Job Search

We are seeking an experienced Technology and Cyber Employee Platforms Risk Executive Director to lead the development and execution of risk management strategies across technology, cybersecurity, and employee-facing platforms. This senior role will provide independent challenge and expert guidance to technology and business leaders, ensuring that risks are identified, assessed, managed, and reported in line with regulatory expectations and organisational risk appetite. The successful candidate will operate across a complex, highly regulated environment and influence decisions at executive and board level.

Key responsibilities include setting the strategic direction for technology and cyber risk oversight; maintaining effective risk and control frameworks; reviewing risk assessments, control designs, and remediation plans; and monitoring emerging threats, vulnerabilities, resilience concerns, and third-party exposures. You will oversee risk reporting, ensure material issues are escalated appropriately, and provide clear analysis and recommendations to senior governance forums. The role will also support audits, regulatory reviews, incident investigations, control testing, and transformational programmes involving employee platforms, identity and access management, cloud services, data protection, and operational resilience. Success will require close collaboration with technology, cybersecurity, compliance, legal, internal audit, and business stakeholders.

Applicants should bring significant experience in technology risk, cyber risk, operational risk, internal controls, or a related discipline, ideally gained within a large, complex, or regulated organisation. A strong understanding of cybersecurity principles, technology architecture, risk governance, control frameworks, and relevant regulatory requirements is essential. You will be an influential communicator with the confidence to challenge constructively, simplify complex issues, and engage effectively with executive audiences. Strong analytical, decision-making, stakeholder management, and written communication skills are required, together with a proven ability to lead through ambiguity and deliver practical, sustainable outcomes. Professional qualifications in risk, technology, cybersecurity, audit, or information security would be advantageous.