Security Engineer

• Lead the implementation and management of information security risk practices across the organisation.
• Act as the first line of defense for security risk management and ensure security governance, policy compliance, and operational risk ownership across business functions.
• Report directly to the Group CISO and work closely with business units, IT, compliance, and audit to ensure security risks are effectively identified, assessed, documented, and mitigated.
• Conduct and document security risk assessments across systems, projects, and processes.
• Own and manage the Group security risk register, ensuring timely updates, mitigation tracking, and escalation where required.
• Work closely with the 2nd line to manage security risks across the group.
• Support the Group CISO in risk reporting to executive stakeholders.
• Manage the exception to security policy process, including risk-based reviews, documentation, approvals, and renewals.
• Liaise with business stakeholders to assess and document residual risk where security standards cannot be met.
• Support the creation, maintenance, and review of security policies and procedures to ensure alignment with regulatory, industry, and business requirements.
• Map security policies to procedures and controls to ensure clear operational accountability.
• Facilitate awareness and compliance of security policies across business units.

Security Risk Manager, First Line

Job Level

About the role

Requirements