Senior IAM Privileged Access Engineer

Janus Henderson Investors; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A global investment firm is looking for a Senior Identity Security Engineer to enhance its Privileged Access Management practices. The role requires substantial experience in cybersecurity and leadership in PAM initiatives. Candidates should possess strong analytical skills and an understanding of compliance frameworks. This position offers opportunities for hybrid work and professional growth.

Benefits

Generous holiday policies

Health and wellbeing benefits

Training and mentorship opportunities

Paid volunteer time

Qualifications

• Minimum of 5 years of experience in cybersecurity, with 3 years focused on PAM.
• Proven experience in leading PAM initiatives and managing PAM technologies.
• Strong understanding of cybersecurity principles and compliance frameworks.

Responsibilities

• Lead the design and deployment of PAM tooling.
• Conduct regular risk assessments of privileged accounts.
• Lead investigations into security incidents involving privileged accounts.

Skills

Cybersecurity experience

Privileged Access Management

Analytical skills

Leadership

Communication skills

Education

Bachelor's degree in computer science or related field

Professional certifications (e.g., CISSP, CISM)

Tools

CyberArk

Delinea

Job description

Why work for us?

A career at Janus Henderson is more than a job, it's about investing in a brighter future together.

Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world‑class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.

Our Values are key to driving our success, and are at the heart of everything we do:

Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust

If our mission, values, and purpose align with your own, we would love to hear from you!

Your opportunity

The Senior Identity Security Engineer for Privileged Access Management is responsible for:

• PAM Capability Development: Lead the design, deployment, and configuration of JHI's PAM tooling so that it aligns with the organization's security objectives and regulatory requirements
• Technology Management: End to end lifecycle management of a PAM tool and all related processes
• Risk Assessment: Conduct regular risk assessments and audits of privileged accounts to identify vulnerabilities and recommend corrective actions
• Incident Response: Lead investigations into security incidents involving privileged accounts and provide expert guidance during response and recovery phases
• Policy Enforcement: Establish and enforce PAM policies and procedures to ensure compliance with industry standards and best practices
• Collaboration: Work closely with IT, cybersecurity, and business units to integrate PAM processes and promote security awareness
• Training and Mentorship: Provide training and mentorship to team members and stakeholders on PAM best practices and tools
• Reporting: Generate and present reports on PAM activities, metrics, and outcomes to senior management and relevant stakeholders
• Carry out other duties as assigned

What to expect when you join our firm

• Hybrid working and reasonable accommodations
• Generous Holiday policies
• Excellent Health and Wellbeing benefits including corporate membership to ClassPass
• Paid volunteer time to step away from your desk and into the community
• Support to grow through professional development courses, tuition/qualification reimbursement and more
• Maternal/paternal leave benefits and family services
• Complimentary subscription to Headspace - the mindfulness app
• All employee events including networking opportunities and social activities
• Lunch allowance for use within our subsidized onsite canteen

Must have skills

• Minimum of 5 years of experience in cybersecurity, with 3 years focused on Privileged Access Management
• Proven experience in leading PAM initiatives and managing PAM technologies (e.g., CyberArk, Delinea, or similar)
• Strong understanding of cybersecurity principles, identity and access management, and compliance frameworks (e.g., NIST, ISO, GDPR)
• Excellent analytical and problem‑solving skills
• Strong leadership and project management abilities
• Effective communication and interpersonal skills
• Ability to work independently and collaboratively in a fast‑paced environment

Nice to have skills

• Proficiency in scripting and automation tools
• Professional certifications such as CISSP, CISM, or CRISC are highly desirable
• Bachelor's degree in computer science, Information Security, or a related field (Master's degree preferred)

Supervisory responsibilities

• No

Potential for growth

• Mentoring
• Leadership development programs
• Regular training
• Career development services
• Continuing education course

You will be expected to understand the regulatory obligations of the firm and abide by the regulated entity requirements and JHI policies applicable for your role.

At Janus Henderson Investors we’re committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don’t worry if you don’t think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can’t accommodate every flexible working request we’re happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at [e-mail].

Janus Henderson is an equal opportunity /Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks.