Information Security Manager Full Time

Cynergy Bank Limited
Application Deadline: Friday 28th June 2024

Hybrid Working Pattern – 3 days in Office & 2 WFH

About us

Cynergy Bank is the UK’s human digital bank serving the needs of ‘scale up’ or medium sized and fast-growing SMEs; professionals; high net worth and mass affluent individuals, in essence those market segments that still value human service enabled by great technology.

We recognise that professional and personal lives often overlap and our mission is to help empower our customers to achieve their ambitions by serving all their interdependent banking needs. We provide a comprehensive range of digitally enabled products and services to meet the property finance, business and commercial banking, private banking and personal savings needs of our customers.

Our human and digital model transforms banking for customers who still value a face-to-face relationship that is enabled by the latest digital technology.

We partner with firms such as Google Cloud, Cigniti and Slalom as we continue to innovate in the human digital space.

Cynergy Bank Limited is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Eligible deposits with Cynergy Bank Limited are protected by the UK Financial Services Compensation Scheme .

For more information on Cynergy Bank visit

Company Benefits

• Competitive Salary and Company Bonus
• 210 hours (30 days) holiday plus bank holidays
• Option to purchase an additional 10 days holiday
• Pension contribution and Life Assurance
• Income Protection Scheme and Season Ticket Loan
• Private Medical Insurance and Health Check (After Probation)
• Electric Car Scheme and Money Coach (After Probation)

The role

We are seeking a highly skilled and experienced Information Security Manager to lead and enhance our organisation’s information security program. The successful candidate will play a pivotal role in ensuring the confidentiality, integrity, and availability of our information assets. The Information Security Manager will be responsible for developing and implementing robust security policies, procedures, and controls while fostering a culture of security awareness across the organization.

Responsibilities:

• Information Security Strategy: Assist the Director of Information Security in implementing the information security strategy aligned with organisational goals and industry best practices. Continuously assess the threat landscape and adapt security measures to mitigate emerging risks.
• Policy and Compliance: Establish and enforce information security policies, standards, and procedures. Ensure compliance with relevant regulatory requirements and industry standards.
• Controls Testing: Conduct regular review and assessments of cybersecurity controls and processes. Implement lessons learnt to ensure continued improvement, and stay abreast of emerging threat vulnerabilities and best practices in cybersecurity.
• Risk Management: Conduct risk assessments to identify and prioritize potential security risks. Develop and implement risk mitigation strategies and monitor risk levels over time.
• Security Awareness and Training: Review and help to enhance information security awareness programs for all staff members. Provide ongoing training to employees on security best practices and emerging threats.
• Incident Response and Management: Work with the Cyber Incident Response Manager to develop and maintain an incident response plan, coordinating response efforts in the event of a security incident. Where necessary, assist with conducting post-incident analysis and implement corrective actions to prevent future occurrences.
• Security Architecture and Technology: Collaborate with IT teams to design, implement, and maintain a secure technology infrastructure. Evaluate, support and advise on appropriate security tools and technologies to enhance the organisation’s security posture.
• Vendor and Third-Party Security: Assess and manage the security risks associated with third-party vendors and partners. Ensure that contractual agreements include appropriate security requirements.

Essential Knowledge & Experience

Technical skills

• Proven experience as an Information Security Manager or in a similar role.
• In-depth knowledge of information security principles, practices, and technologies.
• Strong understanding of relevant regulations and compliance standards (e.g., GDPR, Data Protection Act 2018, HIPAA, ISO 27001).

Relevant and/or preferred qualifications (please specify required or preferred)

• Bachelor’s degree in information security, Cybersecurity, or a related field – Preferred
• Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO27001 Lead Auditor or equivalent – Preferred

Soft skills

• Strong problem-solving and decision-making skills, with flexibility to think creatively and adapt to a rapidly changing environment.
• Excellent communication, leadership and interpersonal skills.
• Ability to work well under pressure and handle critical situations calmly.