manage the IT security team, including outsourced SOC/MDR/DFIR providers. Maintain and enhance our ISMS, including policies, procedures, registers, and reports. Ensure compliance with ISO 27001, ISAE3402 Type II, and NIS2 requirements. Prepare and present regular security reports to senior management. Liaise with external auditors, customers, and vendors as required. Conduct regular security assessments … Professional certification (CISM, CISSP, or equivalent) required. 7+ years' experience in IT security, with at least 3 years in a leadership or managerial role. Strong knowledge of ISO 27001, ISAE3402, and related frameworks. Experience with security technologies such as XDR, MDR, EDR, SIEM, NAC, IDS/IPS, and SASE. Proven background in incident response, risk management, and More ❯
financial institution. Understanding of risk management and effective Information Security strategy, practices, technologies and controls frameworks. Solid understanding of assurance standards such as SSAE 16/SSAE 18/ISAE3402/ISAE3000, Trust Service Principles. Critical thinking and detailed analyses to provide decision support and mentorship to LSEG businesses, customers and executives. Experience in effective negotiation and influence skills with More ❯
activities, liaising with internal stakeholders, clients, and external auditors Prepare for audits, including gathering pre-audit information and supporting documentation Run operational audit programmes covering Security (e.g., PCI-DSS, ISAE3402, ISO/IEC 27001, ENS), Business Continuity (e.g., ISO 22301, KRITIS), and ESG/Sustainability (e.g., ISO 14001, EcoVadis) Evaluate internal compliance and implement risk management strategies More ❯
activities, liaising with internal stakeholders, clients, and external auditors Prepare for audits, including gathering pre-audit information and supporting documentation Run operational audit programmes covering Security (e.g., PCI-DSS, ISAE3402, ISO/IEC 27001, ENS), Business Continuity (e.g., ISO 22301, KRITIS), and ESG/Sustainability (e.g., ISO 14001, EcoVadis) Evaluate internal compliance and implement risk management strategies More ❯
