AJ Bell

information security engineer for investment platforms

In short

This senior information security engineer role at a UK investment platform company involves designing and improving enterprise security solutions across endpoint, cloud, network, DevOps and monitoring environments. The role requires deep knowledge of SIEM, PAM, IGA, endpoint protection, security risk frameworks (ISO27001, NIST) and significant IT security experience. It serves as a technical bridge between the CISO function and Infrastructure teams, covering patch management, server hardening, and audit support. Hybrid work in London with at least 50% office time per month is required.

About the Company
AJ Bell provides investment accounts and platforms, including ISAs, pensions and dealing accounts, for customers investing independently or with financial advisers. It is a UK investment platform business managing assets for more than 762,000 customers.
Responsibilities
•Design, deliver and improve enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments
•Design and implement secure infrastructure controls aligned with industry best practices
•Evaluate, select and implement security tools and platforms, driving automation, integration and measurable value
•Adopt new security technologies and transition them into operational support
•Oversee patch management across systems and hardware
•Support server hardening and secure configuration initiatives with Infrastructure and Service Delivery teams
•Provide security oversight across projects and change initiatives, embedding security from design through delivery
•Support audits, regulatory reviews and due diligence, maintaining robust evidence and controls
•Act as a technical link between the CISO function and Infrastructure teams
•Improve cybersecurity risk management processes and organisational maturity
Requirements
•Proven experience implementing enterprise security platforms
•Strong knowledge of security risk management tools and techniques
•Deep understanding of SIEM, PAM, IGA, endpoint protection, and email/web gateways
•Strong understanding of core IT and networking principles
•Awareness of the evolving threat landscape
•Experience with ISO27001, NIST, or similar frameworks
•Significant experience in IT security
•Strong problem-solving skills and attention to detail
•Ability to take ownership and deliver end-to-end solutions
•Effective communication across technical and non-technical teams
Nice to Have
•Firewall technologies
•Cloud security standards and solutions
•Financial services or e-commerce experience
•CISSP achieved or in progress
Conditions and Benefits
•Competitive starting salary
•26 days of holiday, increasing with service, plus a buy/sell scheme and bank holidays
•7% pension with matched contributions
•Discretionary bonus scheme
•Share schemes, including free shares and BAYE
•Health Cash Plan and discounted private healthcare
•Free gym
•Enhanced family leave, subject to qualifying criteria
•Travel and bike loan schemes
•Employee Assistance Programme
•Regular social events, including summer and Christmas parties
•Tailored learning and development opportunities
•Casual dress code and a friendly, supportive team environment
•Hybrid model requires at least 50% of working time per month in the office; new team members initially work full-time in the office

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot