Selby Jennings
Information Security Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Engineer
A leading investment firm is looking to hire an experienced Information Security Engineer to play a key role in strengthening and evolving its security function. This position offers a blend of hands-on technical security, security assurance, risk management, and governance, making it ideal for someone who enjoys operating across both engineering and GRC disciplines. You'll work closely with technology teams, auditors, compliance, legal, and business stakeholders to assess security controls, drive remediation efforts, and help shape the firm's overall security strategy.
Key Responsibilities
- Lead and support internal and external security audits, regulatory reviews, client due diligence exercises, and security assessments.
- Evaluate the effectiveness of security controls across infrastructure, cloud, identity, endpoint security, vulnerability management, monitoring, and data protection.
- Manage audit findings, risk treatment plans, control deficiencies, and remediation activities through to completion.
- Conduct security and technology risk assessments, documenting risks, mitigations, and improvement initiatives.
- Act as a trusted advisor to technical and business teams on security controls, regulatory requirements, and best practices.
- Provide oversight of security processes including IAM, incident response, vulnerability management, cloud security, and security monitoring.
- Develop and deliver reporting on security posture, audit activity, control effectiveness, and material risks.
- Identify opportunities to improve security processes, tooling, automation, and reporting capabilities.
- Serve as a key point of contact for auditors, assessors, and other assurance stakeholders.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we are looking for
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- 5+ years of experience within Information Security, Security Engineering, Security Operations, Technology Risk, Security Assurance, or a related field.
- Strong understanding of enterprise security domains including:
- Identity & Access Management (IAM)
- Vulnerability Management
- Endpoint Security
- Cloud Security
- Logging & Monitoring
- Incident Management
- Data Protection
- Experience supporting audits, regulatory assessments, security reviews, or assurance programmes.
- Working knowledge of security frameworks such as ISO 27001, NIST CSF, NIST 800-53, or CIS Controls.
- Ability to assess technical controls and translate security requirements into practical, business-aligned solutions.
- Strong stakeholder management and communication skills, with the confidence to challenge where required.
- Financial services, asset management, hedge fund, banking, or other regulated industry experience.
- Experience with security tooling including SIEM, EDR, cloud security, vulnerability management, identity platforms, and GRC tools.
- Familiarity with UK financial services regulatory and operational resilience requirements.
- Professional certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor/Implementer.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills