Senior Security Engineering Manager

Insignis; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

25 days holiday (exc. Bank holidays)

5% Pension contributions

Private medical insurance with Vitaliy

Health cash Plan offering dental/opt/?

Enhanced Parental Leave

Cycle to Work Scheme

Monthly team lunches

Job summary

Insignis is seeking a senior security-focused engineer to lead information security strategy and governance in a FinTech setting. You will report to the CTO, while partnering with Compliance, Risk, and engineering to embed a rigorous, pragmatic security culture.

You will architect security across Azure-native, Kubernetes platforms, oversee ISO27001, risk registers, and third-party security. This is a high-impact role with board exposure and hands-on responsibilities.

Qualifications

• Demonstrated information security leadership in a regulated financial services or fintech environment.
• Strong knowledge of FCA requirements (SYSC, operational resilience).
• Hands-on Azure cloud security experience (Entra ID, Defender, Sentinel, Key Vault).
• Proven delivery of ISO27001 certification or equivalent ISMS framework.
• Ability to translate technical risk into clear board-level narratives.
• Experience partnering with engineering teams in technical and risk discussions.
• CISM or CISSP (or equivalent) certification.

Responsibilities

• Own the information security strategy aligned to FCA requirements and risk appetite.
• Chair Information Security Working Group and prepare board materials.
• Lead ISO 27001 programme, audits, and continual improvement.
• Maintain ISMS, risk register, and security policy suite.
• Represent security in regulatory engagements and third-party due diligence.
• Define and enforce security architecture across Azure-native, Kubernetes platform.
• Lead threat modelling, penetration testing, and vulnerability management.
• Own IAM strategy including Entra ID, Auth0, and federation.
• Drive security engineering best practices within product and platform teams.
• Govern AI/ML security and crypto- agile migration to PQC standards.
• Incident response planning and major cyber-incident management.
• Oversee security monitoring, SIEM, and staff awareness.

Skills

Security leadership

Regulated fintech

Azure security

DevSecOps

Risk management

Board communication

Education

CISM or CISSP certification

Tools

Azure

Entra ID

Defender

Sentinel

Key Vault

Job description

Insignis is seeking a senior security-focused engineer to lead information security strategy and governance in a FinTech setting. You will report to the CTO, while partnering with Compliance, Risk, and engineering to embed a rigorous, pragmatic security culture.

You will architect security across Azure-native, Kubernetes platforms, oversee ISO27001, risk registers, and third-party security. This is a high-impact role with board exposure and hands-on responsibilities.