Senior Cyber Security Risk & Controls Manager

Business Unit: Technology Operations & Cyber Security
Salary range: GBP Competitive
Live up to your potential. Live a life more Virgin.
Our Team
The overarching ambition for our COO remains - leverage the power of technology to deliver superb products and services for our customers. Cybersecurity plays a critical in that pursuit, we are building a security platform for the future that protects our customer and colleague data from cyber threats, and we want to ensure our colleagues can access the next generation of collaborations tools, our customers can sleep at night safe in the knowledge that we are protecting their hard earned savings from criminals, and our investors trust us to invest wisely in securing Virgin Money.
We are curious about new technologies, ways of working, and threat-based solutions and understand that we need to support our business strategy with creative, efficient and scalable solutions.
What you'll be doing

• Responsible for ensuring effective definition, design, and assurance of Security Risk management. The primary responsibility of this position is to drive the maturity of risk assessment and mitigation.
• This role also encompasses the automation of risk management activities across the function through the lifecycle: standards, policies, issue management, controls to assurance.
• This role plays a crucial part in the organisation's cyber resilience efforts. It involves planning and executing cyber resilience tests to evaluate the organisation's ability to withstand and recover from cyber incidents.
• The role collaborates with relevant teams to analyse test results, identify areas for improvement, and make recommendations to enhance incident response and recovery capabilities.
• Establishing the approach and frameworks required for: threat-based risk assessment, asset impact assessment and controls coverage and effectiveness.
• Enable control monitoring and evaluation
• Ownership of Cybersecurity Policies and Standards including developing and maintain cybersecurity policies and standards, including technical control requirements.

We need you to have

• Significant experience in managing controls, cybersecurity, and threat-based risk management within a complex organisational environment.
• Proven track record in successfully implementing and managing automated controls and related technologies.
• Extensive experience in developing and maintaining cybersecurity policies, standards, and procedures.
• Demonstrated experience in collaborating with cross-functional teams, such as IT Security, IT Operations, Compliance, and Legal, to achieve control and cybersecurity objectives.
• Experience in conducting cybersecurity exercises, such as tabletop exercises and simulated cyber-attack scenarios.

It's a bonus if you have but not essential

• Threat frameworks i.e Mitre Attack
• Continuous Controls Monitoring framework development and deployment.
• Experience in analytics and reporting of risk and controls for banking executives and operational teams.

Red Hot Rewards

• Generous holidays - 38.5 days annual leave (including bank holidays and prorated if part-time) plus the option to buy more
• Up to five extra paid well-being days per year
• 20 weeks paid, gender-neutral family leave (52 weeks in total) for expectant parents and those looking to adopt
• Market-leading pension
• Free private medical cover, income protection and life assurance
• Flexible benefits include Cycle to Work, wellness and health assessments, and critical illness
• Ability to work anywhere in the UK (where the role allows)

And there's no waiting around, you'll enjoy these benefits from day one.
Feeling insatiably curious about this role? Apply as soon as you can. If we're lucky to receive a lot of interest, we may close the advert early and would hate you to miss out.
We're all about helping you Live a Life More Virgin, so happy to talk flexible working with you.
Say hello to Virgin Money
We're making great strides towards achieving our ambition of becoming the UK's best digital bank. As a full-service digital bank with a heritage stretching back over 180 years, we re a workforce to be reckoned with. We're putting the full power of our experience behind disruptive ideas that reinvent the role a bank plays in people's lives. We strive to create positive experiences for our millions of customers and our purpose, 'Making You Happier About Money', underpins everything we do. We believe in doing banking differently, innovating and working together to make a real difference. Join us and Live a Life More Virgin that empowers you with choice and flexibility in how you work.
Be yourself at Virgin Money
Our purpose is to make people happier about money, this means seeing and feeling the world as our customers do by creating a workforce that reflects the rich diversity of our customers and communities. We're committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.
As a Disability Confident Leader, we're committed to removing any obstacles to inclusion. If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team
Now the legal bit
Living A Life More Virgin allows our colleagues to be based anywhere in the UK (if the role allows it), but we'll need you to confirm you have the right to work in the UK.
If you're successful in securing a role with us, there are some checks you need to complete before starting. These include credit and criminal record checks and three years' worth of satisfactory references. If the role is part of the Senior Manager Regime and Certification Regime, it requires enhanced pre-employment checks - we'll ask for six years of regulatory references, and once in the role, you'll be subject to periodic employment checks.