Trouvez votre prochaine offre d’emploi ou de mission freelance Security Information Event Management (SIEM)

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3-month assignment. Do send your CV to us in Word format along with your salary and notice period.

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

Senior Data Analyst with SQL Server SSIS and Network Engineering Our Client a bank based in Central London is seeking a highly motivated Data Analyst to play a key role in building and maintaining a robust digital data infrastructure. This position supports data users across the business, ensuring high-quality data extraction, reporting, and analytics capabilities. Working closely with the IT Manager and various business units, you will help strengthen compliance and regulatory risk management through effective management information (MI) reporting and analytical insights. The Client would ideally like you to have experience of Network Engineering in addition to the Data Engineering skills. Must have at least 7 to 10 years solid Data Engineering experience and ideally 1 to 2 years Networking Engineering and Support experience. Ideally have the following skills LAN/WAN Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). · Manage patching processes using Manage Engine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence Responsibilities Develop, maintain, and enhance the Branch's digital data infrastructure to ensure reliability and accessibility. Deliver accurate and timely data extraction, MI analysis, and reporting to support operational, compliance, and regulatory needs. Work collaboratively with IT and business departments to understand data requirements and provide analytical support. Explore, evaluate, and propose new technologies/tools to improve data management, governance, and reporting efficiency. Ensure data integrity and support the implementation of best practices in data governance. Assist in identifying and managing data-related risks, supporting the Branch's compliance and regulatory frameworks. Must have: Strong analytical skills with experience in data extraction, transformation, and reporting. Proficiency in SQL Server, data visualisation tools (e.g., Power BI, Tableau), and data management technologies. Understanding of data governance, regulatory reporting, and compliance requirements (banking/financial sector experience a plus). Excellent problem-solving skills and attention to detail. Ability to collaborate effectively with cross-functional teams and communicate complex information clearly. Coming from an IT support function is a bonus Data Analysis and Management  Maintain and develop SSIS packages  Perform ad-hoc data extraction and analytics based on requirements from business  Develop data visualization for business  Work with business to enhance the data available to the data warehouse  Assist in testing reporting solutions developed by external vendors  Support and maintain the generation of internal MI reports  Support and advise the business on data related matters and automation possibilities  Any other responsibilities / tasks as assigned by the Head of IT from time to time Business Performance  Support the department's operations as and when needed and any other tasks assigned by the business stakeholders.  Work with the Managers to ensure the business is in compliant with applicable rules and regulations that falls within the department's remit.  Work with the business to ensure timely submission of relevant department's reports  To adhere and follow all applicable Bank/Group policies and procedures. Data accuracy and ownership duties  To ensure all data worked on and or/shared with internal/external clients are accurate.  Escalate any data issues to the business promptly and without delays.  Ensuring any data sharing requests are discussed with business/DPO so that prior authorization is given and follows GDPR / department's SOPs. Regulatory Compliance duties Comply with all applicable individual conduct rules (especially the FCA Conduct Rules, Regulations, Bank policies and procedures and the banking Compliance. Technical/Functional skills - Knowledge in SQL query is essential - Working experience in administration and development with SQL (experience with SQL Server and SQL Server Integration Service is preferred) - Experience in working with data visualization tools such as Power BI - Experience in working with scripting language such as VBA and Python - Experience working with Power Automate is a plus - Required understanding of the business and business units Personal skills (Soft Competencies [Core/Leadership]) - Personal integrity and ethics - Good judgment in enabling the provision of sound advice on regulation and practice, proactive management of compliance and regulatory risk You will have at least 7 to 10 years' relevant experience working in the data field, preferably in an established bank or financial institution. Qualifications (Basic Degree/Diploma) Bachelor's Degree or Professional Qualification in the relevant discipline (Degrees in Statistics, Information Systems, or similar) This is an exciting position within a bank with interesting projects based in Central London. The salary for this position is in the range £60K- £75K. Please do send your CV to us in Word format along with you salary and availability.

Rejoignez-nous pour une mission chez notre client du secteur de la gestion immobilière basée à La Défense (92) en tant qu'Administrateur Systèmes & Cloud Azure. L'Administrateur Systèmes, Réseaux et Cloud assure la gestion, l'exploitation et l'évolution des infrastructures IT de l'entreprise, couvrant les environnements On-Premise et Cloud. Il est garant du maintien en conditions opérationnelles (MCO) et en conditions de sécurité (MCS) des systèmes et réseaux.. Missions : Administration Systèmes • Installer, configurer et administrer les systèmes d'exploitation Windows Server et Linux. • Gérer les environnements de virtualisation (Hyper-V). • Administrer les annuaires et services associés (Active Directory, Azure AD, DNS, DHCP, GPO). • Superviser et administrer les solutions de messagerie et de collaboration (Exchange Online, M365, Teams). Administration Réseaux • Administrer les réseaux type LAN, WAN, Wi-Fi et VPN, SD WAN • Mettre en place et administrer des solutions de sécurisation réseau (IPS/IDS, filtrage web). Administration Cloud • Administrer les environnements Microsoft Azure (IaaS, PaaS, SaaS). • Gérer Azure AD, Intune, Exchange Online, NinjaOne et les solutions de sécurité associées (MFA, Conditional Access). • Superviser les workloads cloud (machines virtuelles, bases de données, stockage, réseaux virtuels). Exploitation & Supervision • Déployer et administrer les outils de supervision et de monitoring (, Zabbix, Grafana ). • Suivre la capacité, les performances et la disponibilité des infrastructures. • Diagnostiquer et résoudre les incidents systèmes, réseaux et cloud. • Assurer la traçabilité et l'exploitation des événements (logs, SIEM, Sentinel). • Contribuer aux procédures de gestion des incidents majeurs et gestion de crise. Support & Assistance • Apporter un support de niveau 2/3 aux utilisateurs et aux équipes support. • Assurer une assistance technique lors des déploiements et des incidents. • Accompagner les équipes métiers et les collaborateurs de la DSI dans leurs besoins spécifiques. • Former et sensibiliser aux bonnes pratiques d'usage des systèmes RUN & Maintien Opérationnel • Veiller à la conformité permanente des postes de travail (antivirus, EDR/XDR, correctifs, chiffrement, conformité Intune). • Contrôler régulièrement l'état de mise à jour des serveurs, Appliance réseau et équipements de sécurité. • Assurer le suivi du patch management et signaler toute dérive de conformité. • Surveiller l'état des sauvegardes et garantir leur bon déroulement (tests de restauration inclus). • Mettre en place des contrôles automatisés (reporting de conformité, tableaux de bord MCO/MCS). • Participer à la gestion proactive de la capacité et anticiper les saturations (CPU, mémoire, stockage, réseau). • Assurer la continuité des services (tests PRA/PCA, bascule régulière, exercices de crise). • Analyser les alertes et vulnérabilités détectées, appliquer les remédiations nécessaires en lien avec la sécurité. • Garantir la bonne application des politiques de sécurité (MFA, durcissement, segmentation, PSSI). • Contribuer à l'amélioration continue des processus RUN (standardisation, industrialisation, automatisation). Documentation et Reporting : • Maintenir une documentation technique précise sur les environnements, les sauvegardes et les procédures opérationnelles. • Produire des rapports réguliers sur les performances, les incidents et les améliorations mises en œuvre. Informations clés : Démarrage : ASAP Lieu : La Défense 92 Contrat : CDI uniquement Rytrhme : 1 à 2 jours de TT Rémunération : 45 à 50 K€

Security Platform Engineer - Cloud and Kubernetes Must have an Active DV Clearance Can be based in London, Farnborough or Corsham You will work closely with platform engineers, security specialists, and cloud teams to deliver resilient, secure, and highly automated cloud infrastructure. The position is ideal for an experienced Security Platform Engineer with strong Kubernetes security expertise and a passion for cloud-native security engineering. Security Platform Engineer Responsibilities Design, deploy, configure, and manage cloud security platforms and tooling. Implement and maintain SIEM, IDS, and IPS technologies. Develop security monitoring, logging, and detection capabilities across Kubernetes environments. Investigate, analyse, and respond to security incidents, performing root cause analysis and remediation. Perform forensic investigations into suspicious activity and security events. Automate security workflows and operational processes using scripting and Infrastructure as Code. Support Kubernetes platform security, workload isolation, RBAC, and network policies. Participate in an on-call rota to support security incidents and operational resilience. Security Platform Engineer Skills and Experience Active DV Clearance Experience within Cloud Security Engineering, DevSecOps, or Cloud Platform Engineering is essential Extensive experience using Kubernetes Security Strong experience securing Kubernetes environments, including RBAC, workload isolation, and network policies. Experience with Kubernetes threat detection, anomaly detection, Istio, Linkerd, or workload identity would be advantageous. Security certifications such as CISSP, CISM, GSEC, or OSCP would be beneficial. To apply, please send your CV by pressing the apply button. Due to high volume of applications, only shortlisted CVs will be contacted. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 18 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Votre missionSécurisation de l'infrastructure as Code Auditer et sécuriser les scripts de déploiement (Terraform, CloudFormation ). Mettre en place des outils de "Policy as Code" (ex: Checkov, OPA, Terrascan) pour bloquer les configurations non conformes avant même le déploiement. Appliquer le principe du moindre privilège sur l'ensemble des ressources Cloud. Optimiser la gestion des secrets et des certificats Opérationalisation et Optimisation des Outils de surveillance (Priorité Court Terme) Faire évoluer et maintenir la configuration du SIEM : centralisation et corrélation des logs (règles de détection) cloud pour détecter les comportements suspects ou les tentatives d'intrusion Mettre en place les indicateurs et tableaux de bord de sécurité des systèmes en production Analyse des alertes, coordination des investigations et réponses Auditer et affiner le paramétrage des outils de sécurité déjà en place (ex: Scanner de vulnérabilités, SAST/DAST, etc.). Intégrer ces outils de manière fluide dans nos pipelines CI/CD existants pour automatiser les contrôles Définir les seuils d'alertes pertinents pour réduire le "bruit" et se concentrer sur les risques critiques Monitorer les dérives de configuration (drift detection) entre l'état souhaité et le runtime. Gestion des Vulnérabilités et Incidents Industrialiser le processus de détection & remédiation : de la détection d'une faille au déploiement des correctifs. Agir en tant qu'acteur clé lors de la réponse aux incidents (Incident Response) : investigation, confinement et analyse post-mortem. Prioriser le backlog de vulnérabilités en fonction de l'analyse de risque business Définir des playbooks d'automatisation pour isoler une ressource compromise (ex: isolation d'une instance EC2 ou d'un pod Kubernetes suspect) Acculturation et Amélioration Continue Accompagner l'équipe platform et les développeurs dans l'adoption des bonnes pratiques “Security by design”, “DevSecOps” Rédiger la documentation technique et les procédures d'exploitation sécurité.

AWS Cloud Infrastructure Analyst The AWS Cloud Infrastructure Analyst is a hands-on role planning and managing AWS cloud infrastructure delivery, including daily management, capacity planning, and participating in defining the Company's global infrastructure architecture. The Analyst will ensure the quality and timely delivery of technology efforts to support strategic infrastructure projects and works closely with other teams to define infrastructure requirements to support applications, security, and compliance initiatives. The AWS Cloud Infrastructure Analyst works with different teams to design and implement cloud solutions that fit organizational requirements. As an expert in AWS infrastructure and security configurations, recommends standards and security requirements that match written information security policy. Prior experience in an international enterprise environment is essential . Responsibilities: Collaborate with IT teams for input and operational requirements to design and implement overall cloud infrastructure and security strategy. Coordinate and lead infrastructure\security initiatives in the AWS cloud. Serve as the technical lead in AWS cloud DR and recovery strategies that align with information security policies. Develops and implements backup and recovery strategies to support data retention requirements. Evaluates and designs highly available, scalable, and redundant applications in the AWS cloud. Participate in the development and testing of an incident response plan for incidents that affect the cloud infrastructure. Ensure infrastructure is maintained and security is designed for every deployment. Manages projects to ensure that the delivery is on-time, within budget, and adopted to meet the company's information protection requirements. Actively supports the organization's cloud initiatives and responds to business requirements while achieving SLAs in place to support the organization's needs. Adhere to applicable change management policy and procedure. Qualifications: Bachelor's degree required. Candidates must possess significant analytical skills, which evolved from early academic training in Networking, Information Systems, Computer Science, or similar discipline. Minimum of 5 years' experience in a variety of infrastructure technologies. Ability to lead multi-disciplined teams when conducting incident root cause analysis. Serve as the technical expert in the AWS cloud. Desired Qualifications: Any Azure, AWS, GCP, Nutanix, Meraki, Cisco, or security certifications. Knowledge and experience with Microsoft Office and Visio Knowledge of WAN technologies, including MPLS, SD-WAN Knowledge of cloud-provided infrastructure (AWS, GCP) Prior experience implementing/maintaining Cisco ELA products including DNA, Firepower, ISE Management console, Umbrella, AMP, Stealth watch, as well as Splunk, SolarWinds, Varonis, and Darktrace Project management skills are highly desirable Proficiency in hybrid cloud, virtualization, Server OS, SAN, SMTP, email relay, email security, Active Directory, Group Policy, DNS, DHCP Working knowledge of Cisco network switches, routers, firewalls and VPN, DLP, antivirus, IDS/IPS, SIEM, SQL VDI, and Security concepts ITIL Foundation Certification Proficient in continuous integration, continuous delivery concepts (DevOps), with DevSecOps highly desirable. Previous experience in a HIPAA/FDA regulated environment Competencies: To perform the job successfully, an individual should demonstrate the following behaviors: Strong English oral and written communication skills Motivated and curious, willing to ask questions, research issues, and take on challenging projects/assignments; creative, brings innovative ideas to the table, exhibits self-confidence. Possesses the ability to organize and follow-through on multiple tasks. Recognizes and attends to vital details with accuracy and efficiency. Effectively prioritizes the work of staff members. Works to complete goals, tasks, and plans. Anticipates potential problems and analyzes alternative solutions. Develops/ maintains effective working relationships by listening attentively to others; communicates ideas clearly (written & verbal) while relating to people in an open/ sincere manner and participating effectively in meetings. You will also help find solutions, identify problems, communicate appropriately with the supervisor, and interact with co-workers. Able to maintain a calm and reliable demeanor in the face of challenges. Diagnoses problems efficiently, gather sufficient input before making decisions or plans, makes timely decisions, quickly determines sources of problems, identifies information needed to solve problems, analyzes and communicates issues with effective alternative solutions to the team. Sensitive & responsive to internal customer needs, demonstrate customer service skills, maintains a positive attitude, is willing to listen to customer problems, seeks solutions, and stays in tune with customers' changing needs. The role will be based in Trumbull, Connecticut USA. The salary for this role will be in the range $90K - $110K. Please do send your CV to us in Word format along with salary and availability.

ContexteL'équipe de sécurité opérationnelle PSIRT (Production Security Incident Response Team) EMEA est en charge des missions suivantes pour l'ensemble des infrastructures de production d'une grande institution financière internationale en EMEA : Intégration, évolution et maintien en condition opérationnelle des architectures de collecte des logs et de détection d'incident de sécurité (SIEM/SOAR) Mise en place et évolution permanente des Use cases/Règles de corrélation Analyse et réponse aux incidents de sécurité Threat Hunting Investigation / Forensics Intégration, évolution et maintien en conditions opérationnelles du Global Security Dashboard Au sein de cette équipe, vous intégrez la sous-équipe automation, en charge des sujets suivants : Faire évoluer et maintenir la plateforme d'alerting Faire évoluer et maintenir le SOAR (Security Orchestration Automation and Response) Adapter ces plateformes pour les différents territoires (APAC/AMER) et soutenir leurs équipes Faire évoluer et maintenir les plateformes d'allowlisting, et de suivi des formulaires d'investigation Recueillir les besoins d'évolution auprès des membres du PSIRT, des autres équipes sécurité En lien avec l'équipe Défense, intégrer les différents outils sécurité dans la plateforme Documenter la plateforme (code, infrastructure) et en définir la roadmap Améliorer le monitoring Industrialiser et maintenir la plateforme Vectr La mission proposée vous fait intervenir en priorité sur ce dernier point. L'administration système, le développement en python et la mise en place de scripts (ansible, sql, shell) sont nécessaires. Cette mission nécessite un bon relationnel et de fortes capacités d'adaptabilité car les environnements suivis sont complexes en termes d'organisation. MissionsDéfinition des objectifs de niveau de services et autres indicateurs de santé et qualité de l'environnement de production Intégration et configuration de l'outillage de monitoring, logging et alerting Définition et implémentation des dashboards de pilotage de production et stratégie d'alerting Réponse sur incidents et opérations de production en mode DevOps en interaction avec les développeurs et spécialistes infrastructure au besoin pour assurer l'intégrité de la plateforme de production Suivi du cycle de vie des incidents jusqu'au rétablissement du service Lancement de la procédure d'escalade si nécessaire Communication vers les clients et la hiérarchie Analyse des changements devant avoir lieu en production et livraison des recommandations Analyse et évaluation des incidents d'exploitation de façon à optimiser les actions correctives et préventives Classification et définition de la priorité des opportunités d'amélioration de la résilience du système

Senior Azure Cloud Infrastructure Analyst The Senior Azure Cloud Infrastructure Analyst is a hands-on role planning and managing Azure cloud infrastructure delivery, including daily management, DevOps, capacity planning, and participating in defining the company's global infrastructure architecture. The Senior Analyst will ensure the quality and timely delivery of technology efforts in support of strategic infrastructure projects and works closely with other teams to define infrastructure requirements to support applications, security, and compliance initiatives. The Senior Azure Cloud Infrastructure Analyst works with different teams to design and implement cloud solutions that fit organizational requirements. This individual is an expert in Azure DevOps and Azure infrastructure and security configurations, recommends standards and security requirements that match written information security policy. Prior experience in an international enterprise environment is essential. Responsibilities: Collaborate with IT teams for input and operational requirements to design and implement overall cloud infrastructure and security strategy. Coordinate and lead infrastructure\security initiatives in the Azure cloud. Serve as the technical lead in Azure cloud DR and recovery strategies that align with information security policies. Develops and implements backup and recovery strategies to support data retention requirements. Evaluates and designs highly available, scalable, and redundant applications in the Azure cloud. Coordinates with cross-functional teams to support development, code promotion, continuous improvement following DevOps / DevSecOps best practices. Participate in the development and testing of an incident response planfor incidents that affect the cloud infrastructure. Ensure infrastructure is maintained and security is designed for every deployment. Manages projects to ensure that the delivery is on-time, within budget, and adopted to meet the company's information protection requirements. Actively supports the organization's cloud initiatives and responds to business requirements while achieving SLAs in place to support the organization's needs. Adhere to applicable change management policy and procedure. Qualifications: Bachelor's degree required. Candidates must possess significant analytical skills, which evolved from early academic training in Networking, Information Systems, Computer Science, or similar discipline. Minimum of 5 years' experience in a variety of infrastructure technologies. Ability to lead multi-disciplined teams when conducting incident root cause analysis Serve as the technical expert in the Azure cloud. Proficient in continuous integration, continuous delivery concepts (DevOps), with DevSecOps highly desirable. Desired Qualifications: Any Azure, AWS, GCP, Nutanix, Meraki, Cisco, or security certifications Knowledge and experience with Microsoft Office and Visio Knowledge of WAN technologies, including MPLS, SD-WAN Knowledge of cloud-provided infrastructure (AWS, GCP) Prior experience implementing/maintaining Cisco ELA products including DNA, Firepower, ISE Management console, Umbrella, AMP, Stealth watch, as well as Splunk, SolarWinds, Varonis, and Darktrace Project management skills are highly desirable Proficiency in hybrid cloud, virtualization, Server OS, SAN, SMTP, email relay, email security, Active Directory, Group Policy, DNS, DHCP Working knowledge of Cisco network switches, routers, firewalls and VPN, DLP, antivirus, IDS/IPS, SIEM, SQL VDI, and Security concepts ITIL Foundation Certification Previous experience in a HIPAA/FDA regulated environment The role will be based in Trumbull CT USA. The salary for this position is in the range $120K - $135K. Please do send your CV to us in Word format along with your salary and availability.

Security Platform Engineer - Cloud and Kubernetes Must have an Active DV Clearance Can be based in London, Farnborough or Corsham You will work closely with platform engineers, security specialists, and cloud teams to deliver resilient, secure, and highly automated cloud infrastructure. The position is ideal for an experienced Security Platform Engineer with strong Kubernetes security expertise and a passion for cloud-native security engineering. Security Platform Engineer Responsibilities Design, deploy, configure, and manage cloud security platforms and tooling. Implement and maintain SIEM, IDS, and IPS technologies. Develop security monitoring, logging, and detection capabilities across Kubernetes environments. Investigate, analyse, and respond to security incidents, performing root cause analysis and remediation. Perform forensic investigations into suspicious activity and security events. Automate security workflows and operational processes using scripting and Infrastructure as Code. Support Kubernetes platform security, workload isolation, RBAC, and network policies. Participate in an on-call rota to support security incidents and operational resilience. Security Platform Engineer Skills and Experience Active DV Clearance Experience within Cloud Security Engineering, DevSecOps, or Cloud Platform Engineering is essential Extensive experience using Kubernetes Security Strong experience securing Kubernetes environments, including RBAC, workload isolation, and network policies. Experience with Kubernetes threat detection, anomaly detection, Istio, Linkerd, or workload identity would be advantageous. Security certifications such as CISSP, CISM, GSEC, or OSCP would be beneficial. To apply, please send your CV by pressing the apply button. Due to high volume of applications, only shortlisted CVs will be contacted. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 18 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Directeur des Programmes Cyber – Objet du PosteL'organisation souhaite recruter un Directeur des Programmes Cyber au sein de la DIPI afin d'apporter leadership, structure et gouvernance à un vaste portefeuille d'initiatives stratégiques de cybersécurité. Ce poste a pour vocation de renforcer la cohérence, la gouvernance et la discipline d'exécution de programmes actuellement répartis sur plusieurs domaines, notamment la Cyber Résilience, la Sauvegarde et la Reprise d'Activité, l'IAM/IGA, le PAM, la Gestion des Vulnérabilités, les Services de Bastion, la Réduction de l'Exposition Internet, les SOC/SIEM, ainsi que la conformité DORA et la gestion des preuves associées. Agissant comme un leader transversal au sein des équipes IT Operations & Production, le titulaire du poste fédèrera les équipes de sécurité, de gestion des risques, d'infrastructure, d'applications, les fournisseurs externes ainsi que les parties prenantes métiers de haut niveau autour d'une feuille de route commune de transformation cyber. L'objectif du rôle n'est pas de prendre la responsabilité des décisions techniques, mais de définir et d'exécuter une trajectoire claire, mesurable et alignée sur les objectifs de l'entreprise afin d'accélérer la transformation de l'organisation. Principales ResponsabilitésDéfinir et maintenir une feuille de route globale de transformation cyber à l'échelle de l'entreprise, en consolidant l'ensemble des initiatives dans un programme unique avec des objectifs, jalons, risques, dépendances et indicateurs de succès clairement définis. Piloter la mise en œuvre des initiatives à travers les fonctions technologiques, opérationnelles et cybersécurité, en garantissant une coordination efficace tout en préservant les responsabilités des équipes concernées. Assurer la gouvernance et le reporting auprès de la direction générale, en apportant une visibilité claire sur l'avancement des programmes, les priorités, les risques, les points de blocage et les décisions clés à prendre. Mettre en place et renforcer les mécanismes de gouvernance, les processus de priorisation, la gestion des parties prenantes et les méthodologies de pilotage des programmes cyber. Garantir que l'ensemble des activités de transformation cyber soient mesurables, coordonnées et alignées sur les objectifs métiers ainsi que les exigences réglementaires. Développer les capacités internes de leadership cyber en accompagnant la montée en compétence des équipes, tout en maintenant un modèle de gouvernance pragmatique et efficace. Profil de RéussiteCe poste permettra de transformer un ensemble d'initiatives cyber indépendantes en un programme cohérent, intégré et aligné sur la stratégie de l'entreprise, générant des améliorations mesurables en matière de résilience cyber, d'efficacité opérationnelle et de conformité réglementaire. Le Directeur des Programmes Cyber jouera un rôle essentiel dans la mise en place de la structure, de la gouvernance et de la dynamique nécessaires à la réussite des ambitions de transformation cyber de l'organisation.

Senior IT Infrastructure & Systems Lead Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period This role is totally hands-on. Role Description The Senior IT Infrastructure & Systems Lead is a full-time hybrid role based in London, with flexibility for some work-from-home arrangements. This role is responsible for overseeing the day-to-day operation, maintenance, and improvement of the company's IT infrastructure, including networks, servers, and core systems. The person in this role will lead and mentor technical staff, manage system performance and availability, and coordinate responses to incidents and service requests. Typical tasks include monitoring network and system health, implementing security measures, resolving complex technical issues, planning upgrades, and collaborating with stakeholders to align technology solutions with business needs. The role also involves vendor management, documentation of infrastructure and procedures, and contributing to IT strategy and roadmap decisions. Qualifications Candidates should possess strong skills in Network Administration and Information Technology for managing and optimizing infrastructure and systems. Candidates should possess solid Technical Support and Troubleshooting skills to diagnose, resolve, and prevent complex IT issues. Candidates should possess expertise in Network Security to implement, monitor, and improve security controls and practices. Extensive experience in leading IT infrastructure projects, including planning, implementation, and migration activities. Proven ability to manage and mentor IT teams, with strong communication and stakeholder management skills. Experience with server and cloud technologies, virtualization, backup and recovery, and IT monitoring tools. Relevant professional certifications (e.g., CompTIA Network+, CCNA, MCSE, or similar) are beneficial. Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management · Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). · Manage patching processes using ManageEngine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. · In depth understanding of Cyber security · Monitor system performance, capacity, availability, and infrastructure health. · Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support · Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. · Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. · Manage OS deployment, imaging, image creation, maintenance, and software packaging. · Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. · Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. · Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support · Support and administer business-critical applications, including: · Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP · Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management · Support vulnerability management using tools such as Tenable. · Manage security monitoring and log analysis tools (e.g., Splunk). · Perform SSL/TLS certificate lifecycle management using OpenSSL. · Create and manage CSRs, certificate chains, and private keys. · Ensure adherence to cybersecurity policies, standards, and regulatory requirements. · Support physical access control systems (e.g., Paxton) Operating Systems · Windows 11 · Windows Server 2019/2022 (or equivalent enterprise environments) · Red Hat Linux Infrastructure & Virtualization · VMware vSphere / vCenter (v8.0.3 and above) · Veeam Backup & Replication · Veeam ONE, VRO · Microsoft Office 365 · ManageEngine Patch Manager Plus · SAAS solutions · SQL Server Security · Symantec Endpoint Protection (SEP) · Symantec Endpoint Encryption (SEE) · SentinelOne – EDR/ XDR · Endpoint DLP solutions · Firewall administration · Vulnerability management tools (e.g., Tenable) · SIEM tools (e.g., Splunk) Networking · Cisco Switches and Routers · FortiGate Firewalls · LAN/WAN networking and routing Hardware & Storage · Dell PowerEdge Servers · Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initially will be be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be circa £70K - £75K. Do send your CV to us in Word format along with your salary and availability.

Senior IT Infrastructure & Systems Lead Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period This role is totally hands-on. Role Description The Senior IT Infrastructure & Systems Lead is a full-time hybrid role based in London, with flexibility for some work-from-home arrangements. This role is responsible for overseeing the day-to-day operation, maintenance, and improvement of the company's IT infrastructure, including networks, servers, and core systems. The person in this role will lead and mentor technical staff, manage system performance and availability, and coordinate responses to incidents and service requests. Typical tasks include monitoring network and system health, implementing security measures, resolving complex technical issues, planning upgrades, and collaborating with stakeholders to align technology solutions with business needs. The role also involves vendor management, documentation of infrastructure and procedures, and contributing to IT strategy and roadmap decisions. Qualifications Candidates should possess strong skills in Network Administration and Information Technology for managing and optimizing infrastructure and systems. Candidates should possess solid Technical Support and Troubleshooting skills to diagnose, resolve, and prevent complex IT issues. Candidates should possess expertise in Network Security to implement, monitor, and improve security controls and practices. Extensive experience in leading IT infrastructure projects, including planning, implementation, and migration activities. Proven ability to manage and mentor IT teams, with strong communication and stakeholder management skills. Experience with server and cloud technologies, virtualization, backup and recovery, and IT monitoring tools. Relevant professional certifications (e.g., CompTIA Network+, CCNA, MCSE, or similar) are beneficial. Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management · Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). · Manage patching processes using ManageEngine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. · In depth understanding of Cyber security · Monitor system performance, capacity, availability, and infrastructure health. · Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support · Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. · Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. · Manage OS deployment, imaging, image creation, maintenance, and software packaging. · Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. · Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. · Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support · Support and administer business-critical applications, including: · Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP · Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management · Support vulnerability management using tools such as Tenable. · Manage security monitoring and log analysis tools (e.g., Splunk). · Perform SSL/TLS certificate lifecycle management using OpenSSL. · Create and manage CSRs, certificate chains, and private keys. · Ensure adherence to cybersecurity policies, standards, and regulatory requirements. · Support physical access control systems (e.g., Paxton) Operating Systems · Windows 11 · Windows Server 2019/2022 (or equivalent enterprise environments) · Red Hat Linux Infrastructure & Virtualization · VMware vSphere / vCenter (v8.0.3 and above) · Veeam Backup & Replication · Veeam ONE, VRO · Microsoft Office 365 · ManageEngine Patch Manager Plus · SAAS solutions · SQL Server Security · Symantec Endpoint Protection (SEP) · Symantec Endpoint Encryption (SEE) · SentinelOne – EDR/ XDR · Endpoint DLP solutions · Firewall administration · Vulnerability management tools (e.g., Tenable) · SIEM tools (e.g., Splunk) Networking · Cisco Switches and Routers · FortiGate Firewalls · LAN/WAN networking and routing Hardware & Storage · Dell PowerEdge Servers · Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initially will be be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be circa £70K - £75K. Do send your CV to us in Word format along with your salary and availability.

Data Analyst with SQL Server SSIS and Network Engineer Our Client a bank based in Central London is seeking a highly motivated Data Analyst to play a key role in building and maintaining a robust digital data infrastructure. This position supports data users across the business, ensuring high-quality data extraction, reporting, and analytics capabilities. Working closely with the IT Manager and various business units, you will help strengthen compliance and regulatory risk management through effective management information (MI) reporting and analytical insights. The Client would ideally like you to have experience of Network Engineering in addition to the Data Engineering skills. Ideally have the following skills LAN/WAN Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). · Manage patching processes using Manage Engine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence Responsibilities Develop, maintain, and enhance the Branch's digital data infrastructure to ensure reliability and accessibility. Deliver accurate and timely data extraction, MI analysis, and reporting to support operational, compliance, and regulatory needs. Work collaboratively with IT and business departments to understand data requirements and provide analytical support. Explore, evaluate, and propose new technologies/tools to improve data management, governance, and reporting efficiency. Ensure data integrity and support the implementation of best practices in data governance. Assist in identifying and managing data-related risks, supporting the Branch's compliance and regulatory frameworks. Must have: Strong analytical skills with experience in data extraction, transformation, and reporting. Proficiency in SQL Server, data visualisation tools (e.g., Power BI, Tableau), and data management technologies. Understanding of data governance, regulatory reporting, and compliance requirements (banking/financial sector experience a plus). Excellent problem-solving skills and attention to detail. Ability to collaborate effectively with cross-functional teams and communicate complex information clearly. Coming from an IT support function is a bonus Data Analysis and Management  Maintain and develop SSIS packages  Perform ad-hoc data extraction and analytics based on requirements from business  Develop data visualisation for business  Work with business to enhance the data available to the data warehouse  Assist in testing reporting solutions developed by external vendors  Support and maintain the generation of internal MI reports  Support and advise the business on data related matters and automation possibilities  Any other responsibilities / tasks as assigned by the Head of IT from time to time Business Performance  Support the department's operations as and when needed and any other tasks assigned by the business stakeholders.  Work with the Managers to ensure the business is in compliant with applicable rules and regulations that falls within the department's remit.  Work with the business to ensure timely submission of relevant department's reports  To adhere and follow all Bank/Group applicable policies and procedures. Data accuracy and ownership duties  To ensure all data worked on and or/shared with internal/external clients are accurate.  Escalate any data issue to the business promptly and without delays.  Ensuring any data sharing requests are discussed with business/DPO so that prior authorisation is given and follows GDPR / department's SOPs. Regulatory Compliance duties Comply with all applicable individual conduct rules (especially the FCA Conduct Rules, Regulations, Bank policies and procedures and the banking Compliance. Technical/Functional skills - Knowledge in SQL query is essential - Working experience in administration and development with SQL (experience with SQL Server and SQL Server Integration Service is preferred) - Experience in working with data visualisation tools such as Power BI - Experience in working with scripting language such as VBA and Python - Experience in working with Power Automate is a plus - Required understanding of the business and business units Personal skills (Soft Competencies [Core/Leadership]) - Personal integrity and ethics - Good judgement in enabling the provision of sound advice on regulation and practice, proactive management of compliance and regulatory risk You will have at least 7 to 10 years' relevant experience working in the data field, preferably in an established bank or financial institution. Qualifications (Basic Degree/Diploma) Bachelor's Degree or Professional Qualification in the relevant discipline (Degrees in Statistic, Information Systems, or similar) This is an exciting position within a bank with interesting projects based in Central London. The salary for this position is in the range £60K- £75K. Please do send your CV to us in Word format along with you salary and availability.

Le Responsable de l'architecture de sécurité AWS Landing Zone est garant de l'architecture de sécurité de la Landing Zone AWS de bout en bout. Il est responsable de la conception des Service Control Policies (SCP), de la mise en œuvre des principes Zero Trust, de la gouvernance des identités et des accès (IAM), de la stratégie de chiffrement, de l'architecture des capacités de détection (SIEM, journalisation et surveillance) ainsi que de l'alignement avec les exigences réglementaires (DORA, NIS2, CSSF). Role Summary : Owns the security architecture of the AWS Landing Zone end-to-end: SCP design, Zero Trust controls, IAM governance, encryption strategy, detection stack, and regulatory compliance mapping (DORA, NIS2, CSSF). This profile is the direct counterpart to the Cloud Architect - it validates that every infrastructure decision enforces a security principle Core Responsibilities · Design and implement the layered SCP strategy (Root, Production, Sandbox guardrails) , policy-as-code via Terraform. · Architect IAM Identity Center deployment: federation with corporate IdP (SAML 2.0 / OIDC), permission sets, MFA enforcement, session duration policies. · Define zero standing privilege model: JIT access workflows, permission boundaries, IRSA for Kubernetes workloads. · Design KMS CMK strategy: one CMK per account per service category, key policy authoring, cross-account access controls. · Configure detection stack: GuardDuty , Security Hub (aggregated, FSBP + CIS standards), Macie, Inspector v2, IAM Access Analyzer; all via Organizations. · Author CloudTrail configuration (management + data events), immutable log archive (S3 Object Lock), retention policies. · Design automated response playbooks: EventBridge rules, Lambda remediation, account quarantine procedures. · Map architecture controls to DORA Art. 9, NIS2 Art. 21, NIST SP 800-207, and CSSF expectations. Produce audit evidence package. · Perform threat modeling on the Landing Zone and each workload pattern (STRIDE methodology). · Conduct quarterly security posture reviews: Security Hub score tracking, Config compliance drift, GuardDuty finding trends