Hello, we’re Starling. We built a new kind of bankbecause we knew technology had the power to help people save, spendand manage their money in a new and transformative way. We’re afully licensed UK bank with the culture and spirit of afast-moving, disruptive tech company. We’re a bank, but better:fairer, easier to use and designed to demystify money for everyone.We employ more than 3,000 people across our London, Southampton,Cardiff and Manchester offices. Role purpose The TechnologyRisk Analyst will support and report directly into the Head ofInformation Security Risk but will have exposure across the Bank tothe management of Starling’s technology risks. The role holder willperform oversight, challenge and assurance of the performance,security and operational resilience of Starling Bank, ourtechnology, people and processes. About the role Provide technicaloversight of technology (cyber security, software engineering, anddata management), ensuring risks are identified, managed andescalated appropriately. Provide guidance on risk identificationand control design for key emerging areas such as artificialintelligence Assure the operational and cyber resilience ofStarling Bank’s technology operation by all techniques frominspection, interview to direct testing and scripted checks.Provide sound evaluation of issues, incidents and vulnerabilitiesand technology opinion to the risk department as a whole. Challengepotential flaws or weaknesses in process, architecture or systems,both directly with first line staff and indirectly via reviewprocess. Work with first line to improve controls and riskmanagement in-line with strategic objectives, regulatoryrequirements and evolving threat landscape. Establish strongrelationships with our engineers, data scientists, cyber securityteam, and leadership. RequirementsYou will have the ability toapply a risk-based approach to challenge the first line acrosssecurity domains, and have expertise in several of the followingareas:Experience within a regulated industry such as financialservices or similarly regulated sectors. Ability to assess and testtechnology control effectiveness through the lifecycle from designto implementation and monitoring. Background conducting assuranceor audit on application/system risk assessments, a bonus if thisincludes machine learning and artificial intelligence systems.Experience with cloud architecture, threat modelling, simulationexercises and risk assessments. Past experience working in aTechnology Risk & Control function preferably focused onemerging technology Have been involved in designing and developingTechnology controls including Information Security, SystemsManagement, Third party, and Data Privacy. Working knowledge of keytechnology related frameworks and international standards, such asISO 2700x, NIST CSF, NIST AI RMF, COBIT and PCI-DSS. Engagingdirectly with engineers, reviewing source code and testingapproaches as part of CICD pipelines. Ability to understand andevaluate findings from penetration testing, vulnerability andconfiguration scanning tools, and auditing patch management.Knowledge of assessing controls in the context of cloudenvironments, containerisation, microservices, andinfrastructure-as-code. Good interpersonal skills with ability tochallenge in a positive manner and handle difficultsituations. Be self motivated, enjoy problem solving and wantto continue to learn and develop. Benefits 25 days holiday(plus take your public holiday allowance whenever works best foryou) An extra day’s holiday for your birthday Annual leave isincreased with length of service, and you can choose to buy or sellup to five extra days off 16 hours paid volunteering time a yearSalary sacrifice, company enhanced pension scheme Life insurance at4x your salary & group income protection Private MedicalInsurance with VitalityHealth including mental health support andcancer care. Partner benefits include discounts with Waitrose,Mr&Mrs Smith and Peloton Generous family-friendly policiesIncentivised refer a friend scheme Perkbox membership giving accessto retail discounts, a wellness platform for physical and mentalhealth, and weekly free and boosted perks Access to initiativeslike Cycle to Work, Salary Sacrificed Gym partnerships and ElectricVehicle (EV) leasing About UsYou may be put off applying for a rolebecause you don't tick every box. Forget that! While we can’taccommodate every flexible working request, we're always open todiscussion. So, if you're excited about working with us, but aren’tsure if you're 100% there yet, get in touch anyway.We’re on amission to radically reshape banking – and that starts with ourbrilliant team. Whatever came before, we’re proud to bring togetherpeople of all backgrounds and experiences who love working togetherto solve problems.Starling Bank is an equal opportunity employer,and we’re proud of our ongoing efforts to foster diversity &inclusion in the workplace. Individuals seeking employment atStarling Bank are considered without regard to race, religion,national origin, age, sex, gender, gender identity, genderexpression, sexual orientation, marital status, medical condition,ancestry, physical or mental disability, military or veteranstatus, or any other characteristic protected by applicable law.Bysubmitting your application, you agree that Starling Bank maycollect your personal data for recruiting and related purposes. OurPrivacy Notice explains what personal information we may process,where we may process your personal information, its purposes forprocessing your personal information, and the rights you canexercise over our use of your personal information.