Senior Information Security Engineer – Investment Management

Overview

In this role you will lead the UK security function for a data- and technology-driven investment manager, collaborating with global teams to drive security strategy and governance. You will design, implement and operate security controls and GRC programs, translating regulatory requirements into practical technical measures. The position offers high visibility and impact as you influence security posture and reporting to senior stakeholders. You will work closely with cross-border teams to scale security across the London office and beyond.

Pay / Benefits

• Salary to 150k
• Significant bonus
• Generous pension contribution
• Life assurance
• Critical illness cover
• Childcare vouchers

Responsibilities

• Lead and own the security function for the London office, collaborating with New York stakeholders
• Design, implement and maintain security controls and GRC compliance
• Translate regulatory requirements into practical technical controls
• Report on security posture, risk and compliance to senior leadership
• Influence global security strategy and governance
• Act as the sole UK-based security engineer/lead for security efforts
• Partner with CISO team and auditors to ensure governance and audits are met
• Work with cross-functional teams to manage risk in a data- and technology-driven financial services organisation

Key requirements

• Experience in Systems/Infrastructure Security Engineer or similar role
• Strong knowledge of network and endpoint security operations, vulnerability management and threat assessment
• Proficiency with Linux/Unix administration and Windows security and GPOs
• Experience with EDR tools (CrowdStrike, Microsoft Defender for Endpoint) and SIEM platforms (Splunk, ELK Stack, Datadog)
• IAM concepts and tools (Active Directory, OKTA)
• Experience in Information Security, Security Assurance, IT Audit or Cyber Risk within a regulated investment management environment
• Understanding of risk management frameworks (NIST, ISO 27001, COBIT) and security control design
• Excellent stakeholder management and ability to communicate with auditors and senior leaders

• Stakeholder management
• Effective communication
• Leadership/mentoring
• CrowdStrike
• Microsoft Defender for Endpoint
• Splunk

…