About the Job
Constantinople delivers a new era of AI-native banking. Constantinople provides banks with a fully-managed software and AI operational platform, which brings together customer experience, product, data, operations, compliance and infrastructure in a single platform.Constantinople’s AI-native platform eliminates the need for expensive infrastructure, and replaces manual operational and compliance processes with AI at scale. By removing the operational complexity of banking, Constantinople enables our client banks to focus on their customers and the business of banking.The Role
You’ll lead the management of operational risk and compliance for the Constantinople Banking Cloud Platform and our corporate environment in the UK. You’ll join a growing global risk and compliance team and work deeply across digital and cloud banking products (transaction banking, payments, lending), software development, third-party and outsourcing risk, operational resilience, and data protection.
As a technology and operational services provider to UK-regulated banks, we must help our clients meet their PRA and FCA obligations. That includes outsourcing and third-party risk expectations, operational resilience requirements and Consumer Duty outcomes. You’ll partner with Product, Engineering, Operations and our client banks’ risk functions to give advice, drive key initiatives and run control assurance and governance activities.
Key Responsibilities
Identify and assess risks and regulatory obligations in new features and products on the platform for the UK market, and run deep-dive reviews on priority risk classes
Keep a UK regulatory obligations register and run horizon scanning, so PRA, FCA, Bank of England and ICO changes are assessed and built into the product roadmap
Work with Product and Engineering Managers to design and implement controls and monitoring across the product and corporate environment
Support client banks’ operational resilience programmes (PRA SS1/21, FCA PS21/3) by mapping important business services, supporting impact tolerance setting, and contributing to scenario testing and self-assessments
Help our client banks meet their outsourcing and third-party risk obligations under PRA SS2/21 and the FCA SYSC 8 rules, including audit and access rights, exit planning and sub-outsourcing oversight
Support Consumer Duty (PRIN 2A) work, including product governance, fair value, customer understanding and outcomes monitoring
Support payments compliance, including the Payment Services Regulations 2017, Faster Payments and Bacs scheme rules, Confirmation of Payee, and the APP fraud reimbursement requirements
Drive action plans and uplift work for control gaps and weaknesses, or guide other teams through their own uplift
Coordinate internal testing and independent assurance reviews, and support client bank, regulator and auditor requests
Support our SOC 2 programme and related UK certifications, such as ISO 27001 and Cyber Essentials Plus
Run governance activities: third-party due diligence, risk forums, change management and impact assessments, and issue, incident and breach management, including regulatory and ICO notification processes
Required Skills & Abilities
Sound knowledge of operational risk and compliance concepts, frameworks and standards, such as the three lines model, RCSA and the Basel operational risk principles
Strong understanding of UK financial services regulation for banking products and services to retail and/or SME customers, including:
The PRA Rulebook and FCA Handbook (PRIN, SYSC, COND, BCOBS, CONC/MCOB where relevant)
Consumer Duty
Operational resilience and outsourcing / third-party risk requirements, plus awareness of the UK Critical Third Parties regime
The Senior Managers & Certification Regime (SM&CR)
Working knowledge of UK financial crime requirements: the Money Laundering Regulations 2017, JMLSG Guidance, the Proceeds of Crime Act 2002, the Bribery Act 2010, sanctions (OFSI), and the “failure to prevent fraud” offence under the Economic Crime and Corporate Transparency Act 2023
Knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR, including DPIAs and international data transfers
Experience in UK banking, financial services or fintech. Experience with prudential requirements or a regulated technology provider is desirable.
Experience with design processes and/or software development, ideally in an agile, cloud-native setting
A relevant professional qualification is desirable, such as the ICA Diploma in Governance, Risk & Compliance, IRM, CISI, or IAPP CIPP/E
Strong teamwork skills that build good relationships and add to company culture
Ability to work autonomously, tackle complex problems, prioritise, and communicate with and influence stakeholders on risk management
The right to work in the UK
