Cyber Security Lead

Ant International; Greater London; On-site; GBP 65,000 - 75,000; Full time

Job summary

An established industry player is seeking a GRC Lead to ensure compliance with European regulations and global standards. This role involves managing third-party risks and implementing security frameworks to safeguard operational resilience. Ideal candidates will have over four years of experience in GRC roles, particularly in financial services, and a strong understanding of GDPR and PCI DSS. Join a forward-thinking company committed to driving responsible innovation and enhancing market accessibility for global SMEs. This is an exciting opportunity to make a significant impact in a dynamic environment.

Qualifications

• 4+ years in GRC roles with financial services experience preferred.
• Hands-on experience with ISO 27001 and third-party risk management.

Responsibilities

• Ensure compliance with GDPR, DORA, PCI DSS, and SWIFT CSP regulations.
• Design third-party risk management programs and conduct audits.

Skills

GRC roles experience

GDPR knowledge

DORA compliance

PCI DSS understanding

third-party risk management

IAM solutions proficiency

ISO 27001 implementation

NIST frameworks knowledge

cloud technology familiarity

Education

Relevant certifications (CRISC, CISSP, CISM, CISA)

Tools

third-party risk tools

Job description

Ant International powers the future of global commerce with digital innovation for everyone and every business to thrive. In close collaboration with partners, we support merchants of all sizes worldwide to realize their growth aspirations through a comprehensive range of tech-driven digital payment and financial services solutions.

Ant International strives to become the most trusted digital services connector to achieve sustainable growth of global commerce.

With a focus on Travel, Trade, Technology, and Talent, Ant International is committed to enhancing the digital mindset and capacities of businesses worldwide. Through fostering collaborative efforts with partners, we are driving responsible innovation and increase market accessibility for global SMEs.

We do so across our 4 key businesses: Alipay+, Antom, WorldFirst and ANEXT Bank.

Role Overview:

As a GRC Lead, you will ensure alignment with European regulations (e.g., GDPR, DORA, PSD2 SCA, CSSF) and global standards (PCI DSS, SWIFT CSP). This role requires technical knowledge, strategic thinking, and expertise in managing third-party risk, outsourcing compliance, and identity governance to safeguard operational resilience.

What you will be doing:

Regulatory & Technical Compliance:

• Support compliance with GDPR and complementary regulations like DORA (Digital Operational Resilience Act), ensuring alignment in areas such as incident reporting and data protection.
• Translate requirements from PSD2 SCA, PCI DSS, and SWIFT CSP into technical security controls.
• Maintain IT security governance frameworks (ISO 27001, NIST CSF, CIS Controls).
• Manage and maintain Security Policies and procerdures

Third-Party Risk & Outsourcing Management:

• Design and implement third-party risk management programs to assess vendors, cloud providers, and outsourced services.
• Ensure compliance with DORA’s outsourcing requirements, including due diligence, contract oversight, and continuity planning.

Audit & Assurance:

• Participate in internal/external audits (ISO 27001, SOC 2) and regulatory examinations, focusing on third-party and outsourcing compliance.
• Remediate gaps in processes or documentation.
• Maintain the enterprise risk register, prioritizing risks tied to third-party dependencies, outsourcing, and ICT disruptions.
• Quantify risks using methodologies.

Technical Compliance & Security:

• Advise on vulnerability management, endpoint security (EDR/XDR), and cloud compliance.
• Good understanding on IAM (Identity and Access Management) strategies, including role-based access control (RBAC) and privileged access management (PAM).
• Conduct periodic user access reviews to ensure compliance with least privilege principles and regulatory requirements.
• Security awareness management experience.

What we are looking for:

• Experience: 4+ years in GRC roles; financial services or banking experience is a strong plus.
• Understanding of GDPR, DORA, PCI DSS, and outsourcing/third-party risk requirements.
• Hands-on experience with ISO 27001 implementation and third-party risk tools.
• Proficiency in IAM (Identity and Access Management) solutions and conducting user access reviews.
• Familiarity with cloud Technology and IT infrastructure.
• Strong knowledge of NIST frameworks (CSF, 800-53) and CIS Controls.
• Certifications: CRISC, CISSP, CISM, or CISA preferred (equivalent experience considered).

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Finance

Referrals increase your chances of interviewing at Ant International by 2x

Get notified about new Cyber Security Specialist jobs in London Area, United Kingdom.

London, England, United Kingdom 2 weeks ago

Product Security Engineer (University Grad)

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 3 days ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

Security Specialist (Offensive) - Security Operations

London, England, United Kingdom 3 days ago

London, England, United Kingdom 2 weeks ago

City Of London, England, United Kingdom £65,000.00-£75,000.00 6 days ago

Greater London, England, United Kingdom 1 month ago

London, England, United Kingdom 5 days ago

Colchester, England, United Kingdom 2 weeks ago

Hatfield, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 months ago

Insider Threat & Cyber Investigations Specialist

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 5 days ago

Greater London, England, United Kingdom 1 month ago

CyberSecurity Operations Engineer - Graduate Considered

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 day ago

London Area, United Kingdom £70,000.00-£75,000.00 17 hours ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.