Head of Cyber Risk required for global financial services firm. You will lead the organization's efforts to identify, assess, and mitigate cyber-related risks across the enterprise. This role is responsible for developing and implementing a comprehensive cyber risk framework, aligning with business goals, regulatory expectations, and evolving threat landscapes. You will collaborate closely with IT, compliance, security, and executive leadership to ensure a strong cyber risk posture and informed decision-making. This is more hands-on as opposed to managerial.
Key Responsibilities: - Strategic Leadership:
- Develop and own the enterprise-wide cyber risk management strategy and roadmap.
- Advise senior leadership and the board on emerging cyber risks, threats, and regulatory requirements.
- Represent the cyber risk function in risk committees, regulatory meetings, and board-level discussions.
- Risk Framework & Governance:
- Design and maintain a cyber risk management framework that aligns with industry standards (eg, NIST, ISO 27005, FAIR).
- Define and monitor key cyber risk indicators (KRIs) and risk appetite metrics.
- Oversee regular cyber risk assessments, scenario planning, and risk reporting.
- Operational Risk Management:
- Collaborate with cybersecurity, IT, and business units to identify and remediate cyber risk exposures.
- Ensure appropriate controls, policies, and procedures are in place and tested.
- Lead cyber risk input into third-party risk, data privacy, and cloud governance programs.
- Regulatory & Compliance:
- Ensure compliance with relevant laws and frameworks (eg, GDPR, DORA, NIS2, SOX, PCI-DSS).
- Prepare and support audits, risk assessments, and regulatory reviews.
- Team & Culture Building:
- Build and lead a high-performing cyber risk team.
- Drive a risk-aware culture through training, awareness, and engagement across the organization.
- Qualifications & Experience:
- Experience in cybersecurity, risk management, or IT governance, with strong experience in a leadership role for a global financial organisation.
- Strong understanding of cybersecurity frameworks, threat intelligence, and digital risk management.
- Degree in Information Security, Risk Management, Computer Science, or a related field. Professional certifications such as CISSP, CISM, CRISC, or equivalent are highly desirable.
