CLS Group
Director, Cyber Hygiene and Metrics Engineering Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About CLS
CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.
Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.
CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.
Our ambition to make a positive difference starts with our people. Our values – Protect, Improve, Grow – underpin everything that we do at CLS and define and shape a supportive and inclusive working environment in which everyone is encouraged to be open and forward-thinking.
Job Information
Functional Title
- Cyber Hygiene and Metrics Engineering Lead
Department
- CISO
Corporate Level
- Director
Report To
- Nathan Macrides (Head of Security Architecture, Design and Engineering)
Location
- London, 2 days on-site per week
What You Will Be Doing
-
Lead the end-to-end design and implementation of the cyber hygiene security tooling and the security metrics analytics and reporting platform. The lead will work closely with the security operation teams that run the security controls related to cyber hygiene and security analytics, measurement, metrics and reporting:
-
Cyber Hygiene Architecture
- Mature the cyber hygiene architecture across CLS to ensure comprehensive discovery of vulnerabilities, misconfigurations.
- Vulnerability management (VM) lifecycle, standardized processes, modernization in the face of AI, standardization and optimization.
- Support AI application remediation and patching.
- Ensure scan completeness of the estate against the CMDB.
-
Experience with ServiceNow VM modules, Qualys and Wiz desirable.
-
Experience with security configuration baselines and automated testing.
-
-
Crypto Discovery and Inventory Engineering
- Engineer the solution to discover and inventory crypto key material across the estate in preparation for a post quantum crypto world.
- Experience with EDR deployment and management.
-
Secure Storage & Transfer Engineering
- Develop solutions to securely transfer files in and out of the organization, at the user and application levels.
-
API Security Engineering
- Implementation of API security platform to inventory APIs and find vulnerabilities and misconfiguration in APIs.
-
Application Security Testing engineering (SAST/DAST/SCA/Frontier AI code scanning)
- Integration the code scanning tooling into the CI/CD pipelines.
- Integration with developer tooling and reconciliation with SNOW VMR ticketing.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
Threat Modelling Engineering
- Development of automated threat modelling platforms and integration the with security architects design processes to ensure threat modelling is executed as part the architecture design process.
-
Metrics Platform Engineering
- CLS will be building a platform to measure the effectiveness of security controls across the estate this will require a big data and analytics platform that will necessitate metrics platform engineering (data architecture and data models, data governance, analytics and BI, big data technologies, data engineering, cloud engineering, data normalization and ETL).
-
AI Security
- Build controls to limit LLM risks including prompt injection, data leakage, model poisoning and hallucination exploitation etc.
- Define and implement AI guardrails and policy enforcement mechanisms (prompt filtering, output validation, access control etc.)
- Design and implement secure AI architecture patterns.
- Implement monitoring and detection controls from AI misuse.
- Experience in securing AI agents.
Engineering Leadership & Operating Model
- Build and lead a high-performing security engineering function, aligned to product-based delivery.
- Help define the target operating model for security engineering, including platform ownership, DevSecOps integration, and automation-first principles.
- Establish clear engineering standards, patterns, and reusable security services.
- Experience with tooling selection, deployment and vendor management.
- Integration of tooling with downstream and upstream systems
- Tooling automation development
- Continuous Tooling Optimization
- Platform Health Monitoring
- Remediation Engineering
- Resiliency Engineering
Stakeholder Engagement & Strategy
- Partner with CIO, CISO, heads of technology and senior business leaders to align security engineering initiatives with organizational priorities.
- Work closely with the enterprise security architects and solution architects on control gaps, control maturity and business cases.
- Translate risk and threat insights into practical engineering outcomes.
- Manage vendor relationships and strategic technology partnerships.
What We’re Looking For
- Senior leadership in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred).
- Proven delivery of large-scale security platforms end-to-end (design → build → run), including multi-system integration.
- Deep experience in app application security/vulnerability/exposure management and/or identity & privileged access engineering.
- Strong track record of regulatory/audit engagement and evidence-based assurance.
- Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience.
- Strategic thinker with the ability to translate vision into execution.
- Strong communicator, able to influence at executive level.
- Data-driven and outcome-focused, with a bias toward measurable security improvements.
- Comfortable operating in fast-paced, evolving environments.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Professional Qualifications / Certifications
- Extensive experience in security engineering and architecture (~10 years), including ~5-7+ years in a senior leadership role.
- Experience in:
- Working in highly regulated operations and complex organizational structures.
- Reporting to senior leadership supporting executive level decision-making and prioritization.
- Engaging in complex governance, contributing to multi-layered committees or forums.
- Understand, interpret and apply regulatory requirements, compliance and industry standards.
Our Commitment to Employees
We are a small company with a big mandate, so every person is essential to our success. We are also committed to employing and retaining the most talented and dedicated people.
What makes us interesting goes beyond our competitive salaries and great benefits. Our work environment is designed around quality outcomes, not output. The FX market would cease to function without our services, and we take pride in being responsible for keeping it running smoothly.
We are different from other financial institutions in that we have a flatter and more transparent structure with accessible leadership. You will be seen, heard and empowered to develop your career.
We are a purpose-driven organization, with an inclusive culture that focuses on doing what is right. The well-being of our people is as important to us as the resilience of our systems. In addition to encouraging our people to ‘locate for their day,’ we run a range of initiatives that support employees’ sense of belonging and physical, emotional and mental well-being.
Our extensive benefits for employees typically include:
- Vacation/annual leave: 25 days in UK/Asia + 3 life days, 23 in US + 3 life days
- Private medical and dental cover and life insurance
- Generous pension contributions in the UK and Asia; matching 401(k) in the US
- Paid volunteer days
- ‘Locate for your day’ hybrid working – 2 days a week in office.
- Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning.
- Paid parental leave / Coaching and support services
- Career development / LinkedIn Learning
- ‘Heads down days’ with no meetings on the last Friday of every month
- Wellbeing / Mental health support
- Diversity Council / Affinity groups (Women’s Forum, Black Employee Network, Pride Network, Parents & Caregivers Network, Sustainability Network)
- Social events
Awards
- The Sunday Times Best Places to Work 2023 & 2024 / Big Company / The Sunday Times Awards
- Third place in Britain’s Healthiest Workplace 2022 / Medium Company / Vitality Awards
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location