Manager of Technology and Cyber Risk Unit

About the role

The Manager of the Technology and Cyber Risk Unit will lead the bank’s efforts to identify, assess, and mitigate technology and cybersecurity risks. This senior position is responsible for shaping risk policies, monitoring key risk indicators, and providing independent oversight across all digital and IT initiatives.

Key responsibilities

• Conduct technology and cybersecurity risk assessments to uncover vulnerabilities, threats, and control weaknesses.
• Develop, maintain, and enhance risk management policies, frameworks, and procedures.
• Establish and monitor Technology and Cyber Risk Key Risk Indicators (KRIs), risk appetite, thresholds, and reporting mechanisms.
• Provide independent second‑line oversight and challenge to risk management activities.
• Collaborate with IT, Cybersecurity, Digital, Business Units, Compliance, Internal Audit and other functions to ensure effective risk treatment.
• Advise on risk for new technology projects, digital channels, system changes and third‑party arrangements.
• Deliver training, guidance and risk awareness to employees and stakeholders.

Required profile

• Bachelor’s or Master’s degree in IT, Computer Science, Cybersecurity, Information Security, Risk Management, Finance or related field.
• 7–10 years of experience in technology risk, cybersecurity, IT audit or operational risk, with at least 3 years in a managerial role, preferably in a regulated financial institution.
• Relevant certifications such as CISSP, CISM, GIAC or similar are preferred.
• Strong knowledge of banking regulatory requirements and technology/cyber risk expectations.

Required skills

• Expertise in SIEM, threat intelligence, incident response and cybersecurity tools.
• Familiarity with compliance frameworks: ISO 27001, NIST, GDPR, PCI‑DSS.
• Experience developing and implementing technology and cyber risk management frameworks.