Cyber Security Analyst

Monitoring, detection, response and the unglamorous half — access, patching, third parties and the controls that stop an incident being a headline. The adversary here is funded and persistent, and the regulator expects the bank to be able to prove what it did and when.

Security, networking and infrastructure backgrounds, technology graduates, and people from defence and intelligence.

These are the shapes the round takes, not a question bank — banks phrase them differently and the wording is never the point.

What the panel is listening for. Prioritisation under incomplete information, and whether you can communicate urgency without losing accuracy.

The bank's largest concentrated exposures are its own systems and its vendors; the same question a lender asks about a borrower — what happens if this stops — is the question that ranks the work here.

That is the general case as well as this one. A bank's technology is not ordinary technology and its finance is not ordinary finance, and the second and third lines of defence — risk, compliance, financial crime, model validation and internal audit — recruit heavily out of the functions, taking the people who can already read a business. The case drills are free and are the cheapest way to build that, whichever column you sit in.