Senior Manager, Business Information Security

Overview

In this role you lead cyber risk assessment and governance for a Data & Analytics portfolio, partnering with leadership, product, engineering and central Cyber teams. You translate technical security issues into business exposure and drive risk treatment and remediation. You will oversee AI security governance and ensure controls remain fit-for-purpose while aligning with risk appetite. You’ll communicate risks clearly to executives and stakeholders, shaping secure delivery at scale. This is a chance to influence security outcomes across a major financial markets platform.

Pay / Benefits

• healthcare
• retirement planning
• paid volunteering days
• wellbeing initiatives
• sustainability commitments
• charitable grants via LSEG Foundation

Responsibilities

• Develop and maintain a threat-informed cyber risk profile for the assigned portfolio
• Govern AI security usage and alignment with LSEG requirements
• Identify material cyber risks, remediation opportunities, and track treatment plans to completion
• Assess inherent and residual risk with respect to threat relevance and business impact
• Communicate exposure, options and decisions to drive proportionate risk treatment
• Provide cyber risk reporting, KRIs and management information
• Help business and technology teams understand accountability for security risk management
• Assess security controls across applications, infrastructure, cloud, data platforms and third parties
• Evaluate AI-enabled tool usage for effectiveness, data handling and control impact
• Review security architecture, designs and changes to identify risks and attack paths
• Challenge vulnerability prioritisation, remediation plans and risk treatment decisions
• Assess privileged access, identity controls, secrets management and exceptions
• Consider legacy tech, technical debt and major transformation risks
• Offer practical, proportionate, risk-based recommendations to protect LSEG while enabling delivery
• Engage with cyber intelligence and security operations to understand threats relevant to the portfolio
• Translate threat scenarios into potential business consequences and decide on mitigation
• Support executive decisions with clear, concise risk information
• Build trusted relationships with leadership, product, engineering and central Cyber

Key requirements

• Experienced information or cyber security professional with credibility in a large tech environment
• Strong security knowledge and risk judgement to assess threats and business impact
• Excellent written and verbal communication for technical and non-technical audiences
• Ability to influence across organizational boundaries and maintain productive relationships
• Experience in cloud, security engineering/operations, architecture, vulnerability management, identity and privileged access, application or data security, resilience and third-party security
• Independent, evidence-based risk view with clear exposure and treatment options
• Knowledge of AI technologies and security implications is advantageous
• Relevant certifications or equivalent knowledge in cyber security risk is beneficial

• strong communication
• relationship-building
• influence across teams
• cloud security
• security engineering
• security operations

…