DESCRIPTION

SYNTAX IT Group is seeking an experienced Information Security Officer on behalf of its client in the banking sector to support the bank’s information security governance and cyber risk management activities.

The role is responsible for developing, implementing, and maintaining an effective information security framework to protect the confidentiality, integrity, and availability of information assets and ensure compliance with regulatory and supervisory requirements applicable to the banking sector.

Responsibilities

  • Develop, implement, and maintain information security policies, standards, and procedures aligned with banking regulations and industry standards.
  • Support identification, assessment, and management of information security and cyber risks across systems, business processes, and outsourced services.
  • Oversee information security aspects of third party and outsourcing risk, including participation in due diligence, risk assessments, and ongoing monitoring activities.
  • Monitor and follow up on remediation of findings arising from penetration tests, vulnerability assessments, and other security testing activities, ensuring timely and effective closure.
  • Assess information security, data protection, and governance controls for AI‑enabled systems and third‑party solutions, including risks related to data usage, model lifecycle, explainability, and alignment with applicable regulatory and supervisory expectations.
  • Support internal/external and regulatory IT & Information Security Audits, including preparation of documentation, evidence collection, audit coordination, and follow up of findings.
  • Conduct regular reviews of the information security control framework and recommend improvements as necessary.
  • Stay informed on emerging cyber threats, regulatory developments, and supervisory expectations relevant to the banking sector.
  • Support information security incident management processes, including documentation, reporting, and post incident reviews.
  • Provide subject matter expertise and advice on information security matters to internal stakeholders.
  • Ensure confidentiality and integrity in handling sensitive security related and regulatory information.

Qualifications

  • Bachelor’s degree in Information Systems, Computer Science, or a related field.
  • Minimum of 5 years of experience in information security governance, risk management, or compliance, preferably within a bank or regulated financial institution.
  • Knowledge of information security standards and frameworks (e.g.) and regulatory requirements (e.g. GDPR, DORA, ISO27001, NIS2).
  • Experience supporting third‑party risk processes, security testing activities, audits, or certification schemes.
  • High attention to detail and ability to maintain accurate documentation and evidence.
  • Commitment to the highest standards of integrity, professionalism, and ethical conduct.
  • Experience leveraging AI‑enabled tools to support day‑to‑day information security, risk, or compliance activities, while ensuring adherence to internal controls, data protection, and regulatory requirements.
  • Strong communication and collaboration skills across business, IT, and control functions.

Additional Skills

  • Strong analytical and risk-based thinking in information security contexts.
  • Excellent stakeholder management and communication across technical and business teams.
  • High ownership, attention to detail, and accountability.
  • Ability to operate in regulated, fast-paced environments with competing priorities.
  • Strong problem-solving and ability to influence security and compliance improvements.
  • Effective prioritization and coordination of multiple security and audit activities.
  • Resilience and professionalism under pressure (audits, incidents, regulatory engagement).

Ready to join us?

    Max File Size: 10 MB