Information Security Architect - Change - Banking

Information Security Architect - Change - Banking

Excellent opportunity open for an up and coming Information Security Architect to join a challenger bank in London. The bank is going through a massive digital transformation and you will be supporting the regulatory-driven modernisation initiatives across the bank. The successful candidate will have an excellent understanding of security and privacy domains and the ability to work with a complex group of stakeholders.

Main Responsibilities

• Risk and Control Assessments - You will lead risk & control assessments using the Banks defined processes, covering supplier due diligence, privacy impact assessments and project security.
• Problem Solving - You will develop a deep knowledge of your workstreams technology stack and business outcomes allowing you to not only identify security risks but identify and propose practical solutions to the team. This role is all about helping teams deliver securely not just calling out risks.
• Risk Management - You will support your workstream identify and articulate risks, steering them towards appropriate treatment plans, documenting mitigating controls and ensuring these are actions within agreed timeframes. You will operate in line with the Bank's Risk Management framework (including sub-frameworks) and relevant risk and compliance policies and procedures, ensuring appropriate and timely escalation of any concerns to your line manager.
• Subject Matter Expertise - You will develop a deep knowledge of the Banks secure change processes and procedures, shepherding your workstream through various assessments and approval gates.
• Relationship Management - You will build deep, trust based relationships with key stakeholders within your delivery team such as developers, testers, product managers, delivery leads and tech leads. You will be an active member of the delivery team, attending daily stand-ups, PI planning sessions and working groups.
• Advisory - You will provide specialist advice and interpretation of Information Security best practice and UK regulatory requirements to a range of different stakeholders as new products, processes and systems are developed. You will need to be aware of your own knowledge gaps and when & where to seek specialist input to solve a particular problem or query.

Ideal Candidate

• Information Security - Solid, practical and demonstrable experience of information security (technical and non technical aspects)
• Technology Change - Demonstrable experience of supporting technology change initiatives to deliver solutions securely
• Privacy - You don't need to be a privacy expert but you will require a good understanding of core privacy concepts and how these apply to technology change initiatives
• You understand the intersection of Risk Management and Information Security and how these relate to each other in a Financial Service business (3LoD model)
• Line management experience
• Excellent stakeholder management skills
• Problem solving skills

Interested? Please Apply!

InfoSec Information Security Security Privacy InfoSecArch InfoSec Architect Information Security Architect Information Security Consultant Solution Architect Solution Architecture Bank Banking Finance Financial Services Change Modernisation CISSP Technology Change Regulatory Requirements Risk Management 3LOD 3LoD