Security Engineer

Job Description

Are you ready to be the cybersecurity cornerstone of a fast-moving tech environment? We’re looking for a sharp strategic IT Security Engineer to lead our company-wide security efforts from infrastructure hardening and penetration testing to audit readiness and compliance documentation. You’ll own the roadmap for SOC2 and HiTrust, collaborate across Dev Ops and RAQA, and implement proactive measures that protect our systems, data, and reputation.

If you thrive on precision, automation, and staying five steps ahead of threats, this is your chance to make a measurable impact.

• Drive development standards and processes related to cybersecurity compliance.
• Monitor all cybersecurity processes, operations, and infrastructure monitoring—internal and external policy and regulatory compliance.
• Review and evaluate development designs (for existing products and during design phase for new products) to identify gaps in cybersecurity controls and drive updates to any cybersecurity or compliance documentation.
• Liaise with internal and external stakeholders to prepare for SOC2 Type 2 and HiTrust.
• Drive cybersecurity audit strategy and readiness from a dev security and devops perspective.
• Identify, implement and maintain all security tools and technology.
• Schedule (and ideally automate) internal vulnerability scans, remediating findings, and ensuring accurate & timely reporting to satisfy PCI DSS requirements.
• Schedule annual Penetration Tests with external supplier(s) and ensure implementation of items identified in remediation plans.
• Complete required cybersecurity applications and records for large customers and audits—including reporting as required.

• Drive and action where required the planning, installation, monitoring, and maintenance of IT systems and infrastructure focused on cyber security—including any penetration testing that is required.
• Design and execute short‑ and long‑term initiatives to detect and prevent any security vulnerabilities in the IT infrastructure (cloud security and devops) to meet current and future needs.
• Develop, execute, and oversee procedures, policies, and related training plans for cybersecurity project management and infrastructure administration.
• Conduct research and recommend changes in services, products, protocols, and standards to support development efforts and infrastructure procurement.
• Define software and hardware security standards in collaboration with stakeholders and owners for the provisioning of the development and IT infrastructure.
• Ensure appropriate security levels on network infrastructure and servers are maintained, ensuring that the IT team follows the requirements set in line with cybersecurity standards.
• Implement cybersecurity continuous improvement programs.
• Crisis management—keeping stakeholders informed and actively working with teams to return service in the shortest possible time frame. This would include documenting all disaster recovery procedures.
• Effective management and optimisation of vendors (where applicable) as well as collaborating with the dev and IT teams as necessary.

• Collaborate with divisional RAQA team and Senior Managers to define and centralize risks and put mitigation measures in place for new and existing products and services from a cybersecurity and privacy perspective.
• Improve the automation of security controls.
• Work closely with the dev team on defining industry‑standard processes and system requirements, identifying and proposing fixes to shortcomings in the development lifecycle, code reviews, and scanning as well as infrastructure provisioning.
• Work with the dev team to ensure that security standards and policies are being set up and configured correctly, ensuring adherence to certifications and best‑practice.
• Assist with remediations on risk items identified from security and preventative detection reviews to ensure compliance and ensure the security posture of the IT landscape is ensured at all times.
• Remediate audit items by putting measures in place to prevent the recurrence of findings—for example by making sure…