Project description
We are seeking a Cyber Security SME to lead the design, implementation, and governance of security controls across the bank's technology landscape. The role will ensure robust protection of platforms, networks, cloud environments, client data, and critical banking infrastructure while maintaining compliance with global regulatory requirements.
Responsibilities
- 1. Security Strategy & Architecture
Define and implement enterprise-wide cyber security strategy aligned to the bank's business and technology landscape
Design and govern secure architectures across:
Network infrastructure (on-prem and hybrid connectivity)
Cloud platforms (Azure, AWS, GCP)
Identity and access management ecosystems
Core banking, trading, and payment systems
Embed security-by-design and zero trust principles across all layers
2. Core Security Domains Ownership
Lead and provide SME oversight across key cyber domains:
Network Security (firewalls, IDS/IPS, segmentation, secure connectivity, DDoS protection)
Cloud Security (secure configuration, CSPM, workload protection, cloud-native controls)
Identity & Access Management (IAM/PAM) (RBAC, MFA, privileged access, identity governance)
Endpoint & Infrastructure Security (EDR/XDR, device hardening, patching)
Application Security (secure SDLC, DevSecOps, API security, code scanning)
Data Security (encryption, tokenisation, DLP, data classification)
3. Threat & Risk Management
Lead threat modelling and risk assessments across critical banking systems and infrastructure
Define mitigation strategies aligned to frameworks (NIST, ISO 27001, CIS)
Oversee vulnerability management, penetration testing, and security assurance activities
4. Security Operations & Incident Response
Provide oversight on SOC, SIEM, SOAR, and threat detection capabilities
Enhance monitoring through AI-driven anomaly detection and behavioural analytics
Define and lead incident response strategies for cyber events (ransomware, breaches, insider threats, DDoS)
5. Regulatory & Compliance
Ensure compliance with relevant regulations and standards:
DORA (Digital Operational Resilience Act)
PRA / FCA cyber resilience requirements
GDPR and data protection regulations
SWIFT Customer Security Programme (CSP)
Support audits, regulatory reviews, and cyber resilience testing
6. Third-Party & Supply Chain Security
Assess and manage cyber risk across vendors, fintech partners, and infrastructure providers
Define third-party security standards, onboarding controls, and continuous monitoring
7. Stakeholder Management & Advisory
Act as trusted advisor to CIO, CISO, Risk, and business stakeholders
Translate technical cyber risks into business and operational impact
Support RFPs, client engagements, and strategic cyber transformation initiatives
SKILLS
Must have
- Work Experience:
Essential:
- At least 5 years of relevant experience in cyber security within banking / financial services
Proven expertise across network, cloud, IAM, application, and data security domains
Hands-on knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
Technical Capabilities
Network Security: Firewalls (e.g., Palo Alto, Fortinet), IDS/IPS, VPNs, segmentation
Cloud Security: Azure/AWS/GCP security services, CSPM, IAM integration, container security
IAM/PAM: Okta, Azure AD, CyberArk, SailPoint or similar
Security Operations: SIEM (Splunk, Sentinel), SOAR, threat intelligence platforms
Endpoint Security: EDR/XDR solutions (e.g., CrowdStrike, Defender)
DevSecOps: CI/CD security integration, SAST/DAST tools
Data Protection: Encryption standards, key management, DLP
Regulatory Knowledge
Strong understanding of cyber resilience expectations within banking
Experience supporting audits, regulatory submissions, and control frameworks
Soft Skills
Strong stakeholder engagement and executive communication skills
Ability to operate at both strategic (CISO-level) and hands-on technical levels
Experience working across global, distributed teams
Nice to have
Certifications: CISSP, CISM, CISA, CCSP, Azure/AWS Security certifications
Experience with Zero Trust Architecture and cloud transformation programmes
Exposure to AI-driven cyber security and automation