Second-Line Information Security

This role provides independent assurance over the security controls owned by the first line, reporting to the CISO and working closely with Risk and Compliance functions. The position involves designing and running a risk-based control testing programme to validate that security measures meet regulatory obligations and effectively manage residual risk. The successful candidate will serve as the internal counterpart to external audits and regulatory examinations while producing assurance reporting for governance committees.