Cyber Operations & 3rd Party Security Manager

Arbuthnot Latham; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Holiday allowance

Pension

Life Assurance

Discretionary Bonus

Flexible benefits

Job summary

Arbuthnot Latham is seeking a Cyber Operations & 3rd-Party Security Manager to lead cyber security operations, incident response and 3rd-party risk management. The role focuses on threat detection, vulnerability management and reporting to senior management.

The successful candidate will manage MDR/SOC providers, coordinate CIRP exercises, and drive improvements in cyber monitoring, risk management and compliance with FCA/PRA expectations.

Qualifications

• Strong experience in cyber security operations, incident response or security monitoring.
• Experience managing security service providers, SOC or MDR capabilities.
• Knowledge of cyber threats, attack techniques, threat intelligence and vulnerability management.
• Experience of supplier cyber risk assessments and 3rd-party risk management.

Responsibilities

• Lead the Bank's cyber security operations capability, including oversight of security monitoring and detection services.
• Manage relationships with MDR, SOC and threat intelligence providers.
• Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.
• Coordinate operational response to cyber security incidents and support CIRP execution.
• Maintain incident response playbooks, escalation procedures and runbooks.
• Produce reporting and management information on security events, incidents and threats.
• Oversee vulnerability management across infrastructure, cloud services, applications and end-user devices.

Skills

Cyber security operations

Incident response

Security monitoring

3rd-party risk management

ISO 27001 / NIST CSF knowledge

Stakeholder management

Education

CISSP

CISM

ISO27001 Lead Implementer or Lead Auditor

GIAC Incident Handler (GCIH)

CRISC

CCD (Certified Cyber Defender)

Tools

ServiceNow Security Incident Response

Job description

Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job Purpose

The Cyber Operations & 3rd-Party Security Manager is responsible for the Bank's cyber security operations, threat detection, incident response, vulnerability management and 3rd-party cyber risk management capabilities. The role ensures that cyber threats, vulnerabilities, supplier risks and security events are effectively identified, assessed, remediated and reported, supporting the confidentiality, integrity and availability of the Bank's information assets and services.

The role leads the operational execution of the Bank's Cyber Incident Response Plan (CIRP), manages relationships with security service providers, and provides oversight of cyber risks arising from suppliers, outsourced services and 3rd parties

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities:

Security Operations & Incident Response

• Lead the Bank's cyber security operations capability, including oversight of security monitoring and detection services.
• Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers.
• Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.
• Coordinate the operational response to cyber security incidents and support execution of the Cyber Incident Response Plan (CIRP).
• Maintain incident response playbooks, escalation procedures and operational runbooks.
• Produce reporting and management information on security events, incidents and emerging threats.

Vulnerability & Threat Management

• Oversee vulnerability management processes across infrastructure, cloud services, applications and end-user devices.
• Ensure vulnerabilities are assessed, prioritised, tracked and remediated in line with risk appetite and policy requirements.
• Monitor threat intelligence sources and assess relevance to the Bank's technology landscape.
• Coordinate threat hunting activities and investigations arising from security alerts and intelligence feeds.
• Identify recurring security weaknesses and drive remediation actions.

3rd-Party Cyber Risk Management

• Lead the Bank's 3rd-Party Cyber Risk Management framework.
• Assess supplier cyber security risks throughout the supplier lifecycle, including onboarding, ongoing monitoring and offboarding activities.
• Review supplier security assessments, control attestations, certifications and due diligence submissions.
• Oversee the management of supplier vulnerabilities, cyber incidents, breaches and control deficiencies.
• Ensure material supplier cyber risks are escalated and tracked through appropriate governance forums.
• Support operational resilience and outsourcing requirements relating to 3rd-party cyber security.
• Develop and maintain operational cyber security procedures and standards.
• Support ISO 27001 certification, regulatory compliance activities and audit engagements.
• Contribute to cyber risk reporting, metrics and management information for senior management and governance committees.
• Drive continual improvement of cyber monitoring, incident management and 3rd-party risk management capabilities.
• Support implementation and optimisation of cyber security tooling, including ServiceNow Security Incident Response and 3rd-Party Risk Management capabilities.

Knowledge/Experience/Skills:

• Strong experience in cyber security operations, incident response or security monitoring.
• Experience managing security service providers, SOC or MDR capabilities.
• Knowledge of cyber threats, attack techniques, threat intelligence and vulnerability management.
• Experience of security incident management and cyber crisis response.
• Experience of supplier cyber risk assessments and 3rd-party risk management.
• Understanding of ISO 27001, NIST CSF, FCA/PRA expectations and operational resilience requirements.
• Strong stakeholder management, communication and reporting skills.

Qualifications:

Minimum of one below is required:

• ISO27001 Lead Implementer or Lead Auditor
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• GIAC Incident Handler (GCIH)
• Certified Cyber Defender (CCD) or equivalent
• ISO 27001 Lead Implementer or Lead Auditor
• CRISC (Certified in Risk and Information Systems Control)

Life, Work and Benefits

At Arbuthnot Latham, we seek proactive individuals who embrace high standards and bring the energy needed to drive success. In return, you can thrive in a dynamic environment that values your innovative ideas and provides the stability and support for your personal and professional growth. Our human-scale ethos means that everyone is recognised as an individual, not just a number, creating a workplace where you truly belong and thrive.

As a service led, relationship driven bank, in-person collaboration and wellbeing are important to us and drives our inclusive culture. With this in mind we offer one day a week working from home.

• Competitive holiday allowance with the ability to buy / sell / rollover up to five days per year
• Pension via market leading provider
• 4x Life Assurance
• Discretionary Bonus
• Access to a suite of flexible benefits including Cycle to Work Scheme, Gym Scheme, Health Assessment, Season Ticket / Travel loans and Dental insurance as well as other discounts / vouchers

Data Privacy and Reasonable adjustments

We take keeping your data security seriously. For more detail on how we may keep your data please refer to our Privacy Notice

https://careers.arbuthnotlatham.co.uk/files/RecruitmentPrivacyNotice.pdf

Reasonable adjustments

Please let us know of any adjustments or arrangements that you may need to help you apply to this role or that will help you during the recruitment process. If you wish to discuss any particular requirements or concerns you have because of a disability or medical condition please contact us at [e-mail]. Information you provide about any disability or medical condition will remain confidential unless it is necessary to disclose it to other members of staff or outside agencies to ensure the health and safety of yourself and others, or to implement the adjustments you require. In these circumstances we will first discuss with you how and to whom the information may be disclosed.