Director, Swift Customer Security Programme

**Job Summary**

**WHAT IS THE OPPORTUNITY?**

As Director, SWIFT Customer Security Programme (CSP), you will be at the forefront of driving security compliance and mitigating operational risks related to Swift within the organization. You will lead a dedicated team, ensuring adherence to Swift’s customer security controls framework and championing governance and assessment improvements. This role is key to reducing risk while providing critical advice to stakeholders on enhancing the organization’s security posture. You’ll lead the charge in driving innovative solutions that elevate security standards and improve risk management in this dynamic and highly impactful field.

**WHAT WILL YOU DO?**

**SWIFT CSP Execution and Continuous Improvement**
- Lead enterprise-wide execution of annual SWIFT CSP assessments for 40+ BICs (Bank Identifier Codes) ensuring alignment with SWIFT CSP standards and regulatory expectations.
- Oversee the completion of off-cycle assessments for new Bank Identifier Codes.
- Provide strategic direction and governance to improve compliance with SWIFT CSP standards.
- Ensure all processes are clearly documented and continuously refined to reflect best practices.
- Develop and manage processes for assessment requests and reviews related to counterparties.
- Drive improvements in assessment processes, including role and process updates, evidence requests, and guidelines refinement.
- Drive methods to automate and continuously confirm control compliance and oversee alignment with the Enterprise Risk and Internal Controls repository (ERIC) and enterprise control testing, ensuring a more efficient and streamlined assessment process.
- Expand the coverage of advisory controls and ensure alignment with best practice guidelines and governance standards.

**Risk Mitigation, Remediation and Strategic Advice**
- Develop and manage risk reduction and remediation portfolio for SWIFT-related security risks.
- Monitor identified risks, improvement opportunities, and drive action plans for effective remediation.
- Provide guidance on emerging regulatory requirements, standards, and industry trends, keeping the organization informed and prepared.
- Promote and implement best practices for SWIFT security guidelines and ensure continuous improvement.

**Stakeholder Management and Governance**
- Engage and manage communication with a wide range of internal and external stakeholders, ensuring clarity of objectives, risks, and progress.
- Develop and deliver high-quality presentations and reports to stakeholders, including risk mitigation plans, compliance updates, assessment status and findings.
- Serve as a key point of contact for stakeholder inquiries and feedback on SWIFT CSP-related governance and assessment activities.
- Manage preparation of governance documentation, ensuring engagement and alignment.
- Lead the refinement of governance structures to enhance SWIFT CSP compliance and assessment practices.

**Leadership and Team Management**
- Provide leadership and direction to the SWIFT CSP team, promoting a culture of excellence, continuous improvement, and collaboration.
- Collaborate with internal departments and stakeholders to align security strategies and operational improvements, ensuring cross-functional engagement.
- Mentor and develop team members, fostering growth and ensuring the effective execution of SWIFT CSP responsibilities.

**WHAT DO YOU NEED TO SUCCEED?**

**Must have**:

- Leadership experience in managing teams, program governance and driving security programs at scale.
- Proven experience in cybersecurity risk management, industry best practices and control frameworks.
- Excellent communication and influencing skills, with the ability to convey technical and risk information, make actionable recommendations to senior leadership and drive alignment and decision making across diverse groups.
- Exceptional problem-solving and analytical abilities, capable of navigating complex risk environments and prioritizing initiatives.
- Relevant certifications in security or risk management: e.g., CISSP, CISA, PCI Qualified Assessor, ISO 27001 Lead Auditor, CompTIA Security+, GIAC Systems and Network Auditor (GSNA)

**Nice-to-have**:

- Strong familiarity with SWIFT Customer Security Controls Framework, including hands-on experience with CSP assessment and compliance.
- Payments and financial services experience, particularly with international standards and regulations.

**What’s in it for you?**

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
- Leaders who support your developme