The posting
Responsibilities:
- Lead Third-Party Risk Management (TPRM) activities, including third-party cyber risk assessments, evidence validation, control assessment, and remediation tracking.
- Conduct Security Assessments and control gap assessments to identify security risks, control weaknesses, and compliance gaps.
- Assess Cybersecurity controls, Information Security policies, standards, and risk frameworks across technology and third-party environments.
- Review security policies and risk frameworks and recommend improvements to strengthen security governance.
- Lead and support Regulatory Engagement activities relating to Cybersecurity, Information Security, and Technology Risk.
- Coordinate Internal Audit engagements, including audit liaison, evidence gathering, responses, findings, and remediation follow-up.
- Analyse security and audit findings and recommend appropriate risk mitigation and remediation actions.
- Prepare security assessments, risk reports, audit documentation, and recommendations for senior stakeholders.
- Work with business, technology, cybersecurity, risk, compliance, audit, and third-party stakeholders to drive risk remediation and closure.
Requirements:
- Bachelor of Engineering degree or equivalent technical qualification.
- 18+ years of experience in Third-Party Risk Management, Cybersecurity, Information Security, Security Assessments, Regulatory Engagement, and Internal Audit.
- Strong Banking/Financial Services domain experience, preferably within a large banking organisation.
- Hands-on experience in TPRM, including third-party cyber risk assessments, security due diligence, evidence review, control validation, and remediation.
- Strong experience performing Security Assessments and control gap assessments.
- Strong understanding of Cybersecurity controls, Information Security policies, standards, and risk frameworks.
- Strong experience in Regulatory Engagement and coordination with regulatory stakeholders.
- Strong experience in Internal Audit engagements, including evidence gathering and audit-team coordination.
- Strong experience in risk assessment, mitigation, security governance, documentation, and senior stakeholder management.



