Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 25 days ago

Assistant Manager Information Security

Workable (global search)108,016 open roles

Where
London, England, United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAssistant Manager Information SecurityWorkable (global search) · London, England, United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 7 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 25 days ago

Workable (global search) median: 7 days open

The posting

The role plays a vital role in safeguarding the bank’s information assets and data, and in maintaining the governance frameworks that evidence a resilient and well-controlled security posture. The role is primarily focused on information / cyber security, data protection and resilience maintaining the ISO 27001:2022 Information Security Management System (ISMS), supporting the bank’s data protection obligations and upkeeping cyber resilience, and providing management with timely, accurate and risk-focused reporting on the bank’s security and compliance posture.

The role proactively supports the bank’s compliance with UK regulatory requirements, industry standards and best practice, while contributing to the development and enhancement of security and data protection frameworks, policies and controls. It also supports the bank’s operational resilience; business continuity and IT disaster recovery arrangements. Drawing on strong analytical skills, sound knowledge of cyber security and data protection, and an understanding of the bank’s security infrastructure (including AWS cloud environments), the role helps the bank maintain cyber and operational resilience, protect against financial and reputational risk, and foster a culture of sound security across the organisation.

MAIN DUTIES

Information Security & Risk Management

  • Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready.
  • Provide proactive security and data protection assurance for new initiatives, change and ongoing projects, ensuring security-by-design and privacy-by-design requirements are embedded from design through implementation.
  • Conduct information security risk assessments to identify, evaluate and prioritise threats and control gaps, ensuring effective controls are agreed, implemented, tracked to closure and reflected in the risk register.
  • Define, document and drive adoption of security controls that protect information flows across internal systems, third parties and public networks, in line with the ISMS and regulatory requirements.
  • Act as the governance and oversight interface to the bank’s cyber security operations, liaising with the specialist technical teams that run day-to-day security monitoring, detection and remediation, rather than performing these activities hands-on.
  • Conduct and coordinate threat intelligence and vulnerability management interpreting relevant intelligence, tracking identified vulnerabilities against remediation SLAs, coordinating timely remediation with technology teams and external providers, and keeping abreast of the evolving threat landscape.
  • Support the maintenance and testing of incident response and crisis management procedures, contributing to the effective triage, coordination and post-incident review of security and data protection events while minimising business disruption.
  • Act as support for the bank’s operational resilience and business continuity arrangements, and working closely relevant stakeholders and IT on disaster recovery.
  • Conduct and contribute to business impact analyses, business continuity and IT disaster recovery plans and their testing (including the AWS cloud environment), helping ensure recovery objectives (RTO / RPO) are documented, achievable and evidenced, with lessons learned fed into improvements.

Data Protection Governance

  • Support the Data Protection Officer in operating the bank’s data protection framework under UK GDPR and applicable regulations.
  • Maintain the Record of Processing Activities (ROPA) and support data retention, data minimisation and records-management governance across the bank.
  • Support the handling of Data Subject Access Requests (DSARs) and other data subject rights, and the completion of Data Protection Impact Assessments (DPIAs) for new or changed processing.
  • Assess personal data breaches, contributing to containment, root-cause analysis and the assessment of notification obligations to the ICO and affected individuals within regulatory timeframes.
  • Contribute to data protection and processor due diligence within third-party and outsourcing arrangements.

Third-Party & Supply Chain Security

  • Perform and govern security and data protection due diligence and ongoing assurance of suppliers, processors and critical third parties, in line with supplier controls and regulatory expectations on outsourcing and third-party risk.
  • Track third-party findings, remediation actions and assurance evidence (e.g. certifications, attestations, control reports), escalating material risks as appropriate. Assurance, Compliance & Reporting
  • Partner with auditors, regulators and payment schemes by preparing evidence, providing subject-matter expertise, and supporting internal and external audits, certifications and reviews (including ISO 27001 surveillance and scheme assurance such as CHAPS, FPS, Bacs and SWIFT CSP).
  • Advise stakeholders on information security and data protection regulatory obligations including breach assessment and notification helping the bank meet its regulatory and applicable payment scheme assurance expectations.
  • Evaluate and enhance the effectiveness of the bank’s information security and data protection policies, procedures and controls, driving continuous improvement and closure of audit and assessment findings.
  • Produce timely, accurate and risk-focused management reporting including metrics, key risk indicators (KRIs), dashboards and committee packs on security posture, incidents, vulnerabilities, data protection and compliance activities.

GENERAL

  • Act as a first point of contact for information security and data protection queries, alerts and events, coordinating responses via the bank’s incident management protocols and escalating to the Head of Information Security & Resilience as appropriate.
  • Undertake day-to-day administrative tasks, reporting and communication with relevant departments across the organisation. • Maintain security and data protection records, control documentation, dashboards and reports.
  • Assist in conducting reviews and assessments to identify and report potential vulnerabilities, weaknesses and threats.
  • Support the implementation, monitoring and governance of security controls that protect the bank’s data, systems and networks.
  • Support the delivery of security awareness and data protection training to foster a strong risk aware culture across the bank.

Requirements

EDUCATION & TRAINING

  • Bachelor’s degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered.
  • Relevant professional certifications are strongly preferred, for example CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor. Technology-centric training and certification is an advantage.

EXPERIENCE AND SKILLS

  • 5+ years’ experience in information and cyber security implementation, management and governance, ideally within UK financial services, covering ISMS management, risk management, and management reporting.
  • Working knowledge of information security and data protection frameworks and regulation, including ISO 27001:2022, NIST CSF, UK GDPR, and awareness of FCA / PRA and payment scheme expectations.
  • Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and incident / breach management, with the ability to interpret events and drive effective remediation.
  • Working knowledge with security technologies and controls (e.g., Perimeter/edge security controls, data protection controls, SIEM / monitoring controls) and cloud security.
  • Exposure to operational resilience, business continuity (ISO 22301) and IT disaster recovery, with awareness of FCA / PRA operational resilience expectations (SYSC 15A / SS1/21).
  • Excellent analytical, written and stakeholder-engagement skills, with the ability to produce audit-ready documentation and influence decision-making across technical and non-technical audiences.
  • Committed to continuous learning, keeping up to date with evolving threats, technologies and regulatory requirements.

Benefits

  • 25 days annual leave entitlement plus 8 bank holidays
  • Pension scheme, 4% employer contribution
  • Private Medical Insurance
  • 60-40 Hybrid working after successful probation period
  • Training and development
  • Free gym access in the building

Salary: £60K Annual (Negotiable)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.