Senior IT Security Engineer

Your newpany- Financial Services

Your new role- Permanent - ON SITE 5 Days per week. - UK Only

We are looking for a highly skilled Information technology Security Engineer to join the IT team.
As the first line of defence in the IT department, the principal purpose of this job mainly focusses on information security, cybersecurity and data security, including a wide scope, such as physical security ofputer rooms, operating system level security of Windows and Linux, network security of firewall and other security devices, application security both development and testing phrase, terminal security, backup security, third party and supply chain security of IT service provider.
Liaison with the Head Office, Security Operation Centre of Data Centre for implementing security policies, projects and security controls. Work with Internal Audit and other departments to execute penetration tests, cybersecurity risk self-assessment, ensure best practice and international baseline standards are in place and in line with local regulations.
The ideal candidate will be responsible for managing information security systems, ensuringpliance with regulatory requirements, and conducting thorough security audits.
You will be part of the ITmittee and work closely with the risk andpliance team.
Ideally, having a background in IT / Network security, progressing into information security and cybersecurity.

**Key Responsibilities:**
- Develop, draught, implement, and maintain information security policies, procedures, and guidelines.
- Conduct regular security audits and assessments to identify vulnerabilities and ensurepliance with industry standards (, ISO 27001).
- Monitor and respond to security incidents, conducting investigations and implementing corrective actions.
- Collaborate with IT and other departments to ensure the security of network infrastructure and data.
- Manage risk assessments and vulnerability assessments to identify potential security threats.
- Oversee the implementation of security measures such as firewalls, intrusion detection systems, and data encryption technologies.
- Provide training and guidance to staff on information security best practices.
- Stay updated on the latest cybersecurity trends and technologies.

**Qualifications:**
- Bachelor's degree in Information Security,puter Science, or a related field.
- Professional certifications such as CISSP, CISM, or ISO 27001 Lead Auditor.
- Proven experience in information security management and conducting security audits.
- Strong knowledge of information security frameworks and standards.
- Excellent analytical and problem-solving skills.
- Strongmunication and interpersonal skills.

**Preferred Qualifications:**
- Experience with regulatorypliance requirements such as GDPR, HIPAA, or SOX.
- Familiarity with security tools and technologies such as SIEM, DLP, and endpoint protection.
CISA/CISSP/CCSPMCSA-Microsoft Windows ServerMCSE- Microsoft Certified Solution Expert;MCITP-Microsoft Certified IT Professional;VMware Certified Professional;CCNA/CCNPExperience with security tools and technologies such as intrusion detection systems, SIEM, and vulnerability management tools.Familiarity with regulatory requirements and industry standards related to IT security.
#4672461 - James Francis