We are looking for a pragmatic technology risk professional to join our Technology & Data Risk Management team, supporting our client-facing teams to identify, manage, and mitigate the risks associated with developing, procuring, selling new technologies and using data.
Reporting to one of our Tech & Data Risk Leads, you will support business teams take technology assets through the risk review lifecycle. As a Technology & Data Risk Manager it will be your responsibility to engage with business stakeholders, understand what they are trying to achieve, and identify the associated risks.
The role is not a traditional operational or enterprise risk management role. Our team works primarily within a risk framework that brings together a number of specialist due diligence areas that allow us to understand and manage the risks related to the use of technology. In this context, you will work closely with these specialist teams in order to drive a consistent and efficient approach to the assessment and review of technology assets.
In addition to cultivating strong relationships with these specialist risk teams, you will also closely partner with your Line of Service's Chief Technology Office team, where you will collaborate on proposal use case scoping, project prioritisation, and ongoing incremental product consultations.
Who we are looking for:
- Individuals with a strong understanding and command of risks associated with the use of technology and data.
- A relationship builder with strong collaborative presentation and stakeholder management skills to ensure everyone is working to agreed timelines.
- An agile thinker who thrives in creating and driving valuable, clear outcomes from unstructured and sometimes previously unencountered challenges.
- Must be able to flex your style, adapting to changing requirements, business priorities and technology strategies.
- A balanced, pragmatic approach to business-driven risk management.
- Individuals with strong verbal and written communication skills, with the ability to convey information clearly, simplify complex guidance and advice, whilst managing internal and external stakeholder's expectations.
- Appreciation of the working practices and culture of different services PwC offers, both at the UK and Global multi-territory level.
What will you be doing?
- Running a portfolio of technology and data risk management assessments with client facing business teams, ensuring risks are flagged to your stakeholders, documented, and mitigated.
- Liaising and establishing relationships with subject matter experts and specialist risk teams, in areas such as Information Security, client risk, Data Protection, Ethics and Compliance, you will get a full perspective of the technology risk areas in PwC, helping to identify, validate, and mitigate technology and data risks in the technology PwC builds or procures.
- Partner with your product and business stakeholders, acting as their go-to point of contact to identify areas of the business where risk may exist in order to offer bespoke guidance and resolution in a measured, agile manner.
- Contribute to risk reporting in the team, ensuring your portfolio's risks and controls are escalated to leadership in a timely manner.
- Support upskilling and communication activity in relation to Technology & Data Risk Management.
Essential skills & experience :
- Experience working in Technology and/or Data risk in a regulated industry, or having worked in an applicable technology environment
- An appreciation of the importance of risk management in helping organisations achieve their goals, whilst also making sure it complies with any legal, regulatory, and compliance requirements
- An empathetic, innovative, and solutions focused risk advisor who is comfortable with ambiguity yet able to successfully demonstrate progress and influence change
- Able to work across a large and varied portfolio of work, facilitating discussion across a wide range of stakeholders, appropriately managing expectations and driving projects to completion
- Ability to work within a diverse team, remotely and in person, including supporting more junior staff, sharing and collaborating effectively with others, as well as creating a positive team spirit, displaying resilience, cultural awareness and a can-do attitude
- Good self-management skills and an ability to take the initiative
- Articulate and effective oral and written communication with the ability to provide well-reasoned and self-assured responses to stakeholders, able to analyse and document processes, and develop guidance in easy to digest forms
Desirable skills & experience :
- Qualification in product management, data protection or information security, and/or risk management (e.g. CSPO, CIPP/E, CompTIA Sec+, SSCP, IRM Cert)
- Prince 2 or similar project management skills
- Appreciation of Agile delivery
- Awareness of development and automation technologies
- People management skills
- Experience of designing and implementing risk processes and controls
