Technology Risk Manager

 

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com! 

We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces. 

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count. Want to see us in action? Follow us on Instagram @zopalife

At Zopa, our Second Line Technology Risk team helps the business move fast, yet safely. We partner closely with engineering, security, resilience and product teams to spot emerging risks, challenge assumptions and make sure our technology stays secure, resilient and ready to scale.

This role is perfect for someone curious, analytical and excited by variety. You could be reviewing resilience testing around payments one week, exploring ransomware readiness the next, or using observability data to uncover emerging risks across critical services.

You’ll work alongside experts in cyber security, infrastructure and architecture, but this is an oversight and risk role rather than hands-on engineering. We’re looking for someone who enjoys diving into detail while still seeing the bigger picture.
What makes this role different? Zopa is still building and evolving at pace without the burden of legacy technology. We’re investing heavily in observability, AI tooling and modern risk approaches, giving you the opportunity to help shape the future of technology risk oversight.

Assess resilience exercises, cyber controls and technology changes

Investigate emerging risks across cloud, cyber and operational resilience

Use operational and observability data to spot trends and vulnerabilities

Simulate real-world scenarios like ransomware or data leakage events

Produce clear, evidence-based risk insights for senior stakeholders

Partner with teams across technology, security and product to influence better decisions

Experience in technology risk, cyber risk, IT audit, InfoSec or similar

Curiosity about technology, cyber security and resilience

Confidence working with technical experts and challenging constructively

Strong analytical thinking and practical risk judgement

Ability to balance detail with strategic thinking

Familiarity with frameworks like NIST or ISO 27001