Information Security & Privacy Specialist

Description:

We are seeking a versatile and proactive Information Security & Privacy Specialist to join Handelsbanken UK which is currently undergoing a major technology transformation programme. The successful candidate will a key member of the Secure Change Community of Practice, playing a critical role in ensuring that the Bank’s security and privacy processes, tooling and ways of working allow our Embedded Security Consultants to integrate security seamlessly into change initiatives from inception through delivery. 

The Bank operates a model where information security consultants are embedded into workstreams acting as the security lead for that delivery team. An established Secure Change Community of Practice supports these embedded security consultants, facilitating knowledge sharing, owning & developing security and privacy processes/tooling, supporting embedded consultants to solve infosec and privacy problems and providing expert data privacy consultancy. The Community of Practice also undertakes quality assurance reviews and provides coaching and structured training.

The Information Security & Privacy Specialist role supports the Community of Practice Manager to operate the practice and will undertake a wide-range of activities, including process optimisation and enhancement, training and coaching, providing specialist data privacy support to our embedded consultants, delivering elements of the team’s Business Plan and producing management reporting.

Applicants will need to possess a solid and demonstrable understanding of information security and data privacy and be able to apply this understanding in the context of business and IT change initiatives.

This is a unique opportunity to work in the Bank’s information security team, influencing how we operate whilst collaborating closely with and supporting our Embedded Security Consultants.

Main Responsibilities

• Subject Matter Expertise  – You will develop a deep knowledge of the Banks secure change processes and procedures, allowing you to provide specialist advice to our consultants on how to apply them, including delivering parts of our onboarding and ongoing training.
• Advisory  – You will provide expert data privacy advice to Embedded Security Consultants as required, if necessary working collaboratively with other Privacy/Data Protection specialists in the Bank to agree a common position.
• Practice development  – You will be an active member of the Community of Practice, leveraging your expert security and privacy knowledge to enhance our processes & ways of working and producing quality documentation and training materials.
• Problem Solving  - You will support Embedded Security Consultants to apply our processes and ways of working in initiatives which don’t easily fit our standard operating model.

Ideal Candidate Research (by Harvard University) shows that women are particularly likely to second guess themselves and not apply - so if you are worried you don't meet all the criteria, get in touch anyhow and let us do the worrying…
 

• You are a skilled communicator, able to communicate complex processes and ways of working to embedded security consultants.
• You love building strong interpersonal relationships with other security professionals to foster a culture of shared security ownership.
• You are great at identifying ways to enhance processes and ways of working and you enjoy finding creative solutions problems.
• You have a wide range of information security and data privacy knowledge and, crucially, you are aware of your own knowledge gaps and able to seek support and guidance as required.
• You understand the intersection of Risk Management and Information Security and how these relate to each other in a Financial Service business (3LoD model)
• You will hold appropriate external qualifications such as Certified Information Systems Security Professional (CISSP)and Certified Information Privacy Professional (CIPP)