Information Security Specialist Lead
Core
Lead the identification, documentation, and implementation of the security risk and controls framework across the Enterprise to meet cybersecurity and risk requirements.
Role type
Senior IC information security specialist lead (governance, risk, and controls)
Builds
Enterprise-wide risk and controls framework, controls library, and management reporting
Domain
Financial services / Cybersecurity governance
Required skills
Security control design and implementation, GRC principles, Archer GRC platform, Risk management, Cloud security (AWS), Industry frameworks (NIST, ISO, COBIT, OWASP, ITIL), Technical requirements translation
Preferred skills
Financial services regulations, AI process automation
Technologies
Archer, AWS, NIST, ISO, COBIT, CMMI, OWASP, ITIL
Responsibilities
Lead security risk and control modularisation strategy, Maintain and update integrated risk and control framework, Review and challenge first-line business unit control activities, Identify and report control activity gaps, Compile management reports and presentations, Develop content for controls implementation workshops, Map security controls to risks in Archer platform, Monitor internal and external risk indicators, Contribute to risk and controls program efficiency through standardization and automation, Support strategic projects and provide subject matter expertise
Seniority
Senior, hands-on IC
