Location: Birmingham

Employment: Permanent

Skills

Seniority required: Senior (Years of experience: Min 9 years)

• Extensive overall industry experience with moderate experience working in large scale technology programs / Operations teams with a range of stakeholders simultaneously with limited supervision and guidance
• Experience in undertaking risk management activities e.g. operating/performing control governance duties, identifying new risks etc.
• Knowledge of various IT project methodologies and life cycles (Information Technology Infrastructure Library and software development life cycle)
• Awareness of the Vulnerability Management processes
• Very good understanding of patch management and a broad technical understanding of IT infrastructure technologies and how they operate, especially regarding how patches are managed and applied

Responsibilities

• Assisting Technology Units: Assisting Technology units to be compliant with the Patch Management KOD and exceed Key Performance Indicators (KPIs): You will be required to work closely with technology units to ensure accurate, complete, and consistent patch reporting is established, sustained and timely and regularly provided, involved in helping ensure that established KPIs are being met or exceeded by these technology units and assisting the technology owners in the identification, tracking and remediation of issues that are negatively impacting KPIs, and assist the technology units in the identification of efficiency improvements that can contribute towards improving the rate, success and consistency of the patching undertaken by the technology units
• Establishing and Operating New Governance Procedures and Controls: This will involve establishing and being involved in the effective and consistent operation of both new and enhanced sustainable patch management governance processes, solutions and capabilities that ensure the Bank is able to manage compliance effectively and demonstrably to the Patch Management requirements by the ‘technology owners’ (that are responsible for the attainment, testing, deployment and verification of patches to their related assets)
• Audit Remediation: You will be required to have ownership and/or participate extensively in audit remediation and compliance related activities relating to the robust governance of the Patch Management process, which may include, but not limited to: The identification and establishment of new or enhanced KPIs and related IT risk/senior management reporting, the establishment of new and/or enhanced governance capabilities and associated reporting, the onboarding of additional and/or new technologies into the reporting and governance services of the centralized GTI Patch Management function, and the creation of new or enhanced patch management standards and guidelines
• Documentation and Training Materials: You will have a responsibility for maintaining working instruction documentation and user training materials and will be expected to identify update requirements and ensure such updates are agreed and applied