Description
The purpose of this role is to assist the Director of Business Information Security (BISO) in all security matters relating to the oversight of Information and Cyber Security within the LCH Ltd. business line of LSEG's Post Trade division.
The successful candidate will be charged with ensuring that the critical business systems and data assets of LCH Ltd. are adequately protected, and that all related information security and cyber controls remain effective and within risk appetite and/or have appropriate risk treatment plans in place to bring them back into risk appetite.
Key responsibilities include:
- Assisting in the oversight of Information Security by reviewing and assessing the information security and cyber controls that enable LCH Ltd. to conduct its business in a secure manner, and gap analysis of the same.
- The oversight of InfoSec/Cyber related control gap/risk remediation activities.
- Monitoring and analysing the information security roadmaps, strategies, programmes, and projects within LCH Ltd., and identifying and reporting risks, trends and future opportunities for improvement and enhancement.
- Proactively engaging and working closely with the technology and cyber teams that are delivering technology and cyber services to the firm.
- Attending risk and governance meetings to provide updates to the LCH Ltd. stakeholders from the three lines of defence regarding the delivery and progress of the various strategic cyber initiatives and broader cyber programme within LSEG.
- Working with colleagues from the three lines of defence to define the current risk posture of LCH Ltd. and collaborating with those stakeholders to remediate identified risks/issues.
- Engaging with external third parties who provide services to LCH Ltd. and working closely with the established internal third-party oversight functions to ensure appropriate and contracted levels of security are met.
- Establish and maintain a Cyber Risk Profile of LCH Ltd. in line with other areas of LSEG.
- Assisting with the establishment and maintenance of a Risk Control Assessment (RCA) that focuses on InfoSec/Cyber risks and associated controls.
- Maintaining the established key performance and key risk indicators and ensuring that all management information (MI) is an accurate reflection of the current control's estate.
- Maintaining an accurate set of executive level presentation materials that clearly and accurately present the current state of security control within LCH Ltd.
- Assessing the security architecture solution designs and risk position of projects and initiatives undertaken by LCH Ltd. and working closely with associated SMEs and design authorities to ensure projects are delivered in compliance with Policies and Standards, and with security design principles considered/implemented as key success deliverables.
The successful candidate must be a subject matter expert in Information Security, as the role demands a very strong knowledge in all areas of information security and cyber security, as well as in-depth knowledge of legacy, existing, and emerging technologies including cloud and security technologies/controls.
Requirements:
- 10 years minimum experience in senior InfoSec management roles.
- Extensive previous exposure to FS or FMI industry organisations.
- High performance in problem solving, innovating and critical thinking.
- Excellent written/verbal communication and stakeholder management skills.
- Ability to articulate ideas to both technical and non-technical audiences.
- Must be capable of working pragmatically and efficiently in both a team and alone.
- Able to prioritise workloads efficiently and appropriately with minimal supervision.
- Able to work in fast paced, high-volume workload environment, prioritising accordingly.
Certifications:
- CISSP (Must Have).
- CISSP-ISSAP, CISSP-ISSEP, CISM, CCSP, CCSK, CEH (Desirable & Advantageous).
Working knowledge of Security Standards / Frameworks:
- ISO27K, ISF SOGP, NIST CSF, CIS, CSA STAR, CBEST, TIBER-EU, SOC2.