Head of ICS, Business / Function / Region

The Role Responsibilities

Information and Cyber Security ( ICS ) Transformation and Remediation Portfolio ( TRP ) is a critical collection of programmes (the portfolio) aimed to improve Bank s cyber framework/controls, cyber security services and products, and remediate and continuously improve Bank s cyber security posture in today s ever evolving cyber security landscape.

This is a new role, reporting into the Global Head of Operations, ICS, to drive the ICS risk reduction agenda in the respective business / function / region.

The key deliverables of the role are:
• Lead the Information and Cyber Security ( ICS ) Risk Type Framework ( RTF ) implementation in in the respective business / function / region.
• Lead risk mitigation and remediation in the respective business / function / region in line with the ICS TRP agenda.
• Interface with respective Group Business, Function and / or Country MT for effective implementation.
• For select Group wide initiatives, lead the change agenda as agreed with the ICS TRP Accountable Executive.
• Understand in the respective business / function / region specific requirements including regulatory driven requirements. Support the management of these requirements within risk appetite.
• Provide leadership over the operational delivery, controls, and governance of the ICS agenda. Face off to the Group ICS TRP and ICS subject matter experts in Group Business lines.
• Chair in the respective business / function / region ICS Working Groups. Support in the respective business / function / region Heads to manage ICS risk including in Non-Financial Risk Committees.

Strategy
• Identify and independently drive strategic change initiatives to deliver on the ICS agenda with a forward-looking view.
• Develop insightful strategies for engaging business on information security matters, ensure investments are prioritised and funding is approved.
• Support delivery of the Bank s enterprise wide risk management plan and strategy.
• Work with application development organisations to assist in the development of strategies and plans for improving both Architecture and application security.

Business
• Ensure ICS risks in the respective business / function / region are proactively managed and effectively controlled, mitigated and remediated with senior stakeholder s support and buy-in, in line with Group, Region, Country, Business/Function risk appetite and regulatory driven requirements.
• Establish priorities in partnership with the COOs and take responsibility for resolving security issues.
• Ensure that the management