Senior Security Engineer I

As an Information Security professional, you will oversee security, compliance and risk activities across stakeholders to protect information and enable business growth. You will engage with customers and auditors to strengthen controls and respond to security requirements. This role sits at the intersection of security, legal and business teams to ensure confidentiality, integrity and availability of systems. You will work on audits, evidence collection and cross-functional remediation, shaping a resilient security posture. You will be a client-facing SME, translating complex security topics into clear actions and outcomes.

• Lead and support customer security reviews, due diligence questionnaires, assessments and audits
• Coordinate evidence collection, assess control effectiveness, track findings and maintain documentation
• Support programs aligned with ISO 27001, NIST 800-series, SOC 2, PCI and Cyber Essentials
• Serve as client-facing Information Security SME, providing timely responses to build trust
• Partner with Security, Technology, Legal, RFP and business teams on requirements, risks and remediation
• Maintain security policies, procedures, controls and supporting SIG documentation
• Assess security programs to strengthen governance, vulnerability management, monitoring and SDLC practices
• Communicate risks, findings, and progress to technical teams, stakeholders and leadership

• Significant experience in information security, cybersecurity, IT risk or related technology discipline
• Knowledge of on-premises, colocation and cloud environments; cloud security and compliance tech
• Experience with ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, including assessments or audits
• Understanding of governance, controls, vulnerability management, monitoring and SDLC
• Experience managing customer security inquiries and remediation activities
• Strong project management, organization, prioritization, problem-solving and change management
• Excellent written, verbal, presentation and customer-service skills
• CISSP, CISM, CISA or comparable certifications valued but not required

• strong communication
• customer service orientation
• collaboration across cross-functional teams
• security governance and controls
• vulnerability management and monitoring
• cloud, on-premises and hybrid security