ERT Finding Management, AS

The Information Security Analyst within the TDI CSO Embedded Risk Team (ERT) is responsible for driving Information Security Risk within the bank's defined risk tolerance while supporting the overall security strategy. This role presents a unique opportunity to have responsibility for global deliverables across the Risk and Control framework for 1LoD Business, ensuring effective governance, oversight, and performing the DCO role as per Finding Management Procedure for all important internal CSO findings.

Your key responsibilities:

• Execute independent reviews of Finding Life Cycle Events (LCEs), including Finding Closures, Risk Acceptances, Target Date Extensions, and Self-Identified Issues for all internally important CSO findings
• Provide constructive challenge and independent review to ensure the quality, completeness, and appropriateness of proposed actions, while facilitating the resolution of disagreements, scope-related issues, and evidence gaps.
• Ensure robust governance and proactive oversight across the CSO finding portfolio, with the objective of preventing findings from becoming overdue.
• Coordinate effectively with Finding Owners, Control owners and other key stakeholders to support timely and successful finding remediation
• Prepare, analyze, and present risk reports, portfolio insights, trend analyses, and status updates for senior management, governance forums, and key working groups.
• Maintain clear, timely, and consistent communication with Finding Owners and Control Owners, ensuring relevant guidance, updates, and reporting are published and accessible through the central information hub

Your skills and experience:

• Educated Bachelor's degree level or equivalent qualification / work experience in auditing and enterprise risk management especially Information Security Risk Management (Risk Management for 1-3 years and or available Information Security certificates CISM/CISA)
• Proven experience working on Non-Financial Risk topics in a financial industry, specifically Risk Oversight, Findings/Issue Management, Control Framework
• Understanding of Information Security concepts, controls, and risk management methodologies.
• Experience working on small projects at least within a global environment
• Excellent communication skills both written and verbal
• Robust Microsoft Office skills and advanced Excel
• Fluent in English (written/verbal)
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.