Cyber Security Engineer – EXPIRED

Cyber Security Engineer

Do you want to be part of a force for good, helping to make life better for customers & society in the moments that matter? At Hodge, we put people at the heart of our business and that means our customers, colleagues and communities. Hodge is a Welsh financial service provider that focus on commercial lending, and specialist residential mortgage markets. The company is unique in that it is 79% owned by the Hodge Foundation, a charity established in 1962 that awards grants to registered charities and is funded by the profits from Hodge. The purpose of this role is to ensure that our customers are provided the high level of service which Hodge is known for and is a key element of our DNA and offering.

Working as part of the Cyber Security team, the successful person will ensure that operational controls in relation to Hodge systems, infrastructure and data are managed in line with cyber and information security best practice and that the estate is pro-actively upgraded and maintained.

Key Responsibilities

• Assist in the implementation of appropriate cyber security toolset covering user, infrastructure, and application activity
• Undertake all required activities to ensure that operational cyber controls and working effectively and managed pro-actively.
• Operate vulnerability management process across applications and infrastructure to ensure risk is managed effectively and ongoing process improvement.
• Work with outsourced security providers to ensure work being undertaken is of required standard and appropriate reporting is available.
• Contribute to the ongoing development of the Security Controls Catalogue to ensure consistent reporting of risks and controls, and alignment to best practise.
• Ensure appropriate documentation is maintained to support current and future activity.
• Ensure work includes appropriate quality control mechanisms and automated reporting.
• Contribute to the ongoing cyber awareness and education programme for Hodge colleagues.
• Work with Service Delivery and Technology Project colleagues on implementation and planning of cyber related tools and projects.
• Work with business and IT stakeholders to ensure security provision and tools align with short and longer-term goals.
• Work with software and delivery teams to provide cyber security and controls guidance across development and infrastructure projects.

What we need from you:

Essential:

• Relevant IT or computer science degree
• Experience of working to recognized cyber security and risk frameworks
• Experience in Cyber or Information Security Role
• Knowledge of range of tools to implement Cyber controls.
• Knowledge in IT security best practice, solutions and frameworks.
• Ability to demonstrate understanding of vulnerability remediation

Desirable:

• Certified Information Systems Security Professional (CISSP) or equivalent.
• Previous experience in financial services sector
• Knowledge and experience of developing for AWS or similar cloud platforms
• Knowledge of risk management frameworks and controls

At Hodge we operate a hybrid working policy where our colleagues work at least 40% of their time in the office, anyone on a remote contract we require to come into the office once a month.

In return we offer:

• Based in Cardiff City Centre operating in a highly flexible Hybrid workspace.
• 28 days Holiday with the option to buy more.
• Private Medical & Health Insurance
• Company pension contribution up to 15%
• Subsidised Gym Membership.
• Extensive learning and development programme

• Generous, personalised benefits package
• 4 days on top of annual leave for community and charity work
• Flexible working options

Please be aware that should we pursue your application, all our Financial Services employees will be expected to complete background checks to assess suitability for employment, these include; a criminal record, identity, sanctions, adverse finance, fraud prevention and reference checks to comply with our regulatory requirements.

Hodge is an advocate of being an equal opportunities employer, We believe in promoting equality and diversity which is central to our lives today. We welcome applications from all sections of the community and recognises the value a diverse workforce brings to an organisation.

ESG and sustainability are at the heart of everything we do and serves as a reminder of the responsibility we have to our stakeholders, customers, colleagues and the communities we operate in to use our position wisely. We’re currently exploring different certifications available and have done an initial review of how we think we’d fare, as we see this as a real opportunity for Hodge given our social purpose.