Operational Risk and Compliance Lead

The Role

You’ll lead the management of operational risk and compliance for the Constantinople Banking Cloud Platform and our corporate environment in the UK. You’ll join a growing global risk and compliance team and work deeply across digital and cloud banking products (transaction banking, payments, lending), software development, third-party and outsourcing risk, operational resilience, and data protection.

As a technology and operational services provider to UK-regulated banks, we must help our clients meet their PRA and FCA obligations. That includes outsourcing and third-party risk expectations, operational resilience requirements and Consumer Duty outcomes. You’ll partner with Product, Engineering, Operations and our client banks’ risk functions to give advice, drive key initiatives and run control assurance and governance activities.

What You’ll Do

• Identify and assess risks and regulatory obligations in new features and products on the platform for the UK market, and run deep-dive reviews on priority risk classes

• Keep a UK regulatory obligations register and run horizon scanning, so PRA, FCA, Bank of England and ICO changes are assessed and built into the product roadmap

• Work with Product and Engineering Managers to design and implement controls and monitoring across the product and corporate environment

• Support client banks’ operational resilience programmes (PRA SS1/21, FCA PS21/3) by mapping important business services, supporting impact tolerance setting, and contributing to scenario testing and self-assessments

• Help our client banks meet their outsourcing and third-party risk obligations under PRA SS2/21 and the FCA SYSC 8 rules, including audit and access rights, exit planning and sub-outsourcing oversight

• Support Consumer Duty (PRIN 2A) work, including product governance, fair value, customer understanding and outcomes monitoring

• Support payments compliance, including the Payment Services Regulations 2017, Faster Payments and Bacs scheme rules, Confirmation of Payee, and the APP fraud reimbursement requirements

• Drive action plans and uplift work for control gaps and weaknesses, or guide other teams through their own uplift

• Coordinate internal testing and independent assurance reviews, and support client bank, regulator and auditor requests

• Support our SOC 2 programme and related UK certifications, such as ISO 27001 and Cyber Essentials Plus

• Run governance activities: third-party due diligence, risk forums, change management and impact assessments, and issue, incident and breach management, including regulatory and ICO notification processes

Who You Are

• Sound knowledge of operational risk and compliance concepts, frameworks and standards, such as the three lines model, RCSA and the Basel operational risk principles

• Strong understanding of UK financial services regulation for banking products and services to retail and/or SME customers, including:

  • The PRA Rulebook and FCA Handbook (PRIN, SYSC, COND, BCOBS, CONC/MCOB where relevant)

  • Consumer Duty

  • Operational resilience and outsourcing / third-party risk requirements, plus awareness of the UK Critical Third Parties regime

  • The Senior Managers & Certification Regime (SM&CR)

  • Working knowledge of UK financial crime requirements: the Money Laundering Regulations 2017, JMLSG Guidance, the Proceeds of Crime Act 2002, the Bribery Act 2010, sanctions (OFSI), and the “failure to prevent fraud” offence under the Economic Crime and Corporate Transparency Act 2023

  • Knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR, including DPIAs and international data transfers

  • Experience in UK banking, financial services or fintech. Experience with prudential requirements or a regulated technology provider is desirable.

  • Experience with design processes and/or software development, ideally in an agile, cloud-native setting

  • A relevant professional qualification is desirable, such as the ICA Diploma in Governance, Risk & Compliance, IRM, CISI, or IAPP CIPP/E

  • Strong teamwork skills that build good relationships and add to company culture

  • Ability to work autonomously, tackle complex problems, prioritise, and communicate with and influence stakeholders on risk management

  • The right to work in the UK