CIS SERVICE DELIVERY MANAGEMENT-CIS INCIDENT MANAGEMENT ☆

About the role

Own and deliver security governance and control activities, including ITGC execution, audit readiness, and evidence tracking. Maintain and update the ISO27001 ISMS, including policy and standards refresh and controlled publication. Drive Segregation of Duties remediation across finance systems within defined timelines. Coordinate and complete third‑party assurance questionnaires, including SIG Lite and broader SIG processes. Support GIA governance audits, ensuring evidence readiness and action tracking. Deliver operational resilience and BCP artefacts, ensuring alignment with regulatory expectations. Support cloud/platform security onboarding (GCP VMSP), ensuring controls and reporting are in place. Manage IAM/IDAM onboarding, role management, and reporting discipline. Drive data classification and labelling rollout activities aligned to global standards. Coordinate penetration testing preparation, stakeholders, and follow‑up actions. Establish and maintain monthly security reporting, including 1st and 2nd line inputs. Standardise and embed Security KRIs across reporting cycles. Support TechComm reporting (UK and VN) ensuring clarity and consistency. Drive Wiz deployment and operationalisation, embedding it into BAU processes. Support security awareness and notification processes, including joiners/leavers activities.

Key responsibilities

• Own and deliver security governance and control activities, including ITGC execution, audit readiness, and evidence tracking.
• Maintain and update the ISO27001 ISMS, including policy and standards refresh and controlled publication.
• Drive Segregation of Duties remediation across finance systems within defined timelines.
• Coordinate and complete third‑party assurance questionnaires, including SIG Lite and broader SIG processes.
• Support GIA governance audits, ensuring evidence readiness and action tracking.
• Deliver operational resilience and BCP artefacts, ensuring alignment with regulatory expectations.
• Support cloud/platform security onboarding (GCP VMSP), ensuring controls and reporting are in place.
• Manage IAM/IDAM onboarding, role management, and reporting discipline.
• Drive data classification and labelling rollout activities aligned to global standards.
• Coordinate penetration testing preparation, stakeholders, and follow‑up actions.
• Establish and maintain monthly security reporting, including 1st and 2nd line inputs.
• Standardise and embed Security KRIs across reporting cycles.
• Support TechComm reporting (UK and VN) ensuring clarity and consistency.
• Drive Wiz deployment and operationalisation, embedding it into BAU processes.
• Support security awareness and notification processes, including joiners/leavers activities.