VP, Cyber & Technology Risk - CISO - SCIB

santander; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Discretionary performance bonus

8% employer pension contribution

Job summary

Santander is seeking a VP, Cyber & Technology Risk - CISO to lead risk management for SLB in London. You will drive the cyber risk framework, oversee risk assessments, and report exposures to senior management.

The role requires deep cyber risk expertise, regulatory awareness, and strong stakeholder engagement across functions. Based at Triton Square, London, the role involves collaborating with Technology, Cyber Security and Internal Audit to strengthen risk controls and resilience.

Qualifications

• Deep understanding of cyber security domains and risk management.
• Experience assessing technology and cyber risks in complex environments.
• Knowledge of UK regulatory expectations relating to technology risk and operational resilience.
• Strong analytical and reporting skills for executives.

Responsibilities

• Provide independent oversight of cyber and information security risks across SLB.
• Assess effectiveness of cyber risk management frameworks and remediation activity.
• Challenge cyber risk assessments, control testing, and risk treatment plans.
• Monitor cyber risk profile, KRIs, threats and control weaknesses.
• Support risk identification for new technologies, cloud adoption, and third parties.
• Report risk exposures to senior management and committees.
• Collaborate with Technology, Cyber Security, Operational Risk, Compliance and Internal Audit.
• Contribute to cyber risk methodologies, policies and risk appetite measures.

Skills

Cyber risk management

Regulatory knowledge (UK)

Analytical thinking

Senior stakeholder communication

Risk reporting & KRIs

Cross-functional collaboration

Governance & risk frameworks

Education

Graduate degree and professional qualifications

Job description

VP, Cyber & Technology Risk - CISO | SCIB

Country: United Kingdom

Join our community.

Santander Corporate & Investment Banking (SCIB) is Santander's global division that supports some of the world's most complex and sophisticated corporate and institutional clients, offering customised services and value-added wholesale products to best meet their needs.

The Chief Information Security Office function is responsible for managing cyber and technology risks on behalf of Santander London Branch (SLB) based on Santander group policies and standards in line with internally defined risk management frameworks, appetite and best practice.

Reporting to the CISO for SLB, you'll play a key role in the effective application, administration, and implementation of strategies and controls designed to manage cyber risks for SLB. You'll promote and embed the technology risk management framework and operating model, driving measurable reductions across all areas of technology risk.

The difference you'll make:

• Providing independent oversight and effective challenge of cyber and information security risks across SLB
• Assessing the effectiveness of cyber risk management frameworks, controls and remediation activity
• Reviewing and challenging cyber risk assessments, control testing, risk acceptances and treatment plans
• Monitoring the cyber risk profile, including key risk indicators, emerging threats, material incidents and control weaknesses
• Supporting the identification and assessment of risks arising from new technologies, transformation programmes, cloud adoption, third parties and changes to the threat landscape
• Providing clear reporting and insight on cyber risk exposures to senior management, governance forums and relevant committees
• Challenging the adequacy and timeliness of remediation plans relating to cyber vulnerabilities, audit findings, incidents and control deficiencies
• Partnering with Technology, Cyber Security, Operational Risk, Compliance, Internal Audit and business teams to promote effective management of cyber risk
• Supporting regulatory and supervisory activity relating to cyber security, operational resilience and technology risk
• Contributing to the continued development of cyber risk methodologies, policies, standards and risk appetite measures
• Monitoring emerging cyber threats, regulatory developments and industry practices, assessing their potential impact

What you’ll bring:

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We're enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role.

• An excellent understanding of cyber security domains including identity and access management, vulnerability management, security operations, cloud security, data protection, network security and incident response
• Experience assessing technology and cyber risks arising from complex infrastructure, applications, cloud environments and third-party services
• Knowledge of relevant UK regulatory expectations relating to technology risk, cyber security and operational resilience
• Strong analytical skills and the ability to identify the key risk implications within complex technical information
• Proven experience in developing risk reporting, metrics, KRIs and management information for senior audiences
• Excellent written and verbal communication skills, with the confidence to constructively challenge senior stakeholders
• The ability to work effectively across technology, security, risk and business teams in a complex international organisation
• Strong judgement, organisation and prioritisation skills
• Excellent communication and stakeholder management skills, both internally and externally
• Previous experience in an information security role
• Graduate degree and relevant professional qualifications, or equivalent experience

What else you need to know:

This role is based at our offices in Triton Square, London located within easy walking distance from Warren Street and Euston.

We want our people to thrive at work and home, and also be able to deliver the best outcomes for our customers and to help each other develop.

Equal Opportunities

Santander is proud of being an organization where there are equal opportunities regardless of age, gender, disability, civil status, race, religion or sexual orientation. We are committed to providing an inclusive and accessible application process for all candidates.

How we’ll reward you.

Your contribution matters, and it's recognised. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver.

As well as a competitive salary, you'll enjoy a benefits package that you can tailor to your needs.

• Eligible for a discretionary performance-related annual bonus.
• We put 8% of salary into your pension, even if you don't