At a Glance
- Tasks: Join a dynamic team to design and implement effective cybersecurity controls.
- Company: Leading global trading firm expanding its Cybersecurity function.
- Benefits: Competitive salary, hands-on experience, and growth in a high-performing environment.
- Other info: Ideal for those who thrive in complex environments and want to drive real-world security.
- Why this job: Make a real impact by solving practical security challenges in a fast-paced setting.
- Qualifications: 1-5 years in Cybersecurity with strong technical foundations and collaboration skills.
The predicted salary is between 63000 - 77000 £ per year.
Advising Cybersecurity & e Discovery executives and investors on how to attract, hire, and retain top talent globally
A leading global trading firm is expanding its Cybersecurity function and is looking to hire a Security Engineer – Risk & Controls.
This is a rare opportunity to join a high-performing technology environment, working closely with engineering, compliance, and risk teams to help the firm operate securely across global markets.
This role is ideal for someone who thrives on solving practical security problems in complex, high-speed environments, not just ticking boxes.
Responsibilities
- Assess new markets and regulatory developments (e. g., SEBI, SEC, MAS) to identify the cybersecurity controls needed for the firm to operate securely.
- Partner with compliance engineering, technology, and finance teams to design, implement, and validate effective security controls.
- Think like an attacker, anticipate real threats, evaluate control weaknesses, and strengthen the firm’s security posture.
- Ensure fundamental security controls are well-designed and properly implemented across the environment.
- Contribute to a pragmatic, engineering-led security function that enables business growth while reducing real-world risk.
Qualifications
- 1–5 years’ experience in Cybersecurity, Information Security, or Technology Risk roles.
- A background that began in a technical security discipline (e. g., security operations, incident response, vulnerability management, or penetration testing) and has evolved toward risk and controls.
- Someone who can think deeply about security, who can articulate what a technology-driven trading firm needs to worry about and what controls should be in place, rather than just reciting frameworks.
- Strong technical foundations, ideally with a degree in Computer Science, Engineering, or a related field.
- Experience working in mid-sized or scaling technology organizations (roughly 1,000–3,000 employees) or having joined an earlier-stage company and helped it grow through that phase.
- A hands‑on, analytical mindset, focused on effective, well‑designed controls rather than compliance checklists.
- Excellent collaboration skills and the ability to partner across technical and business teams.
- What This Role Is Not
- Not a strategic or management-level position, it’s hands‑on implementation work in a complex, technical environment.
- Not a compliance‑driven or audit‑heavy role (ISO/SOX/NIST) — this is about practical, engineering‑led control design.
- London (4–5 days on‑site)
- Seniority Level
- Mid‑Senior level
- Employment Type
- Full‑time
- Job Function
- Finance and Information Technology
- Industries
- Technology, Information and Media, Financial Services, and Computer and Network Security
- #J-18808-Ljbffr
Security Engineer – Risk & Controls employer: Iceberg
Iceberg is an excellent employer, offering a collaborative work culture that values employee engagement and development. With a focus on driving positive employee experiences and supporting career growth, this respected global advisory firm provides unique opportunities for HR professionals to thrive in a dynamic environment in London. Employees benefit from a strong emphasis on work-life balance and the chance to make a meaningful impact across the EMEA region.
StudySmarter Expert Advice🤫
We think this is how you could land Security Engineer – Risk & Controls
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Iceberg, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Iceberg
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Iceberg. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Security Engineer – Risk & Controls
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Iceberg insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Iceberg that you’re committed to staying ahead in the game.
How to prepare for a job interview at Iceberg
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Iceberg to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Iceberg.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
