About this role
To lead the Group’s second-line Cyber and Information Security Risk Management function by providing independent oversight, constructive challenge, and assurance over the management of cyber and information security risks across regional offices and Group entities.
The role ensures that risks to critical services, technology initiatives, and third-party arrangements are effectively identified, assessed, tested, and managed within the Group’s Risk Appetite, while strengthening cyber resilience through red team exercises, compromise assessments, and cyber tabletop exercises.