LHV Bank
Technology Assurance & Operational Risk Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
LHV Bank Limited
LHV Bank Limited is a UK-licensed bank operating across three core business segments: Retail Banking, SME Lending, and Banking Services (BaaS). The bank is a wholly owned subsidiary of LHV Group, a listed financial services provider headquartered in Estonia. LHV Bank operates under a full UK banking licence granted in May 2023.
The Bank supports over 200 fintech clients with embedded financial infrastructure, provides retail savings products via digital channels, and offers SME credit solutions across the UK. In line with its regulatory responsibilities and growth ambitions, LHV Bank is committed to maintaining a robust and proportionate financial crime control environment.
Expanding our services, LHV Bank now provides personal banking solutions. Our offerings include current accounts with competitive interest rates, fixed-rate bonds for long-term savings, and debit cards. Customers can conveniently access these services through the LHV App, enabling secure account opening and management.
Technology Assurance & Operational Risk Specialist
The Technology Assurance & Operational Risk Specialist is responsible for delivering independent second-line operational risk assurance, with a particular focus on ICT, information security, cyber, AI, and operational resilience.
The role is highly hands-on and combines independent control assurance with the ability to translate operational risk information into meaningful risk insight that supports Executive and Board decision-making and contributes to the development of a strong risk culture across LHV. The role requires a strong understanding of technology and operational risk together with the ability to independently assess control effectiveness, identify emerging risks, and provide credible challenge across the Bank.
Key Responsibilities
- Independently lead and perform second-line control assurance reviews, with particular focus on ICT, information security, cyber resilience, operational resilience, technology change, and AI governance, assessing both control design and operating effectiveness.
- Provide independent and credible challenge over risk assessments, control environments, remediation plans, and technology initiatives, working closely with Technology, Information Security, Data, and Change teams to ensure risks remain within appetite.
- Own the second-line incident management process, ensuring incidents are appropriately challenged, root causes are robustly identified, lessons learned are embedded, and systemic issues are escalated.
- Lead the RCSA process for designated business areas and provide independent challenge, ensuring key operational risks, controls, and treatment plans accurately reflect the Bank’s risk profile.
- Critically analyse information from incidents, complaints, RCSAs, control assurance, third-party risk, change risk, and other operational risk activities to identify and clearly articulate emerging risks, systemic control weaknesses, and cross-cutting themes.
- Produce high-quality operational risk management information that translates risk information into meaningful insight, clear recommendations, and practical actions for Executive Management and Board Committees.
- Work closely with the Head of Financial Risk to develop an integrated view of the Bank's overall risk profile, recognising the interaction between financial and non-financial risks.
- Contribute to the continued enhancement of the Operational Risk Framework by identifying opportunities to strengthen assurance activities, risk insight, and regulatory compliance.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Capabilities
- Strong second-line assurance capability, with the ability to independently design, execute, and document risk-based control assurance reviews particularly across ICT, Information security, cyber, operational resilience, and AI risk.
- Demonstrable expertise across ICT, information security, cyber, operational resilience, and AI risk, with the ability to provide credible technical challenge to both business and technology stakeholders.
- Strong analytical capability, with the ability to translate complex operational risk information into meaningful management insight and Board-level reporting.
- Proven ability to identify systemic risks and control weaknesses by connecting information across multiple operational risk sources.
- Strong judgement, influencing, and stakeholder management skills, with confidence engaging senior management and Board Committees.
- Sound understanding of regulatory expectations relating to operational risk, ICT risk, operational resilience, and technology governance within a regulated environment.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Some of our benefits (only applicable to UK-based roles not Internship programmes)
- Competitive salary & lots of opportunities to learn, grow, and progress professionally.
- Open and inclusive culture.
- Hybrid working.
- Fantastic offices and great working environment.
- Vitality Health Plan (includes private health insurance, travel insurance, gym discounts)
- Health cash Plan (Medicash health plan Level 3)
- 6% employer pension contribution.
- Life assurance – 4 x salary.
- Income protection insurance – 75%
- 28 days holiday plus 3 additional days, & further days for various key life events as well as the opportunity to sell up to 5 days per calendar year.
- Swap public/bank holidays each year for alternative days that align with your personal, cultural, or religious observances.
- Enhanced family-friendly and family-forming policies.
- Access to a wide range of retail discounts.
- Team Socials.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location