Senior IT Security Engineer

Your new company - Financial Services
Your new role - Permanent - ON SITE 5 Days per week. - UK Only
We are looking for a highly skilled Information technology Security Engineer to join the IT team.
As the first line of defence in the IT department, the principal purpose of this job mainly focusses on information security, cybersecurity and data security, including a wide scope, such as physical security of computer rooms, operating system level security of Windows and Linux, network security of firewall and other security devices, application security both development and testing phrase, terminal security, backup security, third party and supply chain security of IT service provider.
Liaison with the Head Office, Security Operation Centre of Data Centre for implementing security policies, projects and security controls. Work with Internal Audit and other departments to execute penetration tests, cybersecurity risk self-assessment, ensure best practice and international baseline standards are in place and in line with local regulations.
The ideal candidate will be responsible for managing information security systems, ensuring compliance with regulatory requirements, and conducting thorough security audits.
You will be part of the IT committee and work closely with the risk and compliance team.
Ideally, having a background in IT / Network security, progressing into information security and cybersecurity.
**Key Responsibilities:**
- Develop, draught, implement, and maintain information security policies, procedures, and guidelines.
- Conduct regular security audits and assessments to identify vulnerabilities and ensure compliance with industry standards (e.g., ISO 27001).
- Monitor and respond to security incidents, conducting investigations and implementing corrective actions.
- Collaborate with IT and other departments to ensure the security of network infrastructure and data.
- Manage risk assessments and vulnerability assessments to identify potential security threats.
- Oversee the implementation of security measures such as firewalls, intrusion detection systems, and data encryption technologies.
- Provide training and guidance to staff on information security best practices.
- Stay updated on the latest cybersecurity trends and technologies.

**Qualifications:**
- Bachelor's degree in Information Security, Computer Science, or a related field.
- Professional certifications such as CISSP, CISM, or ISO 27001 Lead Auditor.
- Proven experience in information security management and conducting security audits.
- Strong knowledge of information security frameworks and standards.
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills.

**Preferred Qualifications:**
- Experience with regulatory compliance requirements such as GDPR, HIPAA, or SOX.
- Familiarity with security tools and technologies such as SIEM, DLP, and endpoint protection.

• CISA/CISSP/CCSP
• MCSA-Microsoft Windows Server
• MCSE- Microsoft Certified Solution Expert;
• MCITP-Microsoft Certified IT Professional;
• VMware Certified Professional;CCNA/CCNP

• Experience with security tools and technologies such as intrusion detection systems, SIEM, and vulnerability management tools.
• Familiarity with regulatory requirements and industry standards related to IT security.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk