Technology Risk Consultant in London

We are seeking an experienced Technology Controls Remediation Specialist to support a high-impact remediation programme within a regulated environment. This role focuses on strengthening underperforming technology controls and improving both design and operational effectiveness across key risk areas.

Role Overview

You will play a critical role in identifying control weaknesses, driving remediation plans, and ensuring sustainable improvements across operational resiliency, privileged access management (PAM), and identity and access management (IAM).

Key Responsibilities

• Review underperforming controls to identify root causes, design gaps, and effectiveness issues.
• Define and support remediation plans, including actions, ownership, timelines, and evidence requirements.
• Partner with technology, risk, compliance, and audit stakeholders to drive remediation progress.
• Assess control design suitability and recommend enhancements where needed.
• Improve control operating models, including governance, accountability, and evidence standards.
• Track progress, manage risks and blockers, and elevate issues where required.
• Prepare clear and concise reporting for senior stakeholders and governance forums.
• Review remediation evidence to ensure completeness, quality, and sustainability.
• Support audit readiness, assurance activities, and regulatory reviews.
• Embed stronger control discipline across resiliency, PAM, and IAM processes.

Required Experience

• Background in technology risk, IT controls, cyber risk, operational resilience, or IT audit.
• Proven experience delivering control remediation in financial services or other regulated environments.
• Strong understanding of control design and operating effectiveness.
• Experience working with control frameworks, audit findings, and risk assessments.
• Track record of managing remediation from issue identification through to closure.
• Strong stakeholder management across technology, risk, compliance, and audit functions.
• Ability to produce high-quality governance reporting and remediation updates.

Technical Knowledge

• Operational Resilience: Service resilience, disaster recovery, business continuity, recovery planning, and resilience testing.
• Privileged Access Management (PAM): Privileged account governance, access recertification, vaulting, session monitoring, and break-glass access.
• Identity and Access Management (IAM): Access provisioning, RBAC, segregation of duties, access reviews, and identity governance.

Key Skills

• Strong analytical and remediation management capabilities.
• Ability to translate control issues into practical, actionable solutions.
• Excellent stakeholder engagement and communication skills.
• Confident producing senior-level reporting and challenge where needed.
• High attention to detail, particularly when reviewing evidence.
• Comfortable working in complex, ambiguous environments and driving structure.