Senior Cyber Security Consultant

You will be responsible for providing independent, effective, and proportionate ‘second line’ assurance of the design and operation of my clients IT platform, and the adequacy and effectiveness of the framework of controls and defences, in order to ensure its resilience

This is a key role in the ‘second line of defence’ of the Bank which exists to deliver vital outcomes in the following areas:

Key activities

• Provide guidance and advice on, and oversee the design and development of, the Bank’s IT Strategy and IT Architecture from a ‘second line’ assurance perspective, in close liaison with the CTO, CISO, the Director Cybersecurity, and the Director IT Operations in the ‘first line’, in order to ensure its resilience, using up-to-date best practice
• Provide assurance over design compliance with relevant standards, including NIST and ISO27001
• Review governance, policies, procedures, systems, tools and controls for IT operations and cyber security, to ensure their adequacy and effectiveness in protecting the Bank’s infrastructure and its data security
• Provide independent analysis of existing and emerging threats and risks to the Bank, and ensure the adequacy of cyber threat intelligence activity
• Manage an on-going programme of ‘second line’ assurance of IT resilience and cyber security including independently monitoring data / MI on IT operations and cyber activity, and also undertaking thematic reviews of key aspects of the Bank’s infrastructure in a regular cycle. Ensure that appropriate action is being taken by ‘first line’ management.
• Oversee incident response planning and recovery arrangements from a ‘second line’ perspective, in order to protect the Bank’s IT and data assets and the ability to restore operations. Ensure that back-up and recovery plans are adequate, and are tested regularly including a full review of the output

Essential experience

• 5 years + experience as a Cyber security specialist
• Consultative approach to Cyber Security
• Experience across both Data protection and IT Security
• experience with NIST/CQuest frameworks
• Strong communication and presentation up to C level