TPSR Consultant

Job Description

The Cybersecurity TPSR Consultant Specialist job is responsible for operating as part of a global/local team within the Cybersecurity organisation, to analyse and execute activities around Cybersecurity process, controls, standards and regulatory requirements.

The role will carry out some or all of the following activities:

• Ensure adherence to the three lines of defence organisational model with clear lines of responsibility, accountability and segregation of duties.
• Ensure compliance with internal audit and external regulators that any organisational changes are fit for purpose and meet their expectations
• Analyse and execute activities to ensure compliance with Cybersecurity policies and standards.
• Contribute to process, procedures and tool identification/development that will strength the bank’s response to threats and incidents
• Assess new technology products and projects utilising security technologies pertinent to the department
• Act as a role model to more junior members of the team
• Engagement with other Cybersecurity teams, senior management and members of the Business when confronted with potential security issues
• Expand their skills, knowledge and experience to enhance the overall capability of the function

The Job holder will be a member of the Global Third Party Security Review (TPSR) Service team within Cybersecurity and forms part of the 1LOD (1st line of defence). TPSR is a regulated activity.

The team is tasked with point in time third parties information security assessments to enable businesses departments to manage their relationship/service within their risk appetite and minimize the operational risk impacts, its shareholders, customers, employees, reputation and brand.

Job holder is responsible to enable businesses and functions to manage their information security risks and to ensure risk and controls are assessed accurately, objectively and independently through professional and specialized subject matter experts.

Depending on the work assigned this may include:

• Managing Engagements, Business Impact Assessments, Guidance requests, Quality Assurance
• Conducting Local and Global TPSRs (reviews, reports, identify deficiencies, quality assurance)
• Engaging with the Global TPSR team to support TPSR work.
• Articulate and explain information security assessment results to business.
• Closure of identified deficiencies (verifying evidence to confirm closure or advise what is needed to close them)
• Support the enhanced level of due diligence i.e., Controls Effectiveness Testing (CET) process for very high-risk third parties.
• Support the execution of alternate Third Party Control Assessment processes outside of standard procurement workflows, such as the Network Management and Market Intelligence (N2MI) processes in MSS for non-procured financial services
• Support consultancy ‘white glove’ service for GB/GFs’ most material, strategically important, and highly complex engagements, with consultants bringing their well-rounded cyber expertise and stakeholder management skills to lead engagements throughout their entire lifecycle, from pre-selection to off-boarding.

͏

Additional Responsibilities:

• Ensuring adherence to global standard methodology, SLA’s, quality, templates and tools
• Ensuring good stakeholder engagement
• Supporting overall activities of Global TPS, including admin and any special initiatives / projects
• MI / Reporting (actual generation of reports or contribution to appropriate reports)
• Mentoring / Coaching / Guidance for other team members / Deputizing for manager
• Remain current with industry and competitor trends and work to apply latest / best practices internally
• Owning and driving special projects aligned to industry best practices
• Overseeing larger and more complex engagement requests and / or reviews
• Subject Matter Expert in own domain with, broad basic knowledge of other domains ensuring appropriate delivery of services along with aligning with the wider strategy and objectives of the bank overall