F

Fidelity International

Investment management and retirement solutions provider

Technical Change Risk Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeHybrid

About the Job

Requirements

  • Knowledge of secure software development lifecycle principles, common application security risks, software delivery controls, and risk or control frameworks relevant to application engineering.
  • Ability to read and assess application code, technical design documents, test evidence, and release artifacts to identify implementation risk and control weaknesses.
  • Strong risk, process, and control assessment skills, including the ability to identify gaps, challenge assumptions, and recommend practical remediation actions.
  • Ability to engage effectively with senior management, operational teams, developers, quality assurance teams, vendors, and project stakeholders.
  • Strong relationship-building, influencing, and negotiation skills across diverse stakeholders and lines of defense.
  • Excellent written and verbal communication skills, including the ability to explain technical and risk issues clearly to non-technical audiences.
  • Excellent analytical, organizational, and project management skills.
  • Ability to manage multiple priorities, adapt to changing circumstances, and work effectively under competing deadlines.
  • Strong attention to detail and ability to respectfully challenge the status quo.
  • Completion of a university degree or equivalent work experience.
  • At least 5 years of experience reviewing code, technical design documents, requirements, test cases, quality assurance results, user acceptance testing evidence, release packages, or production implementation evidence to identify potential control weaknesses and risk exposures.
  • At least 5 years of experience understanding technology change management, software delivery lifecycle practices, release readiness, and production implementation controls.
  • At least 5 years of experience assessing whether technology changes are appropriately designed, tested, documented, approved, and supported by adequate risk mitigation.

Responsibilities

  • Review complex, critical, or high-risk technology changes to ensure risks are identified, assessed, documented, challenged, remediated, or formally accepted.
  • Assess change risk and complexity to determine the appropriate level of technical review, challenge, and control activities required prior to release.
  • Review business requirements, technical designs, test cases, quality assurance and user acceptance testing results, release documentation, and implementation artifacts to confirm completeness, traceability, and alignment with intended business outcomes.
  • Assess technical artifacts, data flows, dependencies, and application code where necessary to identify potential weaknesses, including logic errors, hardcoded values, inadequate validation, weak exception handling, data quality issues, and performance concerns.
  • Evaluate identified risks with risk owners and assess whether response plans, remediation actions, compensating controls, or risk acceptances are appropriate, robust, and properly documented; escalate material issues as required.
  • Provide independent challenge to developers, quality assurance teams, vendors, and project stakeholders where implementation, testing, or release readiness does not meet expectations.
  • Assess test strategies, coverage, and evidence to ensure adequate validation of positive, negative, boundary, integration, regression, and operational scenarios.
  • Identify gaps in documentation, design, implementation, testing, and release readiness, including unresolved defects, insufficient evidence, or incomplete risk mitigation.
  • Review deployment plans, implementation sequencing, rollback strategies, and post-release validation to assess operational readiness.
  • Participate in post-implementation reviews, lessons learned, incident reviews, and continuous improvement discussions to identify recurring root causes of change-related issues.
  • Identify recurring issues and recommend enhancements to change risk practices and controls.
  • Advocate for strong risk management principles and build trusted relationships with stakeholders.
  • Maintain risk management programs day to day to identify, monitor, assess, and report on risk, including Change and Project Risk Management and ad hoc risk assessments.
  • Ensure program policies, guidelines, standards, and internal procedures are kept current, relevant, and consistently applied.
  • Escalate issues identified through real-time monitoring or formal reviews to the appropriate Risk Management leader.
  • Maintain current program reporting and distribute it to key stakeholders.
  • Identify areas for improvement, recommend remediation actions, and build consensus on solutions.
  • Independently challenge the status quo in a respectful and constructive manner.
  • Promote a strong risk culture by communicating risk management policies, programs, expectations, and business roles and responsibilities across the organization.
  • Develop, maintain, and deliver training and awareness materials on risk management programs and policies through online and in-person sessions.
  • Equip employees and business teams to understand relevant policies, identify and assess material risks, and escalate issues appropriately.

Desired Qualifications

  • Knowledge of financial services products, processes, controls, and regulatory expectations.
  • Familiarity with risk and control frameworks such as ITIL, COBIT, ISO 27001, NIST, SOX IT general controls, secure software development lifecycle, or operational resilience frameworks.
  • Experience with artificial intelligence, machine learning, Agile delivery, cloud environments, or DevOps/continuous integration and continuous delivery practices.
  • Relevant certifications such as CISA, CRISC, CISSP, CSSLP, ITIL, cloud certifications, or similar credentials.

About the Company

Fidelity International

Investment management and retirement solutions provider

Fidelity International provides investment solutions and retirement expertise for institutions, individuals, and their advisers around the world. It offers a range of investment management services, personal investing platforms, and retirement savings products, using both its own funds and third-party options. Clients access these tools to pursue long-term financial goals, with revenue coming from management and advisory fees. The company integrates sustainability and responsible investing into its operations and investment processes, aiming to deliver long-term, sustainable outcomes for clients. The goal is to help clients build better financial futures and maintain financial health over time.

Company size
5,001-10,000
Company stage
IPO
Headquarters
London, United Kingdom
Founded
1969

Recently Posted Jobs

Explore more opportunities at Fidelity International

See more jobs