Head of Information Security , Chetwood
Digitally native financial services
Job no longer available
Digitally native financial services
201-500 employees
Job no longer available
201-500 employees
Company mission
To challenge every aspect of how financial services firms operate today.
Role
Who you are
- Experience & Qualifications
- Degree/Advanced degree and/or the equivalent combination of experience
- Ideally hold (or be working toward) a CISM, CISSP or CRISC qualification
- Demonstrable IT & Security expertise in both strategic, operational and hands-on roles with responsibility for the full scope of Security activities, gained within the Financial Services sector
- A proven track record of successfully implementing high profile Security initiatives, projects, etc
- Experience in leading and advising on strategy to senior executives
- Minimum 10 years relevant experience
- Business
- Understanding of the Financial Services sector with specific focus on Retail Banking (deposits/lending)
- Strong capability in strategic thinking, developing solutions and effective planning
- Understanding of compliance/regulatory requirements in the financial services sector
- Commercial and financial acumen
- Ability to operate effectively as a member of committees
- Understanding of risk appetite and risk management frameworks in relation to Banking
- Leads by example with a clarity of vision and ability to communicate with conviction, courageous in decision making and a role model for Bank’s values-team leader and team member
- Ability to develop strong working relationships with senior management colleagues and direct reports
- Ability to communicate effectively both orally and in writing with all levels of management, regulators, and the Bank’s committees
- Works in partnership to achieve goals
- Demonstrating excellence, frankness, openness, and transparency
- Inspire respect, trust, and commitment to business objectives with well-developed leadership and people management skills
- Demonstrates sound business/professional judgement through strength of character, independence of thought, risk awareness and good values and behaviours
- Works well under pressure and can prioritise and manage multiple and complex projects simultaneously
- High levels of drive, energy, and personal commitment to success
- Strong influencing skills with the ability to package and present ideas and gain agreement at a senior executive level
- Developing people to support them to be the best that they can be
- Coaching of direct reports to enable them to meet their potential
What the job involves
- As the Head of Information Security you will be responsible for control and supervision of all activities relating to the Bank’s Information Security and Data
- This includes overseeing a range of technical and process security controls and leading a programme of continuous improvement in response to changing security threats and risk, whilst working in collaboration with colleagues across the company
- Governance & Reporting
- Responsible for Information and Cyber Security strategy, Roadmaps and project/initiatives to improve Chetwood's IT Estate security posture
- Report progress within Chetwood Governance forums
- Security supplier selection aligned to tech strategy
- Identify opportunities for new and existing investments to drive both cyber and business value
- Policy
- Maintain and embed an Information Security Policy and management framework across the company that addresses the needs of the company, its staff, and other key stakeholders in line with relevant legislation and industry standards
- Oversight of Standards, Procedures and Guidance in support of Chetwood Security Policy compliance
- Security Operations
- Effective operation of Enterprise security services
- Oversight of Security Operations - including Incident Management, Risk Assessments, Threat Detection, Security Assurance and Attack Surface Reduction
- Oversight of Vulnerability Management approach
- Oversight of Cloud Security Posture management (CSPM) approach
- Security Incident management and root cause problem resolution
- Management of Security suppliers and services
- Security controls to protect Chetwood and its customers
- Control Framework & Assessments
- Continuously evolve Chetwood's Security Control Framework in line with industry and regulatory standards
- Producing Regulatory and Industry attestations, such as PSD2/REP018, Cyber Essentials, SWIFT CSP, CQUEST and ISO 27001 ISMS
- Manage Control assessments, gap analysis and control enhancement planning
- Security Engineering
- Become an advocate for the development and adoption of secure architecture patterns, secure software engineering practices such as DevSecOps
- Oversight of Chetwood's Security Champions to proliferate security engineering best practices across the organisation
- Risk Management
- Contribute towards Enterprise technology risks being defined and managed
- 1st line Cyber Risk Management and prioritising remediation based on risk ratings
- Manage 3rd party supplier cyber risk during onboarding and an ongoing basis
- People
- Clear roles and responsibilities defined for everyone in the InfoSec team
- Talent and succession planning
- Learning & Development plans in place to improve capability to required levels
- Build a culture aligned with the company values
Salary benchmarks
Our take
Consumer frustration with traditional banking is rising steadily. Chetwood is one of a crop of digital-led financial services companies looking to take a more customer-centric approach to banking.
Chetwood markets itself as a digitally native bank which creates targeted products that are designed to better serve individual customers' needs. The company was founded by a former HSBC and Bank of America executive, which has helped Chetwood to identify crucially underserved sectors of the banking market. In 2022, Chetwood acquired long-term partner Yobota, which has allowed it to expand its BaaS offerings considerably.
Digital banking is a fast-growing and incredibly competitive market, and Chetwood will have to compete with both legacy banks (which are becoming increasingly digitised) and new disruptors, such as Zopa and Tymit. However, the company has displayed impressive agility and ambition. For example, Chetwood released its challenger credit card Wave in 2022. With its flexible approach to late payments, Wave is likely to attract a considerable user base in the coming years.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (2 rounds)
Aug 2020
$13.2m
GROWTH EQUITY VC
Mar 2018
$66m
GROWTH EQUITY VC
Total funding: $79.2m
Company benefits
- Life insurance
- Pension
- Private medical insurance (incl. dental & vision)
- Free breakfast & drinks
- Monthly social events
Company HQ
Wrexham, UK
Leadership
Andy Mielczarek
(CEO)Previously worked as the Head of Customer Service at HSBC, and was CFO of Marks and Spencer Financial Services. Also worked as First VP of Commercial Finance for Bank of America.
Share this job