This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The GCIO Chief Control Office (CCO) team plays an important role in enabling the bank to operate within its risk appetite by ensuring efficient and effective risk and control management. We do this by providing operational risk and control expertise, specialist technical knowledge and a deep understanding of the businesses and functions we serve. Key activities include implementation and oversight of the Group’s Risk Management Framework, ongoing and targeted controls assessments, implementing and maintaining robust risk governance, and championing a proactive risk culture. GCIO CCO works closely with partners across all lines of defence and is responsible for maintaining positive relationships with our regulators and external partners. We are currently seeking a bold and experienced Senior Controls Manager to join the HCIB Technology CCO team. This role will support the Western Markets GCIO CCO Lead.
Job Responsibility:
Actively review TCS GRAS and KCIs position and discuss risk impact with relevant stakeholders to achieve compliance trajectory for HCIB technology estate
Oversee consumed position for HCIB Technology, identify parties owning the remediation and drive discussions on required uplifts to achieve expected compliance position
Act as trusted advisor for senior management within remit area on how to accurately manage their operational risk i.e., risk assessments, control environment, issues management
Partner with Regional Risk Owners / Business Risk Teams to ensure impact of the control effectiveness including key remediation timelines and key issues are adequately messaged
Provide Senior Management with updates on any relevant changes to policy or projects related to operational risk that have an impact on their area of responsibility
Ensure issues are proactively identified and documented in Helios with the right level of detail including impact assessment and success criteria, owning control linkage decisions for issues
Support issue closure process including advice on closure documentation to ensure sustainable remediation and driving formal concurrence documentation for H/VH issues
Execute read across activities and driving thematic issues reviews across control domains
Support governance submissions pertaining to Risk and Controls management
Drive consistent responses to Internal Audits for HCIB coverage areas
Coordinate cyclic regulatory reviews for HCIB Tech including horizon scanning for emerging regulatory asks
Ensure events are appropriately documented in Helios with the right level of detail and owning control reviews off the back of PIRs/MIRs
Requirements:
At least 5 years of hands-on experience with one or more or the control capabilities in the Technology and Cyber Risk domain either directly or as a 1/2/3LOD control management function
At least 5 years of hands-on experience and subject matter expertise in management of operational risk, non-financial risk and/or technology and information security risk
Experience across IT, Operations, Risk Management, and / or Audit roles requiring management of diverse risk types is desirable
Previous experience of identifying, defining and solving problems that have impact on your work or the wider business
Ability to present complex issues concisely to senior partners using non-technical language
Financial Services or other highly regulated industry experience/exposure is preferred including experience dealing with regulatory bodies and engagement
Strong communication skills to influence and challenge stakeholders
Ability to work independently with limited supervision
Active industry recognized certificates will be an asset, e.g. CISA, CISSP, CRISC, CCSP etc.
Nice to have:
Experience across IT, Operations, Risk Management, and / or Audit roles requiring management of diverse risk types
Financial Services or other highly regulated industry experience/exposure
Active industry recognized certificates, e.g. CISA, CISSP, CRISC, CCSP
What we offer:
Additional car allowance in the amount of 4,786 PLN (monthly, gross)
Variable pay
Comprehensive and competitive package of benefits covering healthcare, family friendly leaves, pension and life assurance
Additional bonuses for recognition awards
Multisport card
Private medical care
Life insurance
One-time reimbursement of home office set-up (up to 800 PLN)