> Markdown version of [/jobs/ext/2063107-director-technology-cyber-and-resilience-risk](https://www.wearedevelopers.com/jobs/ext/2063107-director-technology-cyber-and-resilience-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Technology, Cyber and Resilience Risk - **Company:** London Construction Jobs - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Raw Data, Information Technology, Data Analytics - **Published:** August 15, 2026 - **Apply:** https://www.totaljobs.com/job/director-of-technology/london-stock-exchange-job107848663 ## About the Role * Senior leadership in technology risk within regulated financial services. * Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT). * Strong track record in risk governance and remediation of systemic issues. * Operational resilience and incident management expertise. * Experience engaging with regulators and executive stakeholders. * Cloud and third-party risk oversight. Qualifications & Certifications (preferred) * CRISC, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, ITIL Expert. * Degree in Computer Science/Engineering or equivalent experience. Skills & Attributes * Combines deep risk expertise with engineering credibility. * Strong decision-making and challenge capability, not just advisory. * Highly effective in executive communication and regulatory engagement. * Drives delivery discipline through measurable outcomes. * Builds alignment across complex stakeholder landscapes. ## Description Leads the Technology Risk & Operational Resilience capability across DSM, FX, and Risk Intelligence, accountable for the first-line risk and control environment, ensuring it operates within defined risk appetite and meets regulatory expectations. Drives risk-informed engineering delivery, embedding robust controls, resilience practices, and data-led assurance across platforms. Reports to Head of Business Management, Markets & Risk Intelligence Engineering. Core Accountabilities 1. Risk & Control Ownership * Own the first-line technology risk profile, ensuring alignment to divisional risk appetite. * Own the technology control framework and library (applications, infrastructure, cloud, cyber). * Define control standards, testing approaches, and assurance mechanisms. * Drive remediation of control gaps, including systemic risk issues. 2. Operational Resilience * Own first-line implementation of operational resilience frameworks, including: + Important business services (IBS) + Impact tolerances + Scenario testing and resilience validation * Ensure resilience is embedded into architecture, engineering and change processes. * Partner with 2LOD to ensure alignment with regulatory expectations (e.g. DORA, UK OpRes). 3. Risk Governance & Decisioning * Lead 1LoD technology risk governance forums). * Provide independent first-line challenge to engineering, architecture, and product teams. * Escalate and drive resolution of material risk decisions and breaches (i.e. major incidents, material audit findings) * Provide clear, data-driven risk and impact assessments to product owners in business-led risk forums/committees. 4. Regulatory, Audit & External Engagement * Own first-line response to audit and regulatory reviews, including: + Issue ownership and remediation tracking. + Evidence provision and assurance quality * Provide technology risk insight to executive committees and Boards. * Monitor external regulatory developments and emerging risks to drive required changes. 5. Third Party & Cloud Risk * Own oversight of technology third-party risk, including: + Critical suppliers and intra-group dependencies (i.e. IRQ, DDQ validation and remediation of gaps) + Control effectiveness, TPRM lifecycle and exit risks. * Ensure alignment of cloud risk controls with enterprise standards. * Partner with Infrastructure & Cyber (BSL) with clear accountability boundaries for technology services to supported entities. 6. Risk Data, MI & Reporting * Own risk reporting and insight across DSM, FX, and RI. * Define and govern KRIs, KPIs and control effectiveness metrics (KCIs). * Ensure availability of accurate, decision-ready risk data. * Drive adoption of data-led risk management across engineering teams. 7. Leadership & Operating Model * Lead and develop a high-performing technology risk team. * Define clear roles, responsibilities, and RACI across first and second lines. * Build risk capability across engineering, not just within the function. * Act as a senior leader influencing culture, behaviours, and delivery outcomes. ## Related Videos - [Data Governance in the Era of AI](https://www.wearedevelopers.com/videos/1622-data-governance-in-the-era-of-ai) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Bringing Clarity to Event Streams: Enabling Analytics and AI Through Rich Metadata](https://www.wearedevelopers.com/videos/1616-bringing-clarity-to-event-streams-enabling-analytics-and-ai-through-rich-metadata) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)