Cyber Security Risk & Assurance Lead

Location: London (Head Office)

Hours: Monday to Friday, 9:00am-5:30pm

Working Pattern: Hybrid (50/50)

Reports to: CISO

Department: IT & Operations - Cyber Security

About HTB

Hampshire Trust Bank (HTB) is a specialist bank, staffed by experts focused on helping UK businesses realise their ambitions.

We offer niche specialist lending products as an SME bank, targeting underserved segments of the market. Through our dedicated Wholesale Finance, Bridging Finance, Development Finance and Specialist Mortgages teams, we provide the outstanding service, lasting relationships, integrity and expertise our customers need to prosper.

We also provide savings accounts to individuals and businesses. Because we lend to UK SMEs, our savers can be confident that their money is helping to support British businesses and contribute to the wider economy.

Our vision is to be the go-to bank in our chosen markets; delivering positive customer outcomes, rewarding careers and great shareholder value through a high-performing culture grounded in excellence and integrity.

Discover more about life at HTB:

Life at HTB | Careers & Inside Hampshire Trust Bank (HTB)

About the Role

We're looking for a Cyber Security Risk & Assurance Lead to join our Cyber Security team at Hampshire Trust Bank.

This role is responsible for cyber risk management, policy governance, risk assurance activities and third-party cyber risk oversight across the Bank. You'll play a key role in ensuring cyber and information security risks are identified, assessed, reported and appropriately managed, while driving remediation activities through to completion.

Working closely with Technology, Risk, Operational Resilience and Third-Party Risk Management teams, you'll help maintain a strong cyber control environment, support regulatory compliance and provide assurance that security safeguards are operating effectively.

Key Responsibilities

Cyber Security Risk & Governance

• Oversee cyber and information security risks across the organisation
• Ensure risks are assessed, reported and escalated appropriately
• Support reporting to management and governance forums
• Track risk reduction actions through to completion
• Maintain cyber and information security policies and standards

Risk Assurance & Controls

• Own the cyber assurance programme
• Conduct risk and control assessments
• Coordinate audits, security reviews and certification activities
• Validate remediation actions and ensure effective closure of findings
• Support continuous improvement of cyber security controls

Third-Party Cyber Risk Management

• Conduct cyber security due diligence for new and existing vendors
• Assess vendor security controls and supporting evidence
• Work with business owners and risk teams to address control gaps
• Monitor and report on third-party cyber risks

Stakeholder Engagement

• Work closely with Technology, Risk and Operational Resilience teams
• Support awareness of cyber risks and controls across the business
• Translate technical risk information into clear business-focused recommendations
• Build effective relationships with internal and external stakeholders

Who You'll Work With

You'll collaborate closely with:

• CISO and Cyber Security Team
• Enterprise Risk & Operational Risk teams
• Third-Party Risk Management & Operational Resilience teams
• IT Infrastructure, IT Support and Delivery teams
• Business stakeholders and vendor owners
• Third-party vendors and assurance providers

What We're Looking For

Qualifications & Experience

• Experience in cyber risk oversight, policy governance, control assurance and remediation management within a regulated environment
• Experience conducting cyber security assessments and vendor due diligence reviews
• Experience managing assurance reviews, audits and remediation activities
• Experience working with risk management frameworks and security controls
• CISSP, CISM or similar cyber security qualification is desirable but not essential

Skills & Attributes

• Strong understanding of cyber risk and security control effectiveness
• Ability to translate technical findings into business risks and practical actions
• Excellent communication and stakeholder management skills
• Ability to influence and challenge constructively
• Strong organisational skills and attention to detail
• Strong ownership mindset with the ability to drive actions through to completion
• Active interest in cyber security, emerging threats and risk management

We recognise that people may not meet every requirement listed in an advert. If you're excited about this opportunity and believe your skills and experience would enable you to succeed in the role, we'd encourage you to apply.

Benefits

• Competitive salary
• Discretionary annual bonus
• Hybrid working (50/50)
• 25 days annual leave (increasing with service) + Holiday Buy Scheme
• Private Medical Insurance (Bupa)
• Mental health & wellbeing support via Bupa
• Pension scheme - 8% employer contribution (non-contributory)
• Cycle to Work & Green Car Schemes
• Interest-free season ticket loan
• Study support & professional memberships
• Annual volunteering day & Net Zero commitment
• Zurich employee benefits package

If you're passionate about cyber risk, assurance and security governance, and enjoy working across technology, risk and business teams to drive meaningful improvement, we'd love to hear from you.