Cyber Security Manager

BlueCrest Capital Management; Greater London; On-site; GBP 110,000 - 170,000; Full time

Job summary

BlueCrest Capital Management is seeking a Cyber Security Manager to own the company’s cyber security strategy across global platforms, including cloud and on‑prem environments. You will oversee posture, policy and compliance while managing budgets for cyber tooling and services.

The role requires hands-on leadership, risk reporting to executives, and a focus on training, phishing campaigns, and proactive security testing to stay ahead of evolving threats.

Qualifications

• 5 years minimum experience in a Cyber Security Manager or equivalent role.
• Cy ber qualifications such as CEH, CISSP, OSCP or equivalent.
• Experience of IT System Administration of Linux and Windows platforms.
• Experience of Enterprise Class on-premise and public cloud IaaS, PaaS, SaaS infrastructure technologies, including AI platforms.
• Deep understanding of TCP/IP + Firewalls technologies – Preferably Palo Alto.
• Extensive experience in automation and scripting (Bash/Python/PowerShell) and AI-enabled cyber ops.
• Experience of incident management, vulnerability assessment and management.
• Experience securing AI traffic, APIs and AI platforms (DevSecOps).

Responsibilities

• Own and lead ongoing improvement of Cyber Security tooling and configuration.
• Escalation point for Cyber alerts and events from multiple sources.
• Threat Hunting – investigate root cause of security alerts.
• Own engagement with technology and business teams to progress analysis and mitigations.
• Lead security assessments of 3rd party tools, vendors, network infrastructure, hosts and applications.
• Own Cyber Incident and BCP Simulation strategy and execution.
• Lead responses to external audits and DDQs.
• Create documentation for internal department and business use.

Skills

Threat Hunting

Incident management

Zero Trust

Automation scripting

Team leadership

Risk assessment

Communication

Security testing

Executive reporting

Phishing campaigns

Education

CEH

CISSP

OSCP

Tools

Palo Alto

XDR

Vulnerability scanners

Job description

Department overview:

Our Technology Infrastructure team operates globally and is responsible for every aspect of the firm’s platforms. This ranges from our EUC/Office environments to Trading and Core service Co-Location Data Centres, and extends to Public Cloud, delivering top-tier technology services to a dynamic and demanding Trading organisation.

In addition to meeting the round-the-clock operational demands of the platforms, we continuously evolve and transform our platforms to maintain a competitive edge that our business requires. We innovate to provide valuable solutions and leverage our skilled Technology teams to deliver against rapidly changing business requirements.

Role overview:

The Cyber safe and secure operating environment is of critical importance to the organisation with oversight of all Cyber aspects from perimeter to endpoint via multiple layers of security and protection mechanisms in between.

Working closely with the Business and Technology areas, The Cyber Security Manager owns the company’s current and future cyber security strategy, including Posture, Policy and Compliance standards creation and enforcement along with related technologies and services to achieve.

A hands on role to both strategic planning and operational aspects involve budgetary responsibility for the Cyber toolsets and services and ensuring their effectiveness and appropriate fit, executive and senior audience in person and soft reporting to risks and regulatory obligations as well as audit compliance and adherence.

They must be pragmatic, enjoy challenges and be keen to learn. Be adaptable and level headed in pressure situations. A problem solver with a love of technology, with a desire to learn new concepts and applications quickly.

The role requires supporting staff located globally in a dynamic environment where business and priorities will react to market requirements & trading priorities. Risk assessment and operational effectiveness are key whilst maintaining a pragmatic approach to the security vs convenience balance.

• Own and lead with ongoing improvement of Cyber Security tooling, configuration (best practise), identify gaps for improvement

• Escalation point for Cyber alerts and events from multiple sources, e.g. generated by tooling reports & emails.

• Threat Hunting – Investigate root cause of security alerts and issues, covering core technologies

• Ownership of staff Cyber training and phishing campaign design to assess and support staff capability and awareness

• Own engagement and relationships with technology and business teams to progress analysis, mitigations and integration of Cyber strategy

• Experienced in team management with ability to determine and prioritise workloads against competing books of work, a good communicator and motivator

• Lead and own security assessments of 3rd party tools, vendors and providers, network infrastructure, hosts and applications

• Identify gaps in security landscape, Research and own improvement program, Review new toolsets for use within the company, exploit/security test

• Own and manage external security testing and mitigation (Pen testing)

• Ownership of Cyber Incident and BCP Simulation strategy and execution

• Lead due diligence of 3rd party services to assist business with purchasing decisions, security testing applications

• Lead responses to external audits and DDQs

• Create appropriate documentation, for internal department and business use

• Own Cyber reporting frameworks and delivery

• Own Cyber policies and process

• Ability to interpret and convey complex security issues to non-technical staff

• Engagement with vendors for products assessment, proof of concepts, cost effectiveness

Experience required:

• 5 years minimum experience in a Cyber Security Manager or equivalent role

• Cyber qualifications such as CEH, CISSP, OSCP or equivalent

• Experience of IT System Administration of Linux and Windows platforms

• Experience of Enterprise Class on-premise and public cloud IaaS, PaaS, SaaS infrastructure technologies, including AI platforms

• Deep understanding of TCP/IP + Firewalls technologies – Preferably Palo Alto

• Deep understanding of wider Technologies around Server, Desktop, Storage, Network, Database, F/Walls, SaaS, Virtual Machines.

• Deep understanding of Advanced Threat Protection / Behavioural Analytics Tooling, XDR – Preferably Palo Alto

• Demonstrable understanding of security issues announced in the industry, threat actors (AI offense and defence acceleration), and interpret appropriate response/activity based on risk and impact

• Demonstrable knowledge of running automated exploits/penetration testing for assessment of our own tools and infrastructure.

• Experience of owning incident management process, vulnerability assessment and management

• Demonstrable understanding of DLP, IPS, Endpoint, anti-malware, Sandbox, Vulnerability scanners

• Demonstrable understanding of Mail security controls

• Deep understanding of common methods of attack, from phishing to insider threats

• Experience working in Financial or time critical production environments

• Experience of forensics – investigation and analysis of how and why a breach or other compromise occurred

• Extensive experience and strong in automation using scripting in at least one of Bash, Python or PowerShell as well as AI assisted Cyber Ops

  • Experience in Zero Trust security approach across identity, devices, networks, applications, workloads and data

• Experience securing AI traffic, APIs and AI platforms (DevSecOps) across cloud and on-premises environments, including access controls, data protection, monitoring, threat detection and prevention of prompt injection, data leakage, insecure integrations, sandboxing and model abuse

• Experience implementing appropriate preventative, detective and governance controls within a rapidly evolving threat landscape.

About you:

The ideal candidate is a confident leader with a clear analytical and methodical approach with a proven track record in problem-solving, managing a team, managing critical BAU workflows, advanced engineering and technology service delivery in a high-pressure, time-sensitive environment.

You should be passionate about emerging technology trends, innovations and directions in Cyber security and eager to suggest and implement new solutions to enhance our Cyber technology performance. You should also understand the need for rapid delivery while appreciating business risk and constraints to ensure adherence to service levels.

The candidate should have extensive experience working in a structured environment, managing and working as part of a diverse team, defining and meeting broad and specific objectives whilst being able to communicate effectively at all levels in the organisation. This role requires excellent organisational skills, open communication, and a collaborative approach.

BlueCrest is committed to providing an inclusive environment for its workforce. As an employer, we provide equal opportunities to all people regardless of their gender, marital or civil partnership status, race, religion or ethnicity, disability, age, sexual orientation or nationality.