Cyberteam Looking for Cyber Risk Analyst at London Full Time

Accountabilities:

1. Understand and translate business and regional cybersecurity requirements and translate into deliverables
2. Define quality acceptance criteria and metrics for tracking delivery
3. Define and management of requirements traceability and tracking
4. Identification and escalation of any deliverables that are at risk or will not meet quality criteria with defined timescales
5. Assessing security and business risks, analysing and presenting critical risks and potential remediation activities to all levels of management within the business
6. Testing/review of test artefacts to demonstrate that deliverables have meet defined criteria
7. Ability to clearly articulate and document technical matters to non-technical stakeholders and suppliers.
8. Demonstrate that third parties are complying with their contractual obligations in regard to cyber security.
9. Summarise delivery status for c-suite stakeholders (CIO and COO) focus on:
   • Which control? How does is support control status?
   • Regulatory, audit, MSII, if so which one, MAS, Bafin, ECB
   • Which businesses and regions
   • What purpose eg to support FX trading NOT a list of applications or systems
   • What benefit. Why is it helpful, what does it stop or enable. Reduces likelihood or impact of x. Protects service availability
   • Quantify x/y protected eg number of users, accounts, services
   • Strategic outcomes eg 0 trust
   • Maturity
10. Produce and maintain business team plan and requirements for delivery and track status using JIRA, confluence
11. Automate reporting wherever possible reducing reliance on PowerPoint and actively transition to digital communication mechanisms

Must have:

1. Minimum 5 years cyber experience
2. Good understanding of NIST or similar cybersecurity framework (eg NIST, ISO, ISF)
3. Understanding of financial service risk and controls environment (eg NIST, ISO, ISF)
4. Understanding of cyber security maturity models to assist with identifying immature controls and enable provision of recommendations to address the gaps.
5. Demonstrable experience in core cyber domains including Network security, SOC, incident management, IDAM, vulnerability management, security assessment, data management
6. Ability to explain complex cybersecurity concepts to c-suite business stakeholders
7. Full agile life cycle delivery management from pre-concept to transition to BAU with defined people, process and technology (requirements management and traceability, process improvement, operating model definition, operational acceptance)
8. Expert knowledge of JIRA and confluence
9. Demonstrable experience of regulatory cyber imperatives
10. Demonstrable ability to elicit and translate regulatory and business requirements into business deliverables

The candidates must be able to demonstrate their ability to operate in an complex global environment and ability to respond to robust business challenge

The candidates will need to demonstrate the ability to deliver high quality results with minimal direction, under time pressure and the ability to present these views back to c-suite executives

London – Fully Remote
12 Months Contract

Rate – Negotiable – INSIDE IR35