Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner.
Working with the Chief Risk Officer and Data Protection Officer the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place.
Working with 1st Line colleagues from across the bank, particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change.
A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank.

A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm.
Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.
Experience running security awareness programmes, including phishing simulations and e-learning platforms.
Working knowledge of Microsoft Purview 9DLP< Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack.
Experience responding to internal and external audits and drafting Board and committee papers.
Experience of third-party security due diligence and supplier risk assessments.
Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).

Information Security Officer

Key skills