Technology Assurance & Operational Risk Specialist

The Technology Assurance & Operational Risk Specialist is responsible for delivering independent second-line operational risk assurance, with a particular focus on ICT, information security, cyber, AI and operational resilience.

The role is highly hands-on and combines independent control assurance with the ability to translate operational risk information into meaningful risk insight that supports Executive and Board decision-making and contributes to the development of a strong risk culture across LHV. The role requires a strong understanding of technology and operational risk together with the ability to independently assess control effectiveness, identify emerging risks and provide credible challenge across the Bank.

Key Responsibilities

• Independently lead and perform second-line control assurance reviews, with particular focus on ICT, information security, cyber resilience, operational resilience, technology change and AI governance, assessing both control design and operating effectiveness.
• Provide independent and credible challenge over risk assessments, control environments, remediation plans and technology initiatives, working closely with Technology, Information Security, Data and Change teams to ensure risks remain within appetite.
• Own the second-line incident management process, ensuring incidents are appropriately challenged, root causes are robustly identified, lessons learned are embedded and systemic issues are escalated.
• Lead the RCSA process for designated business areas and provide independent challenge, ensuring key operational risks, controls and treatment plans accurately reflect the Bank’s risk profile.
• Critically analyse information from incidents, complaints, RCSAs, control assurance, third-party risk, change risk and other operational risk activities to identify and clearly articulate emerging risks, systemic control weaknesses and cross-cutting themes.
• Produce high-quality operational risk management information that translates risk information into meaningful insight, clear recommendations and practical actions for Executive Management and Board Committees.
• Work closely with the Head of Financial Risk to develop an integrated view of the Bank's overall risk profile, recognising the interaction between financial and non-financial risks.
• Contribute to the continued enhancement of the Operational Risk Framework by identifying opportunities to strengthen assurance activities, risk insight and regulatory compliance.

Key Capabilities

• Strong second-line assurance capability, with the ability to independently design, execute and document risk-based control assurance reviews particularly across ICT, Information security, cyber, operational resilience and AI risk.
• Demonstrable expertise across ICT, information security, cyber, operational resilience and AI risk, with the ability to provide credible technical challenge to both business and technology stakeholders.
• Strong analytical capability, with the ability to translate complex operational risk information into meaningful management insight and Board-level reporting.
• Proven ability to identify systemic risks and control weaknesses by connecting information across multiple operational risk sources.
• Strong judgement, influencing and stakeholder management skills, with confidence engaging senior management and Board Committees.
• Sound understanding of regulatory expectations relating to operational risk, ICT risk, operational resilience and technology governance within a regulated environment.