Information Security Assurance Officer - International Bank

Rothstein Recruitment; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

International Bank in London is seeking an Information Security Assurance Officer to drive security assurance, cyber risk and governance across critical systems and outsourced services. You will work with senior stakeholders to assess controls, lead audits and help shape the bank's information security strategy.

The role requires hands-on experience with security controls, risk assessments, incident response, and regulatory frameworks such as NIST CSF and ISO 27001.

Qualifications

• At least 3 years' information assurance experience in a highly regulated UK sector.
• Strong knowledge of information security controls, governance and risk management.
• Experience delivering cyber security briefings to leadership teams.

Responsibilities

• Deputise for HoIS and brief committees on security posture and risk.
• Plan and monitor assurance activities with third parties.
• Lead audits and coordinate evidence from departments to close actions.
• Develop and review information security governance policies and procedures.
• Lead annual PCI-DSS re-certification and support SWIFT re-certification as needed.
• Participate in cyber incident response as part of the ISO team.

Skills

Information Assurance

UK regulatory exposure

NIST CSF 2.0

ISO 27001 / ISO 27K

Purview

CrowdStrike

CISSP / CISM

Cyber Incident Response

RCSA / Risk Registers

SOC2 / PCI DSS / GDPR

Education

Information Security degree or equivalent

Tools

Purview

CrowdStrike

Job description

Information Security Assurance Officer - International Bank

An exciting opportunity opens to join a leading international Bank as their Information Security Assurance Officer, driving security assurance, cyber risk and governance across critical systems, third parties and outsourced services. You will work closely with senior stakeholders to assess security controls, lead audits and certifications, strengthen the bank's security posture, and help shape its Information and Cyber Security strategy.

Key Responsibilities

• Deputise for HoIS, briefing Information Security, EMC and Board Committees as required.
• Liaise with Third Parties to plan and monitor assurance activities on the Bank's core systems, platforms and capabilities.
• Collaborate with HoIS on Data Loss Prevention (DLP) to protect client, staff and sensitive information from leakage or loss.
• Work with HoIS to evaluate information security risks for new projects, products, systems, and other significant changes.
• Assist HoIS in creation and review of Bank Information and Cyber Security governance, developing, reviewing, and helping maintain information security governance policies, standards, frameworks, and procedures.
• Improve Information Security by analysing current controls and governance and recommending improvements, innovation and change.
• Lead annual PCI-DSS re-certification and assist with SWIFT re-certification as required.
• Act as secretary to the Bank's Information Security Committee.
• Lead audit activities as required, coordinating the submission of evidence from the various departments; own specific audit actions from identification to resolution.
• Participate in the creation and delivery of Information/Cyber Security Awareness training, educating staff on best practices.
• Support the ISO in annual budgeting and planning.
• Participate in Cyber Incident Response as part of the ISO Team.

Qualifications, Experience, Skill and Competencies

• Willingness to learn and expand own skills in Information Security, Banking and Financial Services in general.
• Ability to work autonomously and flexibly within a team, contributing to an improved Bank security posture.
• Strong initiative to examine and review the Bank's Attack surface, analyse and interpret data to provide insights to the most likely threats facing the Bank.
• At least 3 years' Information Assurance experience and/or working within a highly regulated UK sector.
• Information Security qualification (degree, CISSP, or CISM) obtained or in progress.
• Working knowledge of NIST CSF 2.0 and ISO 27K.
• Strong technical acumen with broad knowledge across Information/Cyber Security, Software Development, and IT systems.
• Awareness of common Cyber Incidents and Security breaches (OWASP).
• Hands on experience with Information Security tools, such as Purview and CrowdStrike.
• Experience delivering cyber security briefings to Staff/Leadership Teams.
• Experience in working with Information Security Risk Registers / Risk Control Self Assessments (RCSAs).
• Previous experience working within an organisations Cyber Incident Response function.
• Knowledge or experience in Three Lines of Defence model, SOC2, PCI DSS and GDPR.

Information Security Assurance Cyber Security Cyber Risk GRC Information Security Governance Security Controls Risk Management Third-Party Risk Third-Party Assurance Security Audits PCI DSS SWIFT NIST CSF ISO 27001 ISO 27K DLP Cyber Incident Response RCSA Risk Registers Regulatory Highly Regulated Environment Financial Services Banking Information Security Strategy Security Frameworks InfoSec CyberSec