Senior Security Engineering & Risk Leader (FinTech)

Insignis; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

25 days holiday

Pension 5%

Private medical insurance

Health cash plan

Enhanced parental leave

Cycle to Work Scheme

Team lunches & quarterly socials

Job summary

Insignis, a fast-growing FinTech, seeks a senior security engineer to lead information security strategy and risk management. You will report to the CTO and work closely with compliance and risk teams, shaping security across the organisation and presenting to the board.

You will own security architecture for an Azure-native, Kubernetes-based platform and drive security controls, risk management, and incident response in a regulated environment. London hybrid work available.

Qualifications

• Experience leading information security in a regulated financial services or fintech environment.
• Strong working knowledge of FCA regulatory requirements (SYSC, operational resilience).
• Hands-on familiarity with cloud-native security on Azure (Entra ID, Defender, Sentinel, Key Vault, Policy).
• Proven delivery of ISO 27001 certification or equivalent ISMS framework.
• Ability to translate technical risk into board-level narrative clearly and credibly.
• Experience partnering with engineering teams — you are comfortable in technical conversations and risk committee meetings.
• CISM, CISSP, or equivalent professional qualification (or demonstrable equivalent experience).

Responsibilities

• Own security strategy and governance aligned to FCA requirements, ISO 27001, and risk appetite.
• Chair the Information Security Working Group and prepare materials for boards.
• Lead the ISO 27001 programme, including audit readiness and continual improvement.
• Maintain the ISMS, risk register, and security policy suite.
• Represent security in regulatory engagements, including FCA requests and third-party due diligence.
• Define and enforce security architecture across Azure-native, Kubernetes-based platform.
• Govern security controls across stack: Kafka, .NET/C#, Vue.js, Kong, Auth0, Salesforce.
• Lead threat modelling, pentesting, and vulnerability management programmes.

Skills

Security leadership

FCA compliance

Azure security

ISO 27001

Board communication

Engineering collaboration

CISSP/CISM

Tools

Kong API Gateway

Auth0

Entra ID

Defender

Sentinel

Key Vault

Policy

Job description

Insignis, a fast-growing FinTech, seeks a senior security engineer to lead information security strategy and risk management. You will report to the CTO and work closely with compliance and risk teams, shaping security across the organisation and presenting to the board.

You will own security architecture for an Azure-native, Kubernetes-based platform and drive security controls, risk management, and incident response in a regulated environment. London hybrid work available.