information security engineer for investment platforms

AJ Bell; Greater London; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

Competitive salary

7% Pension with matched contributions

Discretionary bonus

Job summary

AJ Bell ищет специалиста по информационной безопасности для проектирования и улучшения средств защиты на предприятиях, включая конечные точки, облако и сеть. От кандидата требуют глубокое понимание SIEM, PAM, IGA, а также опыта в внедрении корпоративных security-платформ.

Роль предусматривает гибридный формат работы с минимум 50% времени в офисе. Рассматриваются знания ISO27001/NIST и сертификация CISSP как преимущество.

Qualifications

• Опыт внедрения корпоративных security-платформ.
• Знание инструментов управления рисками безопасности.

Responsibilities

• Разрабатывать и внедрять корпоративные решения безопасности в эпоэнтпойнтах, облаке и сетях.
• Оценивать и внедрять инструменты безопасности, повышая автоматизацию и ценность.
• Поддерживать аудиты и регуляторные проверки, обеспечивая доказательную базу и контроль.

Education

CISSP

Tools

SIEM

PAM

IGA

Job description

Описание:

AJ Bell provides investment accounts and platforms, including ISAs, pensions and dealing accounts, for customers investing independently or with financial advisers. It is a UK investment platform business managing assets for more than 762,000 customers.

Задачи:

Design, deliver and improve enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments Design and implement secure infrastructure controls aligned with industry best practices Evaluate, select and implement security tools and platforms, driving automation, integration and measurable value Adopt new security technologies and transition them into operational support Oversee patch management across systems and hardware Support server hardening and secure configuration initiatives with Infrastructure and Service Delivery teams Provide security oversight across projects and change initiatives, embedding security from design through delivery Support audits, regulatory reviews and due diligence, maintaining robust evidence and controls Act as a technical link between the CISO function and Infrastructure teams Improve cybersecurity risk management processes and organisational maturity

Требования:

Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of SIEM, PAM, IGA, endpoint protection, and email/web gateways Strong understanding of core IT and networking principles Awareness of the evolving threat landscape Experience with ISO27001, NIST, or similar frameworks Significant experience in IT security Strong problem-solving skills and attention to detail Ability to take ownership and deliver end-to-end solutions Effective communication across technical and non-technical teams Будет плюсом: firewall technologies, cloud security standards and solutions, financial services or e-commerce experience, CISSP achieved or in progress

Условия:

Competitive starting salary 26 Days of holiday, increasing with service, plus a buy/sell scheme and bank holidays 7% Pension with matched contributions Discretionary bonus scheme Share schemes, including free shares and BAYE Health Cash Plan and discounted private healthcare Free gym Enhanced family leave, subject to qualifying criteria Travel and bike loan schemes Employee Assistance Programme Regular social events, including summer and Christmas parties Tailored learning and development opportunities Casual dress code and a friendly, supportive team environment Hybrid model requires at least 50% of working time per month in the office; new team members initially work full-time in the office