Security Risk & Control - Testing - Contractor

Job Information:

• Functional Title: Security Risk & Control - Testing - Contractor
• Department: Chief Controls Office
• Reports To: Director, Technology Risk and Control
• Location: London, United Kingdom

What you will be doing:

This is an exciting opportunity for a talented individual to join our newly formed Chief Controls office (CCO), a dedicated first line risk and control function. This role has arisen due to the Security Transformation Program, offering the successful candidate the opportunity to make an impact and actively contribute to the evolution of Security Risk and Control Maturity.

As part of the CCO team, you will play a key role:

• Improving the oversight of non-financial risks, bringing risk and control subject matter expertise to partner with 1LOD business owners to proactively identify, assess and mitigate risks.
• Providing cross functional oversight across the first line, driving best practices and consistency in control standards for the effective control of risks to within risk appetite
• Driving behaviors to foster a risk-aware and risk intelligent culture where employees recognize their role as risk managers and the importance of the control framework.

The role would suit candidates with 2LOD/3LOD experience looking for an opportunity to move into 1LOD, or candidates with 1LOD control/ control remediation/ validation or Security experience.

The Technology Risk & Control Testing contractor is a key member of the CCO team who will work closely with the Security and Technology divisions in the assessment of risks and testing of controls. This includes but not limited to:

Testing Strategy, Methodology and Plan:

• Contribute to the development of the testing strategy and methodology.
• Identify and deliver best practices in testing and control standards across CLS

Testing Delivery:

• Consistently deliver assigned components of the risk assessment and testing plan (RCSA – risk and control self-assessment) on behalf of Security risk and control owners.
• Contribute to the close-out and reporting on testing results.
• Contribute to the report on testing progress, testing control themes and remediation progress.
• Escalate any testing concerns to the Testing Director.
• Engage with the wider Risk and Controls team to support continuous improvement activity.

Leadership:

• Demonstrate strategic mindset and broad perspective. Able to see the big-picture, and link individual activities to the wider landscape.
• Be a catalyst for change, driving and cultivating innovative. Challenge the status quo to drive ‘out of the box’ thinking to solve complex problems.
• Establish positive working relationships with stakeholders across the business.
• Manage ambiguity, operating effectively and decisively, even when things are not certain or the way forward is not clear.
• Share knowledge and experience with other members of the team.

What we’re looking for:

• Experience in control identification and writing
• Experience of risk assessment and controls/assurance testing either from a 1LOD ownership perspective or a 2LOD/3LOD role.
• Knowledge of Security delivery within Financial Services, and ability to demonstrate an understanding of key challenges and risks which must be mitigated and managed to enable successful delivery
• Minimum of 5 years or more of experience in one of more of the following:
  • Security Risk Management
  • Internal Audit (Security Focus)
  • Compliance
• Knowledge of Financial Services, Financial Markets Utilities or another highly regulated industry sector is essential
• Experience of regulatory engagement preferred.

Professional qualifications / certifications:

Qualifications in any of the following specialisms would be beneficial but not essential:

• Security Risk Management
• Audit & Controls
• Compliance
• Project Management