Cloud Risk Assurance, Cloud & Third-Party Cyber Risk, Group Cyber & Technology Risk, Group Risk

This role provides independent cloud assurance inputs that inform the overall cloud cyber risk opinion issued by the Head, Cloud & Third‑Party Cyber Risk, supporting governance reporting and regulatory interaction.

Continuous Cloud Assurance

• Perform independent assessments of cloud security posture across production environments.
• Validate control effectiveness against approved standards and baseline configurations.
• The role may leverage outputs from cloud security, risk, or GRC platforms in performing assurance activities but does not own, configure, or administer such tools.
• Collect, validate, and analyse cloud risk metrics and assurance results.
• Identify recurring control weaknesses, emerging risks, and systemic issues.

Assurance Reporting & Governance Support

• Provide assurance inputs for senior management, Board, and Committee reporting.
• Coordinate with the Cloud Project Risk Advisory...