Risk and Compliance IT Cyber Lead

The Cybersecurity function is responsible for enabling businesses and functions to

manage their information security and cybersecurity risks as well as ensuring risk and controls

are assessed and implemented appropriately, objectively and independently through

professional and specialized subject matter experts.

Cybersecurity Lead for Risk and Compliance IT is a role supporting the Chief Information

Security Officer for Enterprise Technology that is a part of 1st Line of Defence (1LoD). The role is

primarily focused on Cyber Security for Enterprise Technology and specifically Risk and

Compliance IT, to a lesser extent, the role will cover other parts of Enterprise Technology, plus

support the CTO CISO Team.

The key responsibilities include :

• Supporting business as cyber-SME
• Governance & Reporting of cyber controls
• Information Security Risk Management and
• Remediation and Regulatory Compliance.

Governance & Reporting

information into consumable reports that can be shared with business and technology

stakeholders.

shared with the central Cybersecurity functions, so that there is sufficient coverage and

prioritisation within change programmes and initiatives.

functions (e.g. CCO, Enterprise Risk Management, BIRO).

Information Security Risk Management & Remediation

critical assets for Risk and Compliance IT, the threats and vulnerabilities faced and the

security control requirements required.

remediation activities are completed within agreed timelines.

support business projects.

remediation of all major security incidents.

Regulatory Compliance

cybersecurity requirements to respond to Regulators.

Specific Requirements :