The Risk and Compliance team

Like most of Griffin, the Risk and Compliance team is in its infancy.

We're working to build a second line that is a highly respected and integrated part of the business and somewhere our colleagues go to for expert and pragmatic advice, while remaining independent from the first line.

Our aim is no less than to be the best in class. We are not putting patches on legacy frameworks, we're laying the foundations of the future of global financial infrastructure.

Who are you?

The ideal candidate for this job will have most of the following:

Experience

• Strong knowledge of the UK’s financial services regulatory framework, as well as industry best practice in the design and operation of systems and controls.
• Solid experience in working in risk or compliance within financial services in the UK, in a fintech, or in a professional services firm, ideally within the EMI/PI, fintech and/or a challenger bank spaces.
• Experience in technology risk, information security and cybersecurity risk, and digital/operational resilience.
• Capable of holistic oversight of IT systems and controls across a new bank.
• Able to get into regulatory detail and cross reference with policy and practices.
• Experience in IT infrastructure.

Qualities

• Pragmatic and collaborative mindset, with an interest in working closely with all other parts of the business to embed a strong three lines of defence model.
• We are a new bank so it is imperative that you are comfortable in going outside your comfort zone. This means that you may be asked to do other second line related activities as required by the CRO/CCO.

We’re hybrid-remote, and most of your colleagues will not share an office with you on a day-to-day basis. This means you should also have:

• Comfort with solo execution and managing people remotely - we're a small team so you'll need to be happy rolling up your sleeves and help more junior colleagues to succeed.
• A high degree of comfort adopting new software tools for document drafting, collaboration and communication.
• You love writing - we have a lot of documents to draft and we place a high degree of importance on clarity and readability (read more about how we write ).

What will you be doing here?

As Head of Technology Risk you will:

• Support the CRO with the oversight of the risk profile and the implementation/embedding of the technology risk management framework, proposing the changes required to ensure that it remains fit for purpose.
• Make sure that the IT risk horizon scanning process is effective and that emerging risks are identified and assessed, communicating these to the CRO and CCO and to the first line.
• Act as risk subject matter expert for operational resilience, technology and information security, business continuity/disaster management providing independent guidance to the first line and oversight for the following risks: operational risk, operational resilience, outsourcing, technology, or any other non-financial risks that are key for Griffin.
• Oversee and, if required, deliver some of the second line assurance plan across their areas of oversight, to ultimately conclude on whether the first line is adhering to policy and testing the design and effectiveness of the controls environment
• Collaborate with other second line colleagues in the oversight of risks that could impact, or be impacted, by the risks within their remit.
• Design, develop and improve MI and reporting to various committees, support committees discharge their duties appropriately.
• Roll-up sleeves and assist with any other second line activities, coping with the changes to the business typical in a bank in our stage of growth.