Cyber Risk Director
Job Description
[Up to c. $275k Base Salary + Discretionary Bonus Comp Package | Hybrid Working - 2 Days In Office]
Role Overview
We’re representing an established financial technology business operating sophisticated electronic trading infrastructure across global markets. As the organisation continues to grow, it is strengthening its Information Security function and seeking an experienced Cyber Risk Director to lead cyber risk governance, oversight and assurance across the business.
This position combines strategic accountability with direct ownership of the processes that determine how cybersecurity risks are identified, evaluated, communicated and addressed. You'll help shape the firm's broader approach to cyber risk, strengthen oversight of security controls and external suppliers, and work closely with technology and business leaders to ensure meaningful remediation. The role offers significant visibility across a complex financial technology environment, with regular engagement across US and UK stakeholders. It will suit an established cybersecurity risk leader who can operate independently, influence senior decision-makers and bring technical credibility to conversations where security, operational resilience and commercial priorities intersect...
Role Snapshot
- Bring 9+ years of experience across cybersecurity, technology risk or information security governance, including substantial ownership of enterprise risk programmes at a senior level
- Lead the cyber risk management function within an established enterprise risk structure, providing independent oversight, constructive challenge and clear accountability for material security exposures
- Translate complex technical vulnerabilities, control weaknesses and emerging threats into commercially relevant risk assessments, securing stakeholder agreement on mitigation priorities and remediation plans
- Oversee the firm's cyber risk inventory and security control framework, ensuring accurate records, clear ownership and appropriate alignment with recognised standards including NIST, CIS and ISO
- Drive the assessment and continuous improvement of cybersecurity controls, coordinating second-line assurance activities and evaluating whether existing safeguards adequately address business risks
- Take ownership of information security governance documentation, ensuring policies and standards remain relevant, consistently applied and aligned with applicable requirements such as GDPR and Regulation SCI
- Direct cybersecurity assessments of external suppliers and technology partners, identifying material third-party exposures and working with internal stakeholders to establish proportionate risk treatment
- Coordinate cybersecurity input into regulatory reviews and internal or external audits, ensuring findings are appropriately challenged, documented, escalated and tracked through resolution
- Build effective relationships across security, engineering, infrastructure, leadership and business functions, producing meaningful risk reporting while supporting the development of less experienced colleagues
- (Preferred) Previous leadership of cybersecurity remediation within financial services or fintech, alongside professional qualifications such as CISM, CISSP or CRISC
...
Apply for this role
All fields marked with * are required.