Cyber & Technology Risk Manager

Job Description

Who were looking for Were looking for a Cyber & Technology Risk Manager to join our Cyber, Technology & Resilience Risk team which reports directly to the Chief Risk Officer The Cyber & Technology Risk Manager will be supporting the Head of Cyber & Technology Risk Oversight in providing technical 2nd line oversight of cyber and technology risks across Schroders, ensuring these risks are identified and escalated to appropriate seniorstakeholders. They will work closely with the Information Security and Technology 1 st line teams to improve their controls and improve risk management. They will undertake deep dive reviews of key areas of cyber and technology risk, be responsible for developingstrong working relationships with the 1 st line and supporting the Head of Risk Oversight in ensuring the Information Security Risk Oversight Committee provides effective challenge of the management of cyber risks. They will need to keep abreast of the threatlandscape and monitor emerging threats and trends. They will review red team and penetration test reports and oversee the first line in ensuring that recommendations are appropriately actioned. They will help to continue to evolve this specialist risk capabilityto continually enhance the level of challenge and oversight the 2 nd line provides over cyber and technology risk. This is a an excellent and rare opportunity for an individual, looking to gain senior stakeholder exposure and to develop their career in a cyberand technology risk function. About Schroders Were a global investment manager. We help institutions, intermediaries and individuals around the world invest money to meet their goals, fulfil their ambitions, and prepare for the future. We have around 6,000 people on six continents. And weve been around for over 200 years, but keep adapting as society and technology changes. What doesnt change is our commitment to helping our clients, and society, prosper. The base We moved into our new headquarters in the City of London in 2018. Were close to our clients, in the heart of the UKs financial centre. We have everything we need to work flexibly. The team Integrity and appropriate conduct are integral to Schroders culture and approach to risk management. Active and effective risk management is at the core of Schroders business and is regarded as a key competence by clients, consultants, regulators, counterparties,shareholders, internal stakeholders and other interested parties. Group Risk and Compliance works closely with the other governance functions (Group Internal Audit and Group Legal) in order to identify risks and provide independent challenge and oversight to the groups risk profile. What youll do

• Provide technical 2nd line oversight of Information Security and Technology ensuring risks are escalated to appropriate senior stakeholders and work with the 1st line to improve their controls and improve risk management.
• Undertake risk based reviews of key information security and technology processes and controls. Ensure that findings are appropriately risk assessed and management identify appropriate plans to mitigate the risk.
• Develop strong and effective working relationships across all 3 lines of defence to facilitate effective identification, management and remediation of information security and technology risk.
• Keep abreast of emerging threats and trends and assess the potential impacts and implications for Schroders risk profile.
• Review red team and penetration test reports and oversee the implementation of recommendations.
• Support and mentor junior members of the team in the delivery of their objectives.
• Prepare materials for and attend governance forums attended by the c-suite.

The knowledge, experience and qualifications you need

• Prior experience in technology & cyber risk or audit, preferably within the financial services industry or consultancy .
• Broad understanding of cyber threats and trends.
• Broad understanding of IT infrastructure and information security controls and processes.
• Good understanding of technology risk and information security control frameworks (e.g. NIST, COBIT etc).
• Proficient in report writing and producing presentations

The knowledge, experience and qualifications that will help

• Risk certification (e.g. CRISC/CISM/CISA) is desirable

What youll be like

• A team player who displays a high degree of interpersonal skills, tact and diplomacy with all constituencies. Possesses strong collaboration skills with peers and colleagues within and outside group risk
• Analytical has an attention to detail and a willingness to learn

Were looking for the best, whoever they are Schroders is an equal opportunities employer. Youre welcome here whatever your background, race, sex, gender, sexual orientation, religious belief, age or disability.