Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Serve as a senior cyber advisor embedded in the region, partnering with business, technology, risk, and compliance teams. Ensure cyber security priorities align with regional business needs, regulatory obligations, and client commitments, leveraging technical expertise to drive improvements and enhance cyber resilience.

Responsibilities

• Act as the regional point of orchestration for cross-functional cyber activities, ensuring business, technology, risk, and legal entity priorities are understood, owned, prioritized, and progressed to measurable outcomes.
• Provide senior cyber advisory and constructive challenge and support to business and technology teams, ensuring cyber security decisions support regional business objectives and legal entity requirements.
• Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking for the region.
• Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership.
• Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner.
• Review complex cyber issues and support solution design, including findings from vulnerability management, security architecture, and secure processes.
• Translate security insights into practical, risk-based remediation plans that reduce risk exposure for the organization.
• Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability.

Requirements

• Strong business acumen with the ability to understand regional business, regulatory, and client priorities, and to shape cyber security advice accordingly.
• Strong influencing and change leadership skills, with the confidence to challenge constructively and bring business and technical teams together around executable solutions.
• Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment.
• Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language.
• Strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders.
• Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders.
• Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation.
• Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls.
• Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality.
• Some travel may be required for regional stakeholder, client, industry, or regulatory engagement.
• The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours.
• The candidate must be able to handle confidential and sensitive information appropriately.

Skills

• Offensive security
• Cyber risk
• Security solution architecture
• Cloud security
• Identity and access management
• Network security
• Application security
• Endpoint security
• Data protection
• Third-party connectivity
• Resilience controls
• Coding
• Vulnerability management
• Security architecture
• Secure processes

Location

• London

Work Type

• Hybrid
• Full-time

Experience Level

• 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role.
• Senior BISO roles at Financial Services or Critical National Infrastructure organizations preferred.

Education Level

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered.
• Relevant certification to support relevant experience such as CISSP, CSSLP, GIAC GSSP, OSWE, SABSA, SABSA and vendor specific certification.

Benefits

• Inclusive development opportunities
• Flexible work-life support
• Paid volunteer days
• Vibrant employee networks

About the Company

• Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability.
• We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
• We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential.

Equal Opportunity

• As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.