About the Opportunity

Job Description

Title                 Director - Cyber Effectiveness and Insight

Department     Cyber & Information Security

Location          Kingswood Fields, Surrey

Reports To       Head of Cyber & Information Security (CISO)

Level                8 - Director

We’re proud to have been helping our clients build better financial futures for over 50 years. How have we achieved this? By working together - and supporting each other - all over the world. So, join our team and feel like you’re part of something bigger.

Our clients come from all walks of life and so do we.  We are proud of our inclusive culture and encourage applications from the widest mix of talent, whatever your age, gender, ethnicity, sexual orientation, gender identity, social background and more.

As a flexible employer, we trust our people to perform their role in the way that works best for them, our clients and our business. We are a disability-friendly company and  would  welcome  a  conversation  with  you  if  you  feel  you  might  benefit  from  any  reasonable adjustments to perform to the best of your ability during the recruitment process and beyond.

About your team

GCIS protects Fidelity International by reducing cyber risk, strengthening resilience and enabling trusted digital services. This team provides the evidence, insight and control effectiveness view that helps GCIS and the business understand where cyber risk is changing, where controls are working, and where action or investment is needed most.

About your role

You will lead Cyber Effectiveness and Insights for GCIS, creating a clear, evidence-based view of cyber posture, control effectiveness, maturity and risk across the firm. This is a first-line leadership role with broad accountability for cyber measurement and reporting, security data, control testing, maturity assessment, benchmarking, cyber risk quantification, and executive insight. Your role is to help GCIS and the business make better decisions, faster, showing where risk is reducing, where controls are underperforming, and where priorities or investment need to change. This role is distinct from 2nd line Enterprise Technology Risk: you will not provide independent oversight, set risk appetite, or own formal second-line challenge. Instead, you will provide the first-line evidence, transparency, analysis and insight that support accountable risk ownership, board reporting, regulatory readiness, and better cyber investment decisions. This capability is intended to bring together fragmented measurement, control assurance, governance and risk insight into one coherent function.

About you

You bring deep experience leading cyber risk, control effectiveness, security data, assurance, or equivalent first-line capabilities in a complex regulated environment. You have strong credibility in translating technical control performance into business risk insight, and you are comfortable engaging senior stakeholders, boards and executives with clarity and confidence. You understand how to build trusted evidence, how to challenge constructively without owning second-line oversight, and how to lead teams across data, testing, governance and cyber risk quantification disciplines.

Feel rewarded

For starters, we’ll offer you a comprehensive benefits package. We’ll value your wellbeing and support your development. And we’ll be as flexible as we can about where and when you work – finding a balance that works for all of us. It’s all part of our commitment to making you feel motivated by the work you do and happy to be part of our team. For more about our work, our approach to dynamic working and how you could build your future here, visit careers.fidelityinternational.com.

For more about our work, our approach to dynamic working and how you could build your future here, visit careers.fidelityinternational.com.

As an international financial services organisation, we are in-scope of international regulations in the way that we carry out our work. This position is involved in work that is regulated by the FCA and/or the PRA and their Individual Conduct Rules (COCON) apply to it, along with any other regulation. We provide training on COCON and how it affects our employees. More information about COCON can be found in the Employment Handbook.