Security Technical Lead (Financial Services)

Cpl; Sheffield, Birmingham; Hybrid; GBP 80,000 - 105,000; Full time

Job summary

CPL is seeking an experienced Security Technical Lead for a 6-month contract in the Financial Services sector. The role can be remote or hybrid from Sheffield or Birmingham, paying up to £500 per day Inside IR35.

You will provide cyber security leadership, governance oversight, and risk management support, working with Risk, Finance, Treasury, Corporate Functions, Tech, and Security teams to strengthen controls and support secure business change.

Qualifications

• Experience leading cyber security governance and risk oversight.
• Strong background in Financial Services or regulated environments.
• Ability to translate technical risk into business impact and executive-level advice.
• Experience chairing governance forums, risk meetings and assurance reviews.
• Proven ability to manage risk registers, remediation tracking, and audit readiness.

Responsibilities

• Act as the senior cyber security partner for business and technology stakeholders across Risk, Finance, Treasury, and Corporate Functions.
• Provide expert guidance on cyber risk, security controls, governance, and risk-based decision making.
• Own and manage cyber risk registers, ensuring risks are clearly articulated, prioritised, tracked, and remediated.
• Lead control governance, assurance activities, thematic reviews, and audit readiness programmes.
• Coordinate the remediation of control weaknesses, audit findings, and risk issues through to closure.
• Embed security-by-design principles across projects and change initiatives, providing input into solution design, delivery plans, and acceptance criteria.
• Oversee third-party and SaaS security risk activities, including supplier onboarding, risk assessments, renewals, and remediation planning.
• Strengthen security controls across identity and access management, privileged access, vulnerability management, threat management, data protection, and security monitoring.
• Support major cyber incidents and service events, providing leadership, escalation management, and risk-based decision support.
• Produce executive-level reporting, management information, and governance materials for senior stakeholders and risk forums.
• Translate technical cyber risks and vulnerabilities into clear business impacts and actionable recommendations.
• Work closely with Security Architecture, Engineering, Operations, Risk, Compliance, and Technology teams to improve overall cyber resilience.

Skills

Cyber Security

Security Governance

Risk Management

Stakeholder Management

Identity & Access Management

Audit & Assurance

Cloud/SaaS Security

Third-Party Risk

Tools

Cloud/SaaS Security

Third-Party Risk

Job description

Security Technical Lead (Financial Services)

Remote or Hybrid from Sheffiled or Birmingham

Up to £500 per day

6-Month Contract

Inside IR35

Overview

We are seeking an experienced Security Technical Lead to provide cyber security leadership, risk oversight, and governance support across a complex financial services environment.

Working closely with Risk, Finance, Treasury, Corporate Functions, Technology, and Cyber Security teams, you will act as a trusted advisor to senior stakeholders, helping to manage cyber risk, strengthen control effectiveness, improve security posture, and support the secure delivery of business and technology change.

Key Responsibilities

• Act as the senior cyber security partner for business and technology stakeholders across Risk, Finance, Treasury, and Corporate Functions.
• Provide expert guidance on cyber risk, security controls, governance, and risk-based decision making.
• Own and manage cyber risk registers, ensuring risks are clearly articulated, prioritised, tracked, and remediated.
• Lead control governance, assurance activities, thematic reviews, and audit readiness programmes.
• Coordinate the remediation of control weaknesses, audit findings, and risk issues through to closure.
• Embed security-by-design principles across projects and change initiatives, providing input into solution design, delivery plans, and acceptance criteria.
• Oversee third-party and SaaS security risk activities, including supplier onboarding, risk assessments, renewals, and remediation planning.
• Strengthen security controls across identity and access management, privileged access, vulnerability management, threat management, data protection, and security monitoring.
• Support major cyber incidents and service events, providing leadership, escalation management, and risk-based decision support.
• Produce executive-level reporting, management information, and governance materials for senior stakeholders and risk forums.
• Translate technical cyber risks and vulnerabilities into clear business impacts and actionable recommendations.
• Work closely with Security Architecture, Engineering, Operations, Risk, Compliance, and Technology teams to improve overall cyber resilience.

Required Experience

• Significant experience within Cyber Security, Information Security, Cyber Risk, Security Governance, or Security Assurance roles.
• Strong background working within Financial Services, Banking, Insurance, or other highly regulated environments.
• Experience managing cyber risk, controls, governance frameworks, remediation plans, and assurance activities.
• Strong understanding of identity and access management, privileged access, vulnerability management, threat management, data protection, cloud/SaaS security, and third-party risk.
• Experience supporting senior business and technology stakeholders with risk-based security advice.
• Ability to translate technical findings into clear business outcomes and executive-level recommendations.
• Excellent stakeholder management, communication, and influencing skills.
• Experience chairing governance forums, risk meetings, and assurance reviews.