Information Security Risk VP

Robert Walters UK; London; Hybrid; GBP 110,000 - 120,000; Full time

Job summary

An established industry player is seeking an Information Security Risk VP to enhance their risk management framework. This pivotal role involves collaborating with the CCO team to improve oversight of non-financial risks and drive a risk-aware culture. Candidates should have a strong background in Information Security within Financial Services, with at least 5 years of relevant experience. The position offers a hybrid working model, allowing for flexibility while ensuring effective risk control. Join a dynamic team that values innovation and offers opportunities for professional growth in a fast-paced environment.

Benefits

Accelerated career progression

Dynamic culture

Expert training

Qualifications

• Minimum 5 years experience in Information Security Risk Management or Internal Audit.
• Strong knowledge of Financial Services and regulatory challenges.

Responsibilities

• Improve oversight of non-financial risks and partner with business owners.
• Support identification and assessment of risks and controls.

Skills

Information Security Risk Management

Internal Audit

Compliance

Regulatory Engagement

Risk Control

Education

Internal Audit Certification

Compliance Certification

Project Management Certification

Job description

My client, an International Financial Services organisation based in London are looking for an Information Security Risk VP to join their growing team. For this role you will have to be in their offices 2 days per week in London.

About the Information Security Risk VP role:

As part of the CCO team, you will play a key role:

• Improving the oversight of non-financial risks, bringing risk and control subject matter expertise to partner with 1LOD business owners to proactively identify, assess and mitigate risks.
• Providing cross functional oversight across the first line, driving best practices and consistency in control standards for the effective control of risks to within risk appetite.
• Driving behaviors to foster a risk-aware and risk intelligent culture where employees recognize their role as risk managers and the importance of the control framework.

The role would suit candidates with 2LOD/3LOD experience looking for an opportunity to move into 1LOD, or candidates with 1LOD control/control remediation/validation or Technology experience.

The Information Security Risk & Control Vice President is a key member of the CCO team who will work closely with the Information Security department (part of the Technology division) in the control of risks. This includes but is not limited to:

Strategic:

• Develop and implement a consistent, effective and efficient approach to the control of risks.
• Identify and deliver best practices in control standards.
• Lead Technology’s engagement with Audit, also key liaison with 2LOD Risk and Compliance.

Operational:

• Support the identification, assessment of risks and controls.
• Review remediation plans from a risk/control lens to ensure risks are sufficiently addressed, consider design/operating effectiveness, strategic/tactical solutions etc.
• Monitor and report on corrective actions.
• Contribute to risk appetite statements and emerging risks.
• Review KRIs to ensure meaningful metrics for management oversight, review/challenge breaches to understand root causes, consult on lessons learned exercises and work with business owners to develop a ‘path to green’ where appropriate.
• Consolidate and report on the results of risk and control activity to internal stakeholders, escalating as required.

Leadership:

• Support adhoc cross-Technology control initiatives where appropriate.
• Build strong relationships with peers to enable cross functional oversight, and develop and implement best practices.
• Share knowledge and experience with other members of the team, driving consistency and ‘added value’.
• Establish positive working relationships with senior stakeholders across the business.

What we’re looking for:

• Experience of Internal Audit engagement, control remediation and audit validation either from a 1LOD ownership perspective or 2LOD/3LOD validation.
• Knowledge of Information Security within Financial Services, and ability to demonstrate an understanding of key challenges and risks which must be mitigated and managed to enable successful delivery.
• Minimum of 5 years or more of experience in one or more of the following:
• Information Security Risk Management
• Internal Audit
• Compliance
• Knowledge of Financial Services, Financial Markets Utilities or another highly regulated industry sector is essential.
• Experience of regulatory engagement preferred.

Qualifications in any of the following specialisms would be beneficial but not essential:

• Internal Audit
• Compliance
• Project Management
• Information Security process governance

If the above role is of interest to you please apply to this job advertisement or call me on 0207 509 8040 to find out more.

About the job

Contract Type: FULL_TIME

Specialism: Information Technology

Focus: Information Security

Workplace Type: Hybrid

Experience Level: Senior Management

Location: London

Salary: £110,000 - £120,000 per annum

Job Reference: J42SGQ-5B4D7F89

Date posted: 25 February 2025

Consultant: Darius Goodarzi

Come join our global team of creative thinkers, problem solvers and game changers. We offer accelerated career progression, a dynamic culture and expert training.