Business Information Security Officer

• To provide a primary liaison service between the business, technology, and security functions. In order to ensure the confidentiality, integrity and availability of information, and support the mitigation of security risk
• Collaboration with stakeholders to understand their security requirements in business processes and IT projects, to enhance overall risk management
• Execution of risk assessments to identify and prioritise potential cybersecurity threats that could impact the banks operations and data and guide the implementation of mitigation strategies and communicate findings to relevant findings to relevant senior stakeholders
• Collaboration with business units to develop and implement security policies and procedures for the banks operations aligned to the risk management framework
• Management of the implementation, testing and monitoring of security controls across the banks IT systems to ensure the effectiveness of controls and mitigation of risk
• Execution of training content and sessions to educate employees, enhance cybersecurity awareness and provide guidance on safe online practices
• Management of complex cybersecurity incidents by collaborating with IT teams and response experts to effectively resolve cases through analysis, expertise support and project supervision
• Identification of emerging cybersecurity trends, threats, and new technologies to address potential risks by advocating the adoption of new security solutions

• Experience as an Engineer and Architect delivering complex infrastructure solutions and Integration
• Expert design and solutions on cloud security, including cloud & SaaS security architecture, access control, data protection with a strong understanding of cloud computing platforms (AWS, Azure, GCP)
• Implementing cloud-specific security strategies, policies, and procedures, ensuring alignment with overall business goals and regulatory requirements, especially those related to data privacy and security
• Identifying, assessing, and mitigating security risks associated with infrastructure and data platforms, working with the platform engineering team on how to implement
• Experience of Architecture Frameworks and application of security principles into strategic architectures
• Build consensus across CISO and business units with a view to driving the data security solutions across the organization
• Expertise in modern data platforms preferably with experience in Databricks and Snowflake implementations

Relevant certifications such as cloud-specific certifications (e.g. AWS Certified Security - Specialty) would be preferable

• Competitive holiday allowance
• Life assurance
• Private medical care
• Pension contribution