Description
We are seeking a Business Information Security Officer (BISO) to play a pivotal role in strengthening our security posture, embedding security-by-design principles, and ensuring information security remains at the heart of business decision-making.
As a trusted partner to business and technology leaders, you will provide expert guidance on information security risks, support major transformation initiatives, and help ensure robust controls are in place to protect our customers, colleagues, and organisation.
Purpose of the role
You will provide a primary liaison service between the business, technology, and security functions to ensure the confidentiality, integrity, and availability of information, and support the mitigation of security risk.
Accountabilities
- Collaborate with stakeholders to understand their security requirements in business processes and IT projects, enhancing overall risk management.
- Execute risk assessments to identify and prioritise potential cybersecurity threats that could impact the bank's operations and data, guiding the implementation of mitigation strategies and communicating findings to relevant senior stakeholders.
- Develop and implement security policies and procedures for the bank's operations, aligned with the risk management framework.
- Manage the implementation, testing, and monitoring of security controls across the bank's IT systems to ensure effectiveness and mitigate risk.
- Deliver training content and sessions to educate employees, enhance cybersecurity awareness, and provide guidance on safe online practices.
- Manage complex cybersecurity incidents by collaborating with IT teams and response experts to effectively resolve cases.
- Identify emerging cybersecurity trends, threats, and new technologies to address potential risks by advocating the adoption of new security solutions.
Assistant Vice President Expectations
- Advise and influence decision-making, contributing to policy development and taking responsibility for operational effectiveness.
- Lead a team performing complex tasks, using well-developed professional knowledge and skills to deliver work impacting the whole business function.
- Demonstrate leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard.
Essential Skills
- Strong understanding of cyber security principles, threats, vulnerabilities, and risk mitigation.
- Experience implementing and maintaining information security controls.
- Knowledge of security frameworks, governance, and regulatory requirements.
- Proven ability to identify, assess, and manage information security risks.
- Experience supporting large-scale business or technology transformation initiatives.
Desirable Skills
- Experience working within a financial institution or regulated environment.
- Understanding of financial services security challenges, compliance obligations, and operational resilience requirements.
- Excellent stakeholder management skills with the ability to influence and challenge senior leaders.
- Experience delivering security transformation initiatives.