What will you be doing?
The key aspects of this role can be split into the three categories below:
- Ensure effective Governance & Compliance within Security Standards & Rigour and embed it across CSO, leveraging these activities to drive continuous improvement:
- Lead on engagements with internal & external audit, conformance testing & other assurance activities. Leverage audit findings & lessons learned to identify thematic concerns & drive systemic improvements
- Operate and continuously improve the Issue Management process. Monitor compliance, manage security controls exceptions, own issues & close gaps identified within cyber controls environment
- Build& maintain relationships with key stakeholders. Act as relationship manager for internal audit,, operational risk, Chief Information Security Officers, Technology and CSO leadership.
- Deliver & develop Security Standards & Rigour Business- as-Usual Operations, setting and exceeding rigorous standards of quality & timeliness:
Maintain policies & standards
- Annual refresh of all CSO policies & standards & interim updates as required
- Support/operate Standards Councils & control forums to provide governance & escalation
Reporting
- Oversee production of Key Risk Indicator (KRI) and Key Control Indicator (KCI) reporting
- Drive the automation of manual processes
- Internal operations. Manage and report adherence to internal process requirements and Service Level Agreements
- Provide enhancement by broadening and deepening Security Standards & Rigour value offering to CSO, driving consistency & rigour across CSO control activities:-
- Deliver seamless & transparent alignment to regulatory requirements
- Lead & drive delivery of specific enhancements to the control environment
- Transition one-off activities into repeatable BAU processes within the business
What we're looking for:
- Very strong computer application skills, especially in MS Excel, PowerPoint
- Experience working within the information & cybersecurity field, including systems audit or internal controls, that are relevant to our business & financial services.
- Influencing & negotiating skills
- Experience of building & maintaining effective relationships with stakeholders through strong communication skills, both written & verbal
Skills that will help you in the role:
- Practical experience of improving process & control environments in the particular operational effectiveness of industry-wide recognised financial frameworks
- Strong academic background, educated to degree level or 5 years professional experience
- Relevant information risk qualifications e.g. NIST, CISA, CISSP, CISM would be beneficial
Didn’t find the job appropriate? Report this Job