Vice President - Information Technology and Cyber Risk Management Job at Crédit Agricole (NEW YORK NY OR ISELIN NJ)

Cyber and Information Security Risk Manager, Senior Vice President

This role is critical for safeguarding the bank's financial stability and sustai...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Significant progressive experience in Cyber & Information Security Risk Management, IT Risk, Security Compliance, or IT Audit, with significant experience in a financial services environment
Demonstrated expertise in identifying, assessing, measuring, monitoring, and reporting on complex cyber and information security risks
Proven track record of designing and leading initiatives to enhance security controls and processes
Extensive experience collaborating with and managing expectations of diverse stakeholders, including business unit leaders, technical teams, and 2nd and 3rd line functions
Strong understanding of evolving cyber threat landscapes, regulatory requirements (e.g., NIST, ISO 27001, GLBA), and industry best practices
Proficient in maintaining risk and control frameworks, including Manager’s Control Assessment (MCA), specifically for Cyber & Information Security risks
Exceptional communication and presentation skills, with the ability to articulate complex cyber risk concepts and their business impact to senior management and governance committees
Ability to act as a primary liaison for all audit and regulatory engagements pertaining to Cyber & Information Security
Strong leadership capabilities with experience in leading and mentoring risk management professionals
Bachelor's degree required

Job Responsibility

Proactively identify and assess evolving Cyber & Information Security risks across the business and technology landscape
Design and lead strategic initiatives to enhance cyber and information security controls and processes, ensuring alignment with risk appetite
Collaborate effectively with business unit leaders and diverse stakeholders to embed robust cyber risk management practices into business operations
Partner with 2nd line functions to interpret and apply cyber risk requirements and policies accurately
Engage with 3rd line functions to facilitate independent assessments, address findings, and drive resolution of cyber and information security issues
Maintain comprehensive oversight of cyber risk posture through continuous monitoring of metrics, activity, and corrective action plan execution
Prepare and present clear, concise updates on emerging cyber risks, control effectiveness, and strategic enhancements to senior management and governance committees
Ensure rigorous adherence to information security policies and regulatory requirements, including maintaining a robust Manager’s Control Assessment (MCA) for Cyber & Information Security
Serve as a primary liaison for all internal and external audit engagements related to Cyber & Information Security
Lead and mentor a team focused on cyber risk assessment, regulatory compliance, and efficient reporting and resolution of security-related matters

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Private medical insurance packages to suit your personal circumstances
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources

Fulltime

Cyber and Information Security Risk Manager, Senior Vice President

This role is critical for safeguarding the bank's financial stability and sustai...

Location

United Kingdom , Belfast

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of progressive experience in Cyber & Information Security Risk Management, IT Risk, Security Compliance, or IT Audit, with significant experience in a financial services environment
Demonstrated expertise in identifying, assessing, measuring, monitoring, and reporting on complex cyber and information security risks
Proven track record of designing and leading initiatives to enhance security controls and processes
Extensive experience collaborating with and managing expectations of diverse stakeholders, including business unit leaders, technical teams, and 2nd and 3rd line functions (e.g., Information Security Compliance, Operational Risk, Internal Audit, Regulators)
Strong understanding of evolving cyber threat landscapes, regulatory requirements (e.g., NIST, ISO 27001, GLBA), and industry best practices
Proficient in maintaining risk and control frameworks, including Manager’s Control Assessment (MCA), specifically for Cyber & Information Security risks
Exceptional communication and presentation skills, with the ability to articulate complex cyber risk concepts and their business impact to senior management and governance committees
Ability to act as a primary liaison for all audit and regulatory engagements pertaining to Cyber & Information Security
Strong leadership capabilities with experience in leading and mentoring risk management professionals
Bachelor's degree required

Job Responsibility

Proactively identify and assess evolving Cyber & Information Security risks across the business and technology landscape
Design and lead strategic initiatives to enhance cyber and information security controls and processes, ensuring alignment with risk appetite
Collaborate effectively with business unit leaders and diverse stakeholders to embed robust cyber risk management practices into business operations
Partner with 2nd line functions (e.g., Information Security Compliance, Operational Risk Management) to interpret and apply cyber risk requirements and policies accurately
Engage with 3rd line functions (e.g., Internal Audit, Compliance Assurance) to facilitate independent assessments, address findings, and drive resolution of cyber and information security issues
Maintain comprehensive oversight of cyber risk posture through continuous monitoring of metrics, activity, and corrective action plan execution
Prepare and present clear, concise updates on emerging cyber risks, control effectiveness, and strategic enhancements to senior management and governance committees
Ensure rigorous adherence to information security policies and regulatory requirements, including maintaining a robust Manager’s Control Assessment (MCA) for Cyber & Information Security
Serve as a primary liaison for all internal and external audit engagements related to Cyber & Information Security
Lead and mentor a team focused on cyber risk assessment, regulatory compliance, and efficient reporting and resolution of security-related matters

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Private medical insurance packages to suit your personal circumstances
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources

Fulltime

Vice President, Technology Risk Management

Our Purpose Mastercard powers economies and empowers people in 200+ countries an...

Location

United Kingdom , London

Salary:

Not provided

Mastercard

Expiration Date

Until further notice

Requirements

Proven ability to create outcomes or timely escalations with options, someone who rejects drift
Can lead teams – attracting, engaging, and retaining talent. Minimises friction and can develop people
Breadth and depth of cyber security achievements in a highly regulated environment
Experience dealing with matrix organisations, ideally including large multinationals
Experience presenting to, and working with senior partners in regulators, boards and customer organisations
Able to simplify data, and to distil messages to create compelling accurate narratives for stakeholders of all seniorities
Able to work closely with risk and audit colleagues to deliver relevant and high value-add assurance
Track record of embedding security controls in a complex organisation, managing competing demands to drive down aggregate residual risk
Strong influencing skills
organizationally savvy

Job Responsibility

Attract and retain a high-performing team of cyber professionals across the whole security team - engaging and developing our talent
Lead on the management and reporting of Cyber Risk for the firm, running the key governance committee (a sub committee of the firm's ExCo)
Lead on the design and production of all cyber MI for the firm, informing our board, customers, and regulators of our posture and residual risks – in many fora this role is the face of security
Mature our nascent threat modelling and residual-risk quantification techniques
Design & deliver regular reports to the board, the Executive Committee, customers, often with in-person presentations including Q&A
Play a leading role in the security leadership team alongside technical specialists, delivering our overall strategy and operation
Deputise for the Business Security Officer in internal, customer- and regulator-facing situations when necessary
Lead on implementing cyber security policies and procedures to minimize risk exposure and drive control maturity
Co-ordinate 1LOD activities around certifications such as PCI, SWIFT, ISO270001, ISAE3402, etc.
Act as a central point of co-ordination for all assurance activities, working with 2LOD, 3LOD, and the 1LOD controls office

Fulltime