Cyber Operations & 3rd Party Security Manager

The Cyber Operations & 3rd-Party Security Manager is responsible for the Bank's cyber security operations, threat detection, incident response, vulnerability management and 3rd-party cyber risk management capabilities. The role ensures that cyber threats, vulnerabilities, supplier risks and security events are effectively identified, assessed, remediated and reported, supporting the confidentiality, integrity and availability of the Bank's information assets and services.

The role leads the operational execution of the Bank's Cyber Incident Response Plan (CIRP), manages relationships with security service providers, and provides oversight of cyber risks arising from suppliers, outsourced services and 3rd parties.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA's Conduct Rules.

Security Operations & Incident Response

• Lead the Bank's cyber security operations capability, including oversight of security monitoring and detection services.
• Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers.
• Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.
• Coordinate the operational response to cyber security incidents and support execution of the Cyber Incident Response Plan (CIRP).
• Maintain incident response playbooks, escalation procedures and operational runbooks.
• Produce reporting and management information on security events, incidents and emerging threats.

Vulnerability & Threat Management

• Oversee vulnerability management processes across infrastructure, cloud services, applications and end-user devices.
• Ensure vulnerabilities are assessed, prioritised, tracked and remediated in line with risk appetite and policy requirements.
• Monitor threat intelligence sources and assess relevance to the Bank's technology landscape.
• Coordinate threat hunting activities and investigations arising from security alerts and intelligence feeds.
• Identify recurring security weaknesses and drive remediation actions.

3rd-Party Cyber Risk Management

• Lead the Bank's 3rd-Party Cyber Risk Management framework.
• Assess supplier cyber security risks throughout the supplier lifecycle, including onboarding, ongoing monitoring and offboarding activities.
• Review supplier security assessments, control attestations, certifications and due diligence submissions.
• Oversee the management of supplier vulnerabilities, cyber incidents, breaches and control deficiencies.
• Ensure material supplier cyber risks are escalated and tracked through appropriate governance forums.
• Support operational resilience and outsourcing requirements relating to 3rd-party cyber security.

Governance, Reporting & Continuous Improvement

• Develop and maintain operational cyber security procedures and standards.
• Support ISO 27001 certification, regulatory compliance activities and audit engagements.
• Contribute to cyber risk reporting, metrics and management information for senior management and governance committees.
• Drive continual improvement of cyber monitoring, incident management and 3rd-party risk management capabilities.
• Support implementation and optimisation of cyber security tooling, including ServiceNow Security Incident Response and 3rd-Party Risk Management capabilities.

• Head of Cyber
• Cyber Assurance & Architecture Manager
• Cyber Operations & 3rd-Party Security Manager
• Internal Audit
• Risk and Compliance Functions
• Data Privacy and DPO Function
• Technology and Change Teams
• Human Resources
• Learning & Development
• Business Units
• External Auditors and Assessors
• Operational Resilience Function