Information Security (technical) Lead

My client, an International bank, are looking for an Information Security Lead to join their growing team in London. This role will require you to be in the office (near Liverpool Street) up to 3 times per week and unfortunately my client does NOT offer sponsorship.

We are seeking an experienced Information Security Lead to join a growing organisation operating within a highly regulated environment.

This role is ideal for someone who enjoys bridging the gap between technical teams and security governance. You will be responsible for driving information security initiatives, maintaining and enhancing security policies and standards, supporting risk management activities, and acting as a trusted advisor to technology and business stakeholders.

Whilst this is not a hands-on engineering position, you will need sufficient technical depth to engage credibly with infrastructure, application development, cloud and architecture teams, helping ensure security is embedded across the organisation.

Key Responsibilities

• Lead Information Security governance activities across the organisation.
• Develop, maintain and enhance information security policies, standards and procedures.
• Partner with Legal, Compliance, Risk and Technology teams to implement security controls and ensure regulatory compliance.
• Provide security guidance and challenge to technology teams across infrastructure, cloud and software development functions.
• Support and coordinate security incident response activities, acting as a key liaison between technical and business stakeholders.
• Conduct security risk assessments and provide practical recommendations for remediation.
• Support the ongoing maintenance and improvement of the organisation's ISMS.
• Review proposed technology solutions and architectures from a security perspective.
• Promote secure-by-design principles throughout the technology lifecycle.
• Drive improvements in secure software development practices and application security controls.
• Engage with third-party suppliers and stakeholders to ensure appropriate security standards are maintained.
• Produce security reports, metrics and recommendations for senior management.

About You

You will have a blend of technical security knowledge and governance experience, with the ability to influence stakeholders across both business and technology functions.

Essential Experience

• Experience working in an Information Security Lead, Information Security Manager, Security Assurance, Security Governance or similar position.
• Strong knowledge of Information Security principles, frameworks and controls.
• Experience developing and maintaining security policies, standards and governance documentation.
• Experience supporting or operating within an ISO 27001-aligned environment.
• Understanding of security risk management methodologies.
• Experience working with infrastructure, cloud and application development teams.
• Ability to review technical solutions and identify security risks and control requirements.
• Experience coordinating security incidents and driving remediation activities.
• Excellent stakeholder management and communication skills.

Technical Knowledge

You should possess a good understanding of:

• Infrastructure and networking concepts.
• Virtualisation technologies and enterprise environments.
• Cloud platforms and security principles.
• Container technologies and modern software delivery pipelines.
• Secure Software Development Lifecycle (SSDLC).
• OWASP Top 10 and application security best practices.
• Vulnerability management concepts and remediation processes.
• Security architecture and secure-by-design principles.

Desirable Experience

The following would be advantageous but are not essential:

• Experience within financial services, fintech or payments environments.
• Knowledge of SWIFT payment systems.
• Exposure to SIEM and security monitoring platforms such as Microsoft Sentinel.
• Experience with Darktrace or similar threat detection platforms.
• Knowledge of vulnerability management tools such as Qualys.
• Understanding of AI security risks and governance.
• Security certifications such as CISSP, CISM, ISO 27001 Lead Implementer or equivalent.
• Japanese language skills.

Ideal candidate:

The ideal candidate will be someone who comes from a technical background who has worked their way up into GRC.

If the above role is of interest, please apply to this advertisement, call me on 0207 509 8040 or email me your CV to darius.goodarzi@robertwalters.com

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates