Responsibilities:
Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking.
Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps.
Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments.
Review security policies and risk frameworks and recommend improvements to strengthen security governance.
Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk.
Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up.
Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions.
Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders.
Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure.
Requirements:
Bachelor of Engineering degree or equivalent technical qualification.
18+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit.
Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation.
Strong experience performing Security Assessments and control gap assessments.
Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.