Our client, a leading global hedge fund, is seeking an experienced Information Security professional for a senior, high‑impact role focused on strengthening security across network, cloud, data, and systems environments. This great opportunity is ideal for someone joining a growing, technology‑first team. The role serves as a key escalation point for complex security challenges and shapes the organisation's security roadmap.
Key Responsibilities
- Enhance security across core domains including network, system, email, cloud, and data security.
- Act as a security advisor for major IT projects, ensuring risks are identified, managed, and mitigated.
- Manage and optimise a broad suite of security tools to ensure effective deployment and ongoing operation.
- Lead the design and implementation of security solutions and architectures protecting critical assets.
- Provide second‑line support for Security Operations, acting as an escalation point for complex issues.
- Conduct threat modelling and risk assessments to identify vulnerabilities and define mitigation strategies.
- Oversee the relationship with the Managed Detection & Response (MDR) provider to ensure continuous improvement.
- Deliver key initiatives on the security roadmap, aligned to business objectives and evolving threats.
- Collaborate with cross‑functional teams to promote security awareness and integrate best practices across the business.
Required Qualifications
- 10 years’ experience in information security roles such as security engineering, architecture, operations, or application security.
- Hands‑on experience with threat modelling, penetration testing, and automated security validation.
- Strong understanding of cloud, network, and systems security principles.
- Scripting experience in at least one language; Python or PowerShell preferred.
- Familiarity with security technologies including EDR, DLP, vulnerability scanners, firewalls, and email gateways.
- Strong analytical and problem‑solving skills, capable of addressing complex issues and designing practical solutions.
- Excellent communication skills with the ability to partner effectively with both technical and non‑technical teams.
- Degree in Computer Science, Engineering, or a related STEM discipline.
Nice to Have
- Deep knowledge of risk assessment methodologies.
- Exposure to security best practices across Azure, AWS, and GCP.
- Ability to analyse software for security risks, including code review, SAST/DAST, and identifying vulnerabilities in application design.
- Familiarity with regulatory frameworks (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR).
- Relevant security certifications.
#J-18808-Ljbffr