Our Story

Hello there. We’re Zopa.

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com!

We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces.

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count. Want to see us in action? Follow us on Instagram @zopalife

At Zopa, our Second Line Technology Risk team helps the business move fast, yet safely. We partner closely with engineering, security, resilience and product teams to spot emerging risks, challenge assumptions and make sure our technology stays secure, resilient and ready to scale.

This role is perfect for someone curious, analytical and excited by variety. You could be reviewing resilience testing around payments one week, exploring ransomware readiness the next, or using observability data to uncover emerging risks across critical services.

You’ll work alongside experts in cyber security, infrastructure and architecture, but this is an oversight and risk role rather than hands-on engineering. We’re looking for someone who enjoys diving into detail while still seeing the bigger picture.
What makes this role different? Zopa is still building and evolving at pace without the burden of legacy technology. We’re investing heavily in observability, AI tooling and modern risk approaches, giving you the opportunity to help shape the future of technology risk oversight.

### A day in the life:

Assess resilience exercises, cyber controls and technology changes

Investigate emerging risks across cloud, cyber and operational resilience

Use operational and observability data to spot trends and vulnerabilities

Simulate real-world scenarios like ransomware or data leakage events

Produce clear, evidence-based risk insights for senior stakeholders

Partner with teams across technology, security and product to influence better decisions

### About you:

Experience in technology risk, cyber risk, IT audit, InfoSec or similar

Curiosity about technology, cyber security and resilience

Confidence working with technical experts and challenging constructively

Strong analytical thinking and practical risk judgement

Ability to balance detail with strategic thinking

Familiarity with frameworks like NIST or ISO 27001

### Bonus points for:

Financial services or regulated industry experience

Experience with operational resilience or observability tooling

Certifications like CISSP, CISA, CRISC or CISM

Interest in AI and emerging technology risks

#LI-LK1

At Zopa we value flexible ways of working.

We value face-to-face collaboration and a good work-life balance. This hybrid role requires you to come to our London office 2-3 days a week.

You'll also have the option of working from abroad for up to 120 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one.

*Subject to having the right to work in the country of choice

Diversity Statement

Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to better products for our customers and a unique company culture for our people.

Technology Risk Manager

Want to see the full job description?

Job details

Zopa