Lead Security Engineer

London Stock Exchange Group; Bengaluru; Hybrid; INR 1,500,000 - 2,800,000; Full time

Job summary

London Stock Exchange Group is seeking an Active Directory Team Lead with a security mindset to lead a 24/7 GSAC shift. You will manage privileged accounts and security groups, ensuring access control and policy compliance across the organisation.

You will drive process maturity, coaching, and documentation while collaborating with service line owners to resolve complex issues and improve operational quality.

Qualifications

• 3-5 years of Active Directory knowledge including hierarchy/management group design, deployment, configuration and BAU support.
• Experience with all aspects of AD user and group management.
• Collaborate closely with service line owners and customers.
• Enterprise environment with strong change control practices.
• Self-starter who takes initiative and uses AD tools to a sophisticated level.
• Familiar with ServiceNow and organizational change processes.
• Strong communication skills for complex issues with customers and teams.

Responsibilities

• Collaborate in a cohesive management team, covering shifts to deliver a 24/7/365 function.
• Manage the team including timesheets, leave, performance, change requests, incidents and training.
• Respond to ad-hoc initiatives from other workstreams.
• Update documentation and repositories.
• Liaise with divisions to document processes, actions and outcomes.
• Ensure Privileged account provisioning/de-provisioning follows documented standards.
• Ensure privileged users have appropriate access based on roles.
• Monitor AD for unauthorized access, security breaches, and compliance violations.
• Review reports on Beyond Trust and user/group activity.
• Maintain documentation on AD privileged user/group management procedures.
• Identify areas for process improvements and implement changes.

Skills

AD management

Team leadership

Security mindset

ServiceNow

Change control

AD tooling

Windows AD

Effective communication

Tools

PowerBI

PowerApps

CNX

Splunk

BeyondTrust

CyberArk

ServiceNow

Job description

Are you an Active Directory specialist with a security mentality that loves leading people? Do you want to be integral to lead and maintaining our Privileged user and group accounts within Active Directory (AD) to ensure efficient performance, security, and access control within our organisation! We are looking for a Global Security Access Control (GSAC) Team Lead to lead a shift of skilled specialists, operating a 24/7 service, that involves creating, modifying, deleting Privileged accounts, Security groups as well as managing permissions and access rights, resolving issues, and ensuring compliance with company policies and industry standard methodologies.

Role summary: Lead a team to ensure that outstanding service levels are achieved while maintaining internal and customer Service Level Agreements and expectations. You will take accountability for processes, metrics and performance, while supporting tools and process maturity, compliance and quality measurement, training and operation of approved processes. Maintain the GSAC documentation and knowledge bases, serve as an escalation point and be able to resolve the most sophisticated problems independently, providing a high level of client support and conveying resolutions to customer issues Support and facilitate deep dives into process failure within the team to diagnose, treat and resolve them and evaluate standards and processes that the GSAC team is involved with and highlight any areas of improvement. Be a part of a management team that leads the team on a 24/7/365 shift pattern

Day to day responsibilities

• Collaborate in a cohesive management team, covering shifts to deliver an exceptional 24/7/365 function
• Management of the overall team including: approving timesheets, leave, performance management, change requests, customer concerns, incidents, critical issue management, training and mentoring
• Responding to ad-hoc initiatives and requests from additional workstreams
• Updating all relevant documentation and in related information repositories
• Liaise with divisions and departmental heads to both discover and detail all the processes, actions and outcomes required
• Certify that the teams create, modify, and delete Privileged user accounts and create and manage security groups to documented standards
• Ensure accurate Privileged account provisioning and de-provisioning according to company policies.
• Ensure Privileged users have appropriate access to network resources based on their roles.
• Apply the principle of least privilege to ensure secure access to organisational resources.
• Monitoring & Reporting: Monitor Active Directory for unauthorised access attempts, security breaches, and compliance violations using Privileged accounts. Review regular reports on Beyond Trust avoidance as well as user/group activity, group memberships, and security compliance. Track and document any changes made to Privileged user accounts, groups, or permissions.
• Stay up to date with the latest Active Directory features, security patches, and standard methodologies.
• Maintain accurate documentation on Active Directory Privileged user/group management procedures.
• Identify areas for process improvements and implement changes to improve efficiency and security for all the GSAC Processes.
• Assist in the development of Privileged user access policies and standards.

Required Skills

• Minimum of 3-5 years of Active Directory knowledge including hierarchy / management group design, deployment, configuration and BAU support.
• Experience with all aspects of AD user and group Management.
• Must be confident to collaborate closely with service line owners and customers.
• Experience working in an Enterprise environment with strong change control practices.
• Self-starter who takes initiative.
• Able to use AD tools to a sophisticated level.
• Familiar with Service Now and organisational change processes.
• Communicate effectively, particularly with issues that are more sophisticated with other customers and teams, referring when vital.
• Use developed communication skills so others can understand, with the ability to recognise when to refer issues appropriately.
• Proactively prioritise knowledge transfer sessions to enable team members to demonstrate the functionality of all new implementations within the Windows Security environment.

Highly Desirable Skills

• Solid grasp of Windows Active Directory Administration.
• Proven management experience, leading shifts and teams.
• Excellent verbal and document authoring skills.
• PowerBI & PowerApps/ CNX /Splunk.
• Knowledge of PAM products such as Beyond Trust/ CyberArk/ Advanced Excel.

Key Behaviours

• Maintain proficiency as a Windows Active Directory Administrator /Architect with Active Directory Systems Speciality.
• Excellent investigation and troubleshooting skills of complex issues and ability to locate application owners and liaise effectively with them.
• Motivated self-starter who can work independently as well as part of a team.
• High level of accuracy and attention to detail.
• Able to take direction from others when needed and not afraid to ask for help.
• Ability to learn new concepts and products with ease.
• Ability to think quickly and decisively and look for alternative solutions in challenging situations.
• Ability to produce clear and accurate technical documentation and train/hand-off design and implementation work.
• Ability to work to tight timescales and meet challenging deadlines.
• Ability to report in a formal and structured method.

Strengths and attributes you'll need

• Demonstrate energy and drive in getting things done.
• Evaluate the quality of the service(s) we provide and always try to do better.
• Committed to personal development and learning for themselves and for their team.
• Show insight into their own behaviour and the behaviours of others.
• Understand how to embed change so that improvements are sustainable and consistent.
• Contribute to presenting the vision, goals, successes, and lessons learned to their colleagues and team members

What you'll get in return

We recognize that to attract the best talent, we need to be flexible, and we are open to discussing work arrangements with you. We take hybrid approach to workplace; this role is hybrid/ digital first. As a global business, we rely on diversity of culture and thought to deliver on our goals. People are at the heart of what we do and drive the success of our business. Our colleagues thrive personally and professionally through our shared values of Integrity, Partnership, Innovation and Excellence are at the core of our culture. We embrace diversity and actively seek to attract people with unique backgrounds and perspectives. We are always looking at ways to become more agile, so we meet the needs of our teams and customers. We believe that an inclusive collaborative workplace is pivotal to our success and supports the potential and growth of all colleagues at LSE We're proud to have been recognised as a Great Place to Work in India 25.

Career Stage

Senior Associate London Stock Exchange Group (LSEG) Information: Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you. LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions. Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs as well as mental health or physical disability needs. You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering. LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.