JOB DESCRIPTION

• Lead the preparation, coordination, and submission of regulatory responses, audit deliverables, and information requests pertaining to cybersecurity controls.
• Draft and review written communications to regulators, ensuring technical accuracy, regulatory alignment, and professional presentation.
• Maintain a comprehensive register of regulatory inquiries, commitments, and action items, tracking progress through to closure.
• Collaborate with Cyber Control, Risk, and Technology teams to gather evidence and substantiate control effectiveness assertions.
• Coordinate and support regulatory on-site examinations, walkthroughs, and interview preparation sessions.
• Translate complex cybersecurity and technical risk concepts into clear, accessible language for regulatory and executive audiences.
• Identify gaps in control documentation and work with control owners to strengthen the evidence base prior to submission.
• Monitor evolving cybersecurity regulatory requirements and emerging supervisory expectations, providing timely horizon-scanning inputs.
• Support the development and maintenance of standard regulatory response templates, playbooks, and process guides.
• Engage with second and third line functions to ensure consistency of messaging and alignment with the organisation's risk appetite.
• Produce management information and status reporting on regulatory engagement activity for senior leadership.
• Champion a culture of audit readiness, ensuring cyber controls evidence is maintained continuously rather than reactively.

Qualifications:● Strong understanding of cyber controls and security domains● Demonstrated experience in drafting regulatory or audit responses● Familiarity with risk and control frameworks (e.g., RCSA, issue management)● Exceptional written communication and documentation skills● Ability to translate technical concepts for non-technical audiences● Stakeholder management across multi-functional teams