Cyber Security and Risk Senior Manager, RTGS

Senior Security, Risk and Audit Manager (RTGS) 
Scale D
Permanent, Full-time
Location: Leeds 

Job Description

This role is the centre of expertise in Information Technology Risk and Control for the RTGS Technology Service. The role is complex, requiring gravitas, leadership experience, strategic insight and a collaborative approach. 

A Day in the Role 

Your typical day might begin with a review of any critical information shared by colleagues overnight regarding incidents or changes to cyber risk. If you feel something is of importance you will discuss with the Cyber Division and discuss next steps.

Next up, as a senior manager within the RTGS Technology team you could participate in a cross-functional governance meeting with senior leaders from Technology, Operations, Risk and Audit. You will contribute to this meeting with a short presentation about the current technology risk profile for RTGS and how this is being mitigated with clear time bound actions.

Later in the morning, if a significant incident has occurred you attend the Major Incident Management (MIM) meeting. You are also a key contributor to the post-incident review process to ensure lessons are embedded into practice.

After lunch with colleagues in the staff restaurant you work with your direct report to prepare materials for an upcoming Payments Risk meeting.  You might follow this up with a call to external stakeholders to discuss cyber security for the Critical National Infrastructure that underpins the Service.

Mid-afternoon might see you discussing progress with a programme manager on strategic transformation initiatives—such as RTGS Future Roadmap. You challenge risk interdependencies and ensure alignment with the Bank’s risk appetite.

Towards the end of the day, you review the content that you have prepared for a meeting tomorrow with the RTGS External Auditors that will review our compliance to a variety of regulatory frameworks. 

Role Requirements  

RTGS settles on an average day £800billion and is critical national infrastructure. Each day brings new challenges and opportunities, creating an environment suited for those who work well in a fast-paced setting. An individual whose approach is getting it “right” in tight timescales can make a real difference.

As a Senior member of the RTGS Technology team you will report to the RTGS Technology Service Owner. You are an integral part of the team running our dedicated critical RTGS payments platform.

You will play the lead role in actively driving improvement in overall IT risk identification, management, and reduction within the Service, particularly in relation to threats that could impact the security or resilience of the service. The role will focus on protecting the platforms and demonstrating to stakeholders including Auditors and our Regulators that appropriate governance and control is in place. 

Minimum Criteria

We’re looking for someone who has the following attributes:

• Strong operational track record of successful delivery in audit, risk or technology security roles
• Demonstrable understanding of risk principles, controls, processes, terminology and industry frameworks.
• Strong workload management and delivery, with the ability to work flexibly and adapt rapidly to constantly evolving priorities
• Deep technical understanding of business drivers, IT architecture, constructs, interactions, processes and dependencies
• Build and maintain effective relationships with and influence a variety of internal partners and senior leaders
• Excellent stakeholder leadership skills, to build a network of contacts, to create trust and rapport, persuade and influence at senior management and committee level
• Practical experience of technical audits and processes, including requirements, evidence presentation, management responses and agreeing closure.

Essential Criteria

 We are interested in hearing from candidates who can:

• contribute stability and security to the RTGS service by ensuring that risks are identified and managed in line with Bank Technology Standards.
• Be the prime liaison point between our team and Audit, Enterprise Risk, Financial Markets Infrastructure Division, Payments System Risk and other oversight groups.
• Build and Maintain stakeholder relationships with these groups.
• Develop and maintain a detailed Subject Matter Expert understanding of the RTGS Technical IT & security control environment.
• Represent and delegate for the Technology Service Owner at Risk/Security boards and similar fora.
• Work closely with the Bank’s CISO and Cyber Sec