Senior Information Security Engineer

4w1 month ago

AJ Bell

London, GB · Full-time · £75,000 – £95,000

About this role

We are recruiting a Senior Information Security Engineer to support the Chief Information Security Officer in managing and reducing information security risks across Technology Services. This is a hands-on technical engineering role where you will help design, build and continuously improve the security controls, platforms and infrastructure that protect AJ Bell and our customers.

You will lead the design, delivery and ongoing improvement of enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments. You will also oversee patch management, support server hardening, and provide security oversight across projects and change initiatives, acting as a key technical link between the CISO function and Infrastructure teams.

You will be at the forefront of evolving our security capability, making sure tools and systems are secure, scalable and effective. You will work closely with Infrastructure and Service Delivery teams to implement secure configurations and hardening, while evaluating and adopting new security technologies to drive automation and integration.

This role offers the chance to build the security foundations of a leading financial services firm. You will contribute to continuous improvement of cybersecurity risk management processes and help enhance maturity across the organisation, leading adoption of new security technologies and ensuring smooth transition into operational support.

Requirements

Proven experience implementing enterprise security platforms.
Strong knowledge of security risk management tools and techniques.
Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways).
Experience working within frameworks such as ISO27001, NIST or similar.
Significant experience in IT security.
Financial services or e-commerce experience preferred.
Strong problem-solving skills and ability to take ownership and deliver end-to-end solutions.
CISSP (achieved or in progress) desirable.

Responsibilities

Lead the design, delivery and ongoing improvement of enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments.
Design and implement secure infrastructure controls aligned to industry best practice, ensuring scalability, resilience and operational effectiveness.
Evaluate, select and implement new security tools and platforms, driving automation, integration and measurable value across the estate.
Lead the adoption of new security technologies, ensuring smooth transition into operational support and long-term sustainability.
Oversee patch management across systems and hardware, ensuring effective coordination and risk reduction.
Support server hardening and secure configuration initiatives in collaboration with Infrastructure and Service Delivery teams.
Provide security oversight across projects and change initiatives, ensuring security is embedded from design through to delivery.
Support audits, regulatory reviews and due diligence activities, ensuring evidence and controls are robust and well maintained.