Global Head of Technology Controls Assurance

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion.

That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience. Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you Job Description The Global Head of Technology Controls is accountable for defining, implementing, and overseeing Apex Group’s global technology control framework.

The role ensures that key technology and cyber controls are consistently designed, implemented, and operating effectively across all regions, legal entities, and technology platforms. Working closely with the Group CISO, Technology, Risk, Compliance, cyber and IT service areas and Audit functions, this role provides assurance that Apex’s technology control environment meets regulatory expectations, supports operational resilience, and enables secure business growth.

Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities,  internal and external. Key Responsibilities Technology Control Framework & Strategy Define and maintain Apex’s global technology control framework, aligned to the Group’s risk appetite, cyber strategy, Apex Gold Standard and regulatory obligations.

Establish clear control standards, policies, and minimum requirements covering infrastructure, applications, cloud, identity, data, and end-user computing. Ensure consistent adoption and maturity of technology controls across regions and entities. Perform all Duties requested by the Group CISO to delivery the Target Operating Model and Cyber Strategy. Control Design, Implementation & Effectiveness Oversee the design and implementation of preventive and detective technology controls across the enterprise.

Ensure controls are clearly mapped to key technology and cyber risks, regulatory requirements, and industry standards. Drive continuous improvement of control effectiveness, consistency, and automation. Assurance, Testing & Monitoring Lead global technology control testing and assurance activities, partnering closely with Technology Assurance, Risk, and Internal Audit. Ensure timely identification, escalation, and remediation of control weaknesses and issues.

Provide clear, risk-based reporting on control effectiveness, issues, and remediation progress to the Group CISO and governance forums. Regulatory & Risk Management Support regulatory examinations, client due diligence, and external audits related to technology and cyber controls. Ensure technology controls support Apex’s operational resilience, data protection, and cyber security obligations.

Partner with Enterprise Risk Management to ensure technology risks are appropriately assessed and managed. Third-Party & Cloud Controls Ensure robust technology control requirements are embedded into third-party, outsourcing, and cloud arrangements. Oversee control expectations for managed service providers and offshore service models. Address evolving risks associated with cloud platforms, SaaS solutions, and emerging technologies.

Stakeholder Engagement & Governance Act as a key advisor to the Group CISO on technology control maturity, risks, and i