Director, Information Cyber Security - Business Management

About CLS:

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment:

• Pivotal purpose
• Trusted guardian
• Targeted innovation
• Facilitate connections
• Delivering excellence
• Inclusive culture

What you will be doing:

• Direct the establishment, operation, and continuous improvement of formal cybersecurity governance and reporting, including structured decision-making, effective risk management, and strategic alignment across CLS, for example,
  • Establishing and facilitating governance forums to ensure policy adherence and alignment of security initiatives.
  • Comprehensive engagement and reporting for cybersecurity governance, overseeing the effective operation of governance forums.
  • Ensuring consistent, high-quality communication and documentation across all organizational reporting structures.
• Translate complex cyber security concepts, risks, and strategic initiatives into clear, concise, and impactful communications for senior leadership, including boards and C-suite executives.
• Develop and coordinate communications that address regulatory expectations and reporting obligations, ensuring transparency and compliance. This involves creating high-quality presentations, briefings, and reports that not only inform but also persuade and drive action, both internally and externally.
• Oversee the coordination of forum logistics, preparation of agendas and materials, and facilitation of discussions, managing and validating the documenting of discussions and decisions for future reference as part of ongoing engagements between CISO and the wider business.
• Provide cyber security advisory to business units, including, supporting strategic engagement across CLS, for example,
  • Managing cyber security-related enquiries and requests from business units.
  • Communicating security risk within a wider business context.
• Drive effective communication between the IT Security function and business stakeholders. For example, informing business units of relevant security requirements, changes to requirements (e.g., updated Policy), and relevant activity in Security.
• Foster cross-functional cyber security collaboration between the IT Security function and business units/stakeholders, for example,
  • Informing business units of relevant security requirements, changes to requirements (e.g., updated Policy), and relevant activity in Security.
  • Facilitating communication between business units and wider Security during BAU security management and non-BAU events (e.g., projects, incident management).

What we’re looking for:

A security professional who can:

• Excel at bridging the gap between technical cyber security operations, executive strategic oversight, and critical regulatory demands. Leading on articulating our cyber security vision, challenges, and successes to the most senior internal stakeholders, ensuring they have the necessary information to govern effectively.
• Provide expert contribution to the strategic alignment and effectiveness of the Business Management function within CLS's IT Security Function, ensuring its contribution to overall security strategy.
• Cultivate strategic influence and foster strong relationships with key stakeholders across CLS. For example, engaging with executive leadership, board members, and various governance forums to ensure effective communication of security posture, risks, and strategic initiatives, and to secure buy-in for governance enhancements.

Professional qualifications / certifications

• Experience in business management, operations, or programme management (12 – 15 years), including ~ 8- 10 years in a leadership or management role within a cyber security or technology function.
• Experience in:
  • Applying regulatory requirements and industry standards to complex technical solutions and architectural designs within highly regulated environments.
  • Presenting complex technical findings and recommendations to senior management, influencing strategic decision-making.
  • Providing expert technical input to governance forums or committees, shaping policies and standards.
• Understand, interpret and apply regulatory requirements, compliance and industry standards as pertains to Business Management for Cybersecurity.

Our commitment to employees:

At CLS, we celebrate inclusion and consider this to be one of our strongest assets. We are committed to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including:

• Holiday - UK/Asia: 25 holiday days and 3 ‘life days’ (in addition to bank holidays). US: 23 holiday days.
• 2 paid volunteer days so that you can actively support causes within your community that are important to you.
• Generous parental leave policies to ensure you can enjoy valuable time with your family.
• Parental transition coaching programmes and support services.
• Wellbeing and mental health support resources to ensure you are looking after yourself, and able to support others.
• Employee Networks (including our Women’s Forum, Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about inclusivity.
• Hybrid working to promote a healthy work/life balance, enabling employees to work collaboratively in the office when needed and work from home when they don’t.
• Active support of flexible working for all employees where possible.
• Monthly ‘Heads Down Days’ with no meetings across the whole company.
• Generous non-contributory pension provision for UK/Asia employees, and 401K match from CLS for US employees.
• Private medical insurance and dental coverage.
• Social events that give you opportunities to meet new people and broaden your network across the organisation.
• Annual flu vaccinations.
• Discounts and savings and cashback across a wide range of categories including health and retail for UK employees.
• Discounted Gym membership – Complete Body Gym Discount/Sweat equity program for US employees.
• All employees have access to Discover – our comprehensive learning platform with 1000+ courses from LinkedIn Learning.
• Access to frequent development sessions on a number of topics to help you be successful and develop your career at CLS.