Security Control Specialist Virgin Money

CyberNorth; City of London; Hybrid; GBP 40,000 - 51,000; Full time

Job summary

A leading financial services company is seeking an Information Security Risk Manager to enhance security operations. This hybrid role involves driving cyber security improvements, understanding risk landscapes, and ensuring regulatory compliance. Ideal candidates will possess CISSP certification and deep knowledge of cyber security frameworks. Competitive salary and numerous benefits offered, including remote work flexibility.

Benefits

25 days holiday, increasing to 30

Private medical insurance

Competitive pension

Performance-related bonus

Training and development opportunities

Flexible benefits scheme

Life assurance

Paid volunteering days

Qualifications

• Expert knowledge of frameworks like NIST, COBIT, and CIS Controls.
• Understanding principles of risk management in cyber security.
• Awareness of threats and technologies in cyber security.

Responsibilities

• Raise cyber risk awareness and control best practices.
• Support delivery of new cyber security controls.
• Drive data-driven continuous improvement techniques.
• Provide insights for risk packs and reporting.
• Ensure compliance with regulatory requirements.
• Support risk management responses and audits.
• Manage stakeholders for assurance best practices.

Skills

Expert knowledge of cyber security governance frameworks

Understanding of cyber security risk management

Awareness of emerging cyber security trends

Knowledge of security technologies and tools

Understanding of regulatory requirements

CISSP certification

Job description

Business Unit: Chief Operating Office
Salary range: £40,800 to £51,000 per annum DOE
Location: UK Hybrid – Work from anywhere in the UK, with flexibility to occasionally visit Glasgow or London HUB.
Contract type: Permanent – Full Time

Our Team

Working in Cyber Security is a big deal as we continue to play a key role in keeping Virgin Money safe. We’re on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations. We’ll be working to protect against security threats to Virgin Money and the financial services sector. You’ll play an important role in helping us understand the security landscape so we can protect ourselves from risk. This helps to inform our Cyber Strategy, Culture and Education work as well as direct investments to mitigate risks and prevent and detect attacks.

The Control Tower Team supports the organisation’s overall Cyber Security capabilities specifically focusing on enhancing our security posture against attacks to ensure we remain available to customer and colleagues. The Information Security Risk Manager role is a key role that provides essential oversight and analysis of critical processes within the function

What you’ll be doing

• Raise awareness of cyber risks and control best practices among employees at all levels of the organisation to further embed secure by design mindset.
• Support in the development and delivery of new cyber security controls with internal security control SMEs.
• Drive continuous improvement techniques with a focus on data and measurement to ensure our objective of being data driven is being achieved
• Provide data driven insights and assessment for key risk packs and reporting outputs for Technology functions with delivery of core mandated reporting requirements such as risk committees and board reviews
• Work closely with the Risk, Compliance and Regulatory teams to ensure regulatory compliance, including technical control compliance.
• Provide advice and support risk management responses, including risk and audit requests, regulatory requirement assessments and third-party security control capability requests.
• Effective stakeholder management across the lines of defence to ensure alignment and adherence to assurance best practice.

We need you to have

• Expert knowledge of cyber security governance frameworks, policies, and procedures such as NIST, COBIT, CIS (Center for Internet Security) Controls
• Understanding of cyber security risk management principles and practices.
• Awareness of emerging cyber security trends, threats, and technologies.
• Knowledge of security technologies, tools, and solutions used in cybersecurity programs.
• Understanding of regulatory requirements and industry standards relevant to cyber security.
• CISSP certified

It’s a bonus if you have but not essential

The extras you’ll get:

• 25 days holiday per year, increasing over time to 30. Plus, an option to buy more, giving you even more choice.
• Private medical insurance
• A highly competitive pension to help you build a strong foundation for retirement
• Access to an annual performance-related bonus
• Training and development to help you progress your career
• A great selection of additional benefits through our flexible benefits scheme
• Life assurance to provide peace of mind for you and your loved ones
• Up to 2 days of paid volunteering a year

Say hello to Virgin Money

Virgin Money is so much more than just a bank. As part of the Nationwide group, together we’re the UK’s first full-service mutual bank serving millions of retail and business customers and all driven by our purpose; Banking but fairer, more rewarding and for the good of society. With us, you’ll be part of an organisation uniquely positioned to make a difference to the lives of customers, communities and broader society and embark on a collaborative, customer obsessed, and fun-filled career journey. Embrace the weekdays, enjoy fantastic perks, and make a meaningful positive difference. Time to discover what it means to be part of the first mutual full-service banking provider.

Be yourself at Virgin Money

At Virgin Money, we celebrate everyone. We have fun, think big, and relentlessly include each other, all in pursuit of our purpose: Banking – but fairer, more rewarding, and for the good of society.We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.

As a Disability Confident Leader, we’re committed to removing any obstacles to inclusion. If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team [e-mail]

Please note:

If we receive a high volume of eligible applications, we may need to prioritise candidates whose skills and experience most closely align with the role, while still ensuring fair and equitable consideration for all applicants.