Chief Information Security Officer

Crédit Agricole CIB; Greater London; Presencial; GBP 70.000 - 110.000; Jornada completa

Descripción de la vacante

Crédit Agricole CIB UK Information Systems Security Department seeks a leader to set and govern the security strategy, monitor governance, and drive security policies and awareness across CA-CIB UK staff. The role focuses on UK Information Security Programme delivery and local alignment with global standards.

Responsibilities include policy enforcement, security initiative coordination, audit response, and committee participation to ensure transparency and regulatory compliance.

Formación

• Previous experience in IT Security is required.

Responsabilidades

• Annually produce and gain management agreement for the UK Information Security Programme, covering strategy, progress, risks, controls & planning.
• Implementation, maintenance and enforcement of Group Security Policies and their adaptation for the CA-CIB UK environment.
• Provide the local focal point for Security initiatives per the CSLi role.
• Create and implement a security awareness programme for all staff with tailored deliveries.
• Approval of all local projects from a Systems Security perspective.
• Participation in selection and implementation of global and local IT solutions for Information Security concerns.
• Ensure security solutions conform to Legal, Audit and Compliance requirements and external regulators.
• Maintain awareness of regulatory markets and current technology developments.
• Lead ad-hoc missions as required by the London COO and Global CISO.
• Follow-up and closure of Audit issues related to Systems Security within agreed timescales.
• Sit on multiple Branch Committees as Information Security, IT Steering, Support Functions, BCP Task Force, Permanent Control.

Conocimientos

Strong communication

Coordination across teams

Descripción del empleo

Management of the Information Systems Security (UK) Department including Security Governance, Security Monitoring, Security Control & Security Administration;

Define, agree & implement the security strategy for CA-CIB

UK via the UK Information Security Programme;

Contributing to local & global strategy/governance based on experience of the threats and opportunities facing the London perimeter;

Local implementation and enforcement of Security Policies;

Reviewing & tracking local security issues and ensuring resolution is consistent with group policy and standards;

Raise & maintain awareness of security issues and best practice across all CA-CIB UK staff;

Monitor the evolving threat and cyber risk landscape

Key Responsibilities

• 1. Annually produce and gain management agreement for the UK Information Security Programme, covering strategy, progress, risks, controls & planning;
• 2. Implementation, maintenance and enforcement of Group Security Policies and, where required, their adaptation for the CA-CIB UK environment.;
• 3. Provide the local focal point for Security initiatives in accordance with the defined CSLi role ("Correspondent Securite Local");
• 4. Create & implement a security awareness raising programme for all staff. To include tailored deliveries for specific groups (e.g. managers, new joiners, developers etc);
• 5. Approval of all local projects from a Systems Security perspective;
• 6. Participation in the selection and implementation of global and local IT solutions for Information Security issues;
• 7. Ensure that the security solutions, systems, services and ongoing procedures conform to the requirements of the Legal, Audit and Compliance Departments and external regulatory bodies;
• 8. Maintain awareness of the regulatory markets and competitive environment and to be aware of current technology developments;
• 9. Lead ad-hoc missions as required by the London COO and the Global Chief Information Security Officer;
• 10. To provide follow-up and facilitate the closure of Audit issues related to the Systems Security function within agreed timescales;
• 11. As a key member of the Branch and to ensure full transparency and access to information, sit on the following Committees of the Branch;
  • Information Security Committee (as owner, in line with the TOR for the committer);
  • IT Steering Committee (as participant);
  • Support Functions Committee (as participant);
  • Business Continuity Planning Committee & BCP Task Force (as participant);
  • Permanent Control Committee (as participant);
• 12. To coordinate the production of and to review Risk Assessments for CA-CIB UK
• 13. Provision of User Account administration services for the UK and overseas entities for a defined set of applications;
• 14. Provide a main point of coordination and escalation for the business in respect of all GRANT approval issues;
• 15. Ensure people database reflects the organisational

Experience:

Previous experience in IT Security is required.

Required skills:

Strong user and management communication skills.

Ability to coordinate transversally a number of teams geographically dispersed.