Technology Assurance & Operational Risk Specialist

LHV Bank Limited is a UK-licensed bank operating across three core business segments: Retail Banking, SME Lending, and Banking Services (BaaS). The bank is a wholly owned subsidiary of LHV Group, a listed financial services provider headquartered in Estonia. LHV Bank operates under a full UK banking licence granted in May 2023.

The Bank supports over 200 fintech clients with embedded financial infrastructure, provides retail savings products via digital channels, and offers SME credit solutions across the UK. In line with its regulatory responsibilities and growth ambitions, LHV Bank is committed to maintaining a robust and proportionate financial crime control environment.

Expanding our services, LHV Bank now provides personal banking solutions. Our offerings include current accounts with competitive interest rates, fixed-rate bonds for long-term savings, and debit cards.  Customers can conveniently access these services through the LHV App, enabling secure account opening and management.

The Technology Assurance & Operational Risk Specialist is responsible for delivering independent second-line operational risk assurance, with a particular focus on ICT, information security, cyber, AI and operational resilience.

The role is highly hands-on and combines independent control assurance with the ability to translate operational risk information into meaningful risk insight that supports Executive and Board decision-making and contributes to the development of a strong risk culture across LHV. The role requires a strong understanding of technology and operational risk together with the ability to independently assess control effectiveness, identify emerging risks and provide credible challenge across the Bank.

Key Responsibilities

• Independently lead and perform second-line control assurance reviews, with particular focus on ICT, information security, cyber resilience, operational resilience, technology change and AI governance, assessing both control design and operating effectiveness.
• Provide independent and credible challenge over risk assessments, control environments, remediation plans and technology initiatives, working closely with Technology, Information Security, Data and Change teams to ensure risks remain within appetite.
• Own the second-line incident management process, ensuring incidents are appropriately challenged, root causes are robustly identified, lessons learned are embedded and systemic issues are escalated. 
• Lead the RCSA process for designated business areas and provide independent challenge, ensuring key operational risks, controls and treatment plans accurately reflect the Bank’s risk profile.
• Critically analyse information from incidents, complaints, RCSAs, control assurance, third-party risk, change risk and other operational risk activities to identify and clearly articulate emerging risks, systemic control weaknesses and cross-cutting themes.
• Produce high-quality operational risk management information that translates risk information into meaningful insight, clear recommendations and practical actions for Executive Management and Board Committees.
• Work closely with the Head of Financial Risk to develop an integrated view of the Bank's overall risk profile, recognising the interaction between financial and non-financial risks.
• Contribute to the continued enhancement of the Operational Risk Framework by identifying opportunities to strengthen assurance activities, risk insight and regulatory compliance.

Key Capabilities

• Strong second-line assurance capability, with the ability to independently design, execute and document risk-based control assurance reviews particularly across ICT, Information security, cyber, operational resilience and AI risk.
• Demonstrable expertise across ICT, information security, cyber, operational resilience and AI risk, with the ability to provide credible technical challenge to both business and technology stakeholders.
• Strong analytical capability, with the ability to translate complex operational risk information into meaningful management insight and Board-level reporting.
• Proven ability to identify systemic risks and control weaknesses by connecting information across multiple operational risk sources.
• Strong judgement, influencing and stakeholder management skills, with confidence engaging senior management and Board Committees.
• Sound understanding of regulatory expectations relating to operational risk, ICT risk, operational resilience and technology governance within a regulated environment.

Some of our benefits (only applicable to UK based roles not Internship programmes) 

• Competitive salary &lots of opportunities to learn, grow and progress professionally.
• Open and inclusive culture.  
• Hybrid working.
• Fantastic offices and great working environment.
• Vitality Health Plan (includes private health insurance, travel insurance, gym discounts) 
• Health cash Plan (Medicash health plan Level 3)
• 6% employer pension contribution.
• Life assurance - 4 x salary.
• Income protection insurance - 75%  
• 28 days holiday plus 3 additional days, & further days for various key life events as well as the opportunity to sell up to 5 days per calendar year.
• Swap public/bank holidays each year for alternative days that align with your personal, cultural, or religious observances. 
• Enhanced family friendly and family forming policies.
• Access to a wide range of retail discounts. 
• Team Socials.