Security Engineer – Risk & Controls

Iceberg; England; On-site; GBP 60,000 - 85,000; Full time

Job summary

A leading global trading firm is seeking a Security Engineer for its Cybersecurity function in London. This mid-senior level role involves assessing regulatory developments, designing security controls, and ensuring the firm's operations are secure in a high-speed environment. Ideal candidates should have 1–5 years of experience in Cybersecurity, with a solid technical foundation. The position emphasizes hands-on implementation rather than compliance, making it a unique opportunity for those who thrive in complex technological settings. The role requires working on-site 4–5 days a week.

Qualifications

• 1–5 years of experience in Cybersecurity or Technology Risk roles.
• Experience in a technical security discipline like incident response or vulnerability management.
• Hands-on mindset focused on effective security controls.

Responsibilities

• Assess new markets and regulatory developments for cybersecurity controls.
• Design and implement effective security controls with compliance teams.
• Strengthen the firm’s security posture by anticipating real threats.

Skills

Cybersecurity expertise

Analytical mindset

Collaboration skills

Education

Degree in Computer Science or Engineering

Job description

Advising Cybersecurity & eDiscovery executives and investors on how to attract, hire, and retain top talent globally

A leading global trading firm is expanding its Cybersecurity function and is looking to hire a Security Engineer – Risk & Controls. This is a rare opportunity to join a high-performing technology environment, working closely with engineering, compliance, and risk teams to help the firm operate securely across global markets.

This role is ideal for someone who thrives on solving practical security problems in complex, high-speed environments, not just ticking boxes.

Responsibilities

• Assess new markets and regulatory developments (e.g., SEBI, SEC, MAS) to identify the cybersecurity controls needed for the firm to operate securely.
• Partner with compliance engineering, technology, and finance teams to design, implement, and validate effective security controls.
• Think like an attacker, anticipate real threats, evaluate control weaknesses, and strengthen the firm’s security posture.
• Ensure fundamental security controls are well-designed and properly implemented across the environment.
• Contribute to a pragmatic, engineering-led security function that enables business growth while reducing real-world risk.

Qualifications

• 1–5 years’ experience in Cybersecurity, Information Security, or Technology Risk roles.
• A background that began in a technical security discipline (e.g., security operations, incident response, vulnerability management, or penetration testing) and has evolved toward risk and controls.
• Someone who can think deeply about security, who can articulate what a technology-driven trading firm needs to worry about and what controls should be in place, rather than just reciting frameworks.
• Strong technical foundations, ideally with a degree in Computer Science, Engineering, or a related field.
• Experience working in mid-sized or scaling technology organizations (roughly 1,000–3,000 employees) or having joined an earlier-stage company and helped it grow through that phase.
• A hands‑on, analytical mindset, focused on effective, well‑designed controls rather than compliance checklists.
• Excellent collaboration skills and the ability to partner across technical and business teams.

What This Role Is Not

• Not a strategic or management-level position, it’s hands‑on implementation work in a complex, technical environment.
• Not a compliance‑driven or audit‑heavy role (ISO/SOX/NIST) — this is about practical, engineering‑led control design.

London (4–5 days on‑site)

Seniority Level

Mid‑Senior level

Employment Type

Full‑time

Job Function

• Finance and Information Technology

Industries

• Technology, Information and Media, Financial Services, and Computer and Network Security