At a Glance
- Tasks: Join a team to enhance global cybersecurity and manage risk effectively.
- Company: Leading financial services firm focused on best-in-class security.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Dynamic role with exposure to diverse business operations and career advancement.
- Why this job: Make a real difference in protecting vital information and systems.
- Qualifications: Experience in cybersecurity frameworks and strong communication skills required.
The predicted salary is between 50000 - 70000 £ per year.
The Engineer, Information Security GRC (Governance, Risk, and Compliance) is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company.
Information Security (IS) is charged with:
- Preventing impactful cybersecurity and physical security incidents,
- Maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program, and
- Avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls.
Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within.
Responsibilities
- Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program
- Policies and Procedures – Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards
- Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries in an organized and repeatable fashion
- Recertification – Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted
- Security Awareness – Builds and maintains company awareness and education programs
- Risk Assessment – Builds and operates the company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity
Knowledge and Experience
- Experience in Cybersecurity Framework (such as NIST, COBIT)
- Experience with Systems Administration and/or IP Networking is a plus
- Experience with Regulatory Compliance
- Experience in an exchange, trading facility, or financial services a plus
- Experience in Customer communication and Vendor evaluation
- Experience with senior management and board metrics generation and communication
- Advanced certifications (for example, the CISSP)
- Advanced technical writing and/or communication education and experience
- University degree in Information Security, Engineering, or similar experience
Specific Technologies:
- Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization
- Scripting, regular expressions, string-parsing, light SDLC, and project management
- NIST Cyber Security Framework, CIS, and GRC Platforms
Information Security Engineer in London employer: Intercontinental Exchange Holdings, Inc.
As a Legal Counsel at ICE Data Services, you will join a dynamic and innovative team that values collaboration and professional growth. Our inclusive work culture fosters an environment where your contributions are recognised, and you will have the opportunity to engage with diverse business units globally, enhancing your legal expertise in commercial data licensing and strategic agreements. Located in a vibrant area, we offer competitive benefits and a commitment to employee development, making us an excellent employer for those seeking meaningful and rewarding careers in the financial services sector.
Contact Details:
Intercontinental Exchange Holdings, Inc. Recruitment Team
