Tech Risk & Controls Director

About the role

The Tech Risk & Controls Director joins the Cybersecurity and Technology Controls (CTC) team to lead the firm’s technology risk strategy. This senior position is responsible for ensuring regulatory compliance, operational resilience, and effective risk mitigation across the organisation’s technology landscape.

Key responsibilities

• Develop and implement technology risk management strategies, policies and processes aligned with industry best practices and regulatory requirements.
• Identify, assess and monitor emerging technology risks using the firm’s risk management framework, including risk event management, reporting and action‑plan tracking.
• Provide expert counsel to product owners, control managers and regulators on security obligations and risk mitigation options.
• Maintain strong relationships with internal stakeholders, regulators, second‑line defence teams and auditors to ensure compliance with legal and industry standards.
• Oversee reporting and governance of controls, policies, issue management and performance metrics, delivering insights to senior leadership.
• Foster a culture of high performance, operational excellence and continuous improvement within the risk team.

Required profile

• 10+ years of experience in technology risk management, information security or a related discipline.
• Extensive experience in the financial sector, with proven interaction with regulatory bodies and familiarity with frameworks such as DORA.
• Fluent in German and English, both written and spoken.
• Strong analytical, decision‑making and stakeholder‑management capabilities.

Required skills