Information Security Manager - Fintech - Hybrid
- Location
- City Of London, England, United Kingdom
development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations for EU financial services customers, including ICT risk management evidence … configuration and cloud security posture management. Own and test the security incident response framework, including severity classification, escalation, communications, evidence preservation, lessons learned and remediation tracking. Support Legal and Sales teams in reviewing client and supplier contract clauses relating to information security, privacy, audit rights, incident notification, resilience, subcontracting ...