Information Security Analyst

Crown Agents Bank is a vastly growing and regulated UK bank that connects emerging and frontier markets to the rest of the world, using FX and payments technology. We are transforming the way payments and FX move through emerging markets, reducing friction so that more money gets to those who need it. Emerging markets payments are usually challenging, expensive, unreliable and opaque.

Our solutions help fix these pain points. Ultimately, we connect traditionally hard-to-reach regions to global financial infrastructure, giving access to the best prices and the fastest, most reliable settlement.

FX and cross-border payments are often complex and expensive, especially when operating in emerging markets. Crown Agents Bank (CAB) wraps its deep and trusted relationships and strength of network around innovative digital capabilities, and cross-border transaction banking solutions to enable fintech, corporates, governments, development organisations and banks to move money to, from, and across often hard-to-reach markets.

Role

Purpose:

The Information Security Analyst is a broad and varied role within the firm's CISO function, offering structured exposure across information security governance, regulatory compliance, security awareness and operational support.

Working closely with members of the CISO team, the role holder will contribute to a wide range of security activities — including security operations, regulatory framework compliance (ISO 27001, DORA, NYDFS), vendor risk management, security awareness programmes and governance reporting. The role provides direct involvement in how the firm manages its security obligations and responds to an evolving regulatory and threat landscape.

The position is designed as a strong foundation for a career in information security, with visibility across the full CISO service catalogue and the opportunity to develop expertise across multiple security disciplines. The role holder will be supported by experienced practitioners across governance, risk, cloud security and security engineering.

Role Responsibilities:

Governance & Reporting

• Administer ISGF and ORC meeting logistics including preparing agendas, collating papers, recording minutes and tracking actions to completion.
• Maintain the CISO organisational RACI, ensuring it is kept current as team structure and responsibilities evolve.
• Compile and distribute the master CISO security reporting pack, collating inputs from all service areas into a consistent, accurate and timely governance view.
• Maintain and update technology roadmap tracking documents, collating status updates and producing progress summaries for review.
• Support preparation of Board, ExCo and governance forum presentations and papers.
• Manage the security policies and standards library, tracking review schedules, chasing approvals and maintaining version control.
• Maintain the ISO 27001 evidence library, coordinating evidence collection cycles and supporting internal and external audit preparation.
• Administer DORA compliance tracking, gathering evidence, maintaining registers and flagging gaps for senior review.
• Support NYDFS Part 500 compliance activities including maintaining evidence packs and tracking annual certification requirements.
• Own Cyber Essentials and SWIFT CSP evidence gathering and submission processes.
• Administer the Risk & Controls Register within Vanta and Risk Connect, keeping control status and evidence current.
• Support Financial Audit and Internal Audit activities through evidence provision, scheduling and action tracking.

Security Awareness

• Administer the annual mandatory security training programme, tracking completion rates, chasing non-completions and producing completion reports.
• Execute phishing simulation campaigns, analysing results, producing reports and coordinating follow-up training for at-risk users.
• Own the security awareness communications calendar, producing and distributing content for firm-wide awareness campaigns.
• Coordinate Executive & Board training logistics, scheduling and record-keeping.
• Coordinate specialist security training activities, managing scheduling, attendance tracking and training records.
• Administe…