Director, Cyber Hygiene and Metrics Engineering Lead

• Threat Modelling Engineering

  • Development of automated threat modelling platforms and integration the with security architects design processes to ensure threat modelling is executed as part the architecture design process.

• CLS will be building a platform to measure the effectiveness of security controls across the estate

  • This will require a big data and analytics platform that will necessitate metrics platform engineering (data architecture and data models, data governance, analytics and BI, big data technologies, data engineering, cloud engineering, data normalization and ETL).
  • Experience with AI Security
    • Build controls to limit LLM risks including prompt injection, data leakage, model poisoning and hallucination exploitation etc.
    • Define and implement AI guardrails and policy enforcement mechanisms (prompt filtering, output validation, access control etc.)
    • Design and implement secure AI architecture patterns.
    • Implement monitoring and detection controls from AI misuse.
    • Experience in securing AI agents.

• Engineering Leadership & Operating Model

  • Build and lead a high-performing security engineering function, aligned to product-based delivery.
  • Help define the target operating model for security engineering, including platform ownership, DevSecOps integration, and automation-first principles.
  • Establish clear engineering standards, patterns, and reusable security services.
  • Experience with tooling selection, deployment and vendor management.
  • Integration of tooling with downstream and upstream systems
  • Tooling automation development
  • Continuous Tooling Optimization
  • Platform Health Monitoring
  • Remediation Engineering
  • Resiliency Engineering

• Stakeholder Engagement & Strategy

  • Partner with CIO, CISO, heads of technology and senior business leaders to align security engineering initiatives with organizational priorities.
  • Work closely with the enterprise security architects and solution architects on control gaps, control maturity and business cases.
  • Translate risk and threat insights into practical engineering outcomes.
  • Manage vendor relationships and strategic technology partnerships.

What we’re looking for

• Senior leadership in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred).
• Proven delivery of large-scale security platforms end-to-end (design → build → run), including multi-system integration.
• Deep experience in application security/vulnerability/exposure management and/or identity & privileged access engineering.
• Strong track record of regulatory/audit engagement and evidence-based assurance.
• Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience.
• Strategic thinker with the ability to translate vision into execution.
• Strong communicator, able to influence at executive level.
• Data-driven and outcome-focused, with a bias toward measurable security improvements.
• Comfortable operating in fast-paced, evolving environments.

Professional qualifications / certifications

• Extensive experience in security engineering and architecture (~10 years), including ~5-7+ years in a senior leadership role.
• Experience in:
  • Working in highly regulated operations and complex organizational structures.
  • Reporting to senior leadership supporting executive level decision-making and prioritization.
  • Engaging in complex governance, contributing to multi-layered committees or forums.
  • Understand, interpret and apply regulatory requirements, compliance and industry standards.

Our commitment to employees

At CLS, we celebrate inclusion and consider this to be one of our strongest assets. We are committed to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including:

• Holiday - UK/Asia: 25 holiday days and 3 ‘life days’ (in addition to bank holidays). US: 23 holiday days.
• 2 paid volunteer days so that you can actively support causes within your community that are important to you.
• Generous parental leave policies to ensure you can enjoy valuable time with your family.
• Parental transition coaching programmes and support services.
• Wellbeing and mental health support resources to ensure you are looking after yourself, and able to support others.
• Employee Networks (including our Women’s Forum, Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about inclusivity.
• Hybrid working to promote a healthy work/life balance, enabling employees to work collaboratively in the office when needed and work from home when they don’t.
• Active support of flexible working for all employees where possible.
• Monthly ‘Heads Down Days’ with no meetings across the whole company.
• Generous non-contributory pension provision for UK/Asia employees, and 401K match from CLS for US employees.
• Private medical insurance and dental coverage.
• Social events that give you opportunities to meet new people and broaden your network across the organisation.
• Annual flu vaccinations.
• Discounts and savings and cashback across a wide range of categories including health and retail for UK employees.
• Discounted Gym membership – Complete Body Gym Discount/Sweat equity program for US employees.
• All employees have access to Discover – our comprehensive learning platform with 1000+ courses from LinkedIn Learning.
• Access to frequent development sessions on a number of topics to help you be successful and develop your career at CLS.