Information Security Assurance Officer - International Bank

Information Security Assurance Officer - International Bank

An exciting opportunity opens to join a leading international Bank as their Information Security Assurance Officer, driving security assurance, cyber risk and governance across critical systems, third parties and outsourced services. You will work closely with senior stakeholders to assess security controls, lead audits and certifications, strengthen the bank's security posture, and help shape its Information and Cyber Security strategy.

Key Responsibilities

• Deputise for HoIS, briefing Information Security, EMC and Board Committees as required.
• Liaise with Third Parties to plan and monitor assurance activities on the Bank's core systems, platforms and capabilities.
• Collaborate with HoIS on Data Loss Prevention (DLP) to protect client, staff and sensitive information from leakage or loss.
• Work with HoIS to evaluate information security risks for new projects, products, systems, and other significant changes.
• Assist HoIS in creation and review of Bank Information and Cyber Security governance, developing, reviewing, and helping maintain information security governance policies, standards, frameworks, and procedures.
• Improve Information Security by analysing current controls and governance and recommending improvements, innovation and change.
• Lead annual PCI-DSS re-certification and assist with SWIFT re-certification as required.
• Act as secretary to the Bank's Information Security Committee.
• Lead audit activities as required, coordinating the submission of evidence from the various departments; own specific audit actions from identification to resolution.
• Participate in the creation and delivery of Information/Cyber Security Awareness training, educating staff on best practices.
• Support the ISO in annual budgeting and planning.
• Participate in Cyber Incident Response as part of the ISO Team.

Qualifications, Experience, Skill and Competencies

Essential

• Willingness to learn and expand own skills in Information Security, Banking and Financial Services in general.
• Ability to work autonomously and flexibly within a team, contributing to an improved Bank security posture.
• Strong initiative to examine and review the Bank's Attack surface, analyse and interpret data to provide insights to the most likely threats facing the Bank.
• At least 3 years' Information Assurance experience and/or working within a highly regulated UK sector.
• Information Security qualification (degree, CISSP, or CISM) obtained or in progress.
• Working knowledge of NIST CSF 2.0 and ISO 27K.
• Strong technical acumen with broad knowledge across Information/Cyber Security, Software Development, and IT systems.
• Awareness of common Cyber Incidents and Security breaches (OWASP).

Desirable

• Hands on experience with Information Security tools, such as Purview and CrowdStrike.
• Experience delivering cyber security briefings to Staff/Leadership Teams.
• Experience in working with Information Security Risk Registers/Risk Control Self Assessments (RCSAs).
• Previous experience working within an organisations Cyber Incident Response function.
• Knowledge or experience in Three Lines of Defence model, SOC2, PCI DSS and GDPR.

Interested? Please apply now!

Information Security Assurance Cyber Security Cyber Risk GRC Information Security Governance Security Controls Risk Management Third-Party Risk Third-Party Assurance Security Audits PCI DSS SWIFT NIST CSF ISO 27001 ISO 27K DLP Cyber Incident Response RCSA Risk Registers Regulatory Highly Regulated Environment Financial Services Banking Information Security Strategy Security Frameworks InfoSec CyberSec