Overview
In this role you will lead risk-based security assurance activities and manage third-party assessments to strengthen governance across critical systems and data. You will identify vulnerabilities, drive remediation, and collaborate with internal teams and external partners to elevate the organization’s cyber security posture. You’ll work on security strategy and controls within a regulated environment, making a tangible impact on risk management and incident readiness. This is a proactive, stakeholder-facing opportunity in a financial services setting with a clear focus on measurable security improvements.
Pay / Benefits
- bonus
- pension
- hybrid working
Responsibilities
- Lead risk-based security assurance activities
- Manage third-party security assessments
- Identify vulnerabilities and drive remediation
- Strengthen information security governance and controls
- Collaborate with internal teams and external partners on security initiatives
- Contribute to security strategy and risk management across the business
Key requirements
- 3+ years’ experience in Information Security or a highly regulated UK sector
- Knowledge of NIST CSF 2.0, ISO 27001, and information security frameworks
- Experience in security risk assessments, audits, governance and vulnerability remediation
- Strong technical understanding of cybersecurity, IT systems, and software development
- Information Security qualification (degree, CISSP or CISM), achieved or in progress
- Experience with PCI DSS, SWIFT, DLP or cyber incident response is advantageous
- Excellent stakeholder management, communication and analytical skills
- stakeholder management
- communication
- analytical skills
- NIST CSF 2.0
- ISO 27001
- security risk assessments
…
