Information Security Assurance Officer – International Bank (Second Line)
Location: London (City)
Type: Permanent, full time
About the role
Our client, a well-established international bank in London, is looking for an Information Security Assurance Officer to join its Information Security Office. The team sits in the Risk function (second line of defence) and reports to the Head of Information Security.
This is a varied, hands‑on role. You’ll lead assurance work across the bank’s systems and infrastructure, make sure the business is properly protected, and help shape the bank’s information and cyber security strategy. You’ll work closely with technology, operations, payments and risk teams, external auditors and third‑party suppliers, as well as the bank’s group head office overseas.
Key responsibilities
- Deputise for the Head of Information Security, including briefing senior management and Board committees
- Plan and oversee assurance activity with third parties on core systems and platforms
- Lead the annual PCI‑DSS recertification and support SWIFT recertification
- Coordinate audits: gather evidence from across the bank and own actions through to closure
- Act as secretary to the Information Security Committee
- Assess information security risks for new projects, products, systems and changes
- Help develop and maintain security policies, standards, frameworks and procedures
- Support data loss prevention (DLP) work to protect client and bank information
- Help deliver security awareness training across the bank
- Take part in cyber incident response and support annual budgeting and planning
What we’re looking for
- At least 3 years’ experience in information assurance and/or a highly regulated UK sector
- An information security qualification (CISSP, CISM or a relevant degree), obtained or in progress
- Working knowledge of NIST CSF 2.0 and ISO 27001
- Broad technical knowledge across information and cyber security and IT systems
- Awareness of common cyber threats and breaches (OWASP)
- Confident communicator who can work independently and manage changing priorities
- PCI‑DSS, SWIFT, SOC 2 or GDPR experience
- Hands‑on experience with security tools such as Microsoft Purview or CrowdStrike
- Experience with security risk registers or RCSAs
- Understanding of the three lines of defence model
- Experience presenting cyber security briefings to staff or leadership
Why apply?
You’ll join a small, influential team where your work is visible at senior level, with sponsored training and the chance to attend industry events.
#J-18808-Ljbffr…