Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join a dynamic team to design and implement effective cybersecurity controls.
- Company: Leading global trading firm with a focus on innovation and security.
- Benefits: Competitive salary, hands-on experience, and opportunities for professional growth.
- Other info: Ideal for those who thrive in complex, technical environments and want to grow their career.
- Why this job: Make a real impact in a high-speed environment while solving practical security challenges.
- Qualifications: 1-5 years in Cybersecurity with strong technical foundations and collaboration skills.
The predicted salary is between 36000 - 60000 £ per year.
A leading global trading firm is expanding its Cybersecurity function and is looking to hire a Security Engineer – Risk & Controls. This is a rare opportunity to join a high-performing technology environment, working closely with engineering, compliance, and risk teams to help the firm operate securely across global markets. This role is ideal for someone who thrives on solving practical security problems in complex, high-speed environments, not just ticking boxes.
Responsibilities
- Assess new markets and regulatory developments (e.g., SEBI, SEC, MAS) to identify the cybersecurity controls needed for the firm to operate securely.
- Partner with compliance engineering, technology, and finance teams to design, implement, and validate effective security controls.
- Think like an attacker, anticipate real threats, evaluate control weaknesses, and strengthen the firm’s security posture.
- Ensure fundamental security controls are well-designed and properly implemented across the environment.
- Contribute to a pragmatic, engineering-led security function that enables business growth while reducing real-world risk.
Qualifications
- 1–5 years’ experience in Cybersecurity, Information Security, or Technology Risk roles.
- A background that began in a technical security discipline (e.g., security operations, incident response, vulnerability management, or penetration testing) and has evolved toward risk and controls.
- Someone who can think deeply about security, who can articulate what a technology-driven trading firm needs to worry about and what controls should be in place, rather than just reciting frameworks.
- Strong technical foundations, ideally with a degree in Computer Science, Engineering, or a related field.
- Experience working in mid-sized or scaling technology organizations (roughly 1,000–3,000 employees) or having joined an earlier-stage company and helped it grow through that phase.
- A hands-on, analytical mindset, focused on effective, well-designed controls rather than compliance checklists.
- Excellent collaboration skills and the ability to partner across technical and business teams.
What This Role Is Not
- Not a strategic or management-level position, it’s hands-on implementation work in a complex, technical environment.
- Not a compliance-driven or audit-heavy role (ISO/SOX/NIST) — this is about practical, engineering-led control design.
London (4–5 days on-site)
Seniority Level: Mid-Senior level
Employment Type: Full-time
Job Function: Finance and Information Technology
Industries: Technology, Information and Media, Financial Services, and Computer and Network Security
Security Engineer – Risk & Controls in England employer: Iceberg
Contact Detail:
Iceberg Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Engineer – Risk & Controls in England
✨Tip Number 1
Network like a pro! Get out there and connect with folks in the cybersecurity space. Attend meetups, webinars, or industry events. You never know who might be looking for someone just like you!
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects and achievements in cybersecurity. This gives potential employers a taste of what you can do beyond just a CV.
✨Tip Number 3
Prepare for those interviews! Research common security scenarios and be ready to discuss how you'd tackle them. Think like an attacker and demonstrate your problem-solving skills during the chat.
✨Tip Number 4
Don’t forget to apply through our website! We’ve got loads of opportunities waiting for you, and applying directly can sometimes give you a leg up in the process. Let’s get you that dream job!
We think you need these skills to ace Security Engineer – Risk & Controls in England
Some tips for your application 🫡
Show Your Technical Skills: Make sure to highlight your technical background in Cybersecurity or Information Security. We want to see how your experience aligns with the hands-on, practical work we do at StudySmarter.
Think Like an Attacker: In your application, demonstrate your ability to think critically about security threats. Share examples of how you've identified vulnerabilities and strengthened security controls in past roles.
Collaborate and Communicate: We value excellent collaboration skills, so mention any experiences where you’ve worked closely with different teams. Show us how you can bridge the gap between technical and business aspects.
Apply Through Our Website: Don’t forget to apply through our website! It’s the best way for us to receive your application and get to know you better. We’re excited to see what you bring to the table!
How to prepare for a job interview at Iceberg
✨Know Your Cybersecurity Fundamentals
Make sure you brush up on your technical knowledge related to cybersecurity, especially in risk and controls. Be prepared to discuss specific security frameworks and how they apply to real-world scenarios, rather than just reciting them.
✨Think Like an Attacker
During the interview, demonstrate your ability to anticipate threats and evaluate control weaknesses. Share examples of how you've approached security challenges in the past, showcasing your analytical mindset and hands-on experience.
✨Collaborate Effectively
Highlight your collaboration skills by discussing past experiences where you partnered with different teams, such as compliance or engineering. Show that you can bridge the gap between technical and business needs, which is crucial for this role.
✨Stay Updated on Regulatory Developments
Familiarise yourself with current regulations like SEBI, SEC, and MAS. Be ready to discuss how these impact cybersecurity controls and what measures you would recommend to ensure compliance while enabling business growth.