Information Security & Resilience Business Partner

Leeds Building Society; Leeds; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work

Annual bonus

Pension matching

Holiday entitlement

Mortgage/saver products

Volunteering days

Job summary

Leeds Building Society is seeking an Information Security and Resilience Business Partner to strengthen controls and resilience across IT risk, information security and third‑party risk. You will embed the Operational Resilience framework and provide practical guidance to governance forums.

You will work with operational teams, Internal Audit and risk colleagues, helping shape risk reporting and responses as part of the CORE transformation programme.

Qualifications

• Knowledge of IT controls and technical solutions.
• Regulatory requirements around Information Security, Resilience and Third Party Management.
• Competent in communication, report writing, data analysis and training & facilitation.
• Ability to challenge constructively at senior management level.
• Understanding of management processes, project management and regulatory requirements for financial services.
• Curiosity to develop IT Security and Resilience expertise.

Responsibilities

• Develop and embed the Operational Resilience framework to align with business needs.
• Carry out thematic reviews across IT risk, information security and resilience.
• Provide pragmatic advice, challenge and assurance on information security and third‑party risk.
• Support third‑party due diligence and information security reviews; build relationships with stakeholders.
• Contribute to shaping controls, oversight and the CORE transformation programme.

Skills

IT controls

Info security

CISA

ISO 27001 lead

Regulatory know-how

Communication

Data analysis

Training & facilitation

Project management

Financial services regs

Job description

How you'll help us live our purpose

We've been helping our members save for their future and buy their own home since 1875. Join us and you'll play a big role in helping us to put home ownership within reach of more people, generation after generation.

It's a purpose that drives everything we do. And you can play your part too – we're looking for an Information Security and Resilience Business Partner to help Leeds Building Society strengthen how we protect our members, colleagues and services.

How you'll make a difference

In this role, you'll help develop and embed our Operational Resilience framework, making sure our approach is practical, effective and aligned to the needs of the business.

You’ll carry out thematic reviews across IT risk, information security and resilience, assessing how well controls are working and using your findings to support clear, meaningful risk reporting into governance forums.

Alongside this, you'll provide pragmatic advice, constructive challenge and assurance across information security, IT risk, operational resilience and third‑party risk, helping teams identify practical solutions and strengthen how we operate.

You’ll also support third‑party due diligence, undertake information security reviews where needed, and build effective relationships with operational teams, Internal Audit, risk colleagues and wider stakeholders.

This role offers the chance to work at the heart of important business change, combining security, resilience, risk and transformation. You'll be able to shape how we strengthen controls, improve oversight and support colleagues through change, while contributing to our CORE transformation programme.

What will you bring to the role?

We're looking for someone with sound judgement, curiosity and the confidence to make balanced decisions in a changing environment. You'll be pragmatic, flexible, adaptable and willing to keep learning, along with:

• Knowledge of IT controls and technical solutions. Preferably have a relevant information security related qualification such as CISA, ISO 27001 lead auditor/ implementer.
• Knowledge of the relevant regulatory requirements around Information Security, Resilience and Third Party Management.
• Competent skills in communication, report writing, data analysis and training & facilitation.
• Independently minded and able to challenge constructively and professionally at senior management level.
• Understanding of general management processes, project management and regulatory requirements for financial services.
• A curiosity to expand knowledge in IT Security and Resilience areas and progress to subject matter expert level within the Society

And in return, you'll get the best from us:

• Hybrid working – 2 days per week in the office
• Annual bonus of up to 12%
• Matched pension contributions up to 10%
• 26 days holiday, plus bank holidays and holiday purchase scheme
• Colleague Mortgage and Saver products
• 2 days' volunteering per year

We'll give you a place to belong with the support to learn, develop and shape a meaningful career.

Why choose us?

Our business is centred around our people. Our colleagues are at the heart of everything we do, as shown by our Inclusive Employers Gold accreditation in 2023 and 2025. We're committed to equal opportunities regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or gender identity.

You'll be joining a truly purpose-focused culture which helped us win the Leading with Purpose award at the 2023Business Culture Awards. This recognises how we've embedded our purpose with our colleagues, and the actions we've taken to put home ownership within reach of more people, generation after generation.