Cyber Security - Manager

Job Responsibilities

• Implement, and manage a comprehensive IT compliance program that aligns with ISO 27001 requirements, support during internal and external audits as required.
• Manage the PCI DSS requirements and work closely with Engineering stakeholders and external auditors to provide necessary assurance, and continually evaluate controls based on changes to the architecture/business requirements.
• Support 2nd and 3rd line compliance initiatives related to security.
• Manage policy lifecycle for compliance programmed and organizational governance.
• Continually enhance security reporting capabilities by leveraging tools and automation.
• Support in driving security awareness initiatives across the organization.
• Perform third party due diligence and security risk profiling, evaluate the security practices of third-party vendors, emphasizing ISO 27001, SOC 1, and SOC 2 compliance.
• Wider Governance, Risk and Compliance (GRC) related activities within the OakNorth s cyber security team.
• A deep understanding of IT security principles, with specific focus of operating in a cloud-native and SaaS heavy environment is essential for this role.
• 5-7 years of experience in cyber security, preferably in the financial services industry.
• Experience developing and leading a cyber security governance programmed aligned to ISO 27001 and NIST Cyber Security Framework.
• Proven knowledge of cyber security policies, standards, and governance controls in cloud-native environments.
• Effective communication with both internal and external stakeholders.
• Strong collaboration within the cyber security team.