Strategic Information Security Officer: Risk & Governance

Barclays UK; Knutsford; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services firm is seeking a Business Information Security Officer based in Knutsford, England. This role involves collaborating with business and technology stakeholders to enhance cybersecurity, manage threats, and uphold security policies. The ideal candidate should possess a strong understanding of security frameworks and excellent communication skills to engage with senior management. Responsibilities include risk assessments, policy development, and managing complex incidents, ensuring the organization's strategic objectives are aligned with security initiatives.

Qualifications

• Proven ability to engage effectively with all stakeholders, including Senior Executives.
• Experience executing risk assessments to guide cybersecurity strategies.
• Ability to manage complex cybersecurity incidents effectively.

Responsibilities

• Collaborate with stakeholders to understand their security requirements.
• Execute risk assessments to identify potential cybersecurity threats.
• Manage implementation and testing of security controls across IT systems.
• Develop and implement security policies aligned to risk management.

Skills

Understanding of Security & Control Frameworks & Methodologies

Knowledge of Security Tooling and industry standards, including NIST frameworks

Excellent communication skills

Background in the finance domain

Experience in a large, complex organisation

Job description

A leading financial services firm is seeking a Business Information Security Officer based in Knutsford, England. This role involves collaborating with business and technology stakeholders to enhance cybersecurity, manage threats, and uphold security policies. The ideal candidate should possess a strong understanding of security frameworks and excellent communication skills to engage with senior management. Responsibilities include risk assessments, policy development, and managing complex incidents, ensuring the organization's strategic objectives are aligned with security initiatives.