Key Responsibilities

1) Bank Technology Strategy & Architecture (Hands-on)

• Define the end-state architecture for the new bank platform, including integration patterns, data model, identity, security, environments, and operational tooling.

• Produce the core set of technical standards and reference architecture: API standards,eventingstreaming where needed, encryption/key management, logging/monitoring, SDLC and release controls.

• Make pragmatic build vs buy decisions with a bias towards speed-to-market without compromising regulatory expectations.

2) BaaS Vendor Selection & Bank Platform Procurement

• Own the vendor selection process for BaaS and key platform components: requirements definition, RFI/RFP, evaluation, technical due diligence, commercial inputs, and selection recommendations.

• Design and run vendor proofs of concept tovalidatecore capabilities (ledger, payments, onboarding, reporting, controls, resilience, operability).

• Define vendor management approach: SLAs/SLOs, incident and problem management, change governance, security obligations, audit rights and exit planning.

3) Regulatory Engagement & Approvals (Technical Lead)

• Act as the technical authority for regulatory engagement: explain design decisions,demonstratecontrol frameworks, provide evidence of resilience, security, datagovernanceand operating model readiness.

• Co-own with Compliance/Riskthe creation of technology components of regulatory submissions: architecture packs, security model, operational resilience artefacts, outsourcing/third-party risk evidence, DR/BCP evidence.

• Ensure the platform design supports required regulatory capabilities: auditability, reporting, reconciliation, safeguarding/segregation where applicable, and clear lines of operational accountability.

4) Build, Integrate & Launch Delivery

• Lead hands-on delivery across vendors/SIs/internal stakeholders to implement the selected BaaS platform and surrounding services.

• Own end-to-end integration approach: channels, back office/operations tooling, data pipelines, MI/regulatory reporting, and interfaces to Monex group systems whererequired

• Drive a delivery plan that enables rapid launch with controlled scope, and a roadmap to mature capability postgo-live

5) Security, Risk, Controls & Operational Resilience

• Build security and controls “by design”: threat modelling, secure architecture, access controls,secretsmanagement, vulnerability management and secure SDLC practices.

• Define and implement an operational resilience approach: service mapping, impact tolerances (as applicable), resilience testing, DR strategy, and ongoing control testing.

• Ensure third-party and cloud controls align to regulatory outsourcing expectations, including evidence and audit trails.

6) Run,Operate& Continuous Improvement

• Establish the run model for production operations (support, monitoring, incident/problem/change), including vendor handoffs and on-call arrangements.

• Ensure the platform is operable: clear runbooks, dashboards, alerting, and measurable reliability and performance.

• Own ongoing technology risk management for the bank platform and lead remediation of issues found via testing, incidents,auditor regulator feedback.

7) Build the Founding Technology Function

• Define theinitialtechnology org shape and hiring plan (founding engineers/ops/security as needed), balancing internal capability with vendor deliveryin association with shared Group Technology Services

• Set the culture: engineering standards, documentation quality, delivery discipline, and high integrity in a regulated environment.

• Coach and scale the team as the bank platform grows.