Cyber Third Party Risk Team Lead - Glasgow, United Kingdom - Virgin Money

Virgin Money

Verified Company

Glasgow, United Kingdom

3 weeks ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

Cyber Third Party Risk Team Lead

Business Unit / Team:
Chief Operating Office
Salary range: 54,8000 - £68,500 DOE + red-hot benefits

Location:
Glasgow or Gosforth

Contract Type:
Permanent Full Time

Your next adventure starts here

Our Team
We currently have an exciting opportunity for a Cyber Third-Party Risk Lead to join our Cyber Projects team.

If you like a fast-paced role that will challenge you, then you may have just found it We're looking for self-motivated enthusiastic individuals, who have a real passion for cyber security, and are ready to make a real difference to a successful team.

You will provide leadership and direction for our dynamic Cyber Third-Party Risk Team within the Technology Operations and Cyber Security (TOCS) function.

You will take a leading role in ensuring that Third-Party security controls are robust and in line with business risk appetite in relation to the services being provided.

What you'll be doing

Supporting senior management with the development and execution of a Cyber Third
Party risk assessment framework and strategies and processes to mitigate against Cyber Risks.
Documenting Third Party Risk assessment results and reviews consistently and to a high standard, evidencing the assessment performed, evidence reviewed, assessment results and any associated observations and recommendations.
Delivery of succinct, accurate and informative Cyber Third-Party risk reports and outputs, which clearly identify practical and commercially focused recommendations to address weaknesses and/or opportunities identified from Cyber Third-Party Risk assessment activities.
Working with SRMs in the business and action owners, to ensure that Cyber recommendations and actions are completed to an appropriate standard and quality, in a timely manner.
Escalating risks/issues which are not managed within agreed tolerances or do not have the appropriate level of management awareness with a full articulation of the impact and remediation activities required.
Monitoring and reviewing Third-Party vendor performance and compliance with cybersecurity requirements.
Collaborating with internal stakeholders e.g. Procurement and Legal to ensure that cybersecurity requirements are included in vendor contracts and agreements
Providing Cyber Third-Party risk management advice to major programmes, projects and change initiatives.
Deputising for the Cyber Projects Senior Manager at any relevant governance or risk committees where required.

We need you to have

A passion for Cyber Security and risk.
Experience in Cyber Third Party risk/assurance/audit in a similar role, preferably in financial services, banking or other relevant industry.
Experience in influencing, communicating and collaborating with senior management and stakeholders.
Experience in preparing and delivering structured presentations, briefings and reporting.
Experience in developing recommendations for improvement, and ensuring remedial action is taken.
Knowledge of information security related policy, industry standards, regulations and compliance requirements e.g. GDPR, PCI DSS, ISO2700
Understanding of security governance frameworks and best practises, e.g. NIST, COBIT, OWASP
Proven ability to make sound pragmatic decisions and judgements under tight timelines, within a dynamic and fastmoving environment.

It's a bonus if you have but not essential

Professional Information Security Qualification, for example CISSP, CISM, CISA, ISO27001 Lead Implementer/Auditor
Experience of working within an agile project development environment.

Red Hot Rewards

Generous holidays days annual leave (including bank holidays and prorated if parttime) plus the option to buy more
Up to five extra paid wellbeing days per year
20 weeks paid, genderneutral family leave (52 weeks in total) for expectant parents and those looking to adopt
Marketleading pension and free private medical cover
Flexible benefits include Cycle to Work, wellness and health assessments, and critical illness
Ability to work anywhere in the UK (where the role allows)

And there's no waiting around, you'll enjoy these benefits from day one.

We're all about helping you Live a Life More Virgin, so happy to talk flexible working with you.

Say hello to Virgin Money
We're making great strides towards achieving our ambition of becoming the UK's best digital bank.

As a full-service digital bank with a heritage stretching back over 180 years, we're a workforce to be reckoned with.

We're putting the full power of our experience behind disruptive ideas that reinvent the role a bank plays in people's lives.

We strive to create positive experiences for our millions of customers and our purpose, 'Making You Happier About Money', underpins everything we do.

We believe in doing banking differently, innovating and working together to make a real difference. Join us and Live a Life More Virgin that empowers you with choice and fl