Santander Corporate & Investment Banking (SCIB) is Santander’s integral division that supports some of the world’s most complex and sophisticated corporate and institutional clients, offering customised services and value-added wholesale products to best meet their needs
¿Le interesa este puesto? Puede encontrar toda la información relevante en la descripción a continuación.
The Chief Information Security Office function is responsible for managing cyber and technology risks on behalf of Santander London Branch (SLB) based on Santander group policies and standards in line with internally defined risk management frameworks, appetite and best practice
Reporting to the CISO for SLB, you’ll play a key role in the effective application, administration, and implementation of strategies and controls designed to manage cyber risks for SLB. You’ll promote and embed the technology risk management framework and operating model, driving measurable reductions across all areas of technology risk
Providing independent oversight and effective challenge of cyber and information security risks across SLB
Assessing the effectiveness of cyber risk management frameworks, controls and remediation activity
Reviewing and challenging cyber risk assessments, control testing, risk acceptances and treatment plans
Monitoring the cyber risk profile, including key risk indicators, emerging threats, material incidents and control weaknesses
Supporting the identification and assessment of risks arising from new technologies, transformation programmes, cloud adoption, third parties and changes to the threat landscape
Providing clear reporting and insight on cyber risk exposures to senior management, governance forums and relevant committees
Challenging the adequacy and timeliness of remediation plans relating to cyber vulnerabilities,



audit findings, incidents and control deficiencies
Partnering with Technology, Cyber Security, Operational Risk, Compliance, Internal Audit and business teams to promote effective management of cyber risk
Supporting regulatory and supervisory activity relating to cyber security, operational resilience and technology risk
Contributing to the continued development of cyber risk methodologies, policies, standards and risk appetite measures
Monitoring emerging cyber threats, regulatory developments and industry practices, assessing their potential impact
Proven experience in developing risk reporting, metrics, KRIs and management information for senior audiences
An excellent understanding of cyber security domains including identity and access management, vulnerability management, security operations, cloud security, data protection, network security and incident response
Experience assessing technology and cyber risks xghoner arising from complex infrastructure, applications, cloud environments and third-party services
Excellent written and verbal communication skills, with the confidence to constructively challenge senior stakeholders
Previous experience in an information security role
Strong judgement, organisation and prioritisation skills
The ability to work effectively across technology, security, risk and business teams in a complex international organisation
Strong analytical skills and the ability to identify the key risk implications within complex technical information
Graduate degree and relevant professional qualifications, or equivalent experience
Knowledge of relevant UK regulatory expectations relating to technology risk, cyber security and operational resilience
Excellent communication and stakeholder management skills, both internally and externally
#J-18808-Ljbffr

📌 Vice President of Cyber Risk (CISO - SCIB) (Santander)
🏢 Santander
📍 Santander