Regional Cyber Security Advisor, Vice President

Who We Are Looking For

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor embedded in the region, partnering closely with business, technology, risk, and compliance teams to ensure cyber security priorities are shaped around regional business needs, regulatory obligations, and client commitments, while still drawing on strong technical expertise to identify practical security improvements and drive change that strengthens cyber resilience.

The successful candidate will bring strong business acumen and stakeholder judgement, underpinned by solid technical credibility across offensive security, cyber risk, and security solution architecture. You will be comfortable engaging regional business and legal entity leaders on their priorities, reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders.

The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities.

This is a vital role in ensuring the region's businesses and legal entities are supported with cyber requirements and implementation guidance that reflect local regulatory expectations, client needs, and operational priorities, helping the bank remain secure in a rapidly evolving threat landscape.

• Act as the regional point of orchestration for cross-functional cyber activities, ensuring business, technology, risk, and legal entity priorities are understood, owned, prioritised, and progressed through to measurable outcomes.
• Provide senior cyber advisory and constructive challenge and support to business and technology teams, ensuring cyber security decisions support regional business objectives and legal entity requirements.
• Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking for the region.
• Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership.
• Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner.
• Review complex cyber issues and support solution design, including findings from, vulnerability management, security architecture, and secure processes.
• Translate security insights into practical, risk-based remediation plans that reduce risk exposure for the organization.
• Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability.

• Strong business acumen with the ability to understand regional business, regulatory, and client priorities, and to shape cyber security advice accordingly.
• Strong influencing and change leadership skills, with the confidence to challenge constructively and bring business and technical teams together around executable solutions.
• Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment.
• Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language.
• We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders.
• Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders.
• Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation.
• Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls.
• Sound judgement, ownership mindset,…