Information Security Risk Manager

Business Unit:Chief Operating Office
Salary range: 58400 - 87600
Location: UK Hybrid Occasional travel to London/Glasgow
Contract type: Permanent Full Time

Live up to your potential. Live a life more Virgin

Our Team

Working in Cyber Security is a big deal as we continue to play a key role in keeping Virgin Money safe. Were on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations. Well be working to protect against security threats to Virgin Money and the financial services sector. Youll play an important role in helping us understand the security landscape so we can protect ourselves from risk. This helps to inform our Cyber Strategy Culture and Education work as well as direct investments to mitigate risks and prevent and detect attacks.

The Control Tower Team supports the organisations overall Cyber Security capabilities specifically focusing on enhancing our security posture against attacks to ensure we remain available to customer and colleagues. The Information Security Risk Manager role is a key role that provides essential oversight and analysis of critical processes within the function

What youll be doing

• Own and manage the Cyber Risk Profile
• Lead Risk Assessments as part of the COO Technology function RCSA process
• Drive proactive risk identification and effective mitigation planning (e.g. controls updates controls design and effectiveness assessments) alongside compliance to bank policy and standards.
• Execution of control testing requirements within an Enterprise-wide testing framework with specific focus on IT controls testing related to risk remediation
• Deliver and document periodic risk assessment reviews for BU risk profiles in accordance with requirements of the Risk Management Framework
• Support continuous improvement techniques with a focus on data and measurement to ensure own objectives are delivered
• Provide insight and assessment of key risk packs and reporting outputs
• Support Security and Technology functions with delivery of core mandated reporting requirements such as risk committees and board reviews
• Effective stakeholder management across the lines of defence to ensure alignment and adherence to assurance best practice.

We need you to have

• Expert knowledge of cyber security governance frameworks policies and procedures such as NIST COBIT CIS (Centre for Internet Security) Controls
• Understanding of cyber security risk management principles and practices.
• Awareness of emerging cyber security trends threats and technologies.

Its a bonus if you have but not essential

• Knowledge of security technologies tools and solutions used in cybersecurity programs.
• Understanding of regulatory requirements and industry standards relevant to cyber security.
• CISSP certified

Red Hot Rewards

• Generous holidays - 38.5 days annual leave (including bank holidays and prorated if part-time) plus the option to buy more.
• Up to five extra paid well-being days per year.
• 20 weeks paid gender-neutral family leave (52 weeks in total) for expectant parents and those looking to adopt.
• Market-leading pension.
• Free private medical cover income protection and life assurance.
• Flexible benefits include Cycle to Work wellness and health assessments and critical illness.

And theres no waiting around youll enjoy these benefits from day one.

Feeling insatiably curious about this role If were lucky to receive a lot of interest we may close the advert early and would hate you to miss out.

Were all about helping you Live a Life More Virgin so happy to talk flexible working with you.

Say hello to Virgin Money

Were making great strides towards achieving our ambition of becoming the UKs best digital bank. As a full-service digital bank with a heritage stretching back over 180 years were a workforce to be reckoned with. Were putting the full power of our experience behind disruptive ideas that reinvent the role a bank plays in peoples lives. Were customer obsessed and work tirelessly to create positive experiences for our millions of customers and deliver on our purpose Making You Happier About Money. Our customer centric culture means that were able to do banking differently and by innovating and working together we can make a real difference. Join us and Live a Life More Virgin that empowers you with choice and flexibility in how you work.

Be yourself at Virgin Money

Our purpose is to make people happier about money this means seeing and feeling the world as our customers do by creating a workforce that reflects the rich diversity of our customers and communities. Were committed to creating an inclusive culture where colleagues feel safe and inspired to contribute speak up and be heard.

As a Disability Confident Leader were committed to removing any obstacles to inclusion. If you need any reasonable adjustments or support making your application contact our Talent Acquisition team

Now the legal bit

Living A Life More Virgin allows our colleagues to be based anywhere in the UK (if the role allows it) but well need you to confirm you have the right to work in the UK.

If youre successful in securing a role with us there are some checks you need to complete before starting. These include credit and criminal record checks and three years worth of satisfactory references. If the role is part of the Senior Manager Regime and Certification Regime it requires enhanced pre-employment checks well ask for six years of regulatory references and once in the role youll be subject to periodic employment checks.