Company Overview
AJ Bell was formed in 1995 and is now one of the leading online investment platforms in the UK. We provide customers and advisers with wide investment choice, low-cost delivery, market leading online functionality and first class service to help them manage investment portfolios within SIPPs, ISAs and Dealing accounts. We are a fast growing and profitable company, with over 542,000 customers and £86.5 billion of assets under administration. We are part of the FTSE 250 on the Main Market of the London Stock Exchange.
About the job
To support the Security Operations Manager in responding, managing and reporting the Information Security Risks faced by Technology Services (TS) in delivering AJ Bell’s systems and services. Key to this is maintaining the confidentiality, integrity and availability of the data that resides upon those systems.
This role will be key to understanding the threats targeting AJ Bell and ensuring our defences provide and effective response.
Key responsibilities:
- Reviewing and assessing Security Operations Centre alerts to ensure an appropriate response taken.
- Overseeing vulnerability scanning to confirm the effectiveness of patching
- Monitoring systems for compliance with policy and supporting remediation where required.
- Track and manage penetration testing programs.
- Investigate and respond to security breaches and incidents.
- Supporting the administration of email and web gateways
- Develop our threat intelligence and provide monitoring of external information sources to make recommendations on latest security threats and vulnerabilities that affect our technical estate
- Collaborate with IT and other departments to ensure security best practices are followed.
- Stay up-to-date with the latest security trends, threats, and technology solutions.
Essential experience, knowledge and skills:
Strong understanding and knowledge of Information Security risk management tools and techniques
- A passion for cyber security and active interest in technology
- Experience of Information Security standards and frameworks
- Awareness and understanding of the Information Security threat landscape
- Understanding of Information Security solutions e.g. email / web gateways, SIEM, Endpoint protection etc.
- Knowledge/experience working with next gen security solutions
- Awareness of Cloud security solutions and standards is highly advantageous
- Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.
- Experience in an Information Security role gained in a financial services or e-commerce environment is preferred
- Ability to challenge approach, strategy and implementation to ensure Information Security is consistently considered and improved
- Structured, self-starting, flexible and enjoy working in fast-paced environments
- Ability to plan, organise and follow through on assigned tasks and complete with little or no prompting from management
APPLY