Total 258 Finance / Banking / Insurance job vacancies in city of edinburgh eh6 5hx

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

Are you passionate about safeguarding sensitive data and ensuring regulatory compliance? We are seeking a dynamic Data Protection Lead to join our Data, Technology & Cyber Risk function and pioneer the Data Protection program across YTL Digital Bank.

Job Description:

The Data Protection Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over data protection. In this role, you will play a pivotal role in shaping the way we handle, govern, and enhance our data assets, and comply with data protection laws and regulations.

Primary Responsibilities:

• Assist with the development, review, update and/or implementation of data protection-related framework, policy, guideline and/or initiative(s) to facilitate effective risk management and governance over data risk and data protection.
• Review and assess the extent of compliance with internal policies, guidelines, data protection laws and regulatory requirements.
• Conduct Privacy Impact Assessments (PIAs) to ensure that Personally Identifiable Information (PII) is appropriately protected, and recommend mitigation actions to address vulnerabilities, if any.
• Advise Business Units and Functional Units to embed data privacy considerations and/or control measures into the design and implementation of new products, services and processes.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of data risks to achieve their business objectives and within the organization’s risk appetite.
• Investigate and report on incidents of data breaches or non-compliance, as required.
• Assist with the development and/or review of incident response procedures to address data breach incidents, including notification to internal stakeholders and relevant authorities, as required.
• Work with Senior Management and stakeholders to ensure that the organization has and maintains appropriate data privacy and confidentiality documentation.
• Work with Senior Management and stakeholders to ensure awareness of best practices relating to data privacy and data security, fostering data risk awareness and security-conscious culture.
• Coordinate with the Cyber Security and Technology teams to ensure alignment between cyber security and data privacy practices.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure data risk exposures.
• Prepare and present data risk reports to Senior Management and relevant committees, highlighting key findings, recommendations, trends and/or non-compliance with applicable data protection regulations.
• Respond to enquiries and audits (i.e. internal, external, regulatory and relevant authorities) pertaining to data protection.
• Provide regulatory compliance support, guidance and advice to Business Units and Functional Units regarding regulatory changes and updates, where relevant and required.
• Stay abreast of emerging technology trends, data protection laws, and regulatory developments to proactively address potential risks, and assist the Senior Management (and/or Board) understand potential concerns or risks that might impact the organization.

Qualifications:

• Bachelor’s degree in law, Information Technology, Data Science or a related field.
• Minimum of 12 years’ experience in any of these disciplines: data protection, information security, risk management or compliance in related areas.
• Professional certification such as CDPSE, CISSP, CISA, CISM or CRISC would be advantageous.
• Sound knowledge in regulatory requirements around technology risk (e.g. BNM’s Risk Management in Technology, Guidelines on Data Management and MIS Framework) and data protection laws (e.g. PDPA).
• Knowledge of data management principles and concepts would be desirable.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.
• Ability to work independently and manage multiple projects.
• Detail-oriented with a strong sense of ethics and integrity.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Annual leave, Birthday leave

Are you ready to take your career to new heights and play a pivotal role in safeguarding our organization's technological landscape? 

We're on the lookout for a dynamic individual to join our team and assist in implementing cutting-edge Technology Risk Management (TRM) initiatives. 

As a member of our esteemed team, you'll embark on an exciting journey where every day brings new challenges and opportunities for growth. 

Here's what you'll be doing: 

• TRM Implementation: Play a key role in implementing the Bank's TRM policies, guidelines, and methodologies, ensuring our technology landscape remains secure and resilient. 
• Risk Oversight: Support senior management in risk oversight and governance through the development and presentation of comprehensive risk profiles, dashboards, and Key Risk Indicators (KRIs). 
• Conduct Risk Assessments: Dive deep into technology risk assessments, identifying deviations from TRM policies and facilitating the review and approval process for risk acceptance. 
• Stay Ahead of the Curve: Keep a pulse on emerging technologies and industry trends, conducting gap analyses to ensure compliance with new regulations and standards. 
• Incident Response: Play an advisory role to our incident response teams that handle IT and cybersecurity incidents with precision and efficiency, while ensuring compliance with regulatory requirements. 
• Coordinate Audits: Facilitate internal and external audit assignments, ensuring alignment with established policies and processes. 
• Risk Aware Culture: Assist in the promotion of a healthy and robust risk awareness culture around the management of technology risks.

Here's what you'll need to succeed: 

• Educational Background: Bachelor's degree in IT, computing, Information Systems, or related domains. 
• Experience: 7+ years in information security, risk management, audit, or compliance in technology areas. 
• Knowledge: Sound understanding of technology risk regulatory requirements and industry standards such as ITIL, SANS, NIST, PCI-DSS and ISO 27001/2. 
• Communication Skills: Strong oral and written communication skills, with the ability to engage senior stakeholders effectively. 
• Analytical Thinking: Clear analytical thought process and a good understanding of emerging technologies and risk management frameworks. 
• Certifications: Professional certifications such as CISSP/CISA/CISM/CRISC would be advantageous. 

If you're ready to make an impact and be part of a dynamic team driving technological excellence, then we want to hear from you! Join us and let's shape the future of technology risk management together. Apply now and let your career soar to new heights! 

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Annual leave, Birthday leave etc

Job Description

• Maintain full set of accounts.
• Involvement in day-to-day accounting operations.
• Prepare month-end closing schedules and reconciliations.
• Oversee daily activities of accounting related issues.
• Plan for project cash flows.
• Provide accounting related analysis and management reports as and when required.
• Conduct tax planning (including SST impact) for new development projects and maintain proper records.
• Participate in preparation of Budgets and Cash Flow Planning.
• Monitor SST submission, status of refund and payment.
• Provide support for internal and external audit, tax reporting and submission of government returns.
• Ensure all financial records are maintained properly.
• Any other duties as may be assigned from time to time by the Superior.

Requirement

• Experience in the Project Accounting and Construction Industry is preferred.
• Able to speak, read and write in English, Mandarin & Bahasa Malaysia (to liaise with English & Mandarin counterpart).
• Degree, Diploma in Accounting or partially qualified in ACCA.
• Minimum 7-10 years of relevant working experience. 
• Excellent in Microsoft Excel and Power Point.
• Accounting software.
• Knowledge in handling SST submission.
• Possess high level of integrity, meticulous and good analytical skills.
• Must be self-motivated and a good team player.

Responsibilities:

• Manage a full set of accounts, including the preparation and filing of all taxes.
• Generate statements of accounts and aging reports.
• Ensure accurate, prompt, and up-to-date system entries.
• Execute day-to-day financial transactions, including verifying, classifying, computing, posting, and recording account data.
• Prepare monthly bank reconciliations.
• Direct collection activities and credit term evaluation.
• Maintain the cash book to ensure funds are accurately recorded.
• Handle all taxation issues.
• Submit COGNOS reports as required by HQ.
• Liaise with bankers for banking-related matters.
• Prepare management reports and liquidity forecasts.
• Experience with BC365 is an added advantage.

Requirements:

• Minimum-8 years of working experience in accounting.
• Compensation based on experience in Finance & accounting management skills.
• Diploma in Accounting or LCCI certification.
• Teamwork attitude. Proficiency in English
• Strong knowledge of accounting software. Experience with MS Office and knowledge of
• NAV is advantageous
• Resilient, energetic, hardworking, and pleasant personality
• Experience in working with international company (with multi-currency and systematic reporting) will be advantageous
• Passionate about accounting and finance.
• Office focation. Shamelin area (KL center)

Benefit:

• Medical Benefits
• 5 working days per week

Responsibilities:

• Manage a full set of accounts, including the preparation and filing of all taxes.
• Generate statements of accounts and aging reports.
• Ensure accurate, prompt, and up-to-date system entries.
• Execute day-to-day financial transactions, including verifying, classifying, computing, posting, and recording account data.
• Prepare monthly bank reconciliations.
• Direct collection activities and credit term evaluation.
• Maintain the cash book to ensure funds are accurately recorded.
• Handle all taxation issues.
• Submit COGNOS reports as required by HQ.
• Liaise with bankers for banking-related matters.
• Prepare management reports and liquidity forecasts.
• Experience with BC365 is an added advantage.

Requirements:

• Minimum-8 years of working experience in accounting.
• Compensation based on experience in Finance & accounting management skills.
• Diploma in Accounting or LCCI certification.
• Teamwork attitude. Proficiency in English
• Strong knowledge of accounting software. Experience with MS Office and knowledge of
• NAV is advantageous
• Resilient, energetic, hardworking, and pleasant personality
• Experience in working with international company (with multi-currency and systematic reporting) will be advantageous
• Passionate about accounting and finance.
• Office focation. Shamelin area (KL center)

Benefit:

• Medical Benefits
• 5 working days per week

Key Responsibilities:

• Assist in developing and executing content strategies for social media platforms.
• Contribute to campaign ideation, from brainstorming to content creation.
• Act as the key point of contact with media agencies for social content planning and execution.

Qualifications:

• A collaborative team player with solid stakeholder management skills.
• Creative and strategic thinker, with a passion for social media trends and content development.
• Strong command of English, both written and spoken; proficiency in Bahasa Malaysia is an added advantage

Perks & Benefits

• Nearby public transport
• Central location
• Smart casual dress code

職位描述

• 維護全套帳戶。
• 參與日常會計業務。
• 準備月末結帳時間表和對帳表。
• 監督會計相關問題的日常活動。
• 規劃專案現金流。
• 根據需要提供會計相關分析和管理報告。
• 為新開發案進行稅務規劃（包括銷售及服務稅影響）並保存適當的記錄。
• 參與預算和現金流量計劃的準備。
• 監控 SST 提交、退款和付款狀態。
• 為內部和外部審計、稅務報告和政府申報表的提交提供支援。
• 確保所有財務記錄均妥善保存。
• 上級不時分配的任何其他職責。

要求

• 有專案會計和建築業經驗者優先。
• 能夠用英語、華語和馬來語進行說、讀和寫（與英語和華語同行聯絡）。
• 會計學位、文憑或 ACCA 部分資格。
• 至少 7-10 年相關工作經驗。
• 擅長 Microsoft Excel 和 PowerPoint。
• 會計軟體。
• 處理 SST 提交的知識。
• 具有高度的誠信、細緻和良好的分析能力。
• 必須有上進心和良好的團隊合作精神。

Key Responsibilities:

• Assist in executing marketing and brand campaigns across various channels.
• Serve as the primary liaison with vendors, ensuring smooth coordination and delivery of materials.

Qualifications:

• A strong team player with excellent stakeholder management skills.
• Creative thinker with the ability to adapt and execute campaigns effectively.
• Strong command of English, both written and spoken; proficiency in Bahasa Malaysia is an added advantage.

Perks & Benefits

• Nearby public transport
• Central location
• Smart casual dress code

Job Responsibilities :

• Plan and conduct IT audits in accordance with the approved annual audit plan.
• Assist to develop audit program and prepare audit work documentation as guided by the Internal Audit’s documentation standard to support audit conclusion and results.
• Prepare and discuss audit findings with relevant departments and develop practical, value added recommendations to address the root cause of the issues identified.
• Monitor and follow-up to ensure agreed improvement plans are timely implemented.
• Involvement in the Company’s J-SOX assessment process and other ad-hoc projects as and when required.

Requirements :

• Degree or relevant professional qualification in Information Technology, Computer Science or Information System Auditing / Security.
• A minimum of 4 years of IT audit / IT security experience.
• Good organisational and analytical skills, and possess strong sense of ownership to complete assigned tasks, audits within the stipulated timeframe.
• Good command of English with good report writing and communication skills.
• A good team player with high level of integrity, initiatives, and good interpersonal skills.

Perks & Benefits

• Nearby public transport
• Flexible working hours
• Casual dress code
• Medical insurance
• Personal leave

About the Team:

Are you eager to elevate your career to new heights? Join us for an exhilarating opportunity to pioneer our groundbreaking digital bank project, where boundless possibilities await!

We're thrilled to extend an invitation for you to join our vibrant team of visionaries, innovators, and trailblazers.

As a Enterprise Solution Architect of our digital bank project, we're not just offering a job; we're presenting an opportunity to be part of something extraordinary.

You'll collaborate closely with some of the sharpest minds in the industry, operating within a supportive and collaborative environment that fosters creativity and exploration.

Your next thrilling adventure awaits with our digital bank project. Join us in shaping the future, today!

About the Role:

• A key member of our Enterprise Architecture, strategy and delivery team responsible to design and implement high-level solutions for complex business problems or requirements.
• Bridges the gap between business objectives and technology solutions by developing architectures that align with the digital bank’s goals and provide a blueprint for successful system implementation.

What You'll Do:

• Collaborate with business analysts, project managers, and stakeholders to understand the business requirements and translate them into technical solutions.
• Design and develop end-to-end solutions that meet the business needs, considering factors such as functionality, performance, scalability, security, and integration.
• Create high-level and detailed technical designs, including system components, modules, interfaces, and data flows.
• Select appropriate technologies, platforms, and frameworks to build the solution, ensuring compatibility with existing systems and infrastructure.
• Collaborate with development teams during the implementation phase to provide technical guidance and ensure adherence to the architectural design.
• Identify and mitigate technical risks and issues throughout the development lifecycle.
• Conduct regular reviews and evaluations of the solution's architecture to ensure it aligns with industry best practices and standards.
• Assist in the evaluation and selection of third-party vendors or components that may be required to support the solution.

What We're Seeking:

• Familiarity with various architectural frameworks and methodologies, such as TOGAF, Zachman, SABSA, and Agile architecture
• Strong knowledge and understanding of enterprise-level software development and architecture principles.
• Proficiency in a variety of technologies, platforms, and programming languages relevant to the organization's technology stack.
• Experience with system integration, application design, and software development life cycle (SDLC) methodologies.
• Knowledge of cloud computing platforms, such as AWS, Azure, Alibaba or Huawei, and their associated services.
• Ability to analyze business requirements and translate them into technical solutions and system architectures. 
• Proficient in creating architectural diagrams, documentation, and technical specifications.
• Understanding of non-functional requirements, such as performance, scalability, security, and compliance.
• Experience in designing scalable, reliable, and secure software systems that align with organizational goals and industry best practices.
• Strong analytical and problem-solving abilities to identify and resolve complex technical issues and architectural challenges.
• Ability to evaluate trade-offs and make decisions considering factors such as cost, risk, performance, and business impact.
• Experience in conducting technical feasibility studies and proof-of-concepts to validate architectural designs and technology selections.

What We Value:

• Open-mindedness and constructive communication, fostering an environment of mutual support and growth.
• Responsibility and ownership, with a strong sense of accountability.
• Commitment to teamwork and achieving shared goals.
• Customer focus and dedication to delivering results.
• A proactive approach to leading change and innovation.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Casual dress code
• Open culture

About the Team:

Are you eager to elevate your career to new heights? Join us for an exhilarating opportunity to pioneer our groundbreaking digital bank project, where boundless possibilities await!

We're thrilled to extend an invitation for you to join our vibrant team of visionaries, innovators, and trailblazers.

As a Cyber Threat Analyst of our digital bank project, we're not just offering a job; we're presenting an opportunity to be part of something extraordinary.

You'll collaborate closely with some of the sharpest minds in the industry, operating within a supportive and collaborative environment that fosters creativity and exploration.

Your next thrilling adventure awaits with our digital bank project. Join us in shaping the future, today!

About the Role:

• A team player, responsible for monitoring, detecting and responding to potential threats against the Bank’s data and infrastructure.
• In a team for Threat Management and Intelligence and Security Incident Management.
• In managing cyber threat and defence roles.

What You'll Do:

• Develop and execute strategies to identify, assess, and mitigate cyber threats and vulnerabilities. Stay updated on the latest cyber threats, attack vectors, and security trends to proactively protect the organization's systems and data
• Work closely with the Head of Cyber Security to develop the roadmap and plans for cyber threat to drive continuous improvement in maturity and capability, as well as implementation of new technology enhancements and define measurable operations and efficacy metrics.
• Collect and analyze threat intelligence from various sources to identify potential cyber threats and risks. Monitor security systems, logs, and alerts for suspicious activities and respond to security incidents in a timely manner
• Lead incident response efforts during cyber security incidents. Coordinate with internal teams and external stakeholders to contain, investigate, and remediate security incidents. Develop and maintain incident response plans and playbooks
• Conduct regular security risk assessments and penetration tests to identify vulnerabilities in the organization's infrastructure, applications, and systems. Provide recommendations for risk mitigation and work with relevant teams to address identified weaknesses
• Collaborate with cross-functional teams, such as IT, legal, compliance, and risk management, to ensure a coordinated and effective response to cyber threats. Communicate and report on cyber threat landscape, incident response activities, and security posture to senior management and stakeholders
• Provide strong technical guidance on tactical and operational threat hunting and intelligence operations
• Establish, maintain and lead for improvement of SOPs for the teams but not limited to Cyber Incident Response Procedure, Threat Hunting and Intelligence Procedure, SOC Procedure and Digital Forensic Procedure
• Work closely with the Security Architecture & Engineering team for implementation of security tools and controls
• Train the team and new hires, manage staffing levels and performance, and create the development plan to improve technical skillset as it matures.

What We're Seeking:

• Preferably with one or more of the related certification in the areas of Cyber Security/Information Security – CISSP, CEH, CISM, Comptia CYSA+, GIAC GCFA, GCTI, GCIH and GREM or other relevant certifications
• Preferably familiar with cloud native systems and defence
• Familiarity with industry cybersecurity frameworks and standards, such as NIST Cybersecurity Framework, ISO 27001, and CIS Controls, is necessary. Understand the requirements and best practices outlined by these frameworks and be able to align security programs and practices accordingly. Familiar with local regulatory requirements such as BNM RMIT, Paynet, PCI-DSS
• In-depth knowledge and understanding of cybersecurity principles, best practices, and technologies are necessary. Have expertise in threat intelligence analysis, incident response, vulnerability management, and security operations. Stay abreast with the latest cyber threats, attack vectors, and mitigation techniques
• Strong experience in incident response planning and execution is crucial. Competent in leading and coordinating incident response efforts, conducting investigations, and implementing remediation measures. Experience in managing threat intelligence platforms, security information and event management (SIEM) systems, and other security tools is beneficial
• Proficiency in conducting security risk assessments, vulnerability assessments, and penetration tests is important. Experienced in identifying and assessing security risks, developing risk mitigation strategies, and implementing controls to protect against cyber threats.
• Excellent communication and leadership skills are vital. Able to effectively communicate complex technical concepts to both technical and non-technical stakeholders. Have the ability to lead and motivate a team, collaborate with cross-functional teams, and provide guidance during security incidents
• Strong analytical skills and the ability to think critically. Able to analyze and interpret security data, identify patterns, and make informed decisions. Possess excellent problem-solving skills to address complex security challenges and incidents
• Given the rapidly evolving cybersecurity threat landscape, continuous learning and staying updated with emerging threats and technologies is crucial

What We Value:

• Open-mindedness and constructive communication, fostering an environment of mutual support and growth.
• Responsibility and ownership, with a strong sense of accountability.
• Commitment to teamwork and achieving shared goals.
• Customer focus and dedication to delivering results.
• A proactive approach to leading change and innovation.

Perks & Benefits

• Nearby public transport
• Central location
• Casual dress code
• Open culture