Senior VP – IT Infrastructure Risk and Control

As VP Risk & Control in Technology, you will shape governance and risk across a major IT function. You will balance strategic evolution with hands-on delivery, translating technical risk into decision-ready insight for executive leadership. You will operate as a trusted partner to multiple tech and risk teams, driving end-to-end risk remediation and reporting. This role offers clear progression toward Director level while delivering tangible improvements to infrastructure risk posture. You will work closely with cross-functional teams to design and mature the risk and control environment in a regulated banking context.

• base salary c. 120k
• bonus
• good package
• hybrid (3 days on-site)
• path to Director level

• Drive 50/50 strategy and delivery with infrastructure Product Owners to identify and mitigate risks and develop end-of-life roadmaps.
• Govern Digital Engineering Risk & Control framework to align with risk appetite, resilience, BCP, and regional strategies.
• Produce board packs and executive summaries, translating technical risks into concise leadership reporting.
• Partner with Product, Platform, Cyber Security, IT Risk and Internal Audit to assess risks from new product implementations and changes.
• Manage audits, assurance activity, loss events, and control checks across the infrastructure estate.
• Act as a senior individual contributor with plan to scale the team as the function matures.

• Extensive experience managing risk within IT infrastructure in financial services or a large regulated estate.
• Ability to challenge technical teams and product owners with credibility.
• Strong stakeholder management to navigate between technical detail and executive communications.
• Hands-on delivery experience in a lean team environment; not purely advisory.
• Familiarity with technology risk frameworks, controls, and compliance for a banking infrastructure.
• Strong line management capability with appetite to lead people management as the team grows.

• stakeholder management
• communication
• leadership
• technology risk frameworks
• IT infrastructure risk and controls
• audits and assurance