Consultant Chief Information Security Officer - M&A - Part Time

Responsibilities

of the role:

Provide expert-level Security advice directly to the CRO during the integration of the acquired bank into the wider group.

Assess the reasonableness of 1st Line security risk identification and management across both standalone (Virgin Money) and integrated (Nationwide) contexts.

Review and challenge Executive- and Board-level security strategies and assessments, especially where they pertain to integration risk.

Advise on the effectiveness and sufficiency of existing and proposed action plans to manage security risk exposure.

Identify gaps or weaknesses in current oversight and support the 2nd Line Operational Risk function in prioritising targeted assurance activities.

Support regulatory confidence by helping to ensure the group's evolving security posture is resilient, proportionate, and well-articulated at senior levels.

What we require from the candidate:

Senior Security leadership experience, ideally as a Chief Information Security Officer (CISO) or equivalent within a regulated financial services institution.

Alternatively, practitioner-level consultancy experience advising banks or FS clients on security risk, oversight, and strategy-ideally during M&A or integration scenarios.

Proven understanding of 1st and 2nd Line responsibilities relating to security and operational risk in a banking environment.

Demonstrated ability to challenge and shape board-level security strategy, and to influence senior decision-making with authority and insight.

Strong regulatory awareness, particularly regarding expectations around security in large-scale change or acquisition programmes.

Next steps:

This client will only accept workers operating via an Umbrella or PAYE engagement model.