Senior Risk Manager, Data & Privacy

We seek an experienced Data Risk professional to join our Data & Privacy Risk Specialist team. This is a senior second line role providing independent oversight, challenge and insight across the organisation’s management of data-related risks.

Operate at the intersection of data, technology, risk, and regulation. Your role includes influencing decisions, improving risk management, and supporting innovation safely.

What you’ll be doing:

Risk Oversight & Challenge

• Provide independent second line supervision, scrutiny and risk assessment across business areas, pivotal initiatives and transformation programmes, evaluating how well governance, controls and frameworks related to data-related risks align with risk appetite, regulatory expectations and the Group Risk Management Framework.
• Deliver clear, evidence-based risk opinions and recommendations to inform decision-making, remediation, and investment priorities. Contribute to developing and improving data risk policies, standards, frameworks, and supervision techniques.

Monitoring, Assessment & Insight

• Monitor and assess the data risk landscape, identifying emerging risks, control weaknesses, systemic themes and technology-related risks through analysis of risk indicators, incidents, assurance findings and management information.
• Enhance data risk reporting, metrics and oversight approaches to provide clearer insight into risk exposure and control effectiveness, improving risk visibility, challenge and timely management action.

Strategy, Change & Technology

• Provide supervision, question assumptions and expert risk guidance across major change programmes, regulatory developments and new technologies, including AI and cloud, making authoritative recommendations that strengthen risk management and business outcomes.
• Build positive relationships across the three lines of defence to influence effective risk oversight and positive customer outcomes. Help continuously improve the Group’s data risk framework, appetite, and oversight approach.

Technical Data Risk

The role involves providing expert guidance on complex data risk issues. Essential expertise includes data governance, quality, lineage, metadata, privacy, retention, records management, data lifecycle controls, data architecture, cloud technologies, AI, and advanced analytics.

Why join us?

From building a truly sustainable business to creating a place where people love to work, we need colleagues who are up for the challenge and can match our pace. People who love to push boundaries, make change happen and challenge the status quo. Sound like you?, We want to ensure all our candidates have the opportunity to shine. Please let us know if there is anything we can do to make the sure the assessment process works for you. Our ambition is to be the leading UK business for diversity, equity and inclusion, crafting an environment where everyone can thrive, develop and succeed.

• 7+ years’ experience in data risk, data governance, data management or a related risk field within a complex organisation, with experience of risk frameworks, oversight and controls that handle data throughout its lifecycle.
• 7+ years’ experience translating complex technical, architectural and regulatory topics into clear risk insights, recommendations and practical actions for business and risk leaders.
• 7+ years’ experience working with modern data environments and technologies, including cloud platforms, advanced analytics, AI and data architecture.
• 7+ years’ experience applying analytical, communication and partner leadership skills to communicate risk insights, influence senior decision-makers and drive positive risk outcomes.

It would be great if you also have:

• Experience leading thematic reviews, risk assessments or assurance activities within a Non-Financial risk environment.
• Experience embedding risk and control-by-design principles within AI, cloud, data transformation or large-scale technology change programmes.
• Experience coaching or mentoring colleagues and contributing to capability development.

Knowledge & Qualifications:

• Knowledge of BCBS239, GDPR, UK Data Protection requirements, AI governance and other relevant regulatory frameworks.
• Professional qualifications in risk, data management, data governance, privacy or technology-related subject areas.

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

We also offer a wide-ranging benefits package, which includes:

• Generous pension contribution of up to 15%
• Annual performance-related bonus
• Share schemes, including free shares
• Flexible benefits to suit your lifestyle
• 30 days’ holiday plus bank holidays
• Wellbeing initiatives and generous family leave policies

Ready to help build the future of Data Risk? We’re looking forward to hearing from you!