Description
The purpose of this role is to provide a primary liaison service between the business, technology, and security functions to ensure the confidentiality, integrity, and availability of information and support the mitigation of security risk.
Accountabilities
- Collaborate with stakeholders to understand their security requirements in business processes and IT projects to enhance overall risk management.
- Execute risk assessments to identify and prioritise potential cybersecurity threats that could impact the bank's operations and data, and guide the implementation of mitigation strategies.
- Develop and implement security policies and procedures for the bank's operations aligned to the risk management framework.
- Manage the implementation, testing, and monitoring of security controls across the bank's IT systems.
- Execute training content and sessions to educate employees on cybersecurity awareness and safe online practices.
- Manage complex cybersecurity incidents by collaborating with IT teams and response experts.
- Identify emerging cybersecurity trends, threats, and new technologies to address potential risks.
Director Expectations
- Manage a business function, providing significant input to function-wide strategic initiatives.
- Lead a large team or sub-function, leading other people managers and embedding a performance culture.
- Provide expert advice to senior functional management and committees.
- Manage, coordinate, and enable resourcing, budgeting, and policy creation for a significant sub-function.
- Escalate breaches of policies and procedures appropriately.
- Foster and guide compliance, ensuring regulations are observed.
Key Requirements
- Demonstrable experience of executing and driving a complex, regulatory, and sizable book of work.
- Understanding of cyber security principles, data security, identity and access management, and cryptography.
- Ability to understand a high-level strategy and vision, mobilise, design, and deliver against this to completion.
- Ability to communicate at senior executive level, including verbally and written materials.