Director - Cyber Risk Supervision, Supervision; Cyber Risk) Department

The Bermuda Monetary Authority (Authority or BMA) is seeking the services of a skilled and capable individual to work as a Director
- Cyber Risk Supervision in our Supervision (Cyber Risk) Department. Reporting to the Deputy Managing Director
- Head of Actuarial and Cyber Risk Supervision, the Director
- Cyber Risk Supervision will be responsible for overseeing all aspects of cyber risk supervision for BMA regulated entities, ensuring compliance with statutory requirements, and driving the Authority’s forward‑looking regulatory philosophy in the cyber domain. Serves as a member of the Executive Team and leads the Cyber Risk Supervision Department.

• Developing, implementing and communicating the vision, strategy, and operational plans for the Cyber Risk Supervision Department
• Working with other members of senior management in helping shape the Authorities corporate strategies and ensuring that his reporting department operates cooperatively and constructively, leveraging key partnerships and removing barriers to achieve them
• Monitoring licensed entities’ compliance with the BMA Cyber Codes and ongoing supervision of entities in accordance with NIST, ISO, COBIT or any other framework (or combinations of frameworks) chosen by the BMA
• Providing guidance on emerging industry and international best practices
• Identifying gaps in legislative or regulatory structures and recommends updates to ensure that these operational cyber risk frameworks are aligned with international standards and appropriate for the operational cyber risks
• Protecting the reputation of the jurisdiction and safe guard depositors, investors and policyholders
• Conducting meetings and on‑site reviews of regulated entities
• Overseeing the preparation of operational cyber risk assessments, evaluations/on‑site reports, and recommendations for security controls improvements
• Educating licensed entities on regulatory requirements and updates
• Liaising with government, financial service sector, and agencies to balance business and regulatory objectives
• Consulting with industry and provides updates on legislative amendments
• Representing the Authority at various local and international meetings, conferences, seminars involving meetings and information exchanges and manages, develops and maintains key relationships with other regulatory bodies, government agencies, and the financial services industry whilst keeping abreast of industry trends
• Collaborating with IT, Fin Tech and Management Services on organisational cyber risk and innovation matters
• Leading and assists in the development and implementation of new or revised policies
• Building and managing a team of cyber risk specialists, analysts and support staff
• Fostering a collaborative, flexible, and high‑performance team environment
• Mentoring and developing staff, promoting career progression and specialist retention

• A master's degree or equivalent qualifications in a relevant discipline such as Information Security, Cyber Risk, or related field from a recognised institution or professional body
• A minimum of fifteen (15) years relevant experience of which at least five (5) years should be at the senior level in the financial services business, and/or experience within a financial regulatory body supervising and leading people
• Extensive experience in cyber risk supervision, regulatory compliance, and team leadership
• Working experience or knowledge of the BMA Financial Services Sectorial Acts and associated frameworks
• Deep knowledge of international cyber risk frameworks and regulatory standards
• Proven ability to manage complex projects and drive organisational change
• Strong communication, stakeholder management, and analytical skills

Bermuda Monetary Authority is an Equal Opportunity Employer

BMA House | 43 Victoria Street, Hamilton HM 12 | careers |

Professionalism, Integrity, Accountability, Adaptability, Collaboration

Applications for this position must be received no later than 23 October 2026.