Information Security Manager Technology Risk Officer

Job Description

About Revolut People deserve more from their money. More visibility, more control, more freedom. And since 2015, Revolut has been on a mission to deliver just that. With an arsenal of awesome products that span spending, saving, travel, transfers, investing,exchanging and more, our super app has helped 30 million customers get more from their money. And were not done yet. As we continue our lightning-fast growth, we believe that two things are essential to continuing our success: our people and our culture. So far, we have 6000 people working around the world, from our great offices or remotely, on our mission. And were lookingfor more. We want brilliant people that love building great products, love redefining success, and love turning the complexity of a chaotic world into the simplicity of a beautiful solution. About the role Our Technology team isnt just one of the best in the industry, its one of the best in the world. And were proud of it. Its our driving force; our engine From building a new banking backend to creating an award-winning app, theres nothing(and we mean nothing) our tech team cant do. Our Technology team isnt here to fix legacy systems - its here to build world-class financial products from the ground up. Products that will be used by millions of people around the world (30 million people, not that were counting) Were building one of the best Information Security teams to make Revolut the safest place to keep your money - and thats where you come in. We need a highly experienced and detail-oriented Technology Risk Officer to support risk management across Technologyand Product departments. Someone with solid knowledge about technical risk and an absolute love for security technologies. Up for the challenge Get in touch What youll be doing

• Working across the Technology and Product teams to analyse and better understand their risk profile
• Supporting teams in managing and reducing risk, and designing, implementing, and testing controls
• Performing risk and control assessments and deep dives within various product and technology teams to come up with actionable insights
• Proactively managing risks to reduce/limit major incidents, breaches, or examples of non-compliance in technology risk
• Establishing and running risk committees and working groups to improve the risk posture of the organisation
• Delivering technology risk insights for the Board & Executive Committees, including data-driven risk reports, and developing strong monitoring metrics (KRIs, BCIs)
• Regularly engaging with internal and external stakeholders on the groups IT risk posture
• Driving effective implementation and communication of operational risk management policies and guidelines.
• Providing IT risk management consulting to the business, technical and operations groups
• Identifying and assessing the impact of technology risk on projects and developing mitigation strategies

What youll need

• 2 to 5 years of experience in a similar role
• Knowledge about IT infrastructure (Cloud), operations, software, hardware, tooling, data flows, change control, and BC/DR and the impact of these on an organisations risk posture, security policies, and operational resilience arrangements
• Knowledge of products, services, and tooling related to technology product delivery with Agile and Kanban methodology
• The ability to apply knowledge to contribute to the risk discussions related to these products, tools, and processes
• An understanding of the hierarchy of technology, operations, and security policies
• The ability to adapt messages based on the audience and expectations while interacting with 1LOD and other stakeholders
• The ability to define risk appetite, risk impact, and identify risk likelihood; apply risk assessment and management processes; measure risks against firms risk appetite at a detailed level across the risk reporting categories and their supporting riskareas
• Experience in the RCSA process, tools, and frameworks
• The ability to provide support to 1LOD in performing the control testing

Nice to have

• Data and SQL skills
• Knowledge and experience of industry and regulatory standards related to Technology and Security (SOX, SOC2, ISO, COBIT, ITIL, etc.)

Building a global financial super app isnt enough. Our Revoluters are a priority, and thats why in 2021 we launched our inaugural D&I Framework, designed to help us thrive and grow everyday. Were not just doing this because its the right thing to do. Weredoing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. Thats why we encourage applications from people with diverse backgrounds andexperiences to join this multicultural, hard-working team. Refer to our Data Privacy Statement for Candidates for details on our data handling practices during your application.