IT Security Officer

London Stock Exchange Group; Paris; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

London Stock Exchange Group in Paris seeks an experienced IT Security SecOps professional to secure LCH SA IT infrastructure and business applications. You will manage vulnerability, incident response, IAM/PAM, and SIEM/SOC activities within a pivotal CCP environment.

The role collaborates with the Security Operations Centre to deliver resilient, highly available security services and to continuously improve cyber security posture across LCH SA.

Qualifications

• Bachelor's degree in computer science or engineering.
• At least 5 years as a Security Engineer in regulated/high-availability environments.
• Proficiency with cyber security controls and NIST framework.

Responsabilités

• Deliver cyber security controls library based on NIST Identify/Protect/Detect/Respond/Recover.
• Assess and challenge controls performed by outsourcers.
• Evaluate CIAT needs for business and tech applications.
• Produce security service deliverables with SLA/KPI monitoring.
• Oversee outsourced cyber security services.
• Assist IT Security officers in controls execution & assessment.

Connaissances

Security Engineering

Vulnerability Management

Incident Management

IAM/PAM

SIEM / SOC

EDR/AV

Threat Detection

Formation

Bachelor's degree in CS/Engineering

Outils

VMware

Cloud Security

Secret Management

Encryption

Vulnerability Mgmt tools

EDR/AV

PAM

Description du poste

Role summary

Do you have a passion for cybersecurity & technology? Do you want to make a difference, delivering Cyber Security within some of the biggest companies in the Financial Markets Industry and a critical player as a CCP (clearing house)? We are seeking a skilled IT Security SecOps to join LCH SA IT Security team located in Paris. This role aims at securing LCH SA IT infrastructure and Business application, controlling protection & detection systems, and managing cybersecurity incidents in coordination with Security Operations Centre, to ensure LCH SA Information System is secure, resilient, scalable, and highly available. The ideal candidate will have experience in all key aspects of the cyber security framework and related to vulnerability management, cyber incident management, identity and privileged access management, cyber security service management (reporting & dashboards KPI / SLA).

Key responsibilities and accountabilities

• Deliver the LCH SA cyber security controls’ library by performing checks on the pillars based on the NIST framework (Identify, Protect, Detect, Respond and Recover)
• Perform LCH SA cyber security controls, and assess / challenge controls performed by outsourcers
• Assess the CIAT (Confidentiality, Integrity, Availability and Traceability) needs for the Business and Technology Applications used by the company
• Deliver cyber security service activities within LCH SA, in particular production and monitoring of SLA and KPI related to controls activities
• Oversee the outsourced cyber security services with the outsourcers
• Provide support / expertise to other IT Security officers in charge of controls’ execution & assessment

What you’ll be doing

• Delivery of Cyber security controls: Perform cyber security checks to ensure that there are no gaps in the LCH SA cyber security posture (anti-malware coverage, Firewall rules recertification, outstanding vulnerabilities without remediation etc.)
• Enhancement of cyber security controls: Automate some controls by scripting (Python, Perl etc.) to enhance the delivery of the controls (reconciliation between different data sources etc.)
• Assessment of security controls: Assess the outcomes of controls performed by LCH SA outsourcers
• Assessment of CIAT needs for Business and Technology applications
• Reporting: Provide supplying with SLA and KPI related to controls’ delivery and related identified gaps
• ITIL cyber security management: Review and challenge the changes, the closure of problems etc. (tech / Business) which may impact on the cyber security profile of the CCP

You’ll bring

• Education: Bachelor’s degree in computer science, Engineering, or a related field (or equivalent experience)
• Professional experience: At least 5 years as a Security Engineer, or similar role, with a focus on controlling Security and Tech solutions in regulated and highly available environment. An experience as IT / Cyber auditor will be a plus. Cyber security certification will be a plus such as CISSP, GIAC etc. Fluent English mandatory, in a context of cooperation across an international Group
• Mandatory Technology Expertise: Network Security OS / Databases / Middleware / Applications Security VMware Cloud Security Secret Management Encryption Vulnerability Management EDR/AV IAM/PAM SIEM / SOC
• Soft Skills: Good communication Teamwork and collaboration Problem-Solving Adaptability

Career Stage

Senior Associate London Stock Exchange Group (LSEG)

Information

Join us and be part of a team that values innovation, quality, and continuous improvement. If you’re ready to take your career to the next level and make a significant impact, we’d love to hear from you. LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions. Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject. If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.