Senior Manager, Information Security Governance

About the role

The Senior Manager, Information Security Governance will align the bank’s security GRC initiatives with its risk strategy, regulatory obligations and ESG commitments. The role drives risk tracking, policy exception handling, RCSA coordination and offshoring reporting while leveraging automation to improve visibility and reporting.

Key responsibilities

• Ensure compliance with internal policies, regulatory requirements and industry standards across the Information Security Group.
• Identify, assess and manage information security risks for all business units.
• Develop and maintain a robust policy‑exception process, including documentation, approval workflows and periodic audits.
• Coordinate regular Risk Control Self‑Assessments (RCSA), analyse results and produce actionable reports.
• Maintain accurate offshoring activity reporting and align it with regulatory expectations.
• Implement automation to streamline GRC processes and enhance risk visibility.
• Operationalise ESG‑related cybersecurity controls, metrics and disclosures for board, investor and regulator scrutiny.

Required profile

• Senior‑level experience in information security governance, risk and compliance (GRC).
• Strong understanding of regulatory frameworks and ESG reporting requirements.
• Proven ability to coordinate cross‑functional risk assessments and manage policy exceptions.
• Excellent analytical skills with a focus on delivering clear, actionable insights.

Required skills

What we offer

• Opportunity to influence security strategy at a leading financial institution.
• Collaborative environment with senior leadership exposure.
• Focus on ESG integration within cybersecurity.