Technology Risk Manager

Job Description:

Our Story

Hello there. We're Zopa.

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don't like about finance and does the opposite. We're redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre - we've built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com!

We're incredibly proud of our achievements and none of it would be possible without the amazing team here. It's not just industry awards we're winning, we've also been named in the top three UK's Most Loved Workplaces.

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you'll thrive here at Zopa, so join us, and make it count. Want to see us in action? Follow us on Instagram @zopalife

At Zopa, our Second Line Technology Risk team helps the business move fast, yet safely. We partner closely with engineering, security, resilience and product teams to spot emerging risks, challenge assumptions and make sure our technology stays secure, resilient and ready to scale.

This role is perfect for someone curious, analytical and excited by variety. You could be reviewing resilience testing around payments one week, exploring ransomware readiness the next, or using observability data to uncover emerging risks across critical services.

You'll work alongside experts in cyber security, infrastructure and architecture, but this is an oversight and risk role rather than hands-on engineering. We're looking for someone who enjoys diving into detail while still seeing the bigger picture.
What makes this role different? Zopa is still building and evolving at pace without the burden of legacy technology. We're investing heavily in observability, AI tooling and modern risk approaches, giving you the opportunity to help shape the future of technology risk oversight.

A day in the life:

* Assess resilience exercises, cyber controls and technology changes
* Investigate emerging risks across cloud, cyber and operational resilience
* Use operational and observability data to spot trends and vulnerabilities
* Simulate real-world scenarios like ransomware or data leakage events
* Produce clear, evidence-based risk insights for senior stakeholders
* Partner with teams across technology, security and product to influence better decisions

About you:

* Experience in technology risk, cyber risk, IT audit, InfoSec or similar
* Curiosity about technology, cyber security and resilience
* Confidence working with technical experts and challenging constructively
* Strong analytical thinking and practical risk judgement
* Ability to balance detail with strategic thinking
* Familiarity with frameworks like NIST or ISO 27001

Bonus points for:

* Financial services or regulated industry experience
* Experience with operational resilience or observability tooling
* Certifications like CISSP, CISA, CRISC or CISM
* Interest in AI and emerging technology risks

#LI-LK1

At Zopa we value flexible ways of working.
We value face-to-face collaboration and a good work-life balance. This hybrid role requires you to come to our London office 2-3 days a week.

You'll also have the option of working from abroad for up to 120 days a year!* But no matter where you are, we'll make sure you've got everything you need to thrive, both in your work and home life, from day one.

*Subject to having the right to work in the country of choice

Diversity Statement
Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to better products for our customers and a unique company culture for our people. We are made up of nearly 50 nationalities, have a DE&I forum made up of Zopians wanting to make a difference and we are proud of our culture where everyone can bring their full self to work. Our approach to DE&I is reflected in our hiring process so please let us know if you require any reasonable adjustments