Information Security Executive

iFAST Global Bank Limited; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A financial services organization in Greater London seeks an Information Security Executive to manage day-to-day security activities. Responsibilities include monitoring security events, responding to incidents, and ensuring compliance with security regulations. Candidates should possess a strong background in cybersecurity methodologies, relevant qualifications, and familiarity with security technologies such as Firewalls and AWS cloud security. Benefits include competitive salary, hybrid work flexibility, and opportunities for professional development.

Benefits

Competitive salary

25 days annual leave plus 8 bank holidays

Performance-based bonus

Pension scheme with employer contribution

Private medical insurance

Hybrid working flexibility

Supportive working environment

Opportunities for professional development

Qualifications

• Strong understanding of cybersecurity methodologies.
• Practical experience with security operations, monitoring, and incident management.
• Knowledge in technical risk assessments and vulnerability management.

Responsibilities

• Monitor security events and report findings to relevant teams.
• Act as primary contact during security incidents.
• Implement and manage security controls to protect data and systems.
• Assist in vulnerability assessments and penetration testing.
• Support compliance with relevant regulations.

Skills

Analytical skills

Cybersecurity methodologies

Communication skills

Threat intelligence

Incident management

Education

Academic qualification or equivalent certifications in information or cyber security

Tools

Firewalls

SIEM

IAM

DLP

PAM

AV/AM

AWS cloud security

Job description

Role Overview

The Information Security Executive will be responsible for managing day-to-day information and cyber security activities, ensuring the bank's systems, data, and networks remain secure and compliant. This role requires a proactive, analytical professional with a strong understanding of security methodologies, infrastructure, and operations. Knowledge of AWS cloud environments is desirable.

Key Responsibilities

Security Monitoring & Incident Response

• Monitor security events, anomalies, and alerts across the organization, reporting findings to relevant teams
• Act as the primary point of contact and participate in information security incidents and breaches, coordinating responses following established incident management protocols
• Support regulatory and stakeholder incident and breach notifications, including material incident assessments
• Assist in identifying, assessing, and mitigating security vulnerabilities, threats, and weaknesses
• Maintain security records, dashboards, and reports to provide insight into the organization's security posture

Security Controls & Administration

• Implement, manage, and monitor technical and procedural security controls to protect the bank's data, systems, and networks:
• Network and application security
• Identity and access management
• Cloud security controls (particularly AWS)
• Data privacy and protection
• Logging and monitoring
• Assist in conducting vulnerability assessments, penetration testing, and risk evaluations:
• Review of vulnerability scans and penetration testing results
• Assessment of risk severity and business impact
• Tracking and validation of remediation actions
• Provide security inputs, engage in technical reviews and remediation actions in new products, change initiatives, and technology projects, including cloud and third-party solutions
• Support compliance with relevant regulations, standards and frameworks (e.g., ISO27001, PCI-DSS, NIST, SWIFT CSP, FCA/PRA expectations)
• Stay informed on emerging security threats, breaches, and industry best practices, providing recommendations for remediation and enhancements
• Ensure proper controls are in place to maintain the confidentiality, integrity, and availability of information

Risk Management & Compliance

• Assist in risk assessments to identify, evaluate, and prioritize controls to mitigate information security risks. Support the documentation and tracking of technical risk treatment plans and remediation actions
• Propose and document technical and procedural controls to secure internal, external, and public network information flows
• Support both internal and external audits, providing detailed security input for regulatory, scheme, and payment system reviews
• Evaluate the adequacy and effectiveness of security policies, processes, and controls, advising on risk mitigation measures
• Provide expert guidance on compliance with information security regulations, including event resolution and breach notifications

Collaboration & Communication

• Liaise with internal teams, peers, and third parties to ensure security measures are aligned and effective
• Contribute to internal committees on information security risks and emerging issues

Requirements

• Academic qualification or equivalent certifications in information or cyber security
• Strong analytical skills and understanding of cybersecurity methodologies
• Practical experience with security operations, monitoring, and incident management
• Understanding and knowledge of threat intelligence and related activities
• Understanding and knowledge of security technologies such as Firewalls, SIEM, IAM, DLP, PAM, AV/AM, etc. is essential
• Knowledge of ISO27001 or relevant security frameworks is desirable
• Knowledge of AWS cloud security and cloud-native security practices is desirable
• Knowledge in technical risk assessments, vulnerability management
• Understanding of regulatory requirements is desirable
• Excellent communication skills with the ability to collaborate across technical and non-technical teams
• Ability to respond confidently and effectively to security incidents

Benefits

• Competitive salary (depending on skills, knowledge and experience)
• 25 days annual leave entitlement plus 8 bank holidays
• Performance-based bonus aligned to individual and organisational objectives
• Pension scheme with employer contribution
• Private medical insurance to support your health and wellbeing
• Hybrid working flexibility, supporting a balance between office collaboration and remote work
• Supportive and collaborative working environment within a growing financial services organisation
• Opportunities for professional development and career progression in information security and cyber resilience