Chief Information Security Officer for the UK in London

Management of the Information Systems Security (UK) Department including Security Governance, Security Monitoring, Security Control & Security Administration;

• Define, agree & implement the security strategy for CA-CIB
UK via the UK Information Security Programme;

• Contributing to local & global strategy/governance based on experience of the threats and opportunities facing the London perimeter;

• Local implementation and enforcement of Security Policies;

• Reviewing & tracking local security issues and ensuring resolution is consistent with group policy and standards;

• Raise & maintain awareness of security issues and best practice across all CA-CIB UK staff;

• Monitor the evolving threat and cyber risk landscape

• Oversee ITRO function

Key Responsibilities

1. Annually produce and gain management agreement for the UK Information Security Programme, covering strategy, progress, risks, controls & planning;

2. Implementation, maintenance and enforcement of Group Security Policies and, where required, their adaptation for the CA-CIB UK environment.;

3. Provide the local focal point for Security initiatives in accordance with the defined CSLi role (“Correspondant Securitee Local”);

4. Create & implement a security awareness raising programme for all staff. To include tailored deliveries for specific groups (e.g. managers, new joiners, developers etc); 5. Approval of all local projects from a Systems Security perspective;

6. Participation in the selection and implementation of global and local IT solutions for Information Security issues;

7. Ensure that the security solutions, systems, services and ongoing procedures conform to the requirements of the Legal, Audit and Compliance Departments and external regulatory bodies;

8. Maintain awareness of the regulatory markets and competitive environment and to be aware of current technology developments;

9. Lead ad-hoc missions as required by the London COO and the Global Chief Information Security Officer;

10. To provide follow-up and facilitate the closure of Audit issues related to the Systems Security function within agreed timescales;

11. As a key member of the Branch and to ensure full transparency and access to information, sit on the following Committees of the Branch;

• Information Security Committee (as owner, in line with the TOR for the committer);

• IT Steering Committee (as participant);

• Support Functions Committee (as participant);

• Business Continuity Planning Committee & BCP Task Force (as participant);

• Permanent Control Committee (as participant);

12. To coordinate the production of and to review Risk Assessments for CA-CIB UK

13. Provision of User Account administration services for the UK and overseas entities for a defined set of applications;

14. Provide a main point of coordination and escalation for the business in respect of all GRANT approval issues;

15. Ensure people database reflects the organisational

Our commitment to you!

Make an impact that matters

Your work contributes to a social responsibility and sustainable future. As a founding signatory of the Equator Principles and a global leader in sustainable finance, we finance projects that benefit both people and the planet. You can extend your impact through our Charities Committee, which provides annual paid volunteering leave to support causes you care about.

Grow without limits

Access development opportunities across the Crédit Agricole Group; whether deepening expertise, exploring new skills or taking on roles across borders. Our structured mentoring programme connects you with experienced colleagues, while cross-functional projects and learning initiatives help you build the capabilities that matter most to you.

Thrive in a culture built on trust

Be part of a collaborative environment built on trust, autonomy, and empowerment. Diversity is celebrated through our SPRING Diversity network, and our Sports and Social Club fosters genuine connections beyond the workplace. Crédit Agricole CIB is not just a place to work, it is a place where you can make a positive impact.

Higher Education (Degree or equivalent)

Operational risk management for IT Or Audit for IT Or IT infrastructure security

Desired Certifications:

[EC-Council] C CISO

[ISACA] CISM

Previous experience in IT Security is required.

Strong User and management communication skills Ability to coordinate transversally a number of teams geographically dispersed.