Information Security Engineer – Investment Management

Overview

In this role you will own and drive security assurance for a London hedge fund, collaborating with New York colleagues to ensure controls meet regulatory and client expectations. You will lead audits, due diligence, and remediation across cloud, IAM, and monitoring domains, influencing security strategy and reporting to senior stakeholders. The position sits at the intersection of technology, risk, and governance, offering visibility and impact in a fast-paced environment. You will partner with engineering, risk, and infrastructure teams to continuously improve security controls and risk posture.

Pay / Benefits

• Salary to 150k
• Significant Bonus
• Generous Pension contribution
• Life Assurance
• Critical Illness cover
• Childcare vouchers`,`Enhanced Paternity package and Adoption Assistance`,`Charitable fund raising matching

Responsibilities

• Lead security assurance activities across the business
• Manage internal and external audits and client due diligence
• Drive remediation from findings to completion
• Evaluate and improve controls in IAM, vulnerability management, cloud security, incident management, and monitoring
• Provide oversight and reporting on security posture to senior stakeholders
• Collaborate with Engineering, Infrastructure and Risk teams to align with regulatory requirements

Key requirements

• Experience in information security, security assurance, IT audit or cyber risk within regulated investment management
• Strong understanding of security control frameworks, risk management and governance
• Experience managing internal and external audits, client DD and regulatory assessments
• Knowledge of cloud security, IAM, vulnerability management, incident response and security monitoring
• Ability to assess technical controls, challenge evidence, and drive remediation
• Excellent stakeholder management and communication skills with technical teams and senior leaders

• stakeholder management
• communication
• problem-solving
• cloud security
• identity and access management (IAM)
• vulnerability management

…