Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the security team and manage cyber risk for AJ Bell's systems.
- Company: AJ Bell is a leading investment platform committed to innovation and security.
- Benefits: Enjoy a competitive salary, extensive benefits, and a hybrid working model.
- Why this job: Join a dynamic team focused on proactive cyber defence and continuous improvement.
- Qualifications: Experience in security risk management, cloud security, and strong leadership skills required.
- Other info: We value diversity and inclusion, creating a thriving environment for all.
The predicted salary is between 48000 - 72000 £ per year.
Job Description
We\’re now recruiting a Head of Security Operations to support the Chief Information Security Officer in managing and reporting the Information Security Risks faced by Technology Services (TS) in delivering AJ Bell’s systems and services. Key to this is maintaining the confidentiality, integrity and availability of the data that resides upon those systems. The Head of Security Operations is responsible for ensuring alignment between AJ Bell’s business goals and our ability to proactively identify and respond to security incidents, underpinned by an ability to translate cyber risk in to business risk and vice versa.
This role will be responsible for the leadership and management of the team delivering ongoing proactive cyber defence and response to security threats targeting AJ Bell systems and information. The Security Operations Team is the first point of contact for security queries, as such the role holder is expected to be a leader in developing a security first culture providing effective guidance to staff at all levels.
About the role
- Ensuring AJ Bell has the appropriate capability to detect and respond to security events and incidents.
- In partnership with the 3rd party managed service provider, ensure that AJ Bell maintains 24×7 operational security coverage.
- Proactively drive efficiency improvements via the use of automation and AI in security operations processes.
- Own and develop AJ Bell’s incident response framework and playbooks, including undertaking regular training and testing (including table top exercises) up to and including executive level.
- Develop and maintain AJ Bell’s threat intelligence capabilities to enable effective response to the evolving threat landscape, delivering and disseminating actionable intelligence to operations teams and key stakeholders.
- Ensure operational processes for managing AJ Bell’s supply chain risk are effective.
- Own the end-to-end vulnerability management process, including penetration testing, mitigation assessment and remediation tracking.
- Effectively communicate the security posture of AJ Bell with the development and delivery of regular MI and reporting, where gaps are identified work with the security engineering team to provide clear requirements for security solutions.
- Manage the operational security vendor relationships, overseeing regular performance reviews and commercial management.
- Manage and oversee the development of a team of security analysts responsible for maintaining BaU security operations and act as an escalation point for day-to-day security issues identified by colleagues.
- Identify the future needs of the business with respect to the security operations function and develop AJ Bell’s capability accordingly.
- Foster an environment of continuous improvement to grow and develop AJ Bell’s security capability by establishing repeatable, managed and measured processes.
About you
- Expert understanding and knowledge of Information Security risk management tools and techniques
- Extensive experience of Information Security standards and frameworks
- Awareness and understanding of the Information Security threat landscape
- Knowledge of security investigations best practice including the use of Microsoft Purview and computer forensics an advantage.
- Experience of utilising and monitoring Information Security solutions e.g. email / web gateways, SIEM, Endpoint protection etc.
- Strong awareness of Cloud services and supporting security solutions & standards.
- Good understanding of cloud native and devops practices including pipelines and associated processes
- Hands on experience of managing and configuring systems including Microsoft Active Directory, Windows and Linux in an enterprise environment is highly advantageous
- Hands on experience with internet proxies, end point security tools and data loss prevention systems also highly advantageous
- Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.
- Knowledge of relevant regulatory requirements (e.g. GDPR / FCA / PRA)
- Experience in an Information Security role gained in a financial services or e-commerce environment is preferred
- Strong written communication skills, with ability to contribute to executive committee and Board level papers.
- Self-motivated, professional, tenacious and enthusiastic
- Strong ownership of tasks, attention to detail and following through to conclusion
- Ability to challenge approach, strategy and implementation to ensure Information Security is consistently considered and improved
- Ability to work under own initiative to plan and communicate effectively with colleagues and customers
- Structured, self-starting, flexible and enjoy working in fast-paced environments
- Effective communication skills, both written and verbal
- Ability to plan, organise and follow through on assigned tasks and complete with little or no prompting from management
- Ability to learn and develop new skills and take on new challenges
- Excellent attention to detail
About us
AJ Bell is one of the fastest-growing investment platform businesses in the UK offering an award-winning range of solutions that caters for everyone, from professional financial advisers to DIY investors with little to no experience. We have over 620,000 customers using our award-winning platform propositions to manage assets totalling more than £96.1 billion. Our customers trust us with their investments, and by continuously striving to make investing easier, we aim to help even more people take control of their financial futures.
Having listed on the Main Market of the London Stock Exchange in December 2018, AJ Bell is now a FTSE 250 company.
Headquartered in Manchester with offices in central London and Bristol, we now have over 1,500 employees and have been named one of the UK\’s \’Best 100 Companies to Work For’ for six consecutive years and in 2024 named a Great Place to Work®.
Our perks and benefits
- Competitive starting salary
- Starting holiday entitlement of 28 days, increasing up to 31 days with length of service and a holiday buy and sell scheme
- A choice of pension schemes with matched contributions up to 8% (Increasing with length of service)
- Discretionary bonus scheme
- Annual free share awards scheme
- Buy As You Earn (BAYE) Scheme
- Health Cash Plan – provided by SimplyHealth
- Private healthcare scheme and dental plan
- Free gym membership, with an on-site gym providing a wide range of free classes
- Employee Assistance Programme
- Bike loan scheme
- Sick pay+ pledge
- Enhanced maternity, paternity, and shared parental leave
- Discounted nursery fees at Kids Planet on Exchange Quay
- Loans for travel season tickets
- Death in service scheme
- Paid time off for volunteer work
- Charitable giving opportunities through salary sacrifice
- Calendar of social events, including monthly payday drinks, annual Christmas party, summer party and much more
- Parking at Exchange Quay (subject to availability)
- Ongoing technical training
- Professional qualification support
- Talent development programmes
- Peer recognition scheme, with rewards including restaurant and shopping vouchers or time off
- Monthly leadership breakfasts and lunches
Hybrid working
At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That\’s why we offer a hybrid working model, where you’ll spend a minimum of 50% of your working time per month in the office. For new team members, an initial period will be full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.
#J-18808-Ljbffr
Head of Security Operations employer: Aj Bell
Contact Detail:
Aj Bell Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Head of Security Operations
✨Tip Number 1
Familiarise yourself with the latest trends in security operations and incident response. Being well-versed in current threats and solutions will not only boost your confidence but also demonstrate your proactive approach to potential employers.
✨Tip Number 2
Network with professionals in the cybersecurity field, especially those who are already in leadership roles. Attend industry conferences or webinars to connect with others and gain insights that could set you apart during interviews.
✨Tip Number 3
Showcase your experience with security frameworks like ISO27001 and NIST in conversations. Be prepared to discuss how you've applied these frameworks in previous roles to enhance security measures and manage risks effectively.
✨Tip Number 4
Prepare to articulate your vision for developing a security-first culture within an organisation. Think about specific strategies you would implement to engage staff at all levels and promote continuous improvement in security processes.
We think you need these skills to ace Head of Security Operations
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in security operations, risk management, and leadership. Use specific examples that demonstrate your ability to manage security risks and lead teams effectively.
Craft a Compelling Cover Letter: In your cover letter, express your passion for security operations and how your skills align with the role's responsibilities. Mention your familiarity with frameworks like ISO27001 and NIST, and how you can contribute to developing a security-first culture.
Showcase Your Communication Skills: Since strong communication is essential for this role, ensure your application reflects your ability to convey complex security concepts clearly. Consider including examples of how you've communicated security posture or led training sessions in the past.
Highlight Continuous Improvement Initiatives: Demonstrate your commitment to continuous improvement in security processes. Include any relevant projects where you've driven efficiency through automation or AI, and how these initiatives have positively impacted security outcomes.
How to prepare for a job interview at Aj Bell
✨Understand the Role Thoroughly
Before the interview, make sure you have a deep understanding of the Head of Security Operations role. Familiarise yourself with key responsibilities such as managing security risks, leading a team, and developing incident response frameworks. This will help you articulate how your experience aligns with the job requirements.
✨Showcase Your Leadership Skills
As this role involves leading a security team, be prepared to discuss your leadership style and experiences. Share examples of how you've successfully managed teams, driven initiatives, and fostered a security-first culture in previous positions.
✨Demonstrate Technical Knowledge
Highlight your expertise in security risk management tools and frameworks like ISO27001 and NIST. Be ready to discuss your familiarity with cloud security and regulatory requirements such as GDPR, as these are crucial for the role.
✨Prepare for Scenario-Based Questions
Expect scenario-based questions that assess your problem-solving skills in real-world situations. Think about past incidents you've handled, how you responded, and what you learned from those experiences. This will showcase your ability to manage security events effectively.
