Director, Third Party Intelligence & Incident Investigations

About the role

This senior leadership position is responsible for protecting the bank’s external ecosystem by directing third‑party cyber‑security intelligence and incident investigations. The role can be based in the United Kingdom or Singapore and reports to the Information & Cyber Security function.

Key responsibilities

• Lead and mature the bank’s third‑party incident investigation and intelligence programme, aligning with overall cyber‑security strategy.
• Oversee detection, triage, investigation, classification, escalation and reporting of cyber incidents involving suppliers, clients and other external partners.
• Define investigation standards, evidence requirements and quality‑assurance processes to ensure consistent, high‑quality analysis.
• Analyse threat intelligence, indicators of compromise and threat‑actor activity to assess exposure to the bank’s data, services and critical dependencies.
• Translate technical findings into clear business, operational, client and regulatory risk insights for senior stakeholders.
• Engage directly with executives, risk committees, CISOs, CIOs, contract managers and senior representatives of impacted third parties.
• Provide risk‑based recommendations for containment, remediation, continuous monitoring and escalation decisions.
• Lead, manage and develop a team of Intelligence Analysts, fostering a culture of urgency, accountability and collaboration.

Required profile

• Proven experience as a cyber‑security leader, preferably within a large financial institution.
• Strong track record of managing incident response and threat‑intelligence programmes.
• Excellent communication skills for presenting complex technical findings to senior business audiences.
• Ability to influence senior stakeholders and drive risk‑focused decision‑making.

Required skills

What we offer

• High‑visibility role with direct interaction with senior executives and regulators.
• Opportunity to shape a growing capability in a fast‑moving cyber‑security area.
• Leadership of a dedicated team of analysts and access to cutting‑edge intelligence tools.