Crown Agents Bank
Financial Services
CyberSecurityManager
Neural analysis suggests this role is
optimal for mid candidates.
“Cyber Security Manager at Crown Agents Bank. Skills: Security in Change, Security Assurance, Vulnerability Management, Secure SDLC, Penetration Testing, Risk Assessment, Attack Surface Management. Own and maintain the Secure SDLC framework. Conduct security risk assessments”
Industry & Context.
Conducting risk assessments; Providing formal security sign-off; Running the Bank’s security testing and vulnerability management programme; Managing attack surface visibility; Technical analysis of vulnerability and assessment data to produce actionable prioritisation recommendations, distinguishing between critical risk and noise
What They're Looking For.
Must Have
Demonstrable experience owning or managing a vulnerability management programme, including use of Tenable, Qualys, or equivalent scanning platforms., Experience commissioning, scoping, and managing penetration tests and tracking remediation to closure., understanding of Secure SDLC frameworks (OWASP SAMM, BSIMM, or equivalent) and practical application security knowledge (OWASP Top 10, secure coding, security requirements)., Experience conducting security risk assessments on projects, changes, or third-party integrations., Excellent communication skills — able to engage technical teams, project managers, and senior stakeholders with equal clarity.
Nice to Have
Experience in or with a PRA/FCA dual-regulated financial institution., Working knowledge of ISO 27001, SWIFT CSP, DORA, NYDFS Part 500, or Cyber Essentials., Familiarity with attack surface management tooling or methodology., Hands-on experience with Microsoft Defender for Endpoint, Sentinel, or equivalent security tooling., Innovative mindset with a genuine interest in the evolving threat landscape, including AI-driven threats and offensive tooling developments.
What You'll Do.
Own and maintain the Secure SDLC framework
Conduct security risk assessments
Provide architecture review and formal security sign-off
Define and maintain application security standards
Act as the embedded security adviser to project and engineering teams
Contribute to third-party and vendor risk assessments
Own the vulnerability management programme end-to-end
and manage penetration tests
Own attack surface management
Conduct technical analysis of vulnerability and assessment data
Work collaboratively with Production Services
and infrastructure teams to promote and track remediation
Maintain and continuously improve vulnerability management tooling
and NYDFS Part 500 compliance activities
Contribute to security incident response
Support security awareness activities
How You'll Work.
Team & Collaboration
Acting as the security voice in project delivery; Working collaboratively across the business to drive remediation; Engage technical teams, project managers, and senior stakeholders; Act as the embedded security adviser to project and engineering teams; Work collaboratively with Production Services, engineering, and infrastructure teams
Communication Scope
Clear and persuasive enough to land risk decisions with senior stakeholders; Able to engage technical teams, project managers, and senior stakeholders with equal clarity
Process & Methodology
Own security throughout the project and change lifecycle, Manage penetration tests, Track findings through to remediation closure, Manage attack surface visibility, Own the reporting and assurance of remediation progress
Full Job Description
Crown Agents Bank is a vastly growing and regulated UK bank that connects emerging and frontier markets to the rest of the world, using FX and payments technology. We are transforming the way payments and FX move through emerging markets, reducing friction so that more money gets to those who need it. Emerging markets payments are usually challenging, expensive, unreliable and opaque. Our solutions help fix these pain points. Ultimately, we connect traditionally hard-to-reach regions to global financial infrastructure, giving access to the best prices and the fastest, most reliable settlement. FX and cross-border payments are often complex and expensive, especially when operating in emerging markets. Crown Agents Bank (CAB) wraps its deep and trusted relationships and strength of network around innovative digital capabilities, and cross-border transaction banking solutions to enable fintech, corporates, governments, development organisations and banks to move money to, from, and across often hard-to-reach markets. Role Purpose This is a specialist dual-focus role at the intersection of secure delivery and security assurance. You will own two primary programmes of work for Crown Agents Bank: • Security in Change: Acting as the security voice in project delivery — conducting risk assessments, reviewing architecture, maintaining the Secure SDLC framework, and providing formal security sign-off on material changes. • Security Assurance: Running the Bank’s security testing and vulnerability management programme — commissioning and managing penetration tests, owning vulnerability reporting and trend analysis, managing attack surface visibility, and working collaboratively across the business to drive remediation. You will be technically credible enough to challenge architects and developers, and clear and persuasive enough to land risk decisions with senior stakeholders. As part of a small, high-trust CISO team, you will also flex across the wider service catalogue beyond
Applying for this Cyber Security Manager role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on SmartRecruiters
- SmartRecruiters often includes a video screening step — check camera and mic permissions.
- Link your GitHub or portfolio directly in the profile section for technical roles.
- Applications may be reviewed by AI scoring before reaching a recruiter — use keywords from the job description.
ANONYMOUS · UNFILTERED
What do employees actually say about Crown Agents Bank?
Real rants from real employees. Read before you apply.