Job description
The Cybersecurity function is responsible for enabling businesses and functions to manage their information security and cybersecurity risks as well as ensuring risk and controls are assessed and implemented appropriately, objectively and independently through professional and specialized subject matter experts.
The Cyber Consulting Lead is a senior role supporting the Business Information Security Officer (BISO) organisation. The BISO’s organisation is part of the 1st line of defence (1LOD). The key responsibilities include acting as a cybersecurity SME for the business/ region, providing technical advisory support, liaising with cybersecurity central teams and the business/ region to provide cyber solutions for WPB initiatives and input into local remedial activities as required.
The role reports into the BISO of WPB, which in turn reports to the Global Head of Cybersecurity Business Enablement.
Primary Responsibilities
Scope of Coverage
The Cyber Consulting lead is expected to work collaboratively with other members of the BISO organisation, the core central teams and have a good understanding of local business requirements and cybersecurity control landscape for the respective business/ region.
Secure Business Transformation
· Have an in-depth understanding of WPB Technology landscape and local requirements to provide advice and input into the business/ region technical requirements and ensure these are captured and incorporated into the cybersecurity strategy and future demand management
· Provide cybersecurity advice and input into the business initiatives for WPB to ensure compliance with cybersecurity controls and effective security management relating to business initiatives.
· Work collaboratively with cybersecurity Architecture and Engineering teams to ensure that business led transformation initiatives follow the right principles in relation to cybersecurity architecture, design and engineering.
· Work closely with the Cybersecurity Delivery Lead to support the role out of new cyber initiatives
o Collaborate with the Cyber Delivery lead and the central Cybersecurity functions to ensure appropriate prioritisation and escalate any operational or technical challenges to delivery within WPB
o Support the Cybersecurity Delivery Lead to ensure benefits are realised for all transformation projects
Governance & Reporting
· To support Customer & Products Service line CIO with technical input when providing tailored reporting for WPB
o Understand the technical local business requirements and the cybersecurity control landscape to be able to provide additional context to the Cyber risk profile and any specific mitigations for the for the respective business/ region
o Where appropriate engage with cybersecurity central teams such as, Cybersecurity Engineering, Cybersecurity Operations, to provide further advise and technical input to respective business/ region
Information Security Risk Management & Remediation
· Provide cyber consulting and technical SME input into the global path-to-green initiatives for Cybersecurity controls improvement work. This includes contributing to identify adequate requirements to reduce cyber risk, providing input into roadmaps and mitigation plans for gaps identified within the Cybersecurity controls for WPB.
· Where appropriate, support Customer & Products Service Line CIO and CTO to assess the impact of major incidents to WPB by providing specific technical and cyber input for the business/ region, working closely with the core cybersecurity functions on action plans to minimise impact.
Regulatory Compliance and Industry and Customer Engagement
· To have a good understanding of cybersecurity control landscape in the context of the respective business/ region and provide advisory input into regulatory reporting and business requirements as needed.
Team & Stakeholder Management
· Establish stakeholder relationships with core cybersecurity technical teams and relevant technology teams (i.e. ITID and Architecture) in WPB Tech.
· Establish strong relationships within the BISO organisation (i.e. collaborating with the Region/ Country/ Service line lead(s) and the Cyber Delivery lead(s))
· Participate in Cybersecurity forums with industry peers, as required.
Provide mentoring, coaching, and guidance for junior team members (if applicable)
Requisitos
· Positive and professional attitude, team player, flexible and adaptable, open to change(s)
· Ability to quickly develop good working relationships with stakeholders
· Good spoken and written communication and ability to adapt style based on audience (Fluent in spoken / written English)
· Ability to communicate technical subject matter to non-technical stakeholders
· Previous experience of delivering an excellent customer service
· Takes responsibility and ownership for work and personal development
· Bachelor Degree and/or similar experience, preferably in IT security governance in the Financial Services industry or global corporate service provider
· Desirable to have one or more industry-recognised cybersecurity-related certifications including ISO270001, CISA, CISM, CISSP, CRISC