VP - IT Risk & Cyber oversight

Full Job Description

- Facilitating Risk and Control Self Assessments (RCSA) by Risk Owners to ensure completeness (e.g. against industry standard frameworks such as NIST and COBIT) and accuracy.  This will include running risk assessment workshops with various business areas and support functions, and consolidating the results into operational risk maps 

- Collecting and analysing operational incidents to ensure that relevant lessons are learnt; agreed action plans monitoring and escalating the issues to the management attention when necessary 
- Providing independent 2nd line assurance of the effectiveness of the control environment through thematic reviews and key controls testing) and advising on likely effective control approaches and mitigation activities 

Skills required:

- IT and cyber security – 1st, 2nd or 3rd line roles 

- Experince from a leading investment bank 

- Deep knowledge of risk and controls