At a Glance
- Tasks: Lead cybersecurity strategy and protect vital information assets.
- Company: Join Hellios, a fast-growing leader in supplier information and risk management.
- Benefits: Competitive salary, career growth, and a dynamic work environment.
- Other info: Be part of a vibrant team dedicated to innovation and excellence.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: 10+ years in information security with strong leadership skills.
The predicted salary is between 60000 - 80000 £ per year.
Location: Kemp House, Chawley Park, Cumnor, Oxford
Reporting to: Chief Information Security Officer
Job summary: To support and evolve our web-based Supplier Information & Risk management systems and business offerings.
The Cyber Security Engineer is responsible for establishing and maintaining the enterprise vision, strategy, and programme to ensure information assets, technologies, and data are adequately protected. This role will lead the organisation's cybersecurity strategy in alignment with Irish and EU regulatory requirements including GDPR, NIS2 Directive, DORA (where applicable), and Central Bank of Ireland guidance (if regulated). The Cyber Security Engineer will work closely with executive leadership and the Board to manage cyber risk and ensure resilience across the organisation.
KEY RESPONSIBILITIES
- Cybersecurity Strategy & Governance: Develop, implement, and maintain the enterprise-wide information security strategy. Align security initiatives with business objectives and risk appetite. Establish and maintain security governance frameworks (e.g., ISO 27001, NIST CSF, Cyber Essentials). Report regularly to the Executive Team and Board on cybersecurity posture and risk.
- Risk Management & Compliance: Lead enterprise cyber risk assessments and mitigation programmes. Ensure compliance with GDPR and Data Protection Commission guidance, NIS2 Directive (where applicable), and DORA (for financial services organisations). Oversee third-party and supply chain security risk management. Lead audit engagements and regulatory inspections related to cybersecurity.
- Security Operations & Incident Response: Oversee security operations including SOC, threat detection, and vulnerability management. Develop and maintain incident response and crisis management plans. Lead response to major security incidents and coordinate with regulators and law enforcement where necessary. Ensure business continuity and disaster recovery capabilities are robust and tested.
- Architecture & Engineering Oversight: Provide security architecture oversight for cloud, on-premises, and hybrid environments. Ensure secure software development practices (DevSecOps). Oversee identity and access management (IAM) and zero-trust initiatives.
- Data Protection & Privacy: Work closely with the Data Protection Officer (DPO) to ensure technical and organisational measures are appropriate. Ensure strong data classification, encryption, and retention controls.
- Leadership & Culture: Develop cybersecurity awareness programmes across the organisation. Foster a strong security-first culture.
Required Experience & Qualifications
- Bachelor's in Information Security, Computer Science, Engineering, or related field.
- Relevant professional certifications such as: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor.
- 10+ years in information security, with at least 5 years in a cybersecurity engineering role.
- Experience operating in regulated environments (e.g., financial services, healthcare, telecoms).
- Strong knowledge of cybersecurity regulatory frameworks.
- Proven experience leading incident response at enterprise scale.
- Experience reporting to Board-level stakeholders.
Technical Expertise
- Security frameworks: ISO 27001, NIST CSF, COBIT.
- Cloud security (AWS, Azure, GCP).
- Identity & Access Management (IAM).
- SIEM, SOAR, EDR/XDR platforms.
- Threat intelligence and vulnerability management.
- Data protection technologies.
- Secure SDLC and DevSecOps practices.
Competencies & Attributes
- Strategic thinker with strong commercial awareness.
- Excellent communication and stakeholder management skills.
- Strong leadership and team development capability.
- High integrity and ethical standards.
- Crisis management expertise.
- Ability to influence at Board and Executive level.
The Company
Hellios is a leading supplier information and risk management company operating in the financial services and defence industry. Established with the primary objective to benefit major blue-chip companies and their suppliers, Hellios provides a single streamlined approach by sharing data across an industry community in areas including modern slavery, cyber security and GDPR. Since its inception as a startup in 2012, Hellios has experienced rapid growth, expanding to over 145 employees and establishing offices across the UK, The Netherlands, Spain, and Ireland. The Company is continuing to grow quickly, and a key part of this role is to prepare the Company for further growth. At Hellios, we are guided by an ethos centred on delivering unparalleled service quality and innovative technology. Our commitment rests upon nurturing enduring, sustainable relationships with both our buyer and supplier clientele.
Cyber Security Engineer in Oxford employer: Hellios
Hellios is an exceptional employer located in the vibrant area of Oxford, offering a dynamic work culture that prioritises employee growth and development. With a commitment to providing excellent customer service, employees benefit from a competitive salary, blended working options, and a variety of social events, all while being part of a rapidly growing company that values innovation and teamwork.
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Security Engineer in Oxford
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Hellios, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Hellios
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Hellios. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Cyber Security Engineer in Oxford
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Hellios insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Hellios that you’re committed to staying ahead in the game.
How to prepare for a job interview at Hellios
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Hellios to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Hellios.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
