Information Security Officer - Post Trade

About the role

LCH Ltd, part of LSEG's Post Trade division, is looking for an Information Security Officer to assist the Director of Business Information Security (BISO) with information and cyber security oversight. The role protects the critical business systems and data assets of LCH Ltd and ensures that security controls stay effective, within risk appetite, or have appropriate risk treatment plans. It suits an experienced Information Security Manager with senior-level InfoSec/Cyber experience in financial services or financial market infrastructures.

Key responsibilities

• Review and assess information security and cyber controls, carry out gap analyses and oversee remediation activities.
• Monitor security roadmaps, strategies and projects, report risks and trends, and keep KPIs and risk indicators accurate.
• Work with technology and cyber teams, the three lines of defence, and external service providers to define risk posture and remediate issues.
• Help establish a Cyber Risk Profile and a Risk Control Assessment, and maintain executive-level security presentations.
• Review project security designs and ensure compliance with policies and standards.
• Support business understanding of security risks, emerging threats and risk mitigation plans.
• Review technologies and controls across the firm, including offices, data centres and cloud, and run maturity assessments against frameworks such as NIST CSF, ISO 27001/2, SOC2 and others.
• Present risk postures and cyber maturity to senior executives and to clients and regulators.

Required profile

• Minimum 10 years in senior InfoSec management roles.
• Extensive experience in financial services or financial market infrastructure organisations.
• Strong problem-solving, innovation and critical thinking, with excellent communication and stakeholder management.
• Able to work independently and in teams, prioritise workloads with minimal supervision and handle fast-paced, high-volume workloads.
• Must hold a CISSP certification; CISSP-ISSAP, CISSP-ISSEP, CISM, CCSP, CCSK or CEH are desirable.

Required skills

• Subject-matter expertise in information security and cyber security, including legacy, existing and emerging technologies and cloud security.
• Security GRC, vulnerability management, security architecture and security operations.
• Working knowledge of ISO 27K, ISF SOGP, NIST CSF, CIS, CSA STAR, CBEST and TIBER-EU.