Information Security Analyst - ERT Finding Management

About the role

The Information Security Analyst within the TDI CSO Embedded Risk Team (ERT) drives information security risk within the bank's defined risk tolerance while supporting the overall security strategy. The role covers global deliverables across the Risk and Control framework for 1LoD Business, with governance and oversight of important internal CSO findings, and acts as the DCO under the Finding Management Procedure.

Key responsibilities

• Review Finding Life Cycle Events (closures, risk acceptances, target date extensions, self-identified issues) for important CSO findings
• Challenge and review proposed actions for quality, completeness and appropriateness, and resolve disagreements, scope issues and evidence gaps
• Ensure governance and oversight so findings do not become overdue
• Coordinate with Finding Owners, Control owners and stakeholders to support timely remediation
• Prepare, analyse and present risk reports, portfolio insights, trends and status updates to senior management and governance forums
• Maintain clear communication with Finding Owners and Control Owners, with guidance and reporting published through the central information hub

Required profile

• Bachelor's degree or equivalent in auditing and enterprise risk management, especially information security risk management (risk management for 1-3 years)
• Proven experience in non-financial risk topics in a financial industry, such as risk oversight, findings/issue management and control frameworks
• Understanding of information security concepts, controls and risk management methodologies
• Experience on small projects in a global environment
• Excellent written and verbal communication; fluent English
• Ability to use AI tools productively and ethically

Required skills

• CISM and/or CISA certification preferred
• Advanced Microsoft Office and Excel

What we offer

• Leave policy and gender-neutral parental leave
• Childcare assistance reimbursement and employee assistance program
• Hospitalisation, accident and term life insurance, and health screening for those 35 and above
• Certification sponsorship, training and coaching