Role overview

We are recruiting for an experienced IT Cyber Security Specialist to join the IT Infrastructure Engineering Team, part of the Technology Department within the wider Business Services function, based at the firm's head office in London.

The team is responsible for the security, and continual improvement of the firm's global IT infrastructure, systems, and cybersecurity capabilities, working closely alongside the Infrastructure Operations Team, which manages day-to-day service delivery and support.

As a project, engineering, and security-focused function, the Infrastructure Engineering Team delivers technology projects and programmes, as well as driving strategic infrastructure and cybersecurity enhancements across the firm's global offices.

Reporting to the IT Infrastructure Engineering Manager, the IT Cyber Security Specialist is a key technical role responsible for the ownership and continual development of the firm's cybersecurity controls and security architecture. The successful candidate will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the firm's technology environment remains secure, resilient, and aligned to business needs.

Key responsibilities The key responsibilities of this role are set out below and there may be others which are not listed. You may be required on occasion to work outside our normal working hours of 9:30am to 5:30pm.

Cyber Security & Engineering

• Constantly review and improve the firm’s security posture and external security rating.
• Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams.
• Understand current and emerging security threats.
• Assist and lead in Incident Response investigations and mitigation.
• Communicate threats and deliver training and awareness programmes to other team members.
• Produces quarterly privilege access slides, suggesting ongoing improvement for monthly operational security slides, measured using secure score.
• Evaluate, test and recommend security enhancements.
• Develop business continuity plans of critical business services in the event of a disaster.
• Lead CE+ accreditation.
• Identify security risks and exposures, determine the cause of security violations and suggest procedures to halt future incidents.
• Perform targeted regular and ad-hoc scans to identify potential breaches of the firm data and security and data protection policies.
• Identify, analyse, monitor and minimise areas of risk that pertain to Information technology.

Project Delivery

• Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review.
• Ensure that proposed infrastructure architecture/design are aligned with Firms policies.
• Post project, participate in evaluating the success of the project, identifying best practices and lessons learned.

Third Level Support

• Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert.
• Liaison with 3rd party suppliers on system issues.
• Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation.
• This role requires the ability to communicate complex ideas clearly and effectively. Strong soft skills, including active listening, presentation, and communication skills, are therefore essential.

Candidate profile Candidates for this position must have:

• 10+ years of experience as a full time IT professional, 5 years in a similar role.
• Demonstrable experience in a Cyber Security position with a focus on incident response, threat monitoring, and vulnerability management
• Hold at least one security related certifications such as CISSP, CEH, CCNA Security
• Experience with threat prevention techniques and tools
• Knowledge of best practices in modern security architectures and incident responses
• Experience of Infrastructure Business Continuity or Disaster Recovery planning.
• Experience designing, integrating and managing complex infrastructure solutions.
• Excellent problem-solving ability including leading multi-disciplinary teams to identify, research and coordinate resource to diagnose & troubleshoot complex issues.
• Excellent skills with Windows Server 2016/2019/2022 (Active Directory multi-site, DHCP, DNS, Intune, Group Policy, AGPM, PKI, ABDA, DFS, Entra, Azure SSO).
• Strong written and oral communication skills, and the ability to effectively communicate wi