Information Technology Risk Manager

Job description

About the RoleIndivara Group is hiring an IT Lead to be the accountable owner for our payments platform and is expected to be an active contributor in relation to Indivara Group’s technology solutions. You will work closely with our intra-group engineering teams who build and operate key systems.This is a hands-on “run + improve” role: you will lead incident response, drive platform reliability, and continuously improve our processes and tech stack while keeping us audit-ready.What You’ll Own A) Platform Ownership Be accountable for payment system stability and issues end-to-end: triage, root cause, fixes, and prevention.Own production support: incident management, on-call expectations, post-mortems, problem management.Set and track operational metrics: uptime/latency, incident frequency, MTTR, failed transactions, backlog of known issues.B) Platform Improvement Innovate: propose and drive tech stack and process improvements (release discipline, observability, environments, automated testing, security-by-design).Implement practical engineering governance: change/release management, production access controls, environment segregation, quality gates.Drive resilience: DR planning and exercises (RTO/RPO), dependency mapping and single-point-of-failure removal.C) MAS TRM & Outsourcing Governance Own the TRM framework: risk assessments, risk register, control implementation and evidence readiness.Own outsourcing governance (including intra-group): due diligence, ongoing monitoring, SLAs/KPIs, access governance, incident/change requirements, auditability.Requirements7+ years in platform engineering, IT operations, security/technology risk, or technology leadership in regulated environmentsBanking and Payments domain knowledge is expectedStrong hands-on ownership of production systems: incident handling, root-cause analysis, operational governance.Proven ability to implement practical Technology Risk Management/security controls (policies + controls + evidence + monitoring) with engineers.Strong knowledge of outsourcing risk management and ability to govern vendors/outsourced engineering delivery.Comfortable being the single accountable owner in a lean setup; can drive outcomes through influence.Familiarity with cloud environment, DevSecOps and secure SDLC