In this role you will lead the information security program for the London Branch, shaping policies, risk management and regulatory alignment. You will act as a 1.5 line of defence, providing independent security oversight within IT and driving resilience. You will partner with cross‑functional teams to strengthen controls, monitoring, and incident response. Your work supports safeguarding information assets while meeting UK regulatory expectations. This is a high‑impact opportunity to influence security strategy in a regulated banking environment.
Responsibilities
Governance: upgrade and maintain information security policies, standards and procedures for the Branch in line with Head Office and regulatory requirements
Risk management: identify, assess and monitor information security risks; maintain risk register and mitigation actions; report to senior management
Control oversight: challenge IT security control implementations and monitor effectiveness across systems and applications
Cyber security and monitoring: oversee vulnerability management, access control, security monitoring and incident detection; ensure assessments and penetration testing
Incident management: establish and coordinate incident response, investigation, and reporting
Operational resilience: support resilience framework, participate in disaster recovery planning and resilience testing
Third‑party and outsourcing risk: assess security risks of vendors and outsourcing; embed security requirements in governance
Regulatory compliance: ensure adherence to UK information security, cyber risk and resilience expectations; support audits
Security awareness: drive information security training and awareness across staff
Key requirements
Fluent Mandarin and English, strong written and verbal communication
Experience in information security, cyber security or IT risk management
Knowledge of information security standards and regulatory expectations
Experience developing information security governance frameworks
Understanding of banking IT environments and vendor risk management
Strong analytical and risk assessment capabilities
strong communication and presentation skills
integrity and professionalism
risk awareness and collaboration
information security governance frameworks (ISO27001, NIST CSF, CIS Controls)
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.