Senior Data Governance Risk Manager

Responsibilities

& Accountabilities:Perform a current-state analysis to: Assess the Bank's existing information security (IS) control environment Identify the current controls aligned to these risks and highlight potential control gaps; Develop a strategy for enhancement to manage those risks in line with the Bank's agreed risk appetite;. Design and maintain aernance framework to capture strong cyber resilience, information security, data security and data protection; Provide Bank-wide supervisory oversight, management reporting, and policy for the existing IS, data, and cyber control framework; Support delivery of activities identified in the annualpliance Monitoring Plan. Undertake ongoing monitoring of key data and IS risks. Develop and deliver staff and stakeholder training on data protection/privacy regulatory requirements and cyber security, enhance management reporting information (KRI/KPIs). Build a profile of the Bank's cyber threats and associated controls and provide Management with rmendations to enhance key cyber controls; Fulfill the Deputy Data Protection Officer role in line with the requirements of current and iing Data Protection Regulations (GDPR). Provide advice and ongoing oversight on Operational Resilience aligning the Bank's practices with regulator expectations

Skills/Experience required:

A minimum of 5 years' experience in a senior role in a European financial services organization with responsibility for Data Protection, Dataernance, and/or Information Security. Data/Cyber/Operational Resilience experience from apliance perspective. You will have worked in apliance department :2nd/3rd line of defence/ a Regulator; or a Big 4 /advisory firm. Experience ofpilingpliance reviews Working knowledge of current and changing cyber threats and mitigating control strategies with demonstrable experience of working with or advising on a cyber control activity or change project. Practical understanding of key aspects of UK data and information protection regulations (GDPR) and best practices. Excellentmunication skills are critical to ensure risk and control understanding is embedded throughout the business.

Job ID BBBH443782