Cyber Security Engineer

Millennium Management LLC; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A global financial services firm is seeking a Cyber Security Engineer to provide technical guidance on system architectures and conduct risk assessments. The ideal candidate will have a Bachelor's degree in Cyber Security and over 5 years of experience in IT or information security. Strong stakeholder management and communication skills are essential. This role plays a critical part in risk management and security oversight.

Qualifications

• 5+ years of experience in information technology and/or information security.
• Demonstrated experience working with teams to assess security risks.
• Exceptional communication skills to translate technical issues into recommendations.

Responsibilities

• Provide technical guidance on modern system architectures.
• Collaborate with stakeholders to understand operational requirements.
• Conduct comprehensive risk assessments and document identified risks.

Skills

Technical advice

Stakeholder management

Risk assessment

Incident response planning

Analytical skills

Education

Bachelor's degree in Cyber Security, Information Technology, or related field

Tools

Risk management frameworks (e.g., NIST, ISO 27001, CIS20)

Technical knowledge of operating systems (Windows, Linux, MacOS)

Job description

Cyber Security Engineer

We are seeking a Cyber Security Engineer with a robust background in the full suite of modern technologies employed within an enterprise environment. This role requires a deep understanding of operating systems (Windows, Linux, MacOS, and Mobile), cloud services (Google, Amazon, Microsoft to include M365), network infrastructure, technologies, and protocols as well as databases. The ideal candidate will be able to navigate conversations that range from very technical through to high level risks with a range of stakeholders. This is a stakeholder-facing role so the ability to accurately and effectively establish and maintain a customer-focused presence is essential.

Primary Responsibilities

• Provide technical advice and guidance related to modern system architectures that meet stakeholder needs and provide functionality, security, and resilience by design.
• Collaborate closely with compliance, legal, IT, business stakeholders, and external clients to understand operational requirements, regulatory obligations, and risk tolerance.
• Serve as a technical point of contact for clients, addressing and managing their technical requirements, security concerns, and risk management needs.
• Conduct comprehensive risk assessments of information systems, applications, business processes, and underlying technical infrastructure and clearly document identified risks with accompanied compensating controls that address security gaps when standard controls are not feasible. Monitor the effectiveness of compensating controls and recommend improvements as needed to maintain compliance and reduce residual risk across diverse technical environments.
• Stay current with emerging threats, regulatory changes, and industry best practices in risk management, compensating controls, and evolving enterprise technologies.
• Assist with incident response planning and post-incident risk evaluation, leveraging broad technical knowledge to assess impacts and recommend improvements.

Qualifications/Skills Required

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field with broad technical knowledge spanning all aspects of a modern enterprise environment.
• 5+ years of experience in information technology and / or information security, with a strong focus on enabling business objectives.
• Demonstrated experience working with information technology, information security, compliance, legal, business teams, and clients to assess and document security risks and compensating controls.
• Advanced knowledge of risk management frameworks (e.g., NIST, ISO 27001, CIS20) and regulatory requirements relevant to the financial sector is a plus.
• Exceptional analytical, communication, and report-writing skills, with the ability to translate complex technical issues into clear, actionable recommendations for both technical and non-technical audiences.

Desired Skills

• Experience in the financial services sector or advisory work with a leading consulting firm.
• Familiarity with the design and evaluation of compensating controls in regulated environments.
• Ability to translate technical risks into business impacts and actionable recommendations.
• Experience presenting technical risk findings to executive leadership, clients, and non-technical stakeholders.
• One or more of the following certifications: CISSP, CISA, CompTIA CySA+