IT Third Party Security Manager

Division : Chief Information Security Office (CISO)

Third Party Security Manager

Division : CISO

IT and Cyber Risk Team

Aligning with the overall corporate mission of being a 'trusted Financial Market Infrastructure', the 'IT and Cyber Risk' team within CISO Division provides several services that aim to :

• Ensure ‘end-to-end’ management of risks by identifying IT, information security or cyber risks or deficiencies
• Ensure root cause issues and risks are structurally remediated through sustainable controls, and ensure reduce risk exposure through increased control maturity
• Ensure risk exposure is in line with the risk appetite of the firm
• Ensure regulatory compliance is evidenced
• Ensure accountability, ownership and risk culture is embed within first line

Within the context of the overall Enterprise Risk Management (ERM) framework, the IT and Cyber Risk team provides a strong control environment based on internationally recognized controls that allows all IT, information security and cyber risks to be continually identified, assessed, monitored, and mitigated (or accepted).

Role Description – IT Security Manager

The role will be responsible for execution of risk-based IT Security controls for Third Parties. Key responsibilities :

Third-Party Assurance Lifecycle ​

Continues Improvements

Core Skills

Soft Skills

LI-NS1