Information Security Manager

- Embed and maintain the Group Information Security framework across all regions - Ensure alignment with global regulatory regimes (FCA, ESMA, ASIC, MAS and others) and recognised standards such as ISO 27001 - Lead and support security risk assessments across business units, platforms and third parties - Maintain and enhance the Information Security Management System (ISMS) - Track, report and drive remediation of key security risks and metrics at senior stakeholder level - Act as a primary security contact for audits, supervisory reviews and regulatory engagement - Ensure policies, standards and controls meet global regulatory expectations - Support regulatory submissions, security attestations and client due diligence - Interpret new regulatory developments and work cross-functionally to embed practical solutions - Oversee security risk assessments of technology vendors and service providers - Support supplier due diligence and ongoing risk monitoring - Ensure appropriate controls are embedded across outsourced and offshore operations - Partner with security and technology stakeholders across Europe and APAC - Promote a consistent Group security posture while accommodating local regulatory requirements - Contribute to global security initiatives and transformation programmes - Provide security leadership to business projects, balancing risk management with commercial priorities - Act as a recognised security authority within relevant jurisdictions (e.g. IAM, data protection oversight)