Senior Cyber Security Risk Manager in London

Welcome to AlRayan Bank UK, the nation’s most successful Sharia‑compliant bank and proud winner of the 2026 HR Brilliance Award for “Best Company to Work For.” AlRayan Bank UK is an extraordinary and flourishing institution that celebrates diversity and values ethics. As a prominent member of the AlRayan Bank Group, we are fuelled by an unwavering ambition for excellence, promising you an exhilarating journey ahead. At AlRayan Bank UK, we embrace change as an opportunity for positive transformation. Currently, our focus lies on building a culture of inclusivity and diversity, creating an environment where every individual's unique perspectives are valued. We understand the importance of work-life balance and flexibility, and we are committed to empowering our employees to thrive both personally and professionally.

The Bank is going through the most successful period in its history, and this success is a testament to the hard work, dedication, and expertise of our incredible team. Join us on this exciting venture, where you'll have the chance to make a significant impact while enjoying a supportive and rewarding work environment.

We have a fantastic opportunity for a Senior Cyber Security Risk Manager at our London Office. The Senior Cyber Security Risk Manager will sit within the 2nd Line of Defence Risk team. The main purpose of the role is to provide advice, support, guidance, testing, reporting and challenge on the bank’s information security activities and control environment, operating with independence and with close liaison with the team(s) responsible for operating the bank’s security controls. Increasingly, this will include involvement in setting and overseeing the bank’s approach to AI adoption as it develops, with particular focus on AI governance and standards proportionate to the bank.

• Manage and maintain cyber/IS policies, standards, and governance processes to set clear expectations for managing cyber/IS risks.
• Provide independent second-line oversight and challenge to cyber/IS threats, exposures, risks and controls.
• Review, support and challenge risk and control assessments, security exceptions, penetration testing outcomes and vulnerability management activities.
• Provide second-line oversight over the management of cyber/IS incidents, including escalation and reporting.
• Provide cyber/IS risk input into existing risk governance, committee and reporting structures.
• Coordinate and support assurance over cyber/IS risk, including execution of assurance reviews.
• Assist with cyber/IS maturity assessments and benchmarking activities.
• Support security awareness and security culture initiatives across the organisation.
• In collaboration with IT colleagues, review the use of Artificial Intelligence and Generative AI solutions across the organisation.
• Support the establishment and enhancement of the Bank’s AI governance and risk management framework.
• Assess risks relating to AI adoption.
• Provide 2nd-line oversight and challenge regarding AI-related controls, policies, and risk assessments.

• Relevant and applicable professional certifications (e.g. CISM, CISSP, CRISC, CISA).
• Significant experience in cybersecurity risk or information security governance within financial services.
• Knowledge of related security accreditations and standards, including: NIST, CIS, DPA, ISO 27001, Cyber Essentials Plus.
• Strong understanding of Second Line of Defence responsibilities and regulated banking environments.
• Demonstrable experience in process improvement and implementation.
• Experience providing challenge and oversight to technology and security teams.
• Ability to communicate effectively with senior stakeholders and non-technical audiences.

• Ability to build positive relationships with both senior executives and cyber security SMEs.
• Demonstrable SME level expertise in respect to information security risk management processes.
• Knowledge of application, infrastructure and networking security controls and systems.
• Ability to understand complex technical systems or solutions and document them for non-technical readers.
• The ability to identify risks and provide pragmatic advice on how the risk can be mitigated.
• The willingness and ability to collaborate with other Risk colleagues and the first line.
• Able to build relationships and work collaboratively with colleagues in IT and key third-party security suppliers.

You will be required to demonstrate our 1Team values and associated behaviours which are outlined below:

• Trusted to do the right thing.
• Empowered to own.
• Able to deliver.
• Motivated to succeed.

Conduct: We expect staff to follow the standards required by our regulators. At all times:

• Act with integrity.
• Act with due skill, care and diligence.
• Be open and co-operative with regulators.
• Pay due regard to the interests of customers and colleagues and treat them fairly.
• Observe proper standards of market conduct.
• Act to deliver good outcomes for retail customers.

This is a fantastic opportunity to join our growing bank where we can offer exceptional opportunities for you to make your mark and progress your career in a diverse, ethical bank that you can actually believe in.