Chief Information Security Officer

London - Hybrid

Overview:

Management of the Information Systems Security (UK) Department including Security Governance, Security Monitoring, Security Control & Security Administration;

• Define, agree & implement the security strategy for CA-CIB

UK via the UK Information Security Programme;

• Contributing to local & global strategy/governance based on experience of the threats and opportunities facing the London perimeter;
• Local implementation and enforcement of Security Policies;
• Reviewing & tracking local security issues and ensuring resolution is consistent with group policy and standards;
• Raise & maintain awareness of security issues and best practice across all CA-CIB UK staff;
• Monitor the evolving threat and cyber risk landscape
• Oversee ITRO function.

Key Responsibilities

1 . Annually produce and gain management agreement for the UK Information Security Programme, covering strategy, progress, risks, controls & planning;

1. Implementation, maintenance and enforcement of Group Security Policies and, where required, their adaptation for the CA-CIB UK environment.;
2. Provide the local focal point for Security initiatives in accordance with the defined CSLi role (“Correspondent Securite Local”);

4 . Create & implement a security awareness raising programme for all staff. To include tailored deliveries for specific groups (e.g. managers, new joiners, developers etc); 5. Approval of all local projects from a Systems Security perspective;

6 . Participation in the selection and implementation of global and local IT solutions for Information Security issues;

1. Ensure that the security solutions, systems, services and ongoing procedures conform to the requirements of the Legal, Audit and Compliance Departments and external regulatory bodies;

8 . Maintain awareness of the regulatory markets and competitive environment and to be aware of current technology developments;

9 . Lead ad-hoc missions as required by the London COO and the Global Chief Information Security Officer;

10 . To provide follow-up and facilitate the closure of Audit issues related to the Systems Security function within agreed timescales;

1. As a key member of the Branch and to ensure full transparency and access to information, sit on the following Committees of the Branch;

• Information Security Committee (as owner, in line with the TOR for the committer);
• IT Steering Committee (as participant);
• Support Functions Committee (as participant);
• Business Continuity Planning Committee & BCP Task Force (as participant);
• Permanent Control Committee (as participant);

1. To coordinate the production of and to review Risk Assessments for CA-CIB UK
2. Provision of User Account administration services for the UK and overseas entities for a defined set of applications;
3. Provide a main point of coordination and escalation for the business in respect of all GRANT approval issues;
4. Ensure people database reflects the organisational

Experience:

Previous experience in IT Security is required.

Required skills:

Strong user and management communication skills.

Ability to coordinate transversally a number of teams geographically dispersed.