Location
London

Hours
Full Time

Salary
Negotiable

About the Role
The purpose of this role is to assist the Director of Business Information Security (BISO) in all security matters relating to the oversight of Information and Cyber Security within the LCH Ltd. business line of LSEG’s Post Trade division. You will ensure that critical business systems and data assets are adequately protected, maintaining effective information security and cyber controls within risk appetite or with appropriate risk treatment plans.

This role suits an experienced Information Security Manager with senior management experience in InfoSec/Cyber roles within the Financial Services (FS) or Financial Market Infrastructure (FMI) industries. You will be a subject matter expert with strong knowledge across all areas of information and cyber security, including legacy, existing, and emerging technologies such as cloud and security controls.

Key responsibilities include:
- Assisting in the oversight of Information Security by reviewing and assessing controls, gap analysis, and remediation activities
- Monitoring and analysing security roadmaps, strategies, programmes, and projects, identifying risks and opportunities for improvement
- Engaging closely with technology and cyber teams delivering services
- Providing updates at risk and governance meetings to stakeholders across the three lines of defence
- Collaborating with internal and external parties to ensure contracted security levels are met
- Establishing and maintaining Cyber Risk Profiles and Risk Control Assessments focused on InfoSec/Cyber risks
- Maintaining key performance and risk indicators and executive-level presentation materials
- Assessing security architecture and project risk positions to ensure compliance with policies and standards

Additional engagement includes:
- Developing understanding of business goals and operational risks
- Supporting risk management decision processes and forums
- Identifying emerging threats and overseeing mitigation plans
- Building strong relationships across governance stakeholders in all lines of defence

Embedding Cyber across the firm by:
- Ensuring compliance with LSEG policies, standards, and procedures
- Challenging controls constructively to recommend continuous improvement
- Promoting stakeholder responsibility for security risk mitigation
- Monitoring industry trends and informing leadership of relevant issues

Security Governance, Technical, and Risk Review:
- Reviewing technologies and security controls across office spaces, data centres, and cloud environments
- Conducting security controls maturity assessments against standards such as NIST CSF, ISO27001/2, SOC2
- Assessing projects for appropriate security design and controls
- Identifying and scoring technology and security risks, producing remediation plans
- Responding to regulatory and legislative matters
- Presenting risk postures and cyber maturity to senior and executive bodies

Partnering with business control functions:
- Assisting business units with security workloads and challenges
- Maintaining balanced relationships with risk, compliance, legal, HR, and audit functions

Knowledge of technology, security, and threat landscapes:
- Staying current with emerging technologies and security trends
- Maintaining deep knowledge of the cyber threat landscape and evolving risks
- Proposing clear and concise cyber risk countermeasures
- Remaining informed on global data protection regulations and legislation

Join LSEG and be part of a team that values innovation, quality, and continuous improvement. You will contribute to a dynamic organisation committed to financial stability, sustainable growth, diversity, and inclusion. LSEG offers tailored benefits including healthcare, retirement planning, paid volunteering days, and wellbeing initiatives.

Experience
- Minimum 10 years in senior Information Security management roles
- Extensive experience within Financial Services or Financial Market Infrastructure industries
- Proven problem solving, innovation, and critical thinking skills
- Strong written and verbal communication with excellent stakeholder management
- Ability to articulate ideas to both technical and non-technical audiences
- Experience working pragmatically both independently and in teams
- Ability to prioritise workloads efficiently in a fast-paced, high-volume environment

About you
- Subject matter expert in information and cyber security
- Strong knowledge of legacy, existing, and emerging technologies including cloud and security controls
- Skilled in Security Governance, Risk and Compliance (Security-GRC)
- Experience in information security engineering, vulnerability management, security architecture, and security operations is advantageous
- Able to build strong relationships across multiple lines of defence and business units
- Committed to continuous improvement and proactive risk management

Qualifications
- Must have CISSP certification
- Desirable certifications include CISSP-ISSAP, CISSP-ISSEP, CISM, CCSP, CCSK, CEH
- Working knowledge of security standards and frameworks such as ISO27K, ISF SOGP, NIST CSF, CIS, CSA STAR, CBEST, TIBER-EU, SOC2