10th April 2024
Security Engineering Manager
Engineering
London
Up to £120K
Security Engineering Manager
Central London up to £120K
3 days per week in the office
Security Engineering Manager:
This well-established bank is looking to hire a Security Engineering Manager, reporting directly to the CISO to help roll out their new security strategy. This will be a role working with cutting edge technologies and using AI to automate large parts of the security process. The Security Engineering Manger will also be responsible for forming and leading a team as the function grows and the security programme continues its journey from on-prem to cloud in an AWS environment.
Security Engineering Manager: The Role
As a Security Engineering Manager you will be the first hire into this growing team so your role will involve a mixture of hands-on security engineering including python Scripting as well as hiring and supporting a team. Some of your duties will include:
- Developing and implementing an overarching security technology strategy aligned with business objectives, industry best practices, and regulatory requirements.
- Using AI in a strategic way to automate parts of the security updates. Proven experience of this is crucial to your successful application.
- Securing applications through hands on engineering to ensure that the bank’s assets are safe and the regulations are adhered to.
- Ensuring that all cloud solutions are configured and maintained in line with the company security policies and industry benchmarks.
- Ensuring the proper planning, execution, and completion of security technology projects, ensuring that these are delivered on time and on budget
- Performing risk assessments and vulnerability assessments to identify potential security gaps or weaknesses in existing technologies and recommending appropriate remediations.
- Monitoring security technology function and respond to any errors and failures which may occur.
Security Engineering Manager: Your profile
- An extensive background in IT/Cyber Security roles.
- Experience in securing cloud/cloud hybrid services (including IaaS, PaaS, and SaaS variances).
- A good understanding of AWS security is essential
- An excellent grasp of the security of applications, infrastructure, and networks. The ability to perform detailed, demonstrable engineering tasks in the security technologies that must be adopted for safeguarding an enterprise shall include at least two of the following components:
- Cyber/Web Security (Firewalls, DoS, Proxies, CDN/WAF, API Gateways etc.)
- Data Security (DLP, DRM, etc)
- IDAM (FIAM, SSO, etc). Experience with Microsoft AD
- Mobile Security (EMM, MAM, MDM etc)
- Cloud Security (NSGs, CA, AIP, ARM, Key Vaults, etc)
- Detailed working knowledge of infrastructure security requirements and good understanding of recognised information security management and governance frameworks ISO27001, NIST 800-53 & CSF, Cyber Essentials
- A recognized information security qualification (CISSP, CCSP, etc.)
Consultant - Jack Hickford
Telephone: 0207 392 7505
Email: jack.hickford@spencer-rose.com
Share This Position