Technology Risk & Controls Manager

About Allica Bank

Allica is the UK’s fastest growing company - and the fastest-growing financial technology (Fintech) firm ever. Our purpose is to help established SMEs, one of the last major underserved opportunities in Fintech.

Established SMEs are the backbone of local communities - representing over a third of our economy - yet have been largely neglected both by traditional high street banks and modern fintech providers.

Department Description  

This role sits within the Controls function, reporting to the Head of Controls. You will be an integral part of an action orientated, fast moving team, responsible for successfully delivering First Line of Defence capability within the bank.     

Role Description 

• You will partner with the Technology business area to embed the Risk Management Framework, including policies and procedures.

• Provide expert input into the design and operation of the technology control framework, including data management, working with stakeholders across Technology to ensure that controls are documented and embedded. 

• Provide expert input into the vendor management framework, supporting the Vendor Management Team to develop and embed controls to ensure effective management of vendors in line with regulatory requirements. 

• Testing of existing and new key controls in line with agreed schedule, informing the non-financial risk profile and required management actions.  

• Support the operational resilience programme, with a focus on technology resilience, feeding into scenario planning and testing. 

• Support the coordination and facilitation of the bank’s Risk and Control Self-Assessment (RCSA) and administration of the bank’s annual RCSA refresh. 

• Support the capital calculation for Operational Risk as part of the ICAAP, including scenario analysis. 

• Hands on support in the update of risk information on the bank’s Risk systems, including ensuring risk events and issues are appropriately raised and managed. 

• Assembling informed quantitative and qualitative input into First Line Risk Reporting at relevant committees and conducting deep dive reviews into areas of thematic risk. 

Principal Accountabilities 

• As the Risk Business Partner for Technology, provide hands-on Risk support from a First Line Controls perspective. 

• Partner with the business to ensure ongoing active management of risk and embedding of the Risk Management Framework, including RCSA, risk events, issues, KRIs. 

• Support the development of the technology control framework, including data and vendor management. 

• Provide First Line assurance over key controls, through control testing and supporting operational resilience assessment and testing. 

• Deputise as required at meetings for the Head of Controls. 

• Support the ongoing monitoring and reporting of risk through relevant governance, conducting analysis and reporting on key areas of risk, including internal and external reporting.  

• Help promote a risk-focused culture across the bank, embodying Allica’s values. 

Personal Attributes & Experience 

• Strong Risk knowledge and experience including RCSAs, Controls and Risk Libraries, risk event reporting,  

• Expertise in technology control frameworks and vendor management standards.  

• Knowledge of ISO27001 and S