Technology Risk & Controls Manager, 1st Line Controls

Cramond Bridge
6 days ago
Create job alert

Join us as a Technology Risk & Controls Manager, 1st Line Controls

You’ll be a subject matter expert to our Technology stakeholders, in execution of our Enterprise Wide Risk Management Framework, guiding them and influencing them in key risk and control design decisions, in order to help them effectively manage their technology related risks and controls

You’ll enjoy a varied, fast-paced work environment, and you’ll gain valuable experience from a wide range of stakeholders across the organisation

What you'll do

As a Technology Risk & Controls Manager, 1st Line Controls, you’ll collaborate with a variety of technology stakeholders, and support them with their understanding and management of their risks and controls and apply effective risk management decisions.

In this key role, you’ll be a trusted advisor to our Technology stakeholders, they will seek your guidance and support on how to manage their day-to-day risks, controls and remediation plans, to remain compliant with our risk framework. This includes collaborating with other Business Controls Partners, franchises and functions to support our stakeholders with understanding the impact where a risk has materialized or a control weakness has been identified.

We’ll look to you to provide support on risk framework execution as a Technology Risk and Control Subject Matter Expert, such as Risk and Controls Assessments, Control Design and Articulation, and Risk Policy Compliance, in relation to technology related risks for the relevant business areas. To do this, you’ll be working closely with the Control Testing team, Franchise & Function Control teams and second line Risk.

Additionally, you’ll:

Support and regularly engage with specialist technology stakeholders across NatWest, including second and third line of defence, and other relevant stakeholders

Produce governance and risk committee packs for our stakeholders, analysing MI and providing check and challenge on risk appetite related to technology disruption, information security, operational resilience, change and external outsourcing

Provide guidance and support to our stakeholders around all aspects of our risk framework such as, identification of key controls, articulation of controls, drafting remediation plans, how their controls and issues are linked to business owned risks and assessments

Identify opportunities where our stakeholder’s controls can be simplified or automated, reducing the costs of operating controls

Monitor our stakeholder’s compliance to our risk standards, Sox testing requirements and other regulatory requirements, such as external outsourcing and use of cloud

Support our stakeholders in designing a cost-effective and automated controls environment that meets regulatory and policy expectations

The skills you'll need

To succeed in this role an understanding of financial crime or digital channels is necessary to enable informed discussions of risk. You'll also need knowledge of 1st line risk frameworks, IT General Controls, external outsourcing risks, including industry frameworks such as COBIT, CRISC and SOX are key.

We’re looking for a highly skilled individual with a proven ability to deliver high quality outcomes and experience of applying technology and where relevant, risk and control assessments in an operational and strategic context.

.

You’ll also have:

Comprehensive experience in 1st line risk management or audit

An understanding of control testing frameworks

The ability to adapt to a fast-paced, changing environment where priorities shift rapidly

The ability to identify solutions to complex problems

The ability to communicate complex ideas and solutions to senior or challenging stakeholders

The ability to produce high quality deliverables and risk committee packs for our stakeholders

Related Jobs

View all jobs

Technology Risk & Controls Manager, 1st Line Controls

Vice President, Senior IT Audit Manager

IT Project Manager

Manager - Information Governance

Digital Security - Senior Manager, Security Risk & Assurance

Third Party Risk Manager

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.

Navigating Cybersecurity Career Fairs Like a Pro: Preparing Your Pitch, Questions to Ask, and Follow-Up Strategies to Stand Out

In a world where digital threats are escalating and online infrastructure underpins nearly every aspect of our personal and professional lives, cybersecurity has swiftly become one of the most sought-after career fields. Demand for skilled cybersecurity professionals outstrips supply, both in the UK and globally. From ethical hackers and penetration testers to governance, risk, and compliance (GRC) specialists, the opportunities are extensive—and lucrative. Amidst this surge in demand, cybersecurity career fairs provide an invaluable chance to meet potential employers face-to-face, gain industry insights, and make connections that can accelerate your career trajectory. Unlike applying to countless jobs online, these events bring companies, security leaders, and aspiring candidates together under one roof. When approached with the right strategy, a single conversation at a cybersecurity fair can open the door to your dream job. In this comprehensive guide, we’ll explore how to prepare thoroughly, engage confidently, and follow up effectively after a cybersecurity career fair. By incorporating these insights into your approach, you’ll stand out from the crowd and maximise your chances of securing the perfect role in this fast-growing field.

Common Pitfalls Cyber Security Job Seekers Face and How to Avoid Them

The cyber security industry in the UK and worldwide is experiencing rapid growth. With cyber attacks growing in sophistication and frequency, organisations are investing more resources than ever into defending their digital assets. From penetration testers and threat analysts to security architects and compliance officers, cyber security professionals are in high demand across a variety of sectors—including finance, healthcare, government, and retail. Yet, in spite of this high demand, the process of landing a cyber security role can be more challenging than many candidates anticipate. The stakes are high: prospective employers entrust cyber professionals with their most sensitive data, their compliance posture, and often their core business operations. Therefore, they’re looking for candidates who can demonstrate not just technical know-how, but also excellent communication, adaptability, and an awareness of the broader business context. In this article, we’ll explore the most common pitfalls that cyber security job seekers face, especially in the UK market, and how to avoid them. Whether you’re a recent graduate, a professional transitioning from a different field, or an experienced practitioner aiming for a senior role, these insights will help you stand out and secure the opportunities that fit your skill set and career goals.