Information Security Risk Specialist required for global financial services firm. You will support secure delivery across technology projects. The role focuses on assessing project security requirements, reviewing designs, and ensuring compliance with internal security and resilience standards.
Key Responsibilities:
Review and assess Information Security Criticality Assessments (ISCA) to determine project risk and security requirements.
Collaborate with architects and cross-functional teams to finalize security controls in solution designs.
Ensure alignment with Operational Resilience and Cyber Security standards.
Review and validate security deliverables including:
ISCA questionnaires and High-Level Designs (HLD)
Technical and Solutions Design Authority reviews
Third-party risk evaluations and IAM assessments
Security baseline, code review, vulnerability, and penetration test reports
Manage project security documentation, evidence storage, and reporting tools.
Provide security sign-off at project stage gates and prepare closure reports.
Track and report project risk status (RAG), escalating amber/red issues.
Support risk acceptance processes and advise teams on secure design decisions.
Requirements:
Strong understanding of information security governance and project risk management.
Experience working with architecture, cyber assurance, and resilience teams.
Knowledge of security assessment, cloud security, and vulnerability management.
Excellent communication and stakeholder engagement skills