Director, Technology, Cyber & Data Risk

Pay Details: We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

The Director, Technology and Cyber Risk provides independent second-line oversight and challenge across technology & cyber security, and contributes technology-related resilience and third-party risk. The role supports enterprise frameworks, policies and standards, including the Digital Operational Resilience Act (DORA), ensuring risks are managed within approved risk appetite. The role provides strategic risk insight, constructive challenge and advice to senior management, governance committees and key stakeholders on material technology, cyber, data and emerging risk matters. The role requires autonomy, executive presence, strong communication skills and the ability to influence across business, technology, control functions and regulators. Key Accountabilities Risk oversight and independent challenge. Governance, reporting and written communications. Regulatory engagement and supervisory inspections. Stakeholder management and influence. Leadership, people management and AVP cover. Risk Oversight and Independent Challenge Provide oversight and challenge across technology, cyber, and where required resilience and technology-related third-party risks. Review risk assessments, controls, risk acceptances, issues and remediation plans. Monitor risk appetite, key risk indicators, audit findings, regulatory observations and remediation progress. Identify emerging risks and advise senior management and governance committees. Provide challenge across strategic change, outsourcing and DORA-related regulatory programmes. Manage and evolve technology and cyber risk oversight across Europe and Asia-Pacific. Build, maintain and execute a risk-based oversight plan, ensuring coverage is aligned to material technology, cyber, data, resilience and third-party risk priorities. Review and challenge key risk indicators and Risk Appetite Statement measures, including metric design, thresholds, trends, breaches, management actions and evidence of sustainable remediation. Contribute to the TDS segment technology risk agenda for material TDGF risks. Apply the global TDBG technology and cyber risk agenda through a TDGF legal entity and regional lens. Governance, Reporting and Written Communications Perform executive, Board and committee reporting for technology, cyber and data risk, as necessary. Ensure reporting is concise, evidence based, accurate and tailored to senior audiences. Maintain high standards for governance papers, risk assessments, submissions and updates. Drive improvements in reporting quality, consistency, transparency and traceability. Ensure documentation withstands audit, regulatory and executive scrutiny. Regulatory Engagement and Supervisory Inspections Engage with regulators on 2LOD technology, cyber matters. Support DORA, resilience and technology-related third-party risk engagement. Engage with regulatory inspections, thematic reviews, information requests and findings. Review submissions for completeness, accuracy and supporting evidence. Monitor regulatory developments and advise stakeholders on required actions. Stakeholder Management and Influence Build relationships across first-line, second-line and third-line functions. Partner with Technology, Information Security, Data, Compliance, Legal, Audit and Business stakeholders. Influence senior stakeholders through credible challenge and practical, data-driven insight. Represent Technology, Cyber & Data Risk at committees, steering groups and working groups. Leadership and People Management Lead, coach and develop risk professionals. Foster accountability, integrity, collaboration and continuous improvement. Set direction