.
• Work with cross-functional teams to streamline processes, ensure risks are identified, enhance controls, build resilience into change, and maintain operational excellence.
• Report on operational and resilience risk performance to various governance forums at Executive, Board, and Oversight levels.

Leadership and Stakeholder Management

• Proven experience in leading and managing specialist small teams.
• Excellent communication and interpersonal skills, with the ability to explain risk and resilience concepts to technical and non-technical stakeholders.
• Ability to build and maintain strong relationships with stakeholders at all levels, including technology, security, operations, and regulatory-facing teams.
• Strategic thinking and problem-solving abilities with an emphasis on improving end‑to‑end resilience.
• Demonstrated ability to influence and drive change across the organisation.

Qualifications

• Bachelor’s degree in a relevant field; advanced degree preferred.
• Relevant certifications in risk management or related areas (e.g., ITIL, CBEST, CRISC, CISSP, engineering certifications) preferred.
• Minimum of 7–10 years of experience in risk management with a focus on technical aspects, ideally including exposure to cyber, technology, or operational resilience.

Key Competencies

• Strategic thinking and ability to balance risk, resilience, and business priorities.
• Strong organisational and project management skills.
• Proficiency in using risk management tools and software.
• Collaborative mindset with a proactive and solution‑oriented approach.
• Resilience and adaptability in a fast-paced and evolving environment, with a focus on strengthening organisational robustness and continuity.