Cyber Security Business Partner, PEXA

• You will have experience managing customer cyber assurance activities, supporting external audits (e.g., ISO 27001, Cyber Essentials Plus), and maintaining regulatory compliance, particularly with Financial Conduct Authority (FCA) cyber-related controls. Proficiency in cloud security controls and an ability to translate cyber risk into business context are essential
• You will have a technical background in Cyber/InfoSec and are now passionate about aligning with strategic and operational goals. This role does not manage a team
• 5+ years’ experience in a cyber security, risk, or assurance role, with strong stakeholder-facing exposure
• Demonstrable experience with:
• Customer cyber assurance activities
• External audit preparation, including ISO 27001, Cyber Essentials Plus
• Proficient in cloud security (AWS, Azure, or GCP), including security control implementation and risk assessment
• Working knowledge of NIST, ISO 27001, FCA Handbook (SYSC), and relevant NCSC guidance
• Excellent verbal and written communication skills, with the ability to engage effectively at all business levels

Desirable

• The Information Security Manager / Cyber Security Business Partner (CSBP) plays a vital role in ensuring the alignment of cyber security initiatives with the strategic and operational goals of the organisation
• This role serves as a key interface between business units and the cyber security function, delivering risk-based guidance, promoting a strong security culture, and enabling security innovation
• Cyber Security Partnership & Advisory
• Act as the security point of contact for UK business units, aligning cyber security goals with business priorities
• Provide guidance on secure-by-design principles during project planning, procurement, and solution development
• Build strong relationships across technical and non-technical stakeholders to promote security best practices
• Ensure that the business’ information security posture is continuously improved through proactive security measures, monitoring, and reporting
• Customer Cyber Assurance & Regulatory Compliance
• Lead and manage customer cyber security assurance activities, including due diligence and technical assurance engagements
• Support the development and maintenance of materials that evidence the organisation’s cyber maturity and compliance posture
• Liaise with internal audit and risk functions to ensure cyber and information security controls align with FCA expectations and industry standards
• External Audit & Certification Support
• Lead preparation and support for external audits, including:
• ISO 27001
• Cyber Essentials and Cyber Essentials Plus
• Customer and regulatory assessments
• Collaborate with compliance, risk, and IT teams to ensure audit readiness and implement improvements
• Cloud Security & Technology Risk
• Provide expertise on cloud security controls (e.g. identity and access management, encryption, logging, secure configuration) across AWS and Azure environment
• Ensure secure adoption of cloud-native services in accordance with recognised frameworks (e.g., CIS Benchmarks, NIST, OWASP)
• Risk Management & Governance
• Identify and assess cyber risks within business processes and technology environments
• Support risk mitigation planning, tracking, and reporting in line with enterprise risk frameworks
• Awareness, Culture & Reporting
• Contribute to business-targeted cyber security awareness and education initiatives
• Promote a culture of shared accountability for security and resilience
• Produce and maintain reporting information as required