Chief Information Security Officer

Management of the Information Systems Security (UK) Department including Security Governance, Security Monitoring, Security Control & Security Administration;

Define, agree & implement the security strategy for CA-CIB

UK via the UK Information Security Programme;

Contributing to local & global strategy/governance based on experience of the threats and opportunities facing the London perimeter;

Local implementation and enforcement of Security Policies;

Reviewing & tracking local security issues and ensuring resolution is consistent with group policy and standards;

Raise & maintain awareness of security issues and best practice across all CA-CIB UK staff;

Monitor the evolving threat and cyber risk landscape

Key Responsibilities

• 1. Annually produce and gain management agreement for the UK Information Security Programme, covering strategy, progress, risks, controls & planning;
• 2. Implementation, maintenance and enforcement of Group Security Policies and, where required, their adaptation for the CA-CIB UK environment.;
• 3. Provide the local focal point for Security initiatives in accordance with the defined CSLi role ("Correspondent Securite Local");
• 4. Create & implement a security awareness raising programme for all staff. To include tailored deliveries for specific groups (e.g. managers, new joiners, developers etc);
• 5. Approval of all local projects from a Systems Security perspective;
• 6. Participation in the selection and implementation of global and local IT solutions for Information Security issues;
• 7. Ensure that the security solutions, systems, services and ongoing procedures conform to the requirements of the Legal, Audit and Compliance Departments and external regulatory bodies;
• 8. Maintain awareness of the regulatory markets and competitive environment and to be aware of current technology developments;
• 9. Lead ad-hoc missions as required by the London COO and the Global Chief Information Security Officer;
• 10. To provide follow-up and facilitate the closure of Audit issues related to the Systems Security function within agreed timescales;
• 11. As a key member of the Branch and to ensure full transparency and access to information, sit on the following Committees of the Branch;
  • Information Security Committee (as owner, in line with the TOR for the committer);
  • IT Steering Committee (as participant);
  • Support Functions Committee (as participant);
  • Business Continuity Planning Committee & BCP Task Force (as participant);
  • Permanent Control Committee (as participant);
• 12. To coordinate the production of and to review Risk Assessments for CA-CIB UK
• 13. Provision of User Account administration services for the UK and overseas entities for a defined set of applications;
• 14. Provide a main point of coordination and escalation for the business in respect of all GRANT approval issues;
• 15. Ensure people database reflects the organisational

Experience:

Previous experience in IT Security is required.

Required skills:

Strong user and management communication skills.

Ability to coordinate transversally a number of teams geographically dispersed.