Global Information Security Program Lead

Bloomberg LP; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Bloomberg LP in London seeks a senior information security leader to own, develop, and manage multiple security programs across the firm. You will set strategic direction, evangelize security across lines of business, and influence Bloomberg LP's business initiatives within a global context.

Your role includes guiding risk-based decisions, designing robust controls, and reporting to boards and governance bodies.

Qualifications

• 7+ years of experience in information security, cyber security risk management, data security and cyber security regulation.
• Demonstrated ability to influence internal and external stakeholders to achieve success in a complex global setting.
• Proven delivery of complex projects involving cross-functional teams.
• Ability to proactively identify and manage cyber security risks to deliver services and meet business objectives in a secure and compliant way.
• Strong technical knowledge in cloud security, network security and architecture, application security, SSDLC and vulnerability management.
• Proven experience delivering Threat Led Penetration Tests such as CBEST or equivalent TLPT regimes.
• Good knowledge of OS, software development pipelines, security tooling, O365, and BI tools.
• Experience with standards like NIST CSF and ISO 27001.
• Knowledge of Regulation pertaining to Information Security such as DORA, Operational Resilience, GDPR.
• Excellent written and oral communication skills.
• Demonstrated ability to perform under pressure and meet deadlines.
• Industry certifications CISSP, GIAC, CISM, ISO 27001 Lead Implementor/Auditor.

Responsibilities

• Develop and oversee information security programs for business lines, aligning with regulatory changes and industry best practices.
• Manage cyber risk with stakeholders through security controls, mitigation strategies, and incident response planning.
• Foster cross-functional relationships to improve security program performance.
• Define management information: KRIs, program maturity indicators, PI reporting metrics.
• Establish and review information security policies within your line of business.
• Present status of programs to senior management, boards, and governance forums.
• Lead scenario testing: Tabletop Exercises and Threat Led Penetration Testing.
• Drive remediation efforts and transformational changes across the organization.

Skills

Information security

Cyber risk management

Stakeholder influence

Threat Led Penetration Testing

Cloud security

NIST CSF

ISO 27001

Communication skills

Regulatory knowledge

Leadership

Education

CISSP

CISM

GIAC

ISO 27001 Lead Implementor/Auditor

Tools

O365 Suite

Security tooling

BI Tools

Job description

Bloomberg LP in London seeks a senior information security leader to own, develop, and manage multiple security programs across the firm. You will set strategic direction, evangelize security across lines of business, and influence Bloomberg LP's business initiatives within a global context.

Your role includes guiding risk-based decisions, designing robust controls, and reporting to boards and governance bodies.