IT Security Controls Assurance Manager

Lloyds Banking Group; Halifax; Hybrid; GBP 61,000 - 76,000; Full time

Job summary

Lloyds Banking Group in the United Kingdom is recruiting for a role within the Chief Security Office. The role blends deep domain and controls assurance expertise with a passion for security, advocating adoption of relevant security frameworks and advancing controls assurance initiatives.

You will work with CSO Security, Technology and Leadership, identify and document controls to reduce risk, and seek automation opportunities.

Qualifications

• Experience designing and documenting security controls in a regulated environment.
• Ability to communicate complex security concepts to non-technical audiences.
• Experience with risk and assurance in technology management.

Responsibilities

• Interpret technical concepts for a non-technical and senior audience and maintain relationships with CSO Security, Technology and Leadership groups.
• Identify, design and document controls to reduce security risk with ownership of control assessments.
• Seek opportunities to automate control assurance activities and provide traceability of controls to threats and policies.
• Be a point of contact for the Group's three lines of defense and lead on control assessments in line with group expectations.
• Support regulatory requirements and documentation relating to controls assurance.

Job description

End DateSunday 19 February 2023Salary Range61,176 - 76,470We support agile working - click here for more information on agile working options.Agile Working OptionsFlexible / Variable Hours, Other Agile Working Arrangements / Open to DiscussionJob Description SummaryIn the Chief Security Office (CSO), we have a vital role in Helping Britain Prosper. We do that by protecting our customers, their data, and their money from security threats, and by helping our businesses to make change safely and quickly.This role will blend deep domain and controls assurance expertise with a passion for security. You'll be an advocate for adoption of relevant security frameworks, support the development of controls assurance and regularly looking for continuous improvement and automation opportunities.The Group has started an exciting journey of changing our ways of working. There are real opportunities in this role to be part of that, and to build the team's skills, technology and processes.There are
different ways to do this role, and we welcome applications from people with diverse experiences, skills and backgrounds. We also support agile working arrangements and are open to discussion about location, hours, and other flexible working.Job DescriptionWhat You'll DoYou'll interpret technical concepts and translate them into something meaningful to a non-technical and senior audience. You'll develop and maintain good working relationships with the CSO Security, Technology and Leadership groups as well as our risk and assurance partners.What you'd get involved with:Work with controls owners to identify, design and document controls to reduce security riskSupport Group projects and initiatives for controls and controls assuranceSeek opportunities to automate control assurance activities and provide traceability of controls to threats, policies and risksBe a point of contact for the Group's three lines of defense and lead on control assessments ensuring processes and procedures are in
line with their expectationsSupporting on specific regulatory requirements and regulatory notifications relating to controls assuranceEnsure there are good governance and processes and procedures to support a structured approach to the team's ways of workingYou'll be part of a broader Enterprise Vulnerability Management team, working among people skilled in scanning, pen testing, data analytics and driving security improvements with other teams. You'll be part of defining and implementing on the strategic direction of the function and its services in a changing cyber threat landscape.What We're Looking ForWe're looking for someone who:Is curious and has a desire to improve and collaborateCan make sense of a complex, regulated environment, and simplify complexity for othersIs persistent in the face of challenges and a changing environmentCan lead others through changeCan listen, adapt, and make balanced, timely decisions based on the information available.Has the courage
to challenge and report when the control posture is outside of the Group's appetite and good judgement to call it outExperience of working in technology management, cyber security, engineering, or risk & control management is preferred, including knowledge of relevant frameworks such as NIST and CSA CSM.What You'll Get In ReturnThe opportunity to make a mark on a changing function in a changing organisationOffering you both opportunity and profile - we'll provide you with a diverse, driven and lively environment that focuses on equal opportunity and real career progression. We see beyond the standard 9-5 and accommodate flexible working.We'll take your personal and professional development very seriously and enable you to make a genuine difference to millions throughout your career with us.We'll make sure that individuals with disabilities are provided reasonable accommodation to