Senior Control Manager (Cyber)

The GCIO Chief Control Office (CCO) team enables the bank to operate within its risk appetite by providing operational risk and control expertise, technical knowledge, and business understanding. They implement and oversee the Group’s Risk Management Framework, conduct control assessments, maintain risk governance, and collaborate closely with all lines of defence and external regulators.

• At least 5 years of practical experience with Cyber control capabilities, specifically Cryptography & Key Management Security and Digital Identity & Certificate Management, in control management functions.
• At least 5 years of experience and expertise in managing operational risk, non-financial risk, and/or technology and information security risk.
• Experience in IT, Operations, Risk Management, or Audit roles managing diverse risk types is desirable.
• Proven track record of process improvement and delivering commitments.
• Experience or exposure to Financial Services or other highly regulated industries is preferred.
• Strong communication skills to influence and challenge stakeholders.
• Ability to work independently and collaboratively, seeking input and escalating as necessary.
• Ability to present complex issues concisely to senior partners using non-technical language.

Nice to have:

• Experience in Audit.

• Act as a trusted advisor to Cyber Security senior management on Cyber controls, specifically Cryptographic Services (CRYP) controls.
• Promote accountable risk and control decision-making based on quality data and analysis.
• Constructively challenge inadequate, inefficient, or excessive controls.
• Provide specialist insights to improve Cyber controls, including Cryptography & Key Management Security and Digital Identity & Certificate Management.
• Advise and design processes and controls that are commercially viable, practical, and effective.
• Identify trends to anticipate developments in the risk and control environment.
• Influence development and implementation of risk management and regulatory frameworks.
• Provide Senior Management with updates on relevant operational risk policy changes.
• Build strong relationships across Cyber Security, Technology, and Risk and Control functions to deliver pragmatic outcomes.