This role is responsible for driving the security architecture, design, integration & driving delivery to support the maturing capability of Global Cyber and Information Security capabilities with specialised focus on the Cyber Defence Operations (also known as Security Operations Center) capability. This will include (but not limited to):
• Lead and support the Cyber Defence Operations in terms of architecture oversight, requirements, and design
• Support the integration of security components & services
• Review and input into the appropriate use of FIL security technologies and services
• Work with various stakeholders to build security into the overall designs and patterns
• Input to cyber security & technology roadmaps and strategy
• Support the evaluation of new products and vendors during formal and informal processes

Your skills and experience

• Understanding of Security Standards and GRC frameworks like NIST CSF, ISO 27k:2013, Cloud Security Alliance, Togaf 9 etc.
• Proficient in Security Risk Frameworks and methodology for conducting Security Risk assessments.
• Well versed in Security design review and control assessment methods for enterprise systems & applications.
• Ability to provide technical oversight to design and implement security controls for enterprise applications.
• Understanding and experience of working with security controls and processes typically used in Security Operations Centers
• Understanding and experience of security tools commonly leveraged by Security Operations Teams e.g. (Security Event log acquisition, SIEM, SOAR, Threat Intelligence Sources, MITRE)
• Understanding and experience of general enterprise security controls (e.g. Firewalls, Threat Detection, Network Anomaly, Endpoint Detect Response, Data Loss Prevention etc)
• Experienced in the definition and delivery of customer facing security controls in a dynamic and complex environment
• Ability to draw on experience to question and challenge existing or proposed solutions, the ability to work under pressure and to tight deadlines
• Analytical skills with an ability to quickly assimilate new information
• Strong communication skills with evidence of being in a position responsible for communicating technical issues to non-technical users; such as formal stakeholder engagement/communications
• Banking or Finance industry related experience desirable
• BSc/BA in Computer Science, Engineering, Information Systems and/or equivalent formal training or experience.
• CISSP or equivalent security certification preferred