VP, Cyber & Technology Risk – CISO | SCIB

Santander Corporate & Investment Banking; Greater London; On-site; GBP 75,000 - 115,000; Full time

Benefits offered by this job

Discretionary bonus

Pension 8% of salary

Private medical insurance

Family health benefits

Life assurance & income protection

Share plans

30 days holiday

Job summary

Santander Corporate & Investment Banking (SCIB) London seeks a senior Information Security risk professional to oversee cyber risk across the organization. You will promote and embed the risk management framework, drive reductions in cyber risk, and report to the CISO for SLB.

You will work with Technology, Cyber Security, Operational Risk, Compliance and Internal Audit to ensure effective controls and regulatory compliance within a global, complex environment.

Qualifications

• Excellent understanding of cyber security domains and risk management.
• Experience assessing risks from complex infra, apps, cloud and third parties.
• Knowledge of UK regulatory expectations relating to tech risk and resilience.
• Strong analytical skills to identify risk implications in technical data.
• Proven ability to produce senior-facing risk reports and KRIs.

Responsibilities

• Provide independent oversight and challenge of cyber and information security risks across SLB.
• Assess effectiveness of risk frameworks, controls and remediation activity.
• Review risk assessments, control testing, risk acceptances and treatment plans.
• Monitor cyber risk profile, KRI signals, incidents and control weaknesses.
• Collaborate with Technology, Cyber Security, Operational Risk and Compliance teams.
• Support regulatory and supervisory activity related to cyber security and resilience.

Skills

Identity & access mgmt

Vulnerability mgmt

Security operations

Cloud security

Data protection

Network security

Incident response

Regulatory knowledge

Stakeholder comms

Education

Graduate degree

Professional information security qualifications

Job description

Santander Corporate & Investment Banking (SCIB) is Santander's global division that supports some of the world's most complex and sophisticated corporate and institutional clients, offering customised services and value-added wholesale products to best meet their needs.

The Chief Information Security Office function is responsible for managing cyber and technology risks on behalf of Santander London Branch (SLB) based on Santander group policies and standards in line with internally defined risk management frameworks, appetite and best practice.

Reporting to the CISO for SLB, you’ll play a key role in the effective application, administration, and implementation of strategies and controls designed to manage cyber risks for SLB. You’ll promote and embed the technology risk management framework and operating model, driving measurable reductions across all areas of technology risk.

The difference you’ll make:

• Providing independent oversight and effective challenge of cyber and information security risks across SLB
• Assessing the effectiveness of cyber risk management frameworks, controls and remediation activity
• Reviewing and challenging cyber risk assessments, control testing, risk acceptances and treatment plans
• Monitoring the cyber risk profile, including key risk indicators, emerging threats, material incidents and control weaknesses
• Supporting the identification and assessment of risks arising from new technologies, transformation programmes, cloud adoption, third parties and changes to the threat landscape
• Providing clear reporting and insight on cyber risk exposures to senior management, governance forums and relevant committees
• Challenging the adequacy and timeliness of remediation plans relating to cyber vulnerabilities, audit findings, incidents and control deficiencies
• Partnering with Technology, Cyber Security, Operational Risk, Compliance, Internal Audit and business teams to promote effective management of cyber risk
• Supporting regulatory and supervisory activity relating to cyber security, operational resilience and technology risk
• Contributing to the continued development of cyber risk methodologies, policies, standards and risk appetite measures
• Monitoring emerging cyber threats, regulatory developments and industry practices, assessing their potential impact

What you’ll bring:

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role.

• An excellent understanding of cyber security domains including identity and access management, vulnerability management, security operations, cloud security, data protection, network security and incident response
• Experience assessing technology and cyber risks arising from complex infrastructure, applications, cloud environments and third-party services
• Knowledge of relevant UK regulatory expectations relating to technology risk, cyber security and operational resilience
• Strong analytical skills and the ability to identify the key risk implications within complex technical information
• Proven experience in developing risk reporting, metrics, KRIs and management information for senior audiences
• Excellent written and verbal communication skills, with the confidence to constructively challenge senior stakeholders
• The ability to work effectively across technology, security, risk and business teams in a complex international organisation
• Strong judgement, organisation and prioritisation skills
• Excellent communication and stakeholder management skills, both internally and externally
• Previous experience in an information security role
• Graduate degree and relevant professional qualifications, or equivalent experience

What else you need to know:

This role is based at our offices in Triton Square, London located within easy walking distance from Warren Street and Euston.

We want our people to thrive at work and home, and also be able to deliver the best outcomes for our customers and to help each other develop.

Santander is proud of being an organization where there are equal opportunities regardless of age, gender, disability, civil status, race, religion or sexual orientation. We are committed to providing an inclusive and accessible application process for all candidates.

How we’ll reward you.

Your contribution matters, and it’s recognised. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver.

As well as a competitive salary, you’ll enjoy a benefits package that you can tailor to your needs.

• Eligible for a discretionary performance-related annual bonus.
• We put 8% of salary into your pension, even if you don’t contribute yourself. We’ll pay in up to 12.5% of salary, if you contribute as well, and you can take some of our contribution in cash if you prefer.
• 30 days’ holiday plus bank holidays, which increases to 31 days after 5yrs service, with the option to purchase up to 5 contractual days per year.
• Company funded individual private medical insurance.
• Voluntary healthcare benefits at discounted rates such as private medical insurance for your family, dental insurance, and health assessments.
• Protection for you and your family, with company-funded death-in-service benefit and income protection insurance, and the option to take advantage of discounted rates for additional life assurance and critical illness cover.
• Share in Santander’s success by saving or investing in our share plans.

Learn more about our benefits and family friendly policies