Cyber Security Engineer

A newly created, dedicated cyber security engineering role. It will own threat analysis and day-to-day security engineering for a fast-growing global fund administrator.

ABOUT THE BUSINESS

Our client is a private equity-backed fund administrator that operates globally and is growing quickly. It has offices across the UK, the Isle of Man, the US and Asia, and serves clients in many regulatory jurisdictions. Its scale and growth mean it now needs a dedicated security function.

THE OPPORTUNITY

This is the firm's first dedicated cyber engineering hire. Until now, security has been split across senior technology leadership, the Head of IT and a qualified service desk engineer, alongside their other work.

The new hire will take full ownership of a standalone function focused on continuous threat analysis. They will have the chance to shape how security operates across a global, multi-jurisdiction business, with senior visibility and a clear remit.

KEY RESPONSIBILITIES

• Run continuous threat analysis and monitoring across the firm's global estate. Identify, assess and prioritise emerging threats.
• Design, implement and maintain security controls across infrastructure, cloud, endpoints and identity.
• Lead incident detection, response and post-incident review. Maintain playbooks and escalation routes.
• Manage vulnerability scanning and patching cadence, and coordinate penetration testing and remediation.
• Support control frameworks and client assurance, including SOC 1 and ISAE 3402 evidence, audits and client due diligence questionnaires.
• Track regulatory and data-protection requirements across the jurisdictions the firm operates in, and map them to technical controls.
• Report regularly to the Head of IT and senior leadership on threat landscape, risk posture and remediation progress.
• Raise security awareness across the business and advise the IT and service desk teams on secure practice.

SKILLS AND EXPERIENCE

• Hands-on experience as a cyber or security engineer, with a strong track record in threat analysis and incident response
• Practical knowledge of security tooling such as SIEM, EDR/XDR, vulnerability management and identity/access management
• Experience securing Microsoft 365, Azure and/or AWS environments
• Able to work independently as the sole dedicated security specialist, and to set priorities with limited direction
• Clear communicator who can explain risk to non-technical stakeholders
• Financial services background, ideally in fund administration, asset or wealth management, or banking
• Experience across multiple jurisdictions and regulatory regimes
• Exposure to SOC 1/ISAE 3402, ISO 27001, NIST or CIS frameworks
• Relevant certifications, such as CISSP, CISM, OSCP, GIAC or Microsoft security certifications