Santander Corporate & Investment Banking (SCIB) is Santander’s general division that supports some of the world’s most complex and sophisticated corporate and institutional clients, offering customised services and value-added wholesale products to best meet their needsThe Chief Information Security Office function is responsible for managing cyber and technology risks on behalf of Santander London Branch (SLB) based on Santander group policies and standards in line with internally defined risk management frameworks, appetite and best practiceReporting to the CISO for SLB, you’ll play a key role in the effective application, administration, and implementation of strategies and controls designed to manage cyber risks for SLB. You’ll promote and embed the technology risk management framework and operating model, driving measurable reductions across all areas of technology riskProviding independent oversight and effective challenge of cyber and information security risks across SLBAssessing the effectiveness of cyber risk management frameworks, controls and remediation activityReviewing and challenging cyber risk assessments, control testing, risk acceptances and treatment plansMonitoring the cyber risk profile, including key risk indicators, emerging threats, material incidents and control weaknessesSupporting the identification and assessment of risks arising from new technologies, transformation programmes, cloud adoption, third parties and changes to the threat landscapeProviding clear reporting and insight on cyber risk exposures to senior management, governance forums and relevant committeesChallenging the adequacy and timeliness of remediation plans relating to cyber vulnerabilities, audit findings,



incidents and control deficienciesPartnering with Technology, Cyber Security, Operational Risk, Compliance, Internal Audit and business teams to promote effective management of cyber riskSupporting regulatory and supervisory activity relating to cyber security, operational resilience and technology riskContributing to the continued development of cyber risk methodologies, policies, standards and risk appetite measuresMonitoring emerging cyber threats, regulatory developments and industry practices, assessing their potential impactProven experience in developing risk reporting, metrics, KRIs and management information for senior audiencesAn excellent understanding of cyber security domains including identity and access management, vulnerability management, security operations, cloud security, data protection, network security and incident responseExperience assessing technology and cyber risks arising from complex infrastructure, applications, cloud environments and third-party servicesExcellent written and verbal communication skills, with the confidence to constructively challenge senior stakeholdersPrevious experience in an information security roleStrong judgement, organisation and prioritisation skillsThe ability to work effectively across technology, security, risk and business teams in a complex international organisationStrong analytical skills and the ability to identify the key risk implications within complex technical informationGraduate degree and relevant professional qualifications, or equivalent experienceKnowledge of relevant UK regulatory expectations relating to technology risk, cyber security and operational resilienceExcellent communication and stakeholder management skills, both internally and externally#J-18808-Ljbffr

📌 Vice President Of Cyber Risk (Santander)
🏢 Santander
📍 Santander