Key Responsibilities 

1) Bank Technology Strategy & Architecture (Hands-on) 

• Define the end-state architecture for the new bank platform, including integration patterns, data model, identity, security, environments, and operational tooling. 

• Produce the core set of technical standards and reference architecture: API standards, eventing/streaming where needed, encryption/key management, logging/monitoring, SDLC and release controls. 

• Make pragmatic build vs buy decisions with a bias towards speed-to-market without compromising regulatory expectations. 

2) BaaS Vendor Selection & Bank Platform Procurement 

• Own the vendor selection process for BaaS and key platform components: requirements definition, RFI/RFP, evaluation, technical due diligence, commercial inputs, and selection recommendations. 

• Design and run vendor proofs of concept to validate core capabilities (ledger, payments, onboarding, reporting, controls, resilience, operability). 

• Define vendor management approach: SLAs/SLOs, incident and problem management, change governance, security obligations, audit rights and exit planning. 

3) Regulatory Engagement & Approvals (Technical Lead) 

• Act as the technical authority for regulatory engagement: explain design decisions, demonstrate control frameworks, provide evidence of resilience, security, data governance and operating model readiness. 

• Co-own with Compliance/Risk the creation of technology components of regulatory submissions: architecture packs, security model, operational resilience artefacts, outsourcing/third-party risk evidence, DR/BCP evidence. 

• Ensure the platform design supports required regulatory capabilities: auditability, reporting, reconciliation, safeguarding/segregation where applicable, and clear lines of operational accountability. 

4) Build, Integrate & Launch Delivery 

• Lead hands-on delivery across vendors/SIs/internal stakeholders to implement the selected BaaS platform and surrounding services. 

• Own end-to-end integration approach: channels, back office/operations tooling, data pipelines, MI/regulatory reporting, and interfaces to Monex group systems where required. 

• Drive a delivery plan that enables rapid launch with controlled scope, and a roadmap to mature capability post go-live 

5) Security, Risk, Controls & Operational Resilience 

• Build security and controls “by design”: threat modelling, secure architecture, access controls, secrets management, vulnerability management and secure SDLC practices. 

• Define and implement an operational resilience approach: service mapping, impact tolerances (as applicable), resilience testing, DR strategy, and ongoing control testing. 

• Ensure third-party and cloud controls align to regulatory outsourcing expectations, including evidence and audit trails. 

6) Run, Operate & Continuous Improvement 

• Establish the run model for production operations (support, monitoring, incident/problem/change), including vendor handoffs and on-call arrangements. 

• Ensure the platform is operable: clear runbooks, dashboards, alerting, and measurable reliability and performance. 

• Own ongoing technology risk management for the bank platform and lead remediation of issues found via testing, incidents, audit or regulator feedback. 

7) Build the Founding Technology Function 

• Define the initial technology org shape and hiring plan (founding engineers/ops/security as needed), balancing internal capability with vendor delivery in association with shared Group Technology Services 

• Set the culture: engineering standards, documentation quality, delivery discipline, and high integrity in a regulated environment. 

• Coach and scale the team as the bank platform grows.