Manager / Director (Experience Dependent), IT Risk

Application Deadline: 14 October 2025

Hybrid Working Pattern: 3 days in Office & 2 WFH

About us

Cynergy Bank is the UK’s human digital bank serving the needs of ‘scale up’ or medium sized and fast-growing SMEs; professionals; high net worth and mass affluent individuals, in essence those market segments that still value human service enabled by great technology.

We recognise that professional and personal lives often overlap and our mission is to help empower our customers to achieve their ambitions by serving all their interdependent banking needs. We provide a comprehensive range of digitally enabled products and services to meet the property finance, business and commercial banking, private banking and personal savings needs of our customers.

Our human and digital model transforms banking for customers who still value a face-to-face relationship that is enabled by the latest digital technology.

We partner with firms such as Google Cloud, Cigniti and Slalom as we continue to innovate in the human digital space.

Cynergy Bank plc is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Eligible deposits with Cynergy Bank plc are protected by the UK Financial Services Compensation Scheme .

For more information on Cynergy Bank visit

Company Benefits

• Competitive Salary and Company Bonus
• Competitive holiday allowance plus bank holidays
• Option to purchase an additional 10 days holiday
• Pension contribution and Life Assurance
• Income Protection Scheme and Season Ticket Loan
• Medical Cover (After Probation)
• Electric Car Scheme and Money Coach (After Probation)

The Role:

Working in the Bank’s second line Operational Risk team, you will be supporting the first line activity under the Chief Data and Information Officer which includes - IT Operations, Change and Transformation, Information Security/Cyber, Data and Procurement teams, to execute the ERMF and ensure the risk framework and tools are used as intended. You will provide oversight and challenge to support quality risk management and decision making; ensuring that the first line risks and controls are appropriately understood, managed and reported appropriately.

Responsibilities:

• Responsible for the operational risk oversight and challenge of the first line Business Unit(s) allocated, supporting various risk management activities – including risk registers, key risk indicators, controls, issues and action management.
• Provide second line opinion on the risk profile reporting though governance; this can include the monthly risk reporting or via individual change initiatives, ensuring appropriate escalation where risks are outside of appetite.
• Oversight and challenge the risk and control self-assessment (RCSA) process led by the first line, in line with the agreed procedures.
• Review operational risk events and records; ensuring that incidents are managed robustly and recorded appropriately, with the impacts and root cause captured. Ensure mitigating action is taken, including the timely issue of strengthened procedures and defences.
• Oversight the quality of first line record keeping in the Bank’s risk management tool (Resolver) and provide feedback where required.
• Oversee Change initiatives and consider the impact to the Bank’s risk profile. Ensure the material change risk process (MCRP) is adhered to where appropriate.
• Support compliance with various approved policies including those supporting IT, Information security & cyber-resilience.
• Remain abreast of new security threats, regulatory developments, best practice and international standards as they affect information security and cyber-resilience.

• Undertake or contribute to second line thematic reviews as required.
• Provide input into the ICAAP process as required, including scenario analysis and stress testing.

Key skills/competencies for the role:

• Proven experience in key areas as described in the role summary.
• Preferred experience in IT and change delivery programmes and/or data governance.
• Stakeholder management skills