Tech support

We are looking for a Risk Officer Security Monitoring to strengthen security monitoring within a large financial-services environment.

This role sits at the intersection of cybersecurity, risk management and technology delivery. You will coordinate the full process of identifying security logs, assessing monitoring gaps, managing risks and deviations, and onboarding relevant logging into the organisation’s security monitoring platform.

You will not be configuring SIEM technology as a hands-on engineer or monitoring alerts as a SOC analyst. Your responsibility is to bring the right teams together, maintain governance and ensure that identified security risks are translated into concrete action.

Responsibilities

You will act as the primary liaison between Security Monitoring, Cyber Defence, application teams, Product Owners, architects and risk functions.

Your responsibilities include:

Coordinating the identification and validation of security-relevant events, including authentication, authorisation and audit logs
Facilitating the onboarding of security logs into SIEM and monitoring platforms
Ensuring application teams understand and apply security logging requirements
Embedding monitoring requirements into application lifecycle processes
Identifying gaps in logging and monitoring coverage
Registering and managing risks, issues, deviations and waivers
Assessing the business and security impact of missing monitoring coverage
Defining and tracking remediation actions and compensating controls
Resolving organisational and technical blockers during log onboarding
Preparing governance updates and management reports
Maintaining dashboards covering onboarding progress, monitoring coverage, risks and compliance with logging standards
Supporting audits, regulatory reviews and control-assurance activities

Requirements

We are looking for experience with: IT and information security risk management Security monitoring, logging and SOC processes Risk assessments and control management Issue, waiver and deviation management Coordinating remediation across multiple technology teams Working with application owners, Product Owners, architects and security specialists Reporting on risks, progress, dependencies and monitoring coverage

Perks

You are structured, persistent and comfortable operating in a complex regulated organisation. You can challenge application teams when monitoring requirements are not met, while maintaining the cooperation needed to solve the underlying problem.

You understand enough of security monitoring to ask the right technical questions, but you can also translate those findings into risks, decisions, remediation plans and clear management reporting.

This position is particularly suitable for an IT Risk Officer, Information Security Officer, Security Governance Specialist or Cyber Risk Consultant with experience in security monitoring and log-onboarding programmes.