Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job purpose

Lead the Bank's cyber security function, acting as deputy to the CIO & CISO and providing leadership across Cyber Governance & Compliance, Cyber Assurance & Architecture, and Cyber Operations & Third-Party Security. Ensure the effective delivery of cyber governance, assurance, operational oversight and resilience capabilities.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities: 

• Lead and develop the cyber security function, ensuring effective delivery across governance, assurance and operational security disciplines.
• Deliver the cyber security strategy and roadmap, ensuring alignment with business objectives, regulatory requirements and the Bank's risk appetite.
• Oversee cyber risk, control effectiveness and management reporting, ensuring cyber risks remain aligned to the Bank's risk appetite and regulatory obligations.
• Act as Incident Director during major cyber incidents and cyber crisis events.
• Sponsor cyber resilience, operational resilience and security exercising activities.
• Ensure effective oversight of outsourced cyber security services and critical cyber security suppliers.
• Drive continual improvement of cyber capabilities, controls and operational effectiveness.
• Develop cyber talent, succession plans and organisational capability across the cyber function.

Key Interfaces:

• Technology Teams
• Operational Resilience Team
• Human Resources
• Change Management
• Architecture
• Data Privacy
• Supplier Management

Knowledge/Experience/Skills:

• Significant cyber leadership experience
• Experience within a regulated environment
• Experience managing outsourced cyber services
• Experience leading major cyber incidents
• Strong understanding of cyber security governance, risk management and operational security.
• Experience operating within ISO27001-aligned control environments.
• Understanding of operational resilience, cyber incident management and third-party security.
• Ability to translate cyber risks into business-focused and regulatory reporting.

Qualifications:

Minimum of two of the below is required:

• CISSP
• CISM
• CRISC
• ISO27001 Lead Implementer/Auditor

Competencies:

• Problem Solving and Judgment
• Customer Focus
• Planning and Reviewing
• Performance Focus
• Communication and Confidence

Life, Work and Benefits

At Arbuthnot Latham, we seek proactive individuals who embrace high standards and bring the energy needed to drive success. In return, you can thrive in a dynamic environment that values your innovative ideas and provides the stability and support for your personal and professional growth.  Our human-scale ethos means that everyone is recognised as an individual, not just a number, creating a workplace where you truly belong and thrive.  

As a service led, relationship driven bank, in-person collaboration and wellbeing are important to us and drives our inclusive culture. With this in mind we offer one day a week working from home.

Benefits

• Competitive holiday allowance with the ability to buy / sell / rollover up to five days per year
• Pension via market leading provider
• Private Healthcare cover
• 4x Life Assurance
• Discretionary Bonus
• Access to a suite of flexible benefits including Cycle to Work Scheme, Gym Scheme, Health Assessment, Season Ticket / Travel loans and Dental insurance as well as other discounts / vouchers

Data Privacy and Reasonable adjustments

We take keeping your data security seriously.  For more detail on how we may keep your data please refer to our Privacy Notice

https://careers.arbuthnotlatham.co.uk/files/RecruitmentPrivacyNotice.pdf

Reasonable adjustments: Please let us know of any adjustments or arrangements that you may need to help you apply to this role or that will help you during the recruitment process. If you wish to discuss any particular requirements or concerns you have because of a disability or medical condition please contact us at [email protected]. Information you provide about any disability or medical condition will remain confidential unless it is necessary to disclose it to other members of staff or outside agencies to ensure the health and safety of yourself and others, or to implement the adjustments you require. In these circumstances we will first discuss with you how and to whom the information may be disclosed.