IT Security Lead

A national FinTech that prioritises protecting its people is searching for an IT Security Lead to provide oversight and assurance of all cyber security strategies, policies and standards. This business is now using multiple external service providers in a Business Process Outsourcing arrangement. The business’s digital presence will expand, which means cyber defence needs to be a top priority.

As an IT Security Lead, you will support the Information Security manager by:

Conducting assurance activities.
Serving as the primary contact for suppliers delivering customer services, including IT capability.
Reviewing evidence from suppliers to ensure compliance with security policies.
Identifying security risks and escalating them through governance.
Providing an objective opinion on control implementation by suppliers.
Your key responsibilities will include:

Security Risk Management:

Proactively identify, escalate, monitor, and manage security risks associated with business activities.
Collaborate with suppliers to understand their control environment and assess risk levels.
Assurance Plan:
Follow a predefined assurance plan to sample test suppliers’ control environments.
Escalate identified issues that could impact the risk profile.
Review objective evidence to assess compliance and risk.
Challenge suppliers when control failures are evident.
Relationship Management:
Build strong relationships across the organization.
Foster a security-focused culture with service providers and clients.
Focus on continuous improvement aligned with evolving threats.
Governance:
Attend security working groups with suppliers to assess control effectiveness.
Monitor supplier performance and ensure effective response to threats and incidents.
Security Awareness:
Provide subject matter expertise to colleagues and suppliers, promoting good security practices.