Security Risk and Assurance Specialist VP

Job title: Security Risk and Assurance Specialist

Location: London/Hybrid

Duration: 6 months

Adecco is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities , and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive.

The role:

Deliver an enhanced security risk assurance and due diligence review of all in scope applications, cloud services and related technologies for ECB compliance readiness

Deliver entity level risk assurance and management dashboard to support ongoing risk and issue management and reporting across EMEA.

Maintain and update the governance, risk, and performance frameworks, across Information and Cyber Security within EMEA, with an EU focus.

Responsibilities:

• Maintain and enhance the Security due diligence assurance process in line with EU and UK regulatory expectations
• Deliver a full due diligence assurance on all in scope applications, systems and technologies in support of ECB compliance.
• Define and embed key metrics required for information and cyber security continuous controls management and reporting; driving and tracking mitigations; facilitating periodic review to reflect changing cyber threat landscape and confirm the adequacy of risk and key controls
• Implement risk appetite methodology for EU reporting process, including but not limited to templates, heat maps and dashboard to continually inform on risk appetite position
• Maintain and enhance the EMEA Information Security Risk and Assurance documentation, policy, standard, frameworks, processes and procedures.
• Consistently look for improvements in the efficiency and effectiveness of Information and Cyber Security risk and due diligence assurance reporting

• Risk management techniques such as risk identification, risk evaluation, control mapping and mitigation tracking
• Performance management techniques including developing and maintaining KRIS, KCIs, KPIs and appropriate tolerances
• Security due diligence assurance framework definition, implementation, assessments and reporting
• Stakeholder management, including working with diverse teams in EMEA, North America, Ireland and Japan
• Information and Cyber Risk Frameworks and Standards (e.g., NIST / ISO27001) as well as Regulatory frameworks (e.g., Bank of England FCA/PRA, EU).
• Experience of EMEA Regulations and standards such as DORA/ECB regulatory requirements is required

• Boston, Massachusetts, London, UK, Clifton, New Jersey, Stamford, Connecticut
• Boston, Massachusetts, London, UK, Clifton, New Jersey, Stamford, Connecticut