Senior Governance Risk Manager - Cyber Security Experience Essential

THE COMPANY:
We are working with an International Bank based in the city, who are seeking a Senior Data Governance Risk Manager to join their team.

JOB PURPOSE
The Senior Data Governance Risk Manager role will have broad 2nd line of defense responsibility for a range of critical activities necessary to strengthen and maintain the data, information security, data protection and cyber control environment throughout the Bank. Hence, the role will report into the Data Governance Risk Officer & Data Protection Officer (DPO).

THE RESPONSIBILITIES:
Perform a current-state analysis to:
Assess the Bank’s existing information security (IS) control environment (considering all aspects of technology IS, data assets, and cyber risks and resilience controls);
Identify the current controls aligned to these risks and highlight potential control gaps;
Develop a strategy for enhancement to manage those risks in line with the Bank’s agreed risk appetite;.
Act as a point of liaison with Head Office.
Design and maintain a governance framework to capture strong cyber resilience, information security, data security and data protection;
Provide Bank-wide supervisory oversight, management reporting, and policy for the existing IS, data, and cyber control framework;
Support delivery of activities identified in the annual Compliance Monitoring Plan, such as:
SYSC 9 & 10A- Record Keeping & Document Retention Bank-wide supervisory oversight;
Annual Business Outsourcing reviews;
Regulatory reporting such as the REP018 and REP020 Quarterly returns;
Maintain policies for existing IS, data and cyber control frameworks;
Management reporting to Senior Management forums;
Conduct compliance email phishing exercises and data exfiltration reviews;
Act as a point of liaison with Head Office.
Undertake ongoing monitoring of key data and IS risks. Develop and deliver staff and stakeholder training on data protection/privacy regulatory requirements and cyber security, enhance management reporting information (KRI/KPIs), present performance status, and escalate issues to Senior Management where necessary. Build a profile of the Bank’s cyber threats and associated controls and provide Management with recommendations to enhance key cyber controls;
Fulfill the Deputy Data Protection Officer role in line with the requirements of current and incoming Data Protection Regulations (GDPR).

EXPERIENCE REQUIRED:
The successful candidate will be able to demonstrate the following skills: -

Practical experience in a senior role in a similar European financial services organization with responsibility for Data Protection, Data Governance, and/or Information Security;
Good working knowledge of current and changing cyber threats and mitigating control strategies with demonstrable experience of working with or advising on a cyber control activity or change project;
Practical understanding of key aspects of UK data and information protection regulations (GDPR) and best practices. This should extend to insights on applicability of key regulatory obligations to different business activities and how regulatory impact and gap analysis work is undertaken in a multi-product banking business;
Excellent communication skills are critical to ensure risk and control understanding is embedded throughout the business

For further information please contact Eleanor Gowling