Information Security & Cyber Risk Manager

Operating within the second line, you’ll work closely with first-line teams to assess technology and cyber risks, challenge control effectiveness and help ensure significant risks are understood and managed appropriately.

Your responsibilities will include reviewing and challenging risk assessments, technology controls, control mappings and remediation plans, undertaking thematic risk assessments and providing independent risk input into significant technology change and investment.

• Strong Technology, Cyber and/or Information Security risk experience
• Experience within risk, controls or assurance
• Knowledge of frameworks such as NIST, COBIT and/or CRI
• Strong stakeholder management and influencing skills
• The ability to translate technical risk into clear commercial language
• Confidence challenging senior technology stakeholders constructively

CRISC, CISA, CISM or CISSP would be useful but aren’t essential.

This could be particularly attractive to someone who has developed strong technical risk expertise but now wants greater business exposure, stakeholder influence and involvement in strategic technology decisions., * CISM Certification

• CISSP & Related Security Certifications
• COBIT Framework
• Cyber Security
• Information Security (Infosec)
• IT Risk Management
• IT Risk Management (Controls)
• NIST Cybersecurity Framework
• NIST Cybersecurity Framework (Cobit)
• NIST Security Frameworks

Auricoe is searching for an experienced Cyber & Technology Risk professional to join a leading UK financial services organisation in London.