Our senior leaders in Information Security Management are passionate experts in information security, analysis, and control solutions. You'll spearhead ongoing IT security control initiatives and may oversee a team of IT managers. You may be involved in cybersecurity response, control development or risk management and will collaborate across our global technology teams and lines of business to ensure we have the proper policies and controls in place.

This role is to the senior global leader for Risk and Control for Platform Services inside GTI. It will report to the head of Platform Services. The successful candidate will be part of the Platform Services Leadership team.

This role covers the following areas:
- Databases
- Application Integration Streaming and Messaging
- Technology Reference Data (including Technology Asset Management)
- Global Client Services

The role will be required to work across Audit, Second line of defense and dealing with regulators and their actions plans (MRA).

We interact a lot with CDA control owners. It will cover on premise controls and those that apply to Public Cloud.
The role will require negotiation with groups above and distilling and understand language from regulators themselves.

Several of the above groups are heavily controlled. This is because they store and transmit the firms' data.

The role will require work with Global Technology Leadership and firmwide CIO and CISO on topics.

This role requires a wide variety of strengths and capabilities, including:

• Bachelor's degree or equivalent experience
• Strong strategic vision and a track record of successful delivery of business objectives
• Expertise in working with colleagues throughout the firm and in leading collaborative teams to achieve common goals
• Mastery of multiple business disciplines and functions, including policies and standards, risk and control assessments, access controls, control remediation, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection
• Expertise in controls; resource management; technological, organizational and operational change management; conflict resolution; negotiation; stakeholder management; partnership and influence; and budget and financial management, including business case completion
• Ability to negotiate different perspectives on controls in a professional and non agressive manner