Transformation Practitioner (inside IR35)
A major UK bank's cybersecurity function is preparing for large-scale change, starting with a lean, seeded phase this year and a bigger build from next year. The bank wants to prove value in quarters, through a qualitative business review, rather than commit to a big programme upfront. The focus is control, compliance and safer, faster engineering journeys. The engagement runs through a partner consultancy who holds the direct client relationship.
What the client wants
People who feel like practitioners, not coaches. They work alongside the bank's own portfolio managers and Scrum Masters, act as extended resource, and show the change by doing the work rather than instructing from the side. They want consultants who are framework-agnostic and heavy on real delivery
The team
Three people to spearhead the first phase, each carrying a specific, named piece of the problem so the client sponsor can hand it off and focus elsewhere. One example given directly by the client sponsor: portfolio slicing, redesign and shaping into value streams.
Core responsibilities
● Take ownership of one named problem area within the transformation and act as the go-to person for it
● Work embedded inside the bank's teams, alongside portfolio managers and Scrum Masters, rather than running separate coaching sessions
● Build early, visible wins within the first quarter to support continued funding
● Contribute to the shaping and language of the approach, so it reads as practical guidance rather than a branded methodology
● Navigate a risk-averse, highly regulated environment with judgement and patience
Ideal profile
● Strong track record in a large, complex, regulated environment; banking or financial services preferred
● Comfortable working as an embedded resource rather than a visiting advisor
● Able to flex approach to the client's context, no fixed playbook
● Confident engaging at exec and board level, and equally comfortable doing hands-on delivery work
● Prior exposure to cybersecurity, technology risk, or a comparable control-focused function is a strong plus
● Trusted, low-maintenance operators who need guardrails rather than close supervision