Head of Cybersecurity Governance, Risk, and Compliance

As the Head of Cybersecurity Governance, Risk, and Compliance, I will manage the day-to-day operations of the function and team. I will support the management of Information Security governance for the organization, ensuring adherence to Group policies and standards. I'll identify, address, and resolve key Information Security risks and issues in a timely manner. Collaborating closely with the Director of Information Security, I will ensure that the Group security strategy is implemented appropriately and that divisional requirements are understood and supported. Additionally, I will oversee the maintenance of the Group's Information Security Management System, including the ISO 27001 certification. I will engage with the IT Security Operations team and aid the Director of Information Security in providing oversight and challenge to that function. I will also participate in periodic security-related testing activities (e.g., crisis planning events, DR exercises) and prioritize and manage response activities. I will drive the audit and client management aspects of the Information Security team, including handling client due diligence questionnaires, and help design more effective procedures in this space. Supporting and improving relevant security metrics, I will analyze data, identify trends, and drive improvements to the control environment. Lastly, I will assist with general Information Security-related issues and collaborate with the Security Architect to ensure alignment of bid requirements with existing InfoSec standards while liaising with relevant teams for resolution of any non-standard requirements identified.