Lead Security Engineer - Azure Cloud (3 days in London)

The Lead Security Engineer ensures a secure architecture for internal systems and business-to-business operations. This includes managing risks, implementing security measures—particularly for cloud platforms like Azure, Teams/O365, and iManage Cloud—and maintaining documentation for the Global Security Team. The role works closely with IT and security leadership to achieve objectives, ensure compliance, and respond effectively to security incidents.

What you’ll do:

• Ensure a secure architecture for authorisation and authentication internally, as well as business to business.
• Implement security architecture of the firm related to transition to cloud (e.g., Azure, Teams/O365 and iManage Cloud).
• Develop and maintain all documentation related to Global Security Team operations and functions.
• Manage Data Loss Prevention (DLP) systems, defining policies, monitoring incidents, and reporting metrics.
• Detect, investigate, and respond to all information security incidents.
• Maintain and execute the incident response plan, identifying causes and recommending mitigation.
• Control access to information systems and manage related security configurations.
• Develop and enforce security policies to meet compliance and client requirements.
• Ensure monitoring, alerts, and risk assessments for vendors, projects, and systems are completed.
• Assist with new IT policy development, security audits, and testing before production.
• Oversee independent security program reviews and address identified gaps.
• Monitor physical data security (e.g., backup storage) and implement improvements as needed.
• Control access and ensure monitoring/alerting systems meet business needs.
• Conduct risk assessments for vendors, projects, and systems.
• Maintain security awareness, training, and documentation for employees.
• Support Business Continuity and Disaster Recovery efforts.
• Collaborate with IT teams to enforce security standards.
• Perform investigations as requested by HR, IT, or Legal.

What you’ll bring:

• Minimum 5 years’ experience in an Information Security role.
• Strong working knowledge of CISSP and CEH; ISO 27002 knowledge preferred.
• Solid understanding of networking, firewalls, and security standards.
• Experience with authentication methods and documentation.
• Knowledge of Disaster Recovery processes preferred.
• Technical expertise in cloud environments, especially Azure and O365.
• Familiarity with DLP incident handling, remediation, and reporting.
• Familiarity with security tools such as Microsoft Defender for Endpoint, Thales, CrowdStrike Falcon, SIEM, CyberArk, Rapid7, and Palo Alto is a plus.