Domain Control

Experience Level: Level 4 (7-15 years)

• Support the DCO and/or wider team to develop or enhance risk, control changes or improvements specific to Technology, Information Security or Cyber Security.
• Support the DCO aligned to a particular Technology domain to maintain a view of the risks, controls and supporting artefacts including any relevant governance content, issues, action plans or other data points.
• Assist with the creation of risk, control change artifacts or content
• Identify, maintain and manage stakeholder group and/or communications to ensure that there is pro‑active and timely messaging to internal and external parties.
• Provide program or operational support to deliver agreed risk, control activities or actions; working to deadlines or agreed milestones.
• Support Technology control testing or control measurement development, including testing compliance within Technology domain area(s).
• Support the Firm’s risk and control assessment process (RCSA) to ensure that any impact to Technology controls are understood.
• Produce Technology risk or control reporting/commentary on a monthly and quarterly basis to satisfy internal or key stakeholder requirements.
• Perform analysis of risk and control indicators to identify and elevate appropriate issues for management attention.
• Engage local stakeholder in execution and collection of risk or control information. This role will have a partial expectation for development of controls related to Distributed Ledger Technologies (Crypto)

• Technology operations, Technology Oversight (2
  
  LOD) or audit background in a complex financial institution.

The Technology Risk, Governance and Controls (TRGC) department provides a range of Group-wide Governance and Control functions focused on Technology, Information Security or Cyber‑Security within the Firm. This FTC position within Technology Controls Group will support the ongoing provision of Technology Control subject matter expertise (SME) in the design, development and on‑going operation of the controls you would expect within a complex, diverse Technology environment that underpins a global Bank and organization like our Company.

The position will be exposed to a significant pace of control change; with the Firm undertaking a strategic enhancement programme focused on ensuring that the current Technology, Information Security and Cyber Security controls remain fit‑for‑purpose; as well as leveraging opportunities (where possible) to utilize continuous control monitoring and measurement.

In addition, this role will have access and exposure to the on‑going evolution of risk and control architecture that supports the Firm to operate within appetite of Operational Risks as the control environment, evolves further to support additional regulatory or legislative requirements, optimization or continued focus on control measurement and automation.

This role will work alongside the Domain Control Officer within the Technology Controls group. The Domain Control Officer (DCO) is accountable for providing end‑to‑end risk management over a particular control domain. The DCO works in partnership with groups across all lines of defense to understand and manage the risks and controls relevant to that domain. This includes defining the relevant risks and gaining a deep understanding of the related controls and their effectiveness at holistically mitigating those risks.