Location
London

Hours
Full Time

Salary
Negotiable

About the Role
The purpose of this role is to assist the Director of Business Information Security (BISO) in all security matters relating to the oversight of Information and Cyber Security within the LCH Ltd. business line of LSEG’s Post Trade division. The successful candidate will ensure that critical business systems and data assets of LCH Ltd. are adequately protected, and that all related information security and cyber controls remain effective and within risk appetite or have appropriate risk treatment plans in place. This role suits an experienced Information Security Manager with senior management level experience in InfoSec/Cyber roles within the Financial Services (FS) or Financial Market Infrastructure (FMI) industries. The role demands strong expertise in all areas of information and cyber security, including legacy, existing, and emerging technologies such as cloud and security controls. A solid Security Governance Risk and Compliance (Security-GRC) skillset is essential, with additional advantage from experience in information security engineering, vulnerability management, security architecture, and security operations.

Key responsibilities include assisting in the oversight of Information Security by reviewing and assessing security controls, overseeing control gap remediation, monitoring security roadmaps and programmes, engaging with technology and cyber teams, attending risk and governance meetings, collaborating with the three lines of defence, engaging with third parties, establishing and maintaining cyber risk profiles and risk control assessments, maintaining key performance and risk indicators, preparing executive-level presentations, and assessing security architecture and project risk compliance.

The role also involves engaging with the business to understand goals and operational risks, identifying improvement areas, supporting risk management processes, analysing emerging threats, building strong relationships across governance stakeholders, and embedding cyber security across the firm by ensuring compliance with policies, challenging controls for continuous improvement, and monitoring industry trends.

Additional responsibilities include security governance, technical and risk reviews such as documenting technologies and controls, conducting maturity assessments against standards like NIST, ISO27001/2, SOC2, reviewing projects for security design, identifying and scoring risks, producing remediation plans, responding to regulatory matters, and presenting risk postures to senior and executive bodies.

The role requires partnering with business control functions to assist with security workloads and maintain balanced relationships with risk, compliance, legal, HR, and audit functions. Staying abreast of emerging technologies and the cyber threat landscape, maintaining knowledge of information security and cyber risks, proposing appropriate risk countermeasures, and remaining informed on global data protection regulations are also key aspects of this position.

Join LSEG and be part of a team that values innovation, quality, and continuous improvement. LSEG is a leading global financial markets infrastructure and data provider committed to financial stability, empowering economies, and enabling sustainable growth. We foster a diverse and inclusive culture, support sustainability initiatives, and offer a range of benefits including healthcare, retirement planning, paid volunteering days, and wellbeing programmes.

Experience
- Minimum 10 years in senior Information Security management roles
- Extensive experience within Financial Services or Financial Market Infrastructure industries
- Proven problem solving, innovation, and critical thinking skills
- Excellent written and verbal communication and stakeholder management skills
- Ability to articulate complex ideas to both technical and non-technical audiences
- Experience working both independently and collaboratively in fast-paced, high-volume environments
- Ability to prioritise workloads efficiently with minimal supervision

About you
- Subject matter expert in Information and Cyber Security with strong knowledge of legacy, current, and emerging technologies including cloud and security controls
- Strong Security Governance Risk and Compliance (Security-GRC) skillset
- Experience in information security engineering, vulnerability management, security architecture, and security operations is advantageous
- Pragmatic and efficient approach to work
- Strong relationship building skills across multiple lines of defence and business functions
- Commitment to continuous improvement and staying current with industry trends and regulations

Qualifications
- Must have: CISSP certification
- Desirable: CISSP-ISSAP, CISSP-ISSEP, CISM, CCSP, CCSK, CEH
- Working knowledge of security standards and frameworks including ISO27K, ISF SOGP, NIST CSF, CIS, CSA STAR, CBEST, TIBER-EU, SOC2