Location
London

Hours
Full Time

Salary
Negotiable

About the Role
The Senior Manager, Business Information Security at London Stock Exchange Group (LSEG) is responsible for assessing, challenging and managing cyber risk across an assigned Data & Analytics portfolio. This senior, business-facing security role requires strong technical credibility, sound risk judgement and the ability to communicate effectively at both engineering and executive levels. The role involves working closely with leadership, product, engineering, technology and central Cyber teams to identify, assess, remediate and manage cyber risks, ensuring security capabilities are effectively deployed and controls remain fit for purpose within LSEG’s risk appetite.

Key responsibilities include developing a clear, evidence-based cyber risk profile, overseeing security and risk governance of AI technologies, assessing security controls across applications, infrastructure and cloud services, and maintaining an informed understanding of relevant threat actors and techniques. The role also requires translating complex technical security issues into clear business exposure and treatment options, building trusted relationships across business and technology teams, and providing executive communication and decision support.

LSEG is a global financial markets infrastructure and data provider with a culture rooted in innovation, diversity and inclusion. The successful candidate will join a dynamic organisation committed to sustainability, continuous improvement and creating meaningful career opportunities.

Experience
Experienced and qualified information or cyber security professional with the ability to operate credibly in a large, sophisticated technology environment. Strong technical background and/or consulting experience advising senior teams on complex cyber security or technology risk matters is highly beneficial. Proven ability to build trusted relationships across business leadership, product, engineering and central Cyber teams and influence across organisational boundaries.

Experience in cloud security, security engineering or operations, architecture, vulnerability management, identity and privileged access, application or data security, resilience and third-party security is desirable.

About you
Strong security knowledge and risk judgement with the ability to understand complex technical topics, challenge assumptions, and assess credible threats, attack paths, control weaknesses and business impact. Excellent written and verbal communication skills, able to translate complex technical security matters into clear, concise and decision-focused messages for non-technical and senior participants. Able to form an independent, evidence-based risk view and communicate exposure, treatment options, recommendations and required decisions.

Demonstrates sound judgement, independence and the ability to maintain productive relationships while providing constructive challenge. Knowledge of AI technologies and their security, risk and business implications is highly beneficial.

Qualifications
Relevant certifications such as CISSP, CISM or equivalent industry-recognised technical or security risk qualifications (e.g. OSCP, OSCE) are beneficial but do not replace technical credibility, practical risk judgement and executive communication capability.

Knowledge of frameworks and standards including NIST Cybersecurity Framework, ISO 27001/27002, CIS Controls, and relevant regulations such as DORA is expected. Understanding of security architecture principles, cyber threat and attack-path analysis, cloud security, cyber resilience, cyber risk management and control assurance, and regulatory expectations in a highly regulated financial services environment is required.