GPS Cyber Lead

Role Overview

This position entails managing Cybersecurity initiatives within the GPS and Digital Technology sectors. The individual will act as the principal liaison for Cybersecurity across business, technology, and risk teams regionally. Reporting directly to the US and GPS Chief Information Security Officer (CISO), the role involves executing the Group's Information Security strategy and aligning security protocols with evolving cyber threats.

Key Responsibilities

• Lead Cybersecurity efforts within GPS/Digital Technology, serving as the main point of contact for related stakeholders.
• Implement configuration changes and customizations across various modules to support business processes.
• Translate complex Cybersecurity technical concepts into understandable language to promote continuous risk assessment and improvement.
• Collaborate closely with central Group Cybersecurity teams, GPS Technology, and business risk stakeholders to meet security objectives.
• Oversee Governance & Reporting, Information Security Risk Management, Remediation, Secure Business Transformation, Customer Support, and Regulatory Compliance regarding GPS.
• Represent GPS in cybersecurity matters during regulatory, audit, and external security assessments.
• Ensure Cybersecurity initiatives are aligned with business goals while maintaining risks within acceptable appetite levels.
• Maintain cyber reporting as needed for internal functions and regulators.
• Analyze and communicate developments related to market security threats relevant to GPS's operating regional markets.

Candidate Profile & Requirements

• Bachelor’s degree minimum and solid experience in IT security governance and operations, especially in Financial Services or global corporate services.
• Prior experience as a Business Information Security Officer in Financial Services with direct senior stakeholder engagement is essential; preference for candidates from large firms (assets over $100 billion).
• Experience in global Cybersecurity teams, particularly in control or program ownership roles.
• Exceptional verbal and written communication skills in English with the ability to tailor messages to different audiences.
• Proven customer service excellence and understanding of customer perspectives.
• Ability to convey technical cybersecurity information to non-technical stakeholders effectively.
• Skill in rapidly establishing productive working relationships with diverse stakeholders.
• Highly motivated with an aptitude for fast learning.
• Possession of one or more recognized cybersecurity certifications such as CISSP, CISM, CISA, or CRISC is desirable.