Interim Lead Information Security Officer

Assignment for a bank seeking an Interim Lead Information Security Officer to strengthen second-line Information Security and ICT risk management. The suitable professional has proven experience in a comparable senior Information Security or ICT risk role, preferably within a regulated financial institution; solid understanding of technical security measures and controls; a practical, risk-based approach to applying security frameworks and managing ICT/cyber risks; experience handling incidents and third-party risk situations; the ability to operate independently and add value quickly; and strong stakeholder skills, able to build relationships with IT security teams and senior management while keeping second-line independence.

Responsibilities include: monitoring the Information Security and cyber threat landscape, converting new threats into concrete risk and control requirements; translating regulatory and market standards (including DORA and EBA rules) into effective policies and controls; delivering independent second-line review and challenge on Information Security and ICT risk controls; producing management information, dashboards and KRIs for senior management and risk committees; tracking the rollout of policies, control effectiveness, exceptions and remediation actions; advising on key risk areas such as vulnerability management, identity and access, data protection, cyber incidents and operational resilience; overseeing outsourcing and third-party ICT risk, covering assessments, assurance and critical dependencies; supporting cyber incident and crisis handling as part of the CSIRT, embedding lessons learned; promoting Information Security awareness and training across the organisation; embedding Information Security and ICT risk requirements into projects and change initiatives; and coaching and guiding ORM colleagues, including the 2.5 FTE IT security team.