Lutine Bell

About the Company

Defining Leadership, Embracing Diversity.

Lutine Bell is a leading Risk and Regulatory search practice. We work with Investment, Life & Pensions, General Insurance and Banking institutions globally to secure the best senior management and future leadership, developing long term relationships built on reliable career advice.

We exclusively promote senior professionals across three leadership divisions.

- Executive Search
- Professional
- Interim Management

Founded in 2010 we are located in Sussex, London and Frankfurt to best accommodate client’s needs and requirements across UK and European financial services.

Our team encompasses a balance of new ideas and established experience, deployed through our Research, Consulting and Partnership teams.

This makes us agile, creative and culturally on point across changing vocations and sectors.

Listed Jobs

Company Name

Lutine Bell

Job Title

Information & Cyber Security Executive (GRC)

Job Description

**Job Title** Information & Cyber Security Executive (GRC) **Role Summary** Responsible for ensuring regulatory and legal compliance while managing technology and information security risks across the organisation. Partners with business units to enhance operational resilience, evaluate third‑party technology providers, and support incident response and investigations. **Expectations** - Proven experience in financial services risk management. - Ability to assess, monitor, and remediate security controls against ISO/IEC 27002:2022 and NIST frameworks. - Strong analytical and communication skills to translate technical findings for diverse stakeholders. **Key Responsibilities** - Conduct security assessments of control effectiveness per ISO/IEC 27002:2022 and identify remediation actions. - Evaluate compliance with information security policies and standards. - Monitor and measure security control performance per organisational policy and risk assessments. - Perform basic risk and vulnerability assessments for information systems. - Contribute to enterprise‑wide vulnerability assessments. - Investigate suspected security incidents and support response activities. - Assess third‑party technology providers for security risk. - Record findings and remediation progress in risk decision platforms. **Required Skills** - Deep knowledge of cyber/information security frameworks (NIST, ISO/IEC 27002:2022). - Experience with risk management and technology risk assessment. - Strong written and verbal communication; ability to simplify technical concepts. - Proficiency in security assessment tools and risk documentation. - Analytical mindset with attention to detail. **Required Education & Certifications** - Bachelor’s degree in Computer Science, Information Security, Risk Management, or related field. - Relevant certifications preferred (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer).

England, United kingdom

On site

23-09-2025