Senior Manager, IS Governance

About the role

The Senior Manager, IS Governance ensures that the bank’s Information Security GRC initiatives are aligned with its risk management strategy, regulatory obligations, and enterprise ESG commitments. The role drives risk tracking, policy exception management, RCSA coordination and offshoring reporting while leveraging automation to improve visibility and reporting.

Key responsibilities

• Maintain adherence to internal policies, regulatory requirements and industry standards across the Information Security Group.
• Identify, assess and manage information security risks, and produce compliance documentation for audits.
• Develop and operate a comprehensive policy‑exception process, including documentation, approval workflows, risk assessments and periodic audits.
• Coordinate regular Risk Control Self‑Assessments (RCSA), analyse results and deliver actionable reports.
• Maintain accurate offshoring activity reporting to meet internal and external regulatory requirements.
• Integrate ESG‑relevant cybersecurity controls, metrics and disclosures, supporting board‑level and investor scrutiny.

Required profile

• Senior professional with extensive experience in information security governance, risk and compliance.
• Proven ability to manage policy exceptions, conduct risk assessments and lead RCSA programmes.
• Strong understanding of ESG considerations within cybersecurity and ability to prepare executive and regulatory responses.
• Excellent stakeholder communication and coordination skills across business units and offshore teams.

Required skills