Job Search

We are seeking an experienced Technology Risk Director to lead and shape technology risk management across the UK and Ireland. This is a senior leadership role responsible for providing strategic direction, strengthening risk governance and ensuring that technology-related risks are identified, assessed and managed effectively. You will work closely with senior stakeholders across technology, information security, compliance, internal audit and business functions to support informed decision-making and resilient operations.

Your responsibilities will include developing and delivering a forward-looking technology risk strategy, maintaining robust risk and control frameworks, and overseeing the assessment of risks associated with infrastructure, applications, cloud services, third-party providers, cyber security, data and emerging technologies. You will challenge risk ownership, monitor remediation activity and provide clear reporting to executive committees and relevant governance forums. The role will also involve leading responses to regulatory change, technology incidents and control weaknesses, ensuring that lessons learned are embedded into the wider risk management approach.

You will bring significant experience in technology risk, information security, IT audit, operational resilience or a closely related discipline, gained within a complex and regulated environment. Strong knowledge of technology controls, risk frameworks, regulatory expectations and third-party risk management is essential, alongside the ability to translate technical issues into clear business implications. We are looking for a confident and credible leader who can influence at executive level, build effective relationships and develop high-performing teams. Excellent communication, analytical and stakeholder management skills are required, together with sound judgement, commercial awareness and the ability to balance robust challenge with practical solutions. Relevant professional qualifications, such as CISA, CISM, CRISC, CISSP or equivalent experience, would be advantageous.

We are seeking an experienced Technology Risk Director to lead the development and delivery of technology risk management across the UK and Ireland. This senior role will provide strategic oversight of technology, cyber, operational resilience and third-party risks, ensuring that the organisation’s technology environment remains secure, resilient and aligned with regulatory expectations. You will act as a trusted adviser to senior stakeholders, challenging risk decisions where appropriate and helping to embed a strong, pragmatic risk culture.

Key responsibilities will include setting the technology risk strategy and framework, overseeing risk identification and assessment, and monitoring the effectiveness of controls. You will provide clear reporting to executive committees and governance forums, highlighting significant exposures, emerging threats, remediation progress and areas requiring investment. The role will also lead the assessment of technology change, cloud adoption, information security, business continuity, disaster recovery and supplier risk. You will work closely with technology, cyber security, compliance, audit and business teams to ensure that risks are understood, appropriately managed and escalated in a timely manner.

The successful candidate will bring substantial experience in technology risk, information security, IT audit, operational resilience or a related discipline, gained within a complex, regulated environment. You will have a strong understanding of technology risk frameworks, relevant UK and international regulations, control principles and industry standards. Excellent communication and influencing skills are essential, together with the confidence to engage effectively with senior leaders and technical specialists. A strategic and analytical approach, sound judgement and the ability to translate complex issues into clear business recommendations are required. Professional qualifications such as CISA, CISSP, CRISC, CISM or an equivalent risk-related certification would be advantageous. This is an opportunity to shape technology risk maturity, strengthen resilience and support responsible business growth across the region.