Digital Security Architect required for major , global name in Financial Services. The Digital Security Architect will play a lead role in designing and implementing global identity and access management solutions , with responsibilities for international collaboration with colleagues and key stakeholders located in global offices across, Europe and the APAC region.

The Digital Security Architect will come with proven architectural level experience designing and implementing Global Identity and Access Management solutions and of designing & supporting Global API Management solutions and linked technologies.

The Digital Security Architect will be a subject matter expert with industry standard Security Tools and User repositories such as Siteminder, LDAP and SSO with extensive experience in Web Access Management products such as Siteminder & Single Sign-On technologies including SAML and O-Auth.

Additional Experience of Threat detection and Risk management technologies and experience with any Cloud based Identity and Access Management solutions is strongly preferred.

The Digital Security Architect will a Strong understanding of Networks, Databases, Security, Application & Infrastructure design and be comfortable relating to technical and non technical audiences.

For more information and a more detailed job description please contact Neil Morgan at McGregor Boyall.

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Senior Cyber Threat Intelligence Manager required for dynamic Cyber Security function within global banking organisation.

The Senior Cyber Threat Intelligence Manager will be a champion for Cyber Security and Threat Intelligence within the organisation and participate in the local and regional intelligence sharing community . The Senior Cyber Threat Intelligence Manager will represent the Bank and its profile in the space while producing excellent written intelligence reports.

The Senior Cyber Threat Intelligence Manager will be a high quality communicator that will establish, develop and own relationships with senior internal and external stakeholders. They will also act as a part of the incident response team where appropriate.

The successful candidate will come with over five years experience in threat intelligence within the financial services sector, preferably within a banking environment. Experience in using various open sources and tools to research external threat actors and threat actor groups is preferred as is previous experience in SOC analysis. Experience with Linux/Unix & database technologies is advantageous as is the ability to create scripts with Python, Bash and SQL.

Applications from candidates with security related degrees and relevant security industry certifications such as CISSP, CISM, CISA , CREST CTIM, CREST CTIA are welcomed.

For more information on this role please contact Neil Morgan at McGregor Boyall.

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

IT Security Architect – Permanent – Canary Wharf

An exciting opportunity has arisen for a highly experienced Security Architect to join our client’s security team in Canary Wharf on a permanent basis. The business in question operates in a niche area of the Financial Services industry and absolutely dominate their market.

Responsibilities

• As part of the IT Security team, develop and implement the regional security strategy.
• Evaluate, design and implement new technology and processes to help protect the group, whilst adopting a risk-based design methodology.
• Evolve security architecture and solution principles to support business projects.
• Oversee design principles and controls relating to 3rd party solution providers.
• Ratify control decisions and technical controls.
• Research new security related products and services to ensure that the business is equipped with appropriate industry tools and solutions.
• Promote security awareness throughout the business.
• Conduct security risk assessments for projects (including 3rd parties).

Requirements

• Sound knowledge of enterprise security concepts, frameworks and products.
• Experience of working in financial services sector (especially banking) and knowledge of the security requirements for this sector and associated standards and frameworks.
• Extensive experience of enterprise security solutions and best practice controls for infrastructure and application architectures.
• Technical security implementation and analysis experience in a first-class international business.
• Prior relevant experience gained in a security project/consultancy/infrastructure/architect orientated role.
• Experience with intelligence gathering regarding security threats.
• Experience of conducting risk assessments using best practice risk management methodologies.
• Cost effective approach to safeguarding the integrity, availability and confidentiality of data and risk mitigation.

IT Security Architect – Permanent – Canary Wharf

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

GRC Specialist – Canary Wharf – Permanent

Job overview

We are partnered with a well-established, highly regulated and world class FX business based in Canary Wharf, who are looking for several GRC specialists to bolster the existing team and help manage the Governance Risk and Compliance function of the company.

You will be working for a business that truly understands and prioritises Information Security, offers excellent financial compensation and provides outstanding career progression. Certainly a “career boosting” name to add to your CV.

Responsibilities

• Lead and support the Security response to regulatory deliverables, including examinations, continuous monitoring sessions, and responses to regulatory correspondence.
• Serve as a Security liaison to the Regulatory Affairs division; translate relevant directives, guidance, and rules into actionable data for the CISO and wider Information Security team.
• Serve as the accountable individual for Internal Audit deliverables
• Prepare and deliver Security briefings for Security teams, the CISO, the Executive Management Committee and the Board.

Requirements

• Extensive experience in a similar role
• Experience working in a highly regulated and complex environment
• Strong work ethic with focus on meeting deadlines and objectives
• Ability to manage company wide, strategic projects
• Strong verbal and written communication skills. Ability to communicate effectively and confidently with users, team members, and management
• Strong analytical, strategic thinking and problem-solving skills, including a thorough understanding of how to interpret business needs and translate them into application and operational requirements
• Strong skills working with MS Excel, MS Project, MS Word, MS Power Point

GRC Specialist – Canary Wharf – Permanent

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Cyber Security Project Manager required for leading, global name in financial services.

The Cyber Security Project Manager will work within the Cyber Resilience Enhancements team which has specific focus on Security Tooling & Information Security Processes and Policies for the organisation.

The Cyber Security Project Manager will have a minimum of 2 years’ experience managing the full lifecycle of projects covering Identity and Access Management, Privileged Access Management, Security Incident and Event Monitoring and Security Governance tooling, preferably within a financial institution, or Information Technology services provider. Any additional experience and knowledge around Information Security, Governance , Risk & Compliance is strongly desired.

My client will also welcome experience in IT Security technology, tooling, controls frameworks and best practice along with a working knowledge of IT Security frameworks (E.G. NIST) and experience of using structured methodologies (e.g. Prince2, ITIL, PMI, APM, Lean/Six Sigma).

The Cyber Security Project Manager will works closely with Solutions Architects , Security Engineers, and other Operational and Product Management teams to ensure all services are delivered successfully. They will come with first class communication skills coupled with the ability to build strong stakeholder relationships across the business.

Applications from candidates with a IT security or business management related degree are welcomed.

For more information and a more detailed job spec please contact Neil Morgan at McGregor Boyall

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Security Engineer – Application Security – Secure by Design

Summary

In this role you’ll be on the front lines of innovation, working with a highly motivated team focused on analysing, designing, developing and delivering solutions built to stop adversaries and strengthen operations. Your research and work will ensure stability, capacity and resiliency of products.

Responsibilities:

• Engage and improve the whole lifecycle of services – from inception and design, through to deployment, operation and refinement.
• Scale through automation and evolve systems by pushing change that improves reliability and velocity.
• Design, develop, test, deploy, maintain and enhance software/tooling solutions.
• Design and implement automated deployment strategies that scale with the business.
• Research, design and apply advanced security techniques.
• Manage individual project priorities, deadlines and deliverables.

Requirements:

• Experience in software engineering comprising of build release management, software configuration, design, development and implementation.
• Highly skilled in application development, deployment, security and troubleshooting, particularly in a cloud environment.
• Solid understanding of design patterns such as MVC, Singleton and Factory.
• Knowledge in at least one public cloud service - Amazon Web Services (AWS), MS Azure, IBM, Google Cloud, Oracle, VMware…
• Professional level experience programming/scripting in C/C++, Java, Javascript, Python, Bash, Shell and/or Ruby
• Well versed in various operating systems like Linux, Windows, Mac and/or CentOS.
• Experienced in version control and source code management tools like GIT, SVN, and TFS.
• Knowledge in relational and NoSQL databases like MySQL, SQLServer, Oracle and/or MongoDB.
• Involved in the functional usage and gained working knowledge of web servers like Tomcat, HTTP, JBOSS, IIS, Websphere, Weblogic, and Nginx

• Familiar with configuration management tools such as Ansible, Puppet and/or Chef
• Experience using cloud provisioning tools such as Terraform or CloudFormation
• Knowledge of Cybersecurity organization practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities, including incident response methodologies
• Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals
• Experience with Agile and can work with at least one of the common frameworks is highly desired.
• Ability to analyse vulnerabilities, threats, designs, procedures and architectural design, producing reports and sharing intelligence

Security Engineer – Application Security – Secure by Design

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Threat and Vulnerability Lead - London - Contract

We are recruiting for a Threat & Vulnerability SME to join a market leading, global brand in London, on a contract basis. This role is heavily project focused, so we need someone who has strong experience implementing security processes, services, projects etc..

Main responsibilities;

• Work with other Digital Security SME’s to build a view of all assets to be included within the scope of the Digital Threat & Vulnerability Management scope
• Develop a process to identify brand and technology threat as relevant to the Digital business and landscape
• Incorporate Threat metrics into the vulnerability management lifecycle to better understand the criticality and priority of vulnerability remediation
• Manage vulnerability management program, scanning functions, code review, firewall review ensuring regular scanning and review of assets and applications to identify network, infrastructure, and configuration vulnerabilities;
• Engage with Security Product Leads and Leadership within to continuously enhance and communicate the importance of vulnerability remediation from a technical perspective;
• Using the existing toolset, ensure that all vulnerabilities are tracked and have an appropriate system owner.
• Ensure new/all vulnerabilities are communicated in a standard, efficient and timely manner.
• Build and operate a process to contain or remediate zero-day vulnerabilities in order to protect the Digital infrastructure
• Develop an emergency process to engage appropriate leadership in the event of an emergency remediation activity in order to expedite fix or containment
• Build a dashboard that is accessible by various technical and non-technical stakeholders and that is continuously updated with the running status of vulnerabilities with the Digital infrastructures
• Using the existing toolset, design and deploy the relevant vulnerability management infrastructure to support both internal, external, XaaS and partner vulnerability scanning capabilities
• Support new project, programs or initiatives with vulnerabilities scanning of new or existing assets as required
• Review and risk assess the criticality and priority of all vulnerability scans (along with existing toolset for prioritisation)

Requirements;

• Minimum of 2 years working on large scale threat & vulnerability management
• Good knowledge and experience with XaaS solutions such as AWS, Salesforce, Adobe, etc
• Good knowledge of working with vulnerability management tools such as Qualys, Nessus, Kenna, Fortify, etc
• Good technical knowledge of Linux (RHEL, Debian, OpenSUSE, Ubuntu) Windows Server/Desktop, OSX, etc
• Good knowledge of development languages (Java, Python, JavaScript, NodeJS, Ruby) a plus
• Technical knowledge and experience of IT architecture and infrastructure
• Good understanding of information security standards
• Broad knowledge of good security practice ensuring all aspects of Confidentiality, Integrity and Availability are adhered to;
  • Excellence at stakeholder engagement and build strong partnerships across the technology and business team
  • Knowledge on security best practices and frameworks (ISOIEC 27001, NIST, COBIT, ISF, ITIL, SABSA, OWASP)
• Open for travel occasionally

Threat and Vulnerability Lead - London - Contract

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.