Senior Information Security Engineer - Investment Management

Client Server Limited; Greater London; Hybrid; GBP 120,000 - 150,000; Full time

Benefits offered by this job

Significant Bonus

Generous Pension contribution

Life Assurance

Critical Illness cover

Childcare vouchers

Enhanced Paternity package

Adoption Assistance

Charitable fund raising matching

Job summary

Client Server Limited in London is seeking a Senior Information Security Engineer to lead the security function from a technical and risk perspective. You will design, implement and maintain security controls and GRC processes while collaborating with the global CISO team in New York.

You will translate regulatory requirements into practical technical controls and report on security posture to senior stakeholders, influencing the firm's security strategy across a data- and technology-driven

Qualifications

• . Experience in Information Security, IT Audit or Cyber Risk in regulated investment management.
• Strong understanding of risk management frameworks like NIST, ISO 27001, COBIT.
• Translate regulatory requirements into practical technical controls.
• Excellent stakeholder management with auditors and senior leaders.
• Proven track record leading security programs in finance.

Responsibilities

• Lead the security function from a technical and risk perspective for the London office.
• Design, implement and maintain security controls and GRC processes.
• Collaborate with the global CISO team (New York / London).
• Provide reporting on security posture, risk and compliance to senior stakeholders.
• Influence security strategy across a data- and technology-driven financial services organisation.

Skills

Security leadership

Governance & risk

Stakeholder management

Networking security

Vulnerability management

Threat assessment

Incident response

IAM concepts

Tools

CrowdStrike

Microsoft Defender for Endpoint

Splunk

ELK Stack

Datadog

Active Directory

OKTA

Job description

Senior Information Security Engineer London to £150k

Are you an experienced Information Security professional with Investment Management experience?

You could be progressing your career, working at the intersection of technology, security and governance within a fast paced Hedge Fund.

As a Senior Information Security Engineer, you'll lead the security function from both a technical and risk perspective for the London office, collaborating with colleagues in New York. You will be the sole UK based security engineer / lead responsible for designing, implementing and maintaining security controls and GRC compliance.

You will work closely with the global CISO team (New York / London), report to senior leadership and influence security strategy across a data and technology driven financial services organisation operating at scale.

This is a highly visible role where you'll influence the firm's security strategy, translate regulatory requirements into practical technical controls and provide meaningful reporting on security posture, risk and compliance to senior stakeholders.

Location / WFH

You'll join colleagues in prestigious Central London offices (with onsite restaurant, gym etc.) with flexibility to work from home once a week.

About you

• This role is ideal for a technologist transitioning into security leadership, bringing deep systems / infrastructure engineering expertise combined with growing GRC, compliance and governance capabilities
• You have experience in a Systems / Infrastructure Security Engineer or similar technical security role
• You have a strong knowledge of Network / endpoint security operations, vulnerability management and threat assessment
• You have experience with Linux / Unix systems administration and hardening, Windows systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.)
• You have strong experience in Information Security, Security Assurance, IT Audit or Cyber Risk within a regulated Investment Management environment
• You have a deep understanding of security control frameworks, risk management and governance, including Risk management frameworks (NIST, ISO 27001, COBIT), security control design and documentation, incident response procedures and evidence preservation
• You have excellent stakeholder management skills, with the ability to communicate effectively with technical teams, auditors and senior business leaders

What's in it for you

As a Senior Information Security Engineer you will earn a highly competitive salary plus a fully comprehensive benefits package including:

• Salary to £150k
• Significant Bonus
• Generous Pension contribution
• Life Assurance, Critical Illness cover
• Childcare vouchers
• Enhanced Paternity package and Adoption Assistance
• Charitable fund raising matching and much more