Overview
In this role you lead cyber and technology risk oversight for Santander London Branch, aligning with group policies to manage risk. You will promote the risk framework and operating model, driving measurable reductions in technology risk while partnering with cross-functional teams. You’ll report risks and remediation progress to senior management and committees, shaping risk methodologies and responses to evolving threats. This position offers a strategic opportunity to influence cyber risk governance in a global banking environment.
Pay / Benefits
- competitive salary
- pension contributions (8%/12.5%)
- private medical insurance
- 30 days holiday plus bank holidays (31 after 5 years)
- discretionary performance-related bonus
- share plans
Responsibilities
- Provide independent oversight and challenge of cyber and information security risks for SLB
- Assess effectiveness of cyber risk management frameworks, controls and remediation activity
- Review risk assessments, control testing, risk acceptances and treatment plans
- Monitor cyber risk profile including KRIs, incidents, and control weaknesses
- Identify risks from new technologies, cloud adoption, third parties and threat landscape changes
- Provide clear reporting on cyber risk exposures to senior management and governance forums
- Challenge adequacy and timeliness of remediation plans for vulnerabilities and incidents
- Partner with Technology, Cyber Security, Operational Risk, Compliance, Internal Audit and business teams
- Support regulatory and supervisory activity relating to cyber security, operational resilience, and technology risk
- Contribute to development of cyber risk methodologies, policies, standards and risk appetite measures
- Monitor emerging cyber threats and regulatory developments and assess their impact
Key requirements
- Understanding of cyber security domains including IAM, vulnerability management, security operations, cloud security, data protection, network security and incident response
- Experience assessing technology and cyber risks in complex infrastructure, applications, cloud environments and third-party services
- Knowledge of UK regulatory expectations relating to technology risk, cyber security and operational resilience
- Strong analytical skills to identify key risk implications in complex technical information
- Proven experience developing risk reporting, metrics, KRIs and management information for senior audiences
- Excellent written and verbal communication with the ability to challenge senior stakeholders
- Ability to work effectively across technology, security, risk and business teams in a complex international organisation
- Strong judgement, organisation and prioritisation skills
- Excellent communication and stakeholder management skills
- Previous experience in an information security role
- Graduate degree and relevant professional qualifications, or equivalent experience
- Excellent communication
- Stakeholder management
- Cross-functional collaboration
- Identity and access management
- Vulnerability management
- Security operations
VP, Cyber & Technology Risk – CISO | SCIB in London employer: Grupo Santander
At Santander Corporate & Investment Banking, we pride ourselves on being an exceptional employer that values diversity and fosters a collaborative work culture. Located in the heart of London, our team enjoys a competitive benefits package, including generous holiday allowances, tailored pension contributions, and comprehensive healthcare options, all designed to support both personal and professional growth. We empower our employees to thrive by providing opportunities for development and encouraging innovative thinking, making us a rewarding place to build a meaningful career in global banking.
