InfoSec and AI Governance (Second Line) Officer
London, Hybrid | Permanent
£Competitive salary, bonus and benefits
A leading global investment banking group has created a brand new Assistant Director role in its Group Risk function. This role will see you taking ownership of Information Security governance across the Group and play a central part in building the firm’s AI Management System, aligned to ISO/IEC 42001.
Within this role you’ll shape the function, set the standard and have real influence with senior people across Technology, Security, Data, Legal, Compliance and the business.
What you’ll be doing
- Owning the Group Information Security framework, policies and standards, and making them work in practice
- Challenging risk assessments, risk acceptances, incidents, control weaknesses and major technology projects
- Overseeing third party security risk, from due diligence through to security exceptions
- Joining up InfoSec and Data Governance, covering classification, handling, DLP and the data lifecycle
- Helping design, implement and run the AI Management System, turning ISO 42001 into practical policies, controls and processes
- Reviewing significant AI initiatives and getting the firm ready for independent assessment
What you’ll bring
- Significant experience in InfoSec governance, risk management or second line technology risk, ideally in financial services or another regulated sector
- Hands-on experience writing and maintaining policies, standards and control frameworks (ISO 27001 and NIST)
- A track record of independent challenge within a Three Lines model, and the judgement to know when to push and when to support
- A good grasp of data security and data governance
- Some exposure to AI governance or AI risk, and a real appetite to become an expert in ISO 42001
- The confidence to challenge senior stakeholders constructively, and the writing skills to make your case clearly
Nice to have
- CISSP, CISM, CRISC, or ISO 27001 / ISO 42001 Lead Implementer or Lead Auditor
- Banking or asset management experience
- Hands-on experience implementing or assuring an ISMS or AIMS
Why this role
You’ll get the rare combination of an established InfoSec governance remit and a ground floor role in AI governance, at a firm that takes both seriously. It’s the kind of experience that will be in very high demand over the next few years.
You don’t need to be an AI specialist already. If you’re a strong second line InfoSec professional who’s curious about where AI governance is heading, we’d love to hear from you.
#J-18808-Ljbffr
InfoSec Risk and AI Governance (Second Line) Officer in London employer: Arc IT Recruitment Limited
Join a dynamic Brighton-based software company that values innovation and collaboration, offering iOS developers the chance to work on exciting mobile applications for a global audience. With a supportive team culture, opportunities for professional growth, and flexible working arrangements including remote Wednesdays and early finishes on Fridays, this role provides a fulfilling environment for those looking to make a meaningful impact in their work.
Contact Details:
Arc IT Recruitment Limited Recruitment Team
