Information Security Engineer

About AJ Bell

What we offer

• Competitive starting salary
• 26 days holiday, increasing with service + buy/sell scheme + bank holidays
• 7% Pension with matched contributions
• Discretionary bonus scheme
• Share schemes (including free shares and BAYE)
• Health Cash Plan and discounted private healthcare
• Free gym
• Enhanced family leave (subject to qualifying criteria)
• Travel and bike loan schemes
• Employee Assistance Programme
• Life at AJ Bell
• Regular social events including summer and Christmas parties
• Learning and development opportunities tailored to you
• Casual dress code
• Friendly, supportive team environment
• Our ways of working
• At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend a minimum of 50% of working time per month in the office. For new team members, an initial period will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.
• Inclusion & diversity
• We’re committed to creating an inclusive environment where everyone feels respected, supported and able to be themselves at work.
• We welcome applications from all backgrounds and make hiring decisions based on skills, experience and potential.
• Agency information
• This vacancy is being managed exclusively by our in-house Recruitment team. We are not partnering with recruitment agencies on this opportunity and will only accept applications submitted directly by candidates.

Qualifications

• Experience working within frameworks such as ISO27001, NIST or similar
• Significant experience in IT security
• Strong problem-solving skills and attention to detail
• Ability to take ownership and deliver end-to-end solutions
• Effective communicator, able to work across technical and non-technical teams
• CISSP (achieved or in progress) desirable
• You'll bring strong technical security experience, a practical engineering mindset and the confidence to take ownership of solutions from design through to implementation and ongoing improvement.
• Technical expertise
• Proven experience implementing enterprise security platforms
• Strong knowledge of security risk management tools and techniques
• Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways)
• Experience with firewall technologies (desirable)
• Knowledge of cloud security standards and solutions (desirable)
• Strong understanding of core IT and networking principles
• Awareness of the evolving threat landscape
• Skills and experience

Preferred Qualifications

• Financial services or e-commerce experience preferred

Responsibilities

• Design, delivery and ongoing improvement of enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments.
• Design and implement secure infrastructure controls aligned to industry best practice, ensuring scalability, resilience and operational effectiveness.
• Evaluate, select and implement new security tools and platforms, driving automation, integration and measurable value across the estate.
• Adoption of new security technologies, ensuring smooth transition into operational support and long-term sustainability.
• Oversee patch management across systems and hardware, ensuring effective coordination and risk reduction.
• Support server hardening and secure configuration initiatives in collaboration with Infrastructure and Service Delivery teams.
• Provide security oversight across projects and change initiatives, ensuring security is embedded from design through to delivery.
• Support audits, regulatory reviews and due diligence activities, ensuring evidence and controls are robust and well maintained.
• Act as a key technical link between the CISO function and Infrastructure teams, ensuring alignment across security and operational delivery.
• Contribute to continuous improvement of cybersecurity risk management processes, helping to enhance maturity across the organisation.
• What we're looking for
• You'll bring strong technical security experience, a practical engineering mindset and the confidence to take ownership of solutions from design through to implementation and ongoing improvement.
• Proven experience implementing enterprise security platforms
• Strong knowledge of security risk management tools and techniques
• Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways)
• Experience with firewall technologies (desirable)
• Knowledge of cloud security standards and solutions (desirable)
• Strong understanding of core IT and networking principles
• Awareness of the evolving threat landscape