Cyber Security Specialist - #2181003

We’re looking for a Senior Cybersecurity Partner to act as the trusted security advisor to multiple domains (Risk, Finance, Treasury and Corporate Functions). You’ll be helping leaders make clear, risk-based decisions that enable business outcomes while meeting control and regulatory expectations.

This role combines cyber risk ownership, governance and assurance readiness with the ability to translate technical exposures into decision-grade executive reporting.

What you’ll do

• Be the senior cybersecurity partner for GFT leadership and delivery teams—advising on material cyber risks, control expectations and pragmatic risk-based trade-offs.
• Own and drive the cyber risk profile across the domains: maintain and improve the risk register; articulate risks clearly (cause–event–impact); ensure prioritisation, accountable ownership and timebound remediation plans.
• Lead control governance and assurance readiness: coordinate control assessments, thematic reviews and audit activity; ensure high-quality evidence, timely closure of findings and sustainable improvement plans.
• Embed security-by-design across change delivery: provide risk-based input to solution designs, delivery plans and acceptance criteria; reduce recurring risk patterns and improve “control-by-default” outcomes.
• Oversee supplier and SaaS cyber risk: support onboarding and renewals; drive mitigations across access controls, data protection, logging/monitoring, incident obligations, resilience and exit/lock-in risks.
• Strengthen in-service security posture by influencing priorities across identity and access risk (including privileged access), threat, exposure & vulnerability management, logging/monitoring coverage and configuration weaknesses.
• Support incident and major service events with clear security leadership, ensuring appropriate engagement with specialists and risk-based decisions and communications.
• Produce concise, executive-ready reporting for governance forums—translating technical issues into business impacts (e.g., financial reporting, payroll, liquidity activity, regulatory submissions).

What you’ll bring (essential)

• Significant cybersecurity experience within a regulated environment, with the credibility to advise senior technology and business stakeholders.
• Strong capability in cyber risk, governance and controls: risk identification and articulation, issue management, control mapping, remediation planning/tracking, and audit/assurance engagement.
• A solid technical foundation across enterprise security domains, including:
• Identity & access (incl. privileged access)
• Threat, exposure & vulnerability management
• Logging/monitoring
• Data protection
• Cloud/SaaS risk and third-party risk
• Application security and AI considerations
• Ability to translate technical findings into business impact and clear decision options.
• Excellent written and verbal communication (fluent English); confident chairing governance forums and constructively challenging.
• Collaborative, outcome-driven approach—able to deliver through influence in complex stakeholder environments.

Desirable

• Certifications such as ISO27001, CISA, CISM, CISSP, CRISC, CEH (or equivalent).
• Experience supporting technology for Finance/Treasury/Risk and/or corporate functions, including sensitivity to financial controls and regulatory reporting.
• Experience with third-party assurance and SaaS security risk management.
• Familiarity with operational resilience and technology risk expectations in financial services.