Role Description We are seeking a Technical Risk Engineer with strong technical acumen to design, prioritize, and enable risk-reducing technical solutions across complex cloud and enterprise environments. This role emphasizes solution engineering over process engineering—using risk frameworks, policies, and controls as inputs to architect practical, automatable, and scalable technical safeguards. The ideal candidate thinks like an engineer first and a risk professional second: someone who understands how systems fail, how controls can be enforced through code and architecture, and how risk intent is translated into resilient technical designs. - Engineer technical risk solutions that reduce operational, cyber, and resilience risk through architecture, automation, and control design. - Translate risk requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures. - Prioritize and influence solution design decisions based on risk impact, blast radius, and recovery dependencies. - Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines. - Evaluate control effectiveness using technical signals and evidence, not just procedural compliance. - Support initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience. - Provide technical guidance on risk tradeoffs, recovery sequencing, and dependency-aware system design. - Contribute to lightweight process definition where needed—but always in service of enabling better technical outcomes. Qualifications - Cloud Platforms: Google Cloud Platform (GCP) - Automation & API Development: Proficiency in Python or Java and Ansible for scripting, with hands-on experience in API development (RESTful) - Infrastructure as Code: Terraform (required) - Data & Analytics: GCP BigQuery, Power BI (or similar) to visualize risk posture & evidence. - Backup, recovery, and resilience solution architectures - Isolated Recovery Environment (IRE) design and implementation in GCP Requirements - Requires a bachelor’s or foreign equivalent degree in computer science, information technology or a technology related field - 7+ years in IT operations & engineering, security engineering, platform engineering, SRE, or technical risk roles - Backup, recovery, and resilience solution architecture implementations, especially IRE’s. - Proven ability to design and influence technical solutions across teams - Strong understanding of how risk manifests in distributed systems, cloud platforms, and automation - Comfortable operating between engineering teams and risk stakeholders - Ability to explain complex technical risk concepts to non-technical audiences without losing fidelity Benefits - Immediate medical, dental, and prescription drug coverage - Flexible family care, parental leave, new parent ramp-up programs, subsidized back-up child care and more - Vehicle discount program for employees and family members, and management leases - Tuition assistance - Established and active employee resource groups - Paid time off for individual and team community service - A generous schedule of paid holidays, including the week between Christmas and New Year’s Day - Paid time off and the option to purchase additional vacation time.

• Lead enterprise data governance strategy, policies, and standards. • Manage and implement Unity Catalog for centralized governance and access control. • Drive data quality, metadata management, lineage, and cataloging initiatives. • Partner with engineering, analytics, security, and business teams to enforce governance best practices. • Define data stewardship and ownership frameworks. • Ensure compliance with security and regulatory standards. • Communicate effectively with technical and non-technical stakeholders to drive governance adoption and resolve challenges.

• Identify and articulate material risks • Ensure consistency between disclosure and operational reality • Quantify exposure where possible • Maintain defensible documentation • Participate in risk identification processes • Evaluate incident response history • Evaluate security maturity • Monitor controls documentation • Map risks to security and compliance controls • Monitor and evaluate evidence retention • Embed risk into engineering lifecycle • Partner with Security and Platform Engineering • Drive operational risk quantification • Support diligence with architecture fluency • Own the enterprise risk framework • Coordinate with Legal, Finance, and Audit • Build board-level reporting structure

• To help lead the SME Risk team to deliver Secondsight’s Health & Protection Proposition. • Reporting to the Head of Health and Protection, the role will involve leading the SME risk team, while also proactively managing an existing portfolio book, providing a high-quality consulting and advisory service to clients. • Incorporate managing our PPA and working with the leading risk insurers. • As a Line Manager, to be directly responsible for the day-to-day management of the team including; effective resourcing, delegation of tasks, performance management (via monthly continuous performance reviews), development and engagement. • Overall responsibility for a portfolio of protection schemes for a range of corporate clients, which will include: • Fact Find/initial advice calls • The preparation of quote specifications, review of quotations, negotiation with insurers and preparation of review/renewal reports. • Face to Face and telephone advice meetings with clients • Generating additional revenue opportunities • Answer and deal with inbound calls from clients, employees and benefit providers. • Adherence to the new business process for prospects