ICT Risk Manager (Contract)

Crown Agents Bank is a vastly growing and regulated UK bank that connects emerging and frontier markets to the rest of the world, using FX and payments technology. We are transforming the way payments and FX move through emerging markets, reducing friction so that more money gets to those who need it. Our solutions help fix these pain points, ultimately connecting traditionally hard-to-reach regions to global financial infrastructure.

This contract position is to provide 2LoD oversight, advice, challenge and independent assurance to Crown Agents Bank (and its subsidiaries / branches (as required)), in relation to Cyber, Technology Risk and Information Security specifically relating to the 2026 Technology Transformation Programme.

Role Responsibilities include:

• Provide robust and independent 2LOD oversight to technology transformation projects with a particular focus on technical build against proposed target operating model, migration to a new system and risks associated with dual running of a strategic banking system.
• Be responsible for providing independent oversight of the proposed target operating model (ToM), understanding new / existing dependencies and reliance on material 3rd party providers.
• Ensure compliance with relevant PRA, FCA, BNB, FRSA regulations to cover the jurisdictions the Group operates in.
• Have an in-depth knowledge of various technology and information security frameworks to assess the integrate details of the proposed ToM.
• Experience of working closely with transformation / project teams in an oversight role to deliver the ToM and assess the impact of system migration.
• Provide sufficient oversight and assurance over documentation of processes, risks and controls as part of the New Product and Significant Change Process.
• Provide robust oversight and challenge to RCSA's within technology and information security including cyber.
• Preparing risk committee and board papers, as required, including management of known audit and control weaknesses.
• Developing, managing and providing oversight of applicable regulatory requirements around Cyber and Technology Risk Management across the Group.
• Support the embedding of an effective risk culture, encouraging risk awareness across the Group and its activities.
• Provide specialist input in strategic planning, evaluating risk and solutions to drive continuous improvement.
• Ensuring there are controls in place for identifying and managing IT/Information Security breaches.
• Key stakeholder in P1 and P2 incident bridge calls - ensuring root cause analysis are completed and control environment reviewed and enhanced.

Qualifications:

• 10 years' financial services risk management experience, with an understanding of operational risk management in regulated financial services firms.
• Detailed knowledge of Cyber Risk including IT Security, Data Security and Technology Risks.
• Deeper understanding of technology transformation projects with a focus on technical builds.
• Excellent understanding of current IT environment affecting financial services.
• Understanding of recognised risk management standards (NIST, ISO27001, COSO, COBIT).
• Ability to challenge constructively and influence others.

Additional Information:

• Initial 3 month day-rate contract, inside IR35.
• Hybrid working.