Senior Information Security Engineer

KennedyPearce Consulting; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

KennedyPearce Consulting is partnering with a leading financial services organisation to appoint a Senior Information Security Engineer. You will strengthen security controls, maintain the ISMS, and mentor junior analysts while collaborating with senior technology stakeholders to manage risk and regulatory compliance.

You will monitor security events, lead vulnerability management and assist with audits, ensuring security standards are met across the environment and systems.

Qualifications

• 3+ years' experience in Information Security or Cyber Security.
• Experience maintaining an ISMS using ISO 27001, NIST or SOC 2.
• Strong knowledge of SIEM, incident response, vulnerability management and security monitoring.
• Experience supporting security audits and risk assessments.
• Excellent communication and stakeholder management skills.
• Professional certifications such as CISSP, CISM or GIAC.

Responsibilities

• Maintain and enhance the Information Security Management System (ISMS).
• Monitor and investigate security events, identifying threats and responding to security incidents.
• Lead vulnerability management activities and support remediation from penetration testing.
• Conduct security risk assessments and security assurance reviews.
• Support internal and external audits, ensuring compliance with security standards.
• Produce security reporting and management information.
• Maintain and develop information security policies and procedures.
• Provide guidance and mentoring to junior Information Security Analysts.
• Work with IT teams to improve the organisation's security posture.

Skills

ISMS & security governance

Incident response

Vulnerability management

Security audits & risk assessments

Stakeholder management

CISSP

CISM

GIAC

ISO 27001 / NIST / SOC 2 familiarity

Financial services experience

Tools

Darktrace

Carbon Black

SIEM

Job description

We're working with a leading financial services organisation looking to appoint a Senior Information Security Engineer. This role will play a key part in maintaining and enhancing the organisation's cyber security capability, working across security operations, governance, risk management and incident response.

Working closely with senior technology stakeholders, you'll help strengthen security controls, support regulatory compliance and mentor junior members of the Information Security team.

Key Responsibilities

• Maintain and enhance the Information Security Management System (ISMS).
• Monitor and investigate security events, identifying threats and responding to security incidents.
• Lead vulnerability management activities and support penetration testing remediation.
• Conduct security risk assessments and security assurance reviews.
• Support internal and external audits, ensuring compliance with security standards.
• Produce security reporting and management information.
• Maintain and develop information security policies and procedures.
• Provide guidance and mentoring to junior Information Security Analysts.
• Work closely with IT teams to continuously improve the organisation's security posture.

Skills & Experience

• 3+ years' experience within Information Security or Cyber Security.
• Experience maintaining an ISMS using frameworks such as ISO 27001, NIST or SOC 2.
• Strong knowledge of SIEM, incident response, vulnerability management and security monitoring.
• Experience supporting security audits and risk assessments.
• Excellent communication and stakeholder management skills.
• Professional certifications such as CISSP, CISM or GIAC.
• Experience with security technologies such as Darktrace and Carbon Black.
• Previous experience working within Financial Services or another regulated environment.