Information Security & Cyber Risk Manager with Phoenix Group overseeing cybersecurity in a high-regulated environment. Engaging in oversight, challenge, and recommendations for risk management teams.
Responsibilities
Provide ongoing oversight and challenge to Line 1 led Information Security, Information Management and Cyber Risk control management
Analyse and interpret key risk indicators and risk and control reporting to help determine where Line 2 effort is best focused
Provide insight, oversight and challenge within assigned monthly Forums
Lead Line 2 led Information Security, Information Management and Cyber Risk Thematic/Risk Reviews throughout the full lifecycle, including Planning/Terms of Reference, Fieldwork, Findings Validation and Reporting stages
Provide oversight and challenge on material Projects and Programmes
Oversee Line 1 activity to ensure adherence to the Group’s Risk Management Framework
Support the broader team with assigned Line 2 activity relating to Information Technology, AI, Operational Resilience and Third-Party Management
Develop and build relationships with Line 1 and Line 3 peers and senior stakeholders
Requirements
Proven experience managing Information Security, Information Management and Cyber Risk, in either a second or third-line capacity, within a high regulated UK industry such as Financial Services
Strong stakeholder, relationship management and influencing skills
An accomplished communicator who is comfortable, respectful and calm during sometimes challenging situations where differences of risk opinion need to be clearly positioned and justified
Able to analyse situations in a timely manner, producing clear, insightful and succinct written reports
Preferred: Professional qualification in Information Security, Information Management or Cyber Security e.g., from IRM, BCS, ISACA or ISC2 organisations
Preferred: Knowledge of Artificial Intelligence (AI)
Preferred: Knowledge of cloud computing, shared responsibility models and associated common risks
Preferred: A career background of having worked in IT for large UK corporations, with a solid baseline understanding of Information Security, Information Management and Cyber Risk Management, and control frameworks
Risk Intern working on data - driven projects across Operational, Divisional, and Technology Risk at S&P Global. Engaging in analysis, reporting, and cross - functional collaboration.
Data Admin Analyst II responsible for data governance and operations at Elevance Health. Collaborating in metadata management and system administration providing insights to enhance data quality.
Vice President, Chief Risk Officer leading Enterprise Risk Management at TruStage. Overseeing risk governance and regulatory compliance while managing the company’s financial strength.
Manager, Technology Risk and Controls at Salesforce managing IT Governance model and liaising with stakeholders. Leading technology asset oversight and preparing executive insights for governance leadership.
Analista Riesgo Técnico responsible for managing technical risk and solvency calculations at MAPFRE. Evaluating profitability and compliance under local regulatory standards.
Lead, Business Administration, Corporate & Risk at Playgroup NSW overseeing governance and operational excellence. Central role ensuring compliance and coordination across corporate services and risk management.
Conflict Analyst assisting with client acceptance and conflict clearance at Baker Tilly. Conducting risk analysis and supporting project management across various service lines.
Sr. Associate, Data Governance at Baker Tilly managing governance policy development and data quality initiatives. Collaborating with business and technical teams for cross - domain data governance execution.
Director in Operational Risk at Morgan Stanley managing External Theft and Fraud while driving strategic evolution of risk management practices. Overseeing fraud risk monitoring and fostering collaboration across risk units.
Risk Officer responsible for supervisory and compliance functions at Morgan Stanley. Monitoring risk management procedures and maintaining compliance with regulations in Florida offices.