Application Owner (CSTech Risk) at Investec

Description

• Investec is seeking an experienced senior technology leader to assume end-to-end ownership of the GRC Technology portfolio, supporting Operational Risk, Compliance, Internal Audit, and Operational Resilience. This strategic role is responsible for shaping and delivering the technology vision, roadmap, and operating model for GRC, with Protecht ERM positioned at the centre of the platform ecosystem. The role will drive a multi-year transformation agenda focused on API-first integration, enhancing platform extensibility, streamlining and automating fragmented processes, and advancing GRC capabilities into a data-driven, insight-led function through modern data platforms and analytics. The successful candidate will act as a trusted technology partner to the GRC leadership community, providing strategic direction, influencing key stakeholders, building high-performing teams, and ensuring strong architectural governance. While not a hands-on engineering role, this position requires sufficient technical depth to guide solution design, critically evaluate architectural decisions, and ensure scalable, secure, and resilient technology outcomes.

Key Responsibilities

• Define and own the GRC Technology strategy and multi-year roadmap, aligned to Investec's enterprise technologyand data strategy.
• Act as the primary technology partner to senior leaders across Operational Risk, Compliance, Internal Audit, and Operational Resilience.
• Shape the future-state GRC operating model, ensuring technology enables proactive risk management and assurance.
• Drive alignment across business and technology stakeholders, resolving trade-offs and setting clear priorities.
• Hold end-to-end accountability for the GRC technology portfolio, including Protecht ERM and associated integration, reporting, and data components.
• Lead the architectural evolution of the platform landscape, including API enablement and integration patterns, cloud aligned and scalable architecture decisions, simplification of legacy processes and tooling.
• Establish architectural principles and guardrails to ensure sustainability, resilience, and security.
• Champion the shift from process-centric tooling to a data- and insight-led GRC ecosystem.
• Enable high-quality, trusted GRC data and integration into enterprise data platforms.
• Support the development of improved MI, dashboards, analytics, and decision-support capabilities.
• Build and lead a high-performing GRC Technology team with strong engineering, integration, and data capabilities.
• Set clear performance standards and foster a culture of ownership, accountability, and continuous improvement.
• Coach and develop team members, ensuring succession planning and long-term capability growth.
• Create an environment that balances delivery excellence with innovation and learning.
• Accountable for delivery against agreed roadmaps, budgets, and priorities.
• Ensure robust technology risk, security, and resilience controls across the GRC portfolio.
• Own vendor relationships and commercial management, including budgeting and cost optimization.
• Ensure operational stability and reliable support of business-critical GRC systems.

Qualifications, Experience and Skills

• Proven experience in a senior technology leadership role within a financial services organization.
• Demonstrated ability to influence and partner effectively with senior business and risk stakeholders.
• Experience owning and modernizing enterprise platforms, including vendor-based solutions.
• Strong understanding of API-led integration, modern architecture principles, and data-centric design.
• Exposure to Risk, Compliance, Audit, or Resilience domains is advantageous.
• Track record of building and leading high-performing technology teams in complex, regulated environments.
• Strategic, credible, and calm under pressure.
• Strong stakeholder management and influencing capability at senior levels.
• Able to operate across business, risk, and technology domains with confidence.
• Pragmatic and delivery-focused while maintaining long-term architectural integrity.
• High level of ownership, accountability, and professional maturity.