Information Risk Manager Job in London, London Uk
Overall Job Purpose
Information, whether our own or that entrusted into our care by clients, customers, staff or business partners, is a valuable asset and essential to our business.
The Bank is committed to protecting all of the information it uses or stores in accordance with its value, sensitivity and the risks to which it is exposed, and in a manner consistent with all legal, regulatory and contractual arrangements.
This applies to all information, whether in electronic form, on paper, or in other forms.
The vision for Group IRM is to provide a highly respected Group-wide utility, which works in partnership with business areas and support functions to manage the firm's Information, Data and Records principal risk.
The Information Strategy and Risk team have responsibility for core Group IRM activities including: policy creation and strategy, risk reporting and advisory and specialist services.
The job holder will help to ensure that all The Bank Clusters are compliant with the Group IRM policy. Specifically this will include:
- Collaborating with the Cluster Business Unit IRMs and providing guidance on how to embed policy.
- Working with Cluster Business Unit IRMs to define MI reporting requirements, and produce reports based on policy compliance.
· Identifying and assessing key IRM risks and issues across The Bank.
- Assist with a risk based assurance programme to monitor compliance against policy, including specific tests as required by the IRM Policy.
- Act as a point of reference for IRM related queries across the Group and actively build relationships across The Bank.
- Engage with The Bank wide programmes/projects with a dependency on IRM.
The jobholder will contribute to developing the team as a centre of excellence providing core services across the The Bank, embedding IM policies and raising awareness of the risks/threats associated with information.
Effective communications and interpersonal skills will be beneficial in enhancing the perceived value and reputation of IRM, and make it easier to achieve its objectives in the future.
Main Accountabilities
Policy Creation and Strategy
- Proactively manage stakeholders in developing Policies and subject matter expertise for Standards across the Group
- The Group IRM vision is driven along 3 lines of activity:
- Consistency in our approach to Information Risk Management across The Bank
- Effectiveness in our risk and control environment
- Efficiency in the way we operate
Provide advisory and specialist services to business clusters, units and functions
- Proactively reach out to key stakeholders in business units and provide advisory services to support the adaptation of the core policy and standards to reflect the specific risks and landscape facing that business unit
- Provide an external view of information risk management by keeping abreast of external developments both within and outside the financial services industry
Risk Assurance
- Monitoring and acting on key risk indicators across The Bank
- Perform conformance testing assurance against policies and standards
- Managing exceptions against IRM Policy including challenging the business units to resolve exceptions as soon as possible
Risk Appetite
Work with the Cluster/BU IRMs to define risk appetite and agree thresholds. Prepare reports on the risks and controls for senior management communication.
Risk reporting
- Plan and run a risk-based reporting programme which monitors whether the risk is within an appropriate risk appetite for the Business Unit, Cluster or Function.
- Lead work with clusters and other Group functions to identify and assess key IRM risks and issues of group-wide or group-level significance (including identification of future regulatory demands). Gain buy-in to approaches to manage these risks to within appetite. Prepare reports on the risks and controls for senior management communication.
To provide IRM subject matter expertise across The Bank
- Willingness to attend workshops, meetings, conference calls as a subject matter expert
- Provide prompt and expert written guidance when dealing with email queries from colleagues
Technical Skills/Competencies
Knowledge and expertise in one or more of the following information risk management domains would be preferred:
- Information Classification
- Acceptable Use
- User access management
- Records Management
Knowledge and Expertise
The ideal candidate may be able to demonstrate experience in the following:
- Financial Services Industry as they would be familiar with the rigorous industry compliance requirements
- Outstanding stakeholder management skills in a large corporate organization
- In addition to an IRM background, they may also hold a background in audit, information management, fraud, credit risk or operational risk
Key Issues over the next 12-24 months
- Consistency in our approach to Information Risk Management across The Bank
- Effectiveness in our risk and control environment
- Efficiency in the way we operate