Cyber Security Manager

Our Technology Infrastructure team operates globally and is responsible for every aspect of the firm's platforms. This ranges from our EUC/Office environments to Trading and Core service Co-Location Data Centres, and extends to Public Cloud, delivering top-tier technology services to a dynamic and demanding Trading organisation.

In addition to meeting the round-the-clock operational demands of the platforms, we continuously evolve and transform our platforms to maintain a competitive edge that our business requires. We innovate to provide valuable solutions and leverage our skilled Technology teams to deliver against rapidly changing business requirements.

The Cyber safe and secure operating environment is of critical importance to the organisation with oversight of all Cyber aspects from perimeter to endpoint via multiple layers of security and protection mechanisms in between.

Working closely with the Business and Technology areas, The Cyber Security Manager owns the company’s current and future cyber security strategy, including Posture, Policy and Compliance standards creation and enforcement along with related technologies and services to achieve.

A hands on role to both strategic planning and operational aspects involve budgetary responsibility for the Cyber toolsets and services and ensuring their effectiveness and appropriate fit, executive and senior audience in person and soft reporting to risks and regulatory obligations as well as audit compliance and adherence.

They must be pragmatic, enjoy challenges and be keen to learn. Be adaptable and level headed in pressure situations. A problem solver with a love of technology, with a desire to learn new concepts and applications quickly.

The role requires supporting staff located globally in a dynamic environment where business and priorities will react to market requirements & trading priorities. Risk assessment and operational effectiveness are key whilst maintaining a pragmatic approach to the security vs convenience balance.

- Own and lead with ongoing improvement of Cyber Security tooling, configuration (best practise), identify gaps for improvement

- Escalation point for Cyber alerts and events from multiple sources, e.g. generated by tooling reports & emails.

- Threat Hunting – Investigate root cause of security alerts and issues, covering core technologies

- Ownership of staff Cyber training and phishing campaign design to assess and support staff capability and awareness

- Own engagement and relationships with technology and business teams to progress analysis, mitigations and integration of Cyber strategy

- Experienced in team management with ability to determine and prioritise workloads against competing books of work, a good communicator and motivator

- Lead and own security assessments of 3rd party tools, vendors and providers, network infrastructure, hosts and applications

- Identify gaps in security landscape, Research and own improvement program, Review new toolsets for use within the company, exploit/security test

- Own and manage external security testing and mitigation (Pen testing)

- Ownership of Cyber Incident and BCP Simulation strategy and execution

- Lead due diligence of 3rd party services to assist business with purchasing decisions, security testing applications

- Lead responses to external audits and DDQs

- Create appropriate documentation, for internal department and business use

- Own Cyber reporting frameworks and delivery

- Own Cyber policies and process

- Ability to interpret and convey complex security issues to non-technical staff

- Engagement with vendors for products assessment, proof of concepts, cost effectiveness

• 5 years minimum experience in a Cyber Security Manager or equivalent role
• Cyber qualifications such as CEH, CISSP, OSCP or equivalent
• Experience of IT System Administration of Linux and Windows platforms
• Experience of Enterprise Class on-premise and public cloud IaaS, PaaS, SaaS infrastructure technologies, including AI platforms
• Deep understanding of TCP/IP + Firewalls technologies – Preferably Palo Alto
• Deep understanding of wider Technologies around Server, Desktop, Storage, Network, Database, F/Walls, SaaS, Virtual Machines.
• Deep understanding of Advanced Threat Protection / Behavioural Analytics Tooling, XDR – Preferably Palo Alto
• Demonstrable understanding of security issues announced in the industry, threat actors (AI offense and defence acceleration), and interpret appropriate response/activity based on risk and impact
• Demonstrable knowledge of running automated exploits/penetration testing for assessment of our own tools and infrastructure.
• Experience of owning incident management process, vulnerability assessment and management
• Demonstrable understanding of DLP, IPS, Endpoint, anti-malware, Sandbox, Vulnerability scanners
• Demonstrable understanding of Mail security controls
• Deep understanding of common methods of attack, from phishing to insider threats
• Experience working in Financial or time critical production environments
• Experience of forensics – investigation and analysis of how and why a breach or other compromise occurred
• Extensive experience and strong in automation using scripting in at least one of Bash, Python or PowerShell as well as AI assisted Cyber Ops
• Experience in Zero Trust security approach across identity, devices, networks, applications, workloads and data
• Experience securing AI traffic, APIs and AI platforms (DevSecOps) across cloud and on-premises environments, including access controls, data protection, monitoring, threat detection and prevention of prompt injection, data leakage, insecure integrations, sandboxing and model abuse
• Experience implementing appropriate preventative, detective and governance controls within a rapidly evolving threat landscape.

The ideal candidate is a confident leader with a clear analytical and methodical approach with a proven track record in problem-solving, managing a team, managing critical BAU workflows, advanced engineering and technology service delivery in a high-pressure, time-sensitive environment.

You should be passionate about emerging technology trends, innovations and directions in Cyber security and eager to suggest and implement new solutions to enhance our Cyber technology performance. You should also understand the need for rapid delivery while appreciating business risk and constraints to ensure adherence to service levels.

The candidate should have extensive experience working in a structured environment, managing and working as part of a diverse team, defining and meeting broad and specific objectives whilst being able to communicate effectively at all levels in the organisation. This role requires excellent organisational skills, open communication, and a collaborative approach.

BlueCrest is committed to providing an inclusive environment for its workforce. As an employer, we provide equal opportunities to all people regardless of their gender, marital or civil partnership status, race, religion or ethnicity, disability, age, sexual orientation or nationality.