Job Description
Since our launch in 2015, we’ve lent over £10bn to ambitious entrepreneurs up and down the UK. That’s led to the creation of over 40,000 new jobs and over 29,000 new homes – and we’re not about to stop there. We’re dedicated to helping trailblazing businesses thrive and our strong Cyber Security capabilities help us build trust and secure our digital assets and customer data.
This is a fantastic opportunity to join a fast-paced, growing bank with a reputation for doing things differently. We don’t want another cog in the machine, we’re looking for self-starters and bold thinkers who want to pave their own career.
In a nutshell this exciting and high-performing role, will play a pivotal part in ensuring OakNorth’s adherence to security related regulatory requirements aligned to global standards and frameworks, and continually improve our security posture aligned to leading industry practices.
Job Responsibilities
- Implement, and manage a comprehensive IT compliance program that aligns with ISO 27001 requirements, support during internal and external audits as required.
- Manage the PCI DSS requirements and work closely with Engineering stakeholders and external auditors to provide necessary assurance, and continually evaluate controls based on changes to the architecture/business requirements.
- Support 2nd and 3rd line compliance initiatives related to security.
- Manage policy lifecycle for compliance programmed and organizational governance.
- Continually enhance security reporting capabilities by leveraging tools and automation.
- Support in driving security awareness initiatives across the organization.
- Perform third party due diligence and security risk profiling, evaluate the security practices of third-party vendors, emphasizing ISO 27001, SOC 1, and SOC 2 compliance.
- Wider Governance, Risk and Compliance (GRC) related activities within the OakNorth’s cyber security team.
- A deep understanding of IT security principles, with specific focus of operating in a cloud-native and SaaS heavy environment is essential for this role.
- 5-7 years of experience in cyber security, preferably in the financial services industry.
- Experience developing and leading a cyber security governance programmed aligned to ISO 27001 and NIST Cyber Security Framework.
- Proven knowledge of cyber security policies, standards, and governance controls in cloud-native environments.
- Effective communication with both internal and external stakeholders.
- Strong collaboration within the cyber security team.
About Us
We’re OakNorth Bank and we embolden entrepreneurs to realise their ambitions, understand their markets, and apply data intelligence to everyday decisions to scale successfully at pace.
Banking should be barrier-free. It’s a belief at our very core, inspired by our entrepreneurial spirit, driven by the unmet financial needs of millions, and delivered by our data-driven tools.
And for those who love helping businesses thrive? Our savings accounts help diversify the high street and create new jobs, all while earning savers some of the highest interest on the market.
But we go beyond finance, to empower our people, encourage professional growth and create an environment where everyone can thrive. We strive to create an inclusive and diverse workplace where people can be themselves and succeed.
Our story
OakNorth Bank was built on the foundations of frustrations with old-school banking. In 2005, when our founders tried to get capital for their data analytics company, the computer said ‘no’. Unfortunately, all major banks in the UK were using the same computer – and it was broken.
Why was it so difficult for a profitable business with impressive cashflow, retained clients, and clear commercial success to get a loan?
The industry was backward-looking and too focused on historic financials, rather than future potential.
So, what if there was a bank, founded by entrepreneurs, for entrepreneurs? One that offered a dramatically better borrowing experience for businesses?
No more what ifs, OakNorth Bank exists.
