Head of Information Security

Company Description

Link Group connects millions of people with their assets including equities, pension and superannuation, investments, property and other financial assets. We do this by partnering with thousands of financial market participants to deliver services, solutions and technology platforms that enhance the user experience and make scaled administration simple. We help manage regulatory complexity, improve data management and provide tools to help people connect to their assets, leveraging analysis, insight and technology. Our core businesses are complemented by our expertise in digital solutions and data analytics, and enable us to provide a complete service to our global network of clients and partners. (Link Asset Services is a member of Link Group.)

Our dedicated Technology & Operations division manages day–to–day operations, data processing and information analysis, utilising innovative technology to provide our clients with end to end solutions as well as a range of value–added services. Our continued investment in our proprietary technology platforms allows us to automate wealth management workflows, manage large consumer and member bases or provide insights through predictive analytics. By focussing on product and service innovation, our Technology & Operations division has evolved to become an innovative provider of solutions, identifying and anticipating the needs of clients across Link Group.

Overview

Strengthen Link Group's Information Security defence and response capabilities paying close attention to business unit, client and supply chain specific requirements.

Secure enterprise information by determining and defining security strategy and requirements; planning, implementing, and testing security systems; preparing security standards, policies, and procedures and mentoring team members.

Evaluate, architect, implement, and support security tools and services for Link Group's rapidly emerging Cloud based hosting model and help execute the global Information Security strategy.

Key Accountabilities & Responsibilities

Maintain enterprise–wide security architecture and recommend specific controls to support financial services business operations, application development, data centre operations, and Cloud solutions.

Lead the development and implementation of ISMS security policies, procedures, control standards and operational practices.

Define and lead Information security programs for the implementation of security services and safeguards, that support a hybrid Cloud based and On–Premise online service strategy.

Lead a global Information Security team to develop and maintain effective and efficient security solutions and controls within a heterogeneous (Cloud/On Premise) technology environment.

Partner with IT teams and operational personnel across all Link Group business units and the wider global Link Group teams to understand business and technical security requirements, develop supporting security principles and objectives and implement appropriate changes to processes and technology to support effective business growth.

Develop metrics that clearly demonstrate current Information Security risk posture, key initiatives, millstones and indicators of progress, and business alignment for all Information Security related activities.

Lead the on–going operational (first line) security assessment and measurement of information security risk objectively and consistently.

Analyse emerging security threats and existing controls to identify and remediate gaps in current defensive posture. Identify appropriate technology/data sources and drive the collection of data necessary to effectively evaluate threats.

Supervise the design and implementation of technical security solutions to ensure that the security and resilience of systems and assets remains consistent with related policies, procedures, and agreements.

Work in active partnership with IT development, DecOps and infrastructure teams to provide leadership and security design guidance.

Ensure that Link Group is aware of and complies with all relevant regulation within the various jurisdictions it operates in.

Supports the CISO in the development and implementation of the Information Security Strategy in line with Link Group's risk appetite.

Act as a liaison to Risk, Compliance and Internal Audit departments and work in conjunction with technical counterparts to remediate security related audit findings. Where required respond to regulatory audit requests regarding information security services, mechanisms and safeguards.

Communicate threat and vulnerability observations clearly to leaders and subject matter experts.

Help develop communications and actively promote related campaigns for information security awareness across Link Group.

Maintain current awareness of organization, business practice, technology, security issues and legislation that may have an impact upon the company's Information Security policy.Ability to evaluate security requirements within the context of a fas...