There is plenty to own and plenty of room to make your mark.

🛠 What Will You Do?

• Keep our crew connected: Manage our predominantly Mac device fleet, support employees and improve self-service guidance.
• Own identity and access: Administer Microsoft 365 and Google Workspace, including MFA, conditional access, licences and access reviews.
• Strengthen our defences: Implement and monitor security controls, logging and alerts across our internal IT and AWS environments.
• Keep compliance moving: Support SOC 2 and ISO 27001 requirements, maintain documentation and coordinate penetration testing.
• Be ready when it counts: Lead incident response and business continuity planning, and manage security threats.
• Make smart technology choices: Assess new software, integrations and vendors for security risks.
• Cut the admin: Automate onboarding, offboarding and device management alongside our People team.
• Build security confidence: Support customer security questionnaires and run practical security awareness sessions for our global crew.

🙌 Qualifications and Fit

You know your way around a Mac-first environment and can explain security without making everyone’s eyes glaze over.

You will bring:

• A relevant qualification in IT, Computer Science or Cyber Security, or equivalent professional experience.
• Hands-on Jamf Pro experience, including smart groups, policies, configuration profiles, Self Service and Automated Device Enrollment.
• Strong macOS knowledge, including FileVault key escrow, account recovery and device lockout troubleshooting.
• Scripting skills in zsh, bash or Python to automate workflows.
• Experience administering Google Workspace, Microsoft 365 and endpoint security tools such as CrowdStrike Falcon.
• Practical SOC 2 or ISO 27001 experience, ideally with a compliance platform such as Drata.
• A service-focused mindset, clear communication and the ability to prioritise when things get busy.

A few handy extras: Relevant security certifications, AWS security expertise, or experience in a scaling  

Working as part of an inclusive and collaborative team your key responsibilities will include:

• Applying the Bank’s Risk Management Framework across Technology and Cyber and helping teams strengthen risk and control management.
• Facilitating technology and cyber risk assessments, including RCSAs, project and change risk assessments, and reviews of third-party technology services.
• Planning and performing control testing, documenting findings and supporting the development of proportionate remediation actions
• Coordinating KRI reporting and providing analysis of risk trends, thresholds and emerging issues.
• Reviewing risks associated with new systems, change programs and third-party providers
• Providing practical risk advice and guidance to technology and business stakeholders
• Supporting the recording, assessment and follow-up of technology and cyber incidents, including actions arising from post-incident reviews.
• Maintaining accurate risk, control, issue and action records in the Bank’s enterprise risk system and monitoring agreed remediation actions.
• Developing and delivering risk awareness training and guidance to strengthen risk understanding and capability across Technology and Cyber teams.

What sets you up for success

• Experience in cyber, technology or operational risk in a medium to large organisation
• Sound knowledge of risk management principles, control design and operating effectiveness, risk assessment and remediation management.
• Familiarity with CPS 230 and CPS 234 and their application within a regulated environment.
• The ability to understand technology environments and assess the risks and controls associated with them.
• The ability to communicate risk concepts clearly and develop practical risk awareness and training materials for technical and non-technical audiences.
• Experience conducting control testing or control assessments, documenting findings and monitoring remediation actions.
• A pragmatic and collaborative approach, sound judgement and the ability to work with a high degree
•