Head Of It Risk Management (Financial Services)

My client, an international Investment Bank, are looking for a Head of IT Risk Management to join them in London. This role is 3 days per week in their office in London and you MUST come from a Financial Services background.
About the Head of IT Risk Management Role:
The Technology Risk team, which is part of the IT Department, supports over 200 different applications and a wide range of infrastructure operating systems and databases across London, NY and Asia and provides IT Risk and cybersecurity support across the Firm.
Job Purpose:
This London-based Information Technology Risk role is within the IT department of a Global Investment Bank. The Head of IT Risk Management role is to provide IT risk services globally. This role is responsible for safeguarding bank's IT infrastructure and application estate, protecting bank's critical IT assets, and ensuring effective IT governance practices.
Key responsbilities include:
• Develop, implement and maintain IT Risk Management and governance framework which are aligned to industry best practices, regulatory requirements and bank's overall risk appetite.
• Own and operate effective Risk Management process for risk identification, assessment, mitigation, and tracking of IT risks across Bank's technology landscape.
• Lead a team of ITRisk Management and governance professionals to conduct risk assessment, technology end-of-life and vulnerability tracking, IT risk incidents, and IT audits management.
• Partner with rest of IT functions to ensure effective integration of ITRisk Management and governance into all technology change-the-bank and run-the-bank initiatives.
Key Responsibilities:
• Responsible for the development, rollout and maintenance of the IT Risk Management Framework globally.
• Lead the team of IT Risk Managers to implement and operationalize the IT Risk and Control Framework
• This will include but not limited to Writing Policies and Standards, supporting gap analysis against standard, conducting risk and control assessments, review and approve exceptions and maintain risk registers.
• Conduct desk-based supplier risk assessments.
• Ensure effective communication to all key stakeholders in order to sustain relationships between Application, Infrastructure and Technology Risk.
• Interact with compliance, operational risk, audit and legal counsel to understand corporate requirements related to security and regulatory compliance, and map those requirements to current security capabilities.
• Deploy measures, systems and processes to prevent the loss or theft of the Bank's intellectual property.
• Maintain relevant metrics to facilitate reporting and decision making. Identify metrics and produce risk reports for stakeholders notifying them on key risks, incidents progress and status.
• Ensure compliance with existing laws and regulations and ensure a secure IT Environment.
• Support the IT Risk Governance forum through running meetings, preparing packs and reporting.
Preferred Qualifications and Experience:
• Preferred University graduation with a degree in Business, IT or a related subject
• Information Security and/or Information Technology industry certification (CISSP, CISM, CISSP-ISSMP, CRISC or GIAC equivalent) strongly preferred.
• Prior relevant industry experience within the banking and /or Financial Services sector in an IT Risk Management or security role
• Experience in the identification, evaluation and documentation of policies, process and controls
• Experience working with international cross-functional teams fostering collaboration and team work.
• Prior experience with the management of key incidents/errors and the ability to synthesize data, conceptualize and get to the root cause of processes that created the risk.
• Experience working in a multi-vendor and outsourced IT environment.
• Experience in developing IS strategy and frameworks in a financial institution.
• Experience in Business Analysis and Business Case Management.
• Experience directly assessing and communicating risk exposures and developing risk mitigation plans.
Knowledge, technical skills and expertise:
• Strong understanding of technology and life cycle development processes (SDLC, technology operations, business continuity, etc).
• Process management
• Knowledge of COBIT and ITIL processes including change, incident and problem management.
• Knowledge of standard business processes including work prioritization and best practices.
• Good understanding of domestic and international banking industry
• Knowledge of regulatory requirements of home markets e.g. Data Protection
Personal attributes:
• Global mindset
• Resilience
• Client mindset
• Pays attention to detail
• Results-orientated
• High level of integrity
If the above role is of interest please apply to this advertisement or call me on 0207 509 8040 to find out more.
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates