Information Security Lead - Banking

Rothstein Recruitment; Greater London; Vor Ort; GBP 90.000 - 135.000; Vollzeit

Zusammenfassung

Rothstein Recruitment is partnering with a major UK bank in London to appoint an Information Security Lead. You will steer risk and control assessments across privacy, suppliers, and security projects within a growing digital transformation.

Ideal candidates will combine hands-on information security expertise with experience enabling secure technology change, risk management, and regulatory awareness in a financial services setting.

Qualifikationen

• Solid, practical understanding of information security (technical and non-technical).
• Experience supporting technology change initiatives to deliver secure solutions.
• Good grasp of core privacy concepts in tech change contexts.
• Understanding of Risk Management and Information Security in Financial Services (3LoD).

Aufgaben

• Lead risk & control assessments including supplier due diligence, privacy impact assessments and project security.
• Develop deep knowledge of the technology stack to identify security risks and propose practical solutions to enable secure delivery.
• Identify and articulate risks, document mitigating controls, and ensure timely actions within risk frameworks.

Kenntnisse

Information Security

Technology Change

Privacy Concepts

Risk Management

Jobbeschreibung

Excellent opportunity opens for an up and coming Information Security Lead to join a major UK Bank in London. The bank is going through a massive digital transformation and you will be leading a team of InfoSec Consultant, supporting the regulatory-driven modernisation initiatives across the bank.

We are looking for an ambitious and driven candidate who is ready to take the next step in their career, someone who understands their limitations, can problem solve under pressure, and work to grow into the role.

Main Responsibilities

• Risk and Control Assessments – You will lead risk & control assessments using the Banks defined processes, covering supplier due diligence, privacy impact assessments and project security.
• Problem Solving - You will develop a deep knowledge of your workstreams technology stack and business outcomes allowing you to not only identify security risks but identify and propose practical solutions to the team. This role is all about helping teams deliver securely not just calling out risks.
• Risk Management – You will support your workstream identify and articulate risks, steering them towards appropriate treatment plans, documenting mitigating controls and ensuring these are actions within agreed timeframes. You will operate in line with the Bank's Risk Management framework (including sub-frameworks) and relevant risk and compliance policies and procedures, ensuring appropriate and timely escalation of any concerns to your line manager.
• Subject Matter Expertise – You will develop a deep knowledge of the Banks secure change processes and procedures, shepherding your workstream through various assessments and approval gates.
• Relationship Management – You will build deep, trust based relationships with key stakeholders within your delivery team such as developers, testers, product managers, delivery leads and tech leads. You will be an active member of the delivery team, attending daily stand-ups, PI planning sessions and working groups.
• Advisory – You will provide specialist advice and interpretation of Information Security best practice and UK regulatory requirements to a range of different stakeholders as new products, processes and systems are developed. You will need to be aware of your own knowledge gaps and when & where to seek specialist input to solve a particular problem or query.

Ideal Candidate

• Information Security - Solid, practical and demonstrable experience of information security (technical and non technical aspects)
• Technology Change – Demonstrable experience of supporting technology change initiatives to deliver solutions securely
• Privacy – You don’t need to be a privacy expert but you will require a good understanding of core privacy concepts and how these apply to technology change initiatives
• You understand the intersection of Risk Management and Information Security and how these relate to each other in a Financial Service business (3LoD model)