Regulatory Control Lead

We are seeking a highly experienced and strategic leader to join our FCR&C division asVice President Financial Crime Risk and Control - Technology Risk Strategy & Controls. This role is critical in shaping the risk and control landscape across our technology platforms, with a strong emphasis on Python-based automation,audit readiness, and strategic risk governance. The ideal candidate will bring a blend oftechnical acumen,regulatory insight, andbanking domain expertiseto drive innovation and resilience in a complex, fast-paced environment.

Your key responsibilities

Strategic Risk Leadership

• Define and lead the technology risk strategy for Financial Crime Risk and Compliance (FCR&C) division, aligning with enterprise risk appetite and regulatory expectations.
• Advise senior Leadership on emerging technology risks, regulatory developments (e.g., Basel III, EMIR, GwG, ECB), and control enhancements.
• Drive strategic initiatives to embed risk intelligence into digital transformation and innovation programs.

Technology Enablement & Automation

• Lead the development of Python-based tools and analytics to automate risk assessments, control testing, and audit support.
• Oversee the integration of advanced analytics and AI/ML into risk monitoring and reporting frameworks.
• Collaborate with engineering and data teams to ensure secure, scalable, and compliant technology solutions.

Audit, Controls & Regulatory Compliance

• Own the design and execution of IT control frameworks across trading platforms, payment systems, and client onboarding technologies.
• Partner with internal audit, DCO and compliance to ensure readiness for regulatory reviews and external audits.
• Monitor and assess control effectiveness across front-to-back banking processes, including trade lifecycle, credit risk, and operational risk.
• Review internal processes to confirm all financial crime risks have been appropriately identified and documented.
• Confirm relevant controls or risk mitigants are in place to manage all financial crime risks within internal processes.
• Perform design and/or operating effectiveness testing on controls and mitigants.
• Conduct annual assessment of controls within FCR&C to demonstrate they are operating effectively.
• Identify, analyse and review operational readiness for any change-related activities. Define the requirements e.g. for the standardisation of processes/policies, translating the required changes for an operational environment and overview effective implementation.
• Assess risks that are responsible for the mitigating and protecting the Banks reputation.

Stakeholder Engagement & Governance

• Present testing results, risk insights, control metrics, and strategic recommendations to Leadership team
• Build strong partnerships with front office, operations, DCO, compliance, and technology teams to foster a risk-aware culture.
• Lead governance forums and working groups focused on technology risk and control transformation.

Your skills and experience

Qualifications:

• Bachelors or Masters degree in Computer Science, Information Systems, Finance, or a related field.
• 14+ years of experience in technology risk, audit, or compliance within investment or corporate banking.
• Strong proficiency in Python and experience leading automation or analytics initiatives in a regulated environment.
• Deep understanding of banking products, trading systems, and regulatory frameworks (e.g., SOX, Basel, MiFID II, DORA).
• Proven leadership in cross-functional teams and executive-level stakeholder management.
• Experience with testing the design and operating effectiveness of controls and remediating any identified control gaps.
• Analytical skills and attention to detail, with the ability to think laterally around issues, proposing solutions where required.
• Effective communication, organisation, prioritisation and interpersonal skills
• Ability to work to high standards and under strong time constraints.

Preferred Certifications:

• Python/Data Science certifications
• MBA or executive leadership training (preferred)
• CISA, CRISC, or equivalent (desirable)