Job Description
The purpose of this role is to assist the Director of Business Information Security (BISO) in all security matters relating to the oversight of Information and Cyber Security within the LCH Ltd. business line of LSEG’s Post Trade division. The successful candidate will be charged with ensuring that the critical business systems and data assets of LCH Ltd. are adequately protected, and that all related information security and cyber controls remain effective and within risk appetite and/or have appropriate risk treatment plans in place to bring them back into risk appetite.
The role will best suit an experienced Information Security Manager with extensive experience gained from having previously operated within Senior Management level InfoSec/Cyber roles within the FS or FMI industries.
The successful candidate must be a subject matter expert in Information Security, as the role demands a very strong knowledge in all areas of information security and cyber security, as well as in-depth knowledge of legacy, existing, and emerging technologies including cloud and security technologies/controls. In addition to a solid Security Governance Risk and Compliance (Security-GRC) skillset, a prior background in information security engineering, vulnerability management, security architecture, and security operations will be advantageous in this role given the various levels of stakeholders as well as the tech/cyber projects that the successful candidate will engage with daily.
Key responsibilities include:
• Assisting in the oversight of Information Security by:
o Reviewing and assessing the information security and cyber controls that enable LCH Ltd. to conduct its business in a secure manner, and gap analysis of the same.
o The oversight of InfoSec/Cyber related control gap/risk remediation activities
o Monitoring and analysing the information security roadmaps, strategies, programmes, and projects within LCH Ltd., and identifying and reporting risks, trends and future opportunities for improvement and enhancement.
o Proactively engaging and working closely with the technology and cyber teams that are delivering technology and cyber services to the firm.
o Attending risk and governance meetings to provide updates to the LCH Ltd. stakeholders from the three lines of defence regarding the delivery and progress of the various strategic cyber initiatives and broader cyber programme within LSEG.
o Working with colleagues from the three lines of defence to define the current risk posture of LCH Ltd. and collaborating with those stakeholders to remediate identified risks/issues.
o Engaging with external third parties who provide services to LCH Ltd. and working closely with the established internal third-party oversight functions to ensure appropriate and contracted levels of security are met.
o Establish and maintain a Cyber Risk Profile of LCH Ltd. in line with other areas of LSEG.
o Assisting with the establishment and maintenance of a Risk Control Assessment (RCA) that focuses on InfoSec/Cyber risks and associated controls, etc.
o Maintaining the established key performance and key risk indicators and ensuring that all management information (MI) is an accurate reflection of the current control’s estate.
o Maintaining an accurate set of executive level presentation materials that clearly and accurately present the current state of security control within LCH Ltd.
o Assessing the security architecture solution designs and risk position of projects and initiatives undertaken by LCH Ltd. and working closely with associated SMEs and design authorities to ensure projects are delivered in compliance with Policies and Standards, and with security design principles considered/implemented as key success deliverables.
• Engagement with the business to:
o Develop an understanding of business goals and operational risks
o Identifying key areas for improvement
o Support the risk management decision processes and risk forums/committees
o Assisting with the identification of emerging information and cyber security threats to the business, and the subsequent analysis to realise and oversee risk mitigation plans,
o Build strong relationships within the business to gain an understanding of security-related business risks.
o Work closely with governance stakeholders in the 1st, 2nd, and 3rd lines of defence on all matters relating to information security, cyber risk, data privacy, including all regulatory and legislative considerations.
• Embedding Cyber across the firm by:
o Working closely with all necessary stakeholders in the business and technology areas to ensure compliance with established LSEG policies, standards, and procedures, etc.
o Constructively and pragmatically challenging established controls to ensure, recommend, and accommodate continuous improvement.
o Ensuring LCH Ltd. stakeholders understand their responsibilities in relation to security risk mitigation and remediation.
o Monitoring industry information security trends and keeping business leadership informed about information security-related issues and activities potentially affecting the organisation and specific business functions.
• Security Governance, Technical, and Risk Review:
o The review and documenting of technologies and security controls across the firm, including areas such as; office spaces, data centres and cloud.
o Executing and concluding security controls maturity assessments against industry standards such as the NIST Cyber Security Framework, ISO27001/2, SOC2, etc
o Working closely with stakeholders to review all projects and initiatives, assessing them for appropriate/correct levels of security design and controls.
o Identification of technology and security risks across the firm and the assessment and appropriate risk scoring and presentation of the same.
o Produce appropriate risk remediation action plans and ability to present and take ownership of risk treatment proposals and action plans.
o Review and appropriate response to regulatory and legislative matters
o Produce and present risks and risk postures / cyber maturity to senior/executive bodies.
o Able to clearly and precisely present complex cyber risk matters to clients and regulators.
• Partnering with the different business control functions:
o Build knowledge of business units by assisting them with their security workloads, agendas, and difficulties.
o Maintaining a balanced relationship with risk, compliance, legal, human resources, and internal and external audit functions.
• Knowledge of technology, security, and threat landscapes:
o Staying abreast of emerging technologies, including all security technologies,
o Sustaining a deep and in-depth knowledge of the cyber threat landscape,
o Maintain and constantly enriching knowledge of information security and cyber risks as they develop,
o Being able to propose and explain appropriate cyber risk counter measures clearly and concisely.
o Remaining informed and knowledgeable on primary global data protection regulations and legislation
• Experience and core skill requirements:
o 10 years minimum experience in senior InfoSec management roles
o Extensive previous exposure to FS or FMI industry organisations
o High performance in problem solving, innovating and critical thinking
o Excellent written/verbal communication and stakeholder management skills
o Ability to articulate ideas to both technical and non-technical audiences
o Must be capable of working pragmatically and efficiently in both a team and alone
o Able to prioritise workloads efficiently and appropriately with minimal supervision
o Able to work in fast paced, high-volume workload environment, prioritising accordingly
• Must Have Security Certifications
o CISSP
• Desirable & Advantageous Certifications:
o CISSP-ISSAP, CISSP-ISSEP, CISM, CCSP, CCSK, CEH
• Working knowledge of Security Standards / Frameworks:
ISO27K, ISF SOGP, NIST CSF, CIS, CSA STAR, CBEST, TIBER-EU, SOC2
Career Stage:
ManagerLondon Stock Exchange Group (LSEG) Information:
Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.
LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.
Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.
Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.
You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.
Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.
About us
LSEG is one of the world’s leading providers of financial markets infrastructure and delivers financial data, analytics, news and index products to more than 40,000 customers in over 170 countries.
We help organisations fund innovation, manage risk and create jobs by partnering with customers at every point in the trade lifecycle: from informing their pre-trade decisions and executing trades to raising capital, clearing and optimisation.
Backed by more than three centuries of experience, innovative technologies and a team of 25,000 people in over 60 countries, we are driving financial stability, empowering economies and enabling you to grow sustainably.
Our purpose
At LSEG, our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.
The services we provide as a leading global financial markets infrastructure and data provider are critical for economies around the world. The vital social and economic role we play enables sustainable growth for customers, partners, and the communities we all live in.
Our word is our bond. True in 1801. Just as true today.
London Stock Exchange is one of the world’s oldest stock exchanges and can trace its history back more than 300 years. LSEG was created in October 2007 (as the London Stock Exchange Group) when London Stock Exchange merged with Milan Stock Exchange, Borsa Italiana.
Our values
Our purpose is the foundation on which our culture is built. At LSEG, our values are Integrity, Partnership, Excellence, and Change. Underpinning our purpose, our values articulate how we work with customers, partners, and each other. They go to the heart of who we are and guide our decision making and everyday actions.
What we do
LSEG is a leading global financial markets infrastructure and data provider that operates connected businesses to serve customers across the entire financial markets value chain.
With capabilities in data, indices and analytics, capital formation, trade execution, clearing and risk management, we operate at the heart of the world’s financial ecosystem and enable the sustainable growth and stability of our customers and their communities.
Together, our five business divisions – Data and Analytics, FTSE Russell, Risk Intelligence, Capital Markets and Post Trade – offer customers seamless access to global financial markets, across the trading lifecycle.
Our key locations
LSEG is headquartered in the United Kingdom, with significant operations in over 60 countries across Europe, the Middle East, Africa, North America, Latin America, and Asia Pacific.
Workplace Initiatives
- Programme for parents returning to work after Parental Leave? Yes
- Leadership development programmes? Yes
- Mentoring programmes? No
- Coaching Progammes - Yes
- Employee-led diversity networks? Yes
- Internal women's networking groups? Yes
-Open to discussing flexible work arrangements at interview stage? Yes
Global Parental Leave: 26 weeks
Minimum weeks tenure required to be eligible for paid maternity leave: Global Parental Leave: 12 months / 52 weeks
No. of weeks paid paternity leave at full salary: Global Parental Leave: 26 weeks
Minimum tenure required to be eligible for paid paternity leave: Global Parental Leave: 12 months / 52 weeks
|
Gender Pay Gap |
|
|
2023? |
|
|
Average pay gap: |
N/A* Please see Non-identifiable gender pay gap |
|
Median pay gap: |
N/A* Please see Non-identifiable gender pay gap |
|
Average bonus gap: |
N/A* Please see Non-identifiable gender pay gap |
|
Median bonus gap: |
N/A* Please see Non-identifiable gender pay gap |
|
Non-Identifiable gender pay gap |
1.2% Find out more in our LSEG Sustainability Report 2023 |
Signatory of the UK Women in Finance Charter? Yes - since 2016
Targets to raise the number of women in leadership? Yes - LSEG achieved our goal of 40% female representation in senior leadership positions globally by December 2022. We remain committed to maintaining at least 40% female representation in senior leadership.
Targets to raise the number of BAME individuals in leadership? Yes - 25% underrepresented ethnic groups in senior leadership roles (ExCo and Group Leaders) by 2027
Listed in the Bloomberg Diversity & Inclusion Index? No
Returner Programme
As part of our Global Parental Leave offering, from 1st July 2024 all parents returning from any type of family leave (Global Parental Leave, UK Maternity, Paternity, Adoption or Shared Parental Leave) are eligible to an eight-week phased return to work, working 80% of normal hours at full pay. Additionally, LSEG is introducing enhanced leave to support families whose children require neonatal care.
Other Programmes
We offer a wide range of opportunities for ambitious graduates and students to start a dynamic and rewarding career in global financial markets. You can join us on an Internship or Graduate programme, which provides a formal learning experience or directly into Entry level positions.
Graduate programmes
Our graduate programmes, for final year undergraduate or Masters students and recent graduates, sit within Businessor Technology.
From day one you will be aligned to a division, where you will access divisional and global learning opportunities and experiences.
Our sustainable growth as a business means that more than ever before there are opportunities to develop your career in a truly global organisation, which is critical to the successful functioning of global financial markets. The breadth of our business means you will never lack opportunities to learn and grow.
Our Business Programme will allow you to gain valuable experience within one of our Divisions (Capital Markets, Post Trade , FTSE Russel and Data & Analytics) or, alternatively, work across one of our Group functions (People, Corporate Affairs and Marketing, Finance, Strategy or Risk). In the Divisional roles, you may be involved in helping companies to raise capital, developing benchmark ranges and indices, or building and evaluating risk models. In one of our Group functions, you’ll work in a central function to support company goals.
Our Technology Programme will enable you to launch your career in Engineering by contributing to live projects, collaborating with and being mentored by best-in-class talent as you acquire critical skills through on-the-job experiences. You’ll have a meaningful role in harnessing new, exciting technologies, and work on projects aimed at integrating them into our frontline products and operations.
Learning and Development
At LSEG we believe that colleagues own and drive their development. We understand it can be nerve-wracking to embark on a new career and, in some cases, make the transition from education to practice. We will assist you in nurturing a growth mindset and developing foundational and human skills such as financial market value chain, customer centricity, adaptability, innovation, problem solving and stakeholder management as well as specialist skills that are critical to the division that you will be working with.
During the programme we will provide curated learning pathways through leading learning platforms, a chance to connect with subject matter experts within LSEG and the opportunity to pursue a professional qualification that supports to build critical skills relevant to your area of specialisation, aiming to develop your knowledge and skills – with a global and divisional focus. You will also have access to Career Navigator, our brand-new personalised platform which will empower you to define and achieve your career ambitions within LSEG. You will access global and local learning opportunities and experiences, as well as a network of Early Careers peers who will support you as you progress your career journey at LSEG. You will contribute to wider society through CSR and volunteering initiatives as you build connections forming a global community across LSEG.
LSEG is a place where you can take your career in any direction. We believe in the career philosophy of “My Career. My Opportunity. My Future.”, empowering you with the tools and structure needed to broaden your skills. Beyond the programme, you can look forward to opportunities to advance your skills and learning at every stage of your career. Our scale and global presence give you the opportunity to deepen your abilities and expertise and take the next steps on your journey to achieving your career ambitions.
Internship programmes
Our summer internship programme, for penultimate year students, is a unique opportunity to get to know LSEG’s business and to gain an in-depth insight into financial markets.
Whether you apply for the Business or Technology internship, you will understand what a career with LSEG would really be like. The programme has been crafted to enable exploration of potential career pathways at LSEG, to start to build some of the key skills you will need as a graduate and to support you to build self-insight into your strengths and interests.
Our Technology Internship will enable you to launch your career in Engineering. Your technical placement will involve coding, development, and innovation. You’ll have a meaningful role in harnessing new, exciting technologies and working on projects aimed at integrating them into our frontline operations.
Our Business Internship programme will allow you to gain valuable experience within one of our Business Divisions, whilst gaining broader exposure to the wider Group. You’ll gain valuable experience in one of our Divisions (Capital Markets and Post Trade).
Schools and young people
We’re passionate about maximising the opportunities available to children and young people regardless of their background and have set up a number of initiatives that allow us to provide support.
LSEG Foundation
A vital way of delivering our purpose in the community and wider society is through the LSEG Foundation. Working with charity and NGO partners, we deliver a range of programmes across the globe, creating opportunities for those in need to participate in education, employment and enterprise. This is a vast challenge, so we aim to focus our support where we think it can have the greatest impact. Our aim is to help people access economic opportunities and build a secure future with financial independence.
Our programmes vary by geography and need. We create change through a variety of initiatives. These could include helping girls stay in school for longer, as part of a wider strategy to address gender inequality and community education, guiding young adults into secure work, education programmes for financial literacy or supporting individuals in reskilling for a fresh start.
Work experience
We are committed to supporting young people to explore career opportunities, build their employability skills and bridge the gap between education and practice.
Apprenticeship Programme (UK)
Our Apprenticeship Programme currently offer an 18-month accelerated development programme, combining real work experience with away-from-the-desk learning.
Online financial literacy resources
At LSEG, we believe financial literacy opens up options and opportunities. Whether it’s study and career choices now, or how to save and invest money later on in life, understanding how finance works can help build a better future for us all. To help boost the financial literacy of kids across the globe we offer a wealth of online resources and videos to help you learn more about the world of finance.