Senior Information Security Risk Manager

Placements24; London Borough of Newham; Hybride; GBP 90 000 - 150 000; Plein temps

Avantages offerts par ce poste

Health and life insurance

Generous vacation policy

Flexible remote hours

Training and certifications

Remote collaboration

Résumé du poste

Placements24 is recruiting a Senior Information Security Risk Manager for a remote-first role with a well-established financial services client. The role focuses on identifying, assessing, and mitigating information security risks across a globally distributed organization.

You will develop and implement a comprehensive risk management framework and drive a risk-aware culture. The position offers leadership within a remote-enabled team, with a preference for individuals who can operate across

Qualifications

• Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 7+ years of experience in information security with a strong focus on risk management, governance, and compliance.
• In-depth knowledge of risk assessment methodologies, security frameworks (ISO 27001, NIST CSF), and regulatory requirements (POPIA, GDPR).
• Experience in developing and implementing comprehensive risk management programs.
• Strong analytical and problem-solving skills; ability to translate complex risk information into actionable insights.
• Excellent communication, presentation, and stakeholder management skills.
• Relevant certifications such as CRISC, CISM, CISSP are highly desirable.
• Experience in the financial services industry is a significant advantage.

Responsabilités

• Develop, implement, and manage the information security risk management program.
• Conduct regular risk assessments, including vulnerability and threat assessments, to identify potential security weaknesses.
• Analyze and prioritize security risks; recommend appropriate mitigation strategies and controls.
• Ensure compliance with relevant industry regulations, data privacy laws, and internal policies.
• Develop and maintain risk registers, security policies, standards, and procedures.
• Collaborate with business units and IT to integrate risk management principles into daily operations.
• Monitor and report on the effectiveness of security controls and the overall risk landscape to senior management.
• Lead the response to security incidents by assessing their impact and contributing to remediation efforts.
• Promote security awareness and best practices throughout the organization.

Connaissances

Risk management

Governance

Compliance

ISO 27001

NIST CSF

GDPR/POPIA

CRISC/CISM/CISSP

Stakeholder management

Formation

Master’s degree in Information Security

Outils

Regulatory frameworks

Description du poste

About the Role

Our client, a well-established financial services firm, is seeking a remote-first Senior Information Security Risk Manager to bolster their cybersecurity program. This role is instrumental in identifying, assessing, and mitigating information security risks across the organization. You will be responsible for developing and implementing a comprehensive risk management framework, ensuring compliance with regulatory requirements, and fostering a risk-aware culture. This is a critical leadership position within a globally distributed team, offering the chance to significantly influence the company's security posture. The position is based in East London, Eastern Cape , but the role is entirely remote.

Key Responsibilities

• Develop, implement, and manage the information security risk management program.
• Conduct regular risk assessments, including vulnerability and threat assessments, to identify potential security weaknesses.
• Analyze and prioritize security risks, recommending appropriate mitigation strategies and controls.
• Ensure compliance with relevant industry regulations, data privacy laws, and internal policies.
• Develop and maintain risk registers, security policies, standards, and procedures.
• Collaborate with business units and IT to integrate risk management principles into daily operations.
• Monitor and report on the effectiveness of security controls and the overall risk landscape to senior management.
• Lead the response to security incidents by assessing their impact and contributing to remediation efforts.
• Promote security awareness and best practices throughout the organization.

Requirements

• Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 7+ years of experience in information security, with a strong focus on risk management, governance, and compliance.
• In-depth knowledge of risk assessment methodologies, security frameworks (e.g., ISO 27001, NIST CSF), and regulatory requirements (e.g., POPIA, GDPR).
• Experience in developing and implementing comprehensive risk management programs.
• Strong analytical and problem-solving skills, with the ability to translate complex risk information into actionable insights.
• Excellent communication, presentation, and stakeholder management skills.
• Relevant certifications such as CRISC, CISM, CISSP, or CRISC are highly desirable.
• Experience in the financial services industry is a significant advantage.

Benefits

• Attractive annual salary package up to ZAR .
• Comprehensive health, life, and disability insurance.
• Generous vacation policy and flexible remote working hours.
• Opportunities for advanced training, professional development, and certifications.
• A key role in shaping the security risk strategy of a major financial institution.
• Fully remote work arrangement with potential for international collaboration.