Cyber Security Expert

Introduction 

Here at Fnality, we are powering the future of finance, together: combining best in class technology with free-flowing creativity, and expertise that can make business better for everyone. There are no precedents for what we’re doing. With you on our side, we’ll be setting new ones every day. 

In a complex world, we are here to bring clarity and make positive change.  Fnality Services is central to each Fnality Payment System’s (FnPS) effective and resilient operation and provides an efficient common service platform for the secure global delivery of settlement operations. 

Position Summary 

The Cyber Security Expert is responsible for leading the prevention, detection, and response of security incidents as well as helping to shape and develop Fnality’s strategic security operations capabilities. This is a hands-on role and you’ll be expected to lead enhancements and refine Fnality’s processes and procedures. You may also be called on to support exciting new projects supporting Fnality’s group of companies as it undergoes significant transformation. 

Role & Responsibilities 

• Working with the Fnality group of companies to ensure that security operations is executed aligned to the Cyber Security strategy 
• Deploying, configuring, and operating enterprise security technologies and tools; operating technical security controls and processes 
• Operate Identity & Access Management (IAM) processes and perform user provisioning in line with asset and data management policies 
• Deploy, configure, and manage security tools across the enterprise estate  
• Oversee the configuration and management of SaaS (e.g. M365) security controls  
• Working collaboratively as part of the wider operations team from a security operations perspective including operating security change and incident management processes 
• Operate the enterprise IT & payment system vulnerability management & threat intelligence programmes 
• Monitor the health of the systems and identify, manage and mitigate security controls. 
• Provide reporting to internal & external stakeholders aligned to contractual agreements 
• Deploy and support security tooling & enterprise systems to defined security & technology principles, standards, blueprints, and building blocks 
• Ensure information & security compliance certifications and standards are gained, rolled out, adhered to, and upheld 

• Working with the wider team to create, maintain and deliver against an organised and cross organisation aligned backlog of delivery and support operations 
• Working with Risk Management colleagues to ensure Fnality’s Cyber Risk Management posture is comprehensive 
• Drive comprehensive security testing activities 
• Working closely with third party vendors to maximise contract value 
  

Desired Skills and Experience 

• Experience working with the M365 platform and security tooling; including but not limited to Vulnerability Management, Intune MDM, Azure AD, Purview, and Azure Sentinel 
• Experience working with the AWS platform and tooling; including but not limited to AWS Security Hub, Inspector, Guard Duty, Config, WAF, SSM/SSM Docs, CloudHSM, and LZ 
• SIEM configuration & management experience (e.g. Splunk, Sentinel) with strong conceptual knowledge and hands on experience 
• Experience of data management, including ensuring the adherence of data classification, criticality, and loss prevention 
• Hands-on experience of privileged access management, secrets management, access control, and associated tooling 
• Experience in security disciplines such as Security Incident Response, Network Security, Vulnerability and Threat Management 
• Experience in endpoint security and device hardening (e.g. Jamf, Intune) 
• Strategic, forward-thinking approach with a passion for innovation and change 
• Willingness to get involved with a multitude of work and changing priorities in a fast-paced, ambiguous environment 
• Comfortable working with limited resources and tight deadlines 
• Attention to detail 
• Ability to see the bigger picture 

Nice to have 

• Experience in a technical information security role adhering to regulatory compliance and information security management frameworks (e.g., IS027001, NIST, Cyber Essentials, etc) and as of late had chances to flex your competency, ideally in an agile, fast growing scaleup 
• Possess one or more the following certifications: Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Microsoft Azure Security Engineer (AZ-500), System Security Certified Practitioner (SSCP) 
• Security Operations expertise (e.g. service, design, engineering) coupled with an understanding of financial services and relevant regulations and laws. 
• Knowledge of and/or interest in blockchain, financial services back-office processes, systems and products 

However, if your experience isn't an exact match, please apply if you are interested and we can see if there is a potential opportunity for you with Fnality. 

Why should you join Fnality? 

We employ curious individuals who thrive working in a fast-paced and constantly changing environment, who work best when empowered to drive their own work, and who are not afraid to fail fast and learn quicker. 

You will be an analytical thinker who is able to look at tasks and understand the most efficient way to achieve the desired outcome. You will be vigilantly outcomes-focussed and fully agile in your approach to working. You will have an insatiable desire to learn, adept at picking up new challenges and giving it a go. You will want to deliver as much as learn and you will understand how important the power of the team is.  

A bit more about us 

Digital transformation is changing our lives, work and businesses. While other sectors evolve however, financial markets remain slow, fragmented and siloed. What the world needs now is a future-facing financial system for the digital age. 

At Fnality, we have been speaking – and listening – to the real users of today’s financial systems. From businesses to banks, there is a clear, collective ambition for a simpler, faster, safer and more resilient payment system; one that can move and settle money quickly and efficiently, with minimised risk and much more transparency. 

Fnality Global Payments 

We are building a new payment system that will enable tokenised, peer-to-peer markets.  

Fnality Global Payments (FnGP) will comprise a series of national systems, each regulated in its home jurisdiction. We call each of these a Fnality Payment System (FnPS)  

In each payment system, a Fnality settlement asset will act as the settlement/payment asset for any Payment (P), Delivery v, Payment (DvP) or payment vs. payment (PvP) need. 

FnGP are underpinned by Distributed Ledger Technology (DLT). The nature of DLT is such that it enables FnGP to:  

• Operate a true peer-to-peer market 
• Allow for immediate settlement 
• Interoperate across business platforms and jurisdictions 

The key benefits of the above are:  

• Reduced counter-party and credit risk  
• Reduced operational risk  
• Efficient liquidity management  
• An ability to move resources from risk mitigation to business growth 

How will we use the information about you?  

We will use your personal information to process your application, to enable us to assess your suitability for a role and for other legitimate business purposes such as improving our sites and talent management practices. We may share your data with third parties to achieve these purposes. We will not use or share your information for marketing purposes.  

We will take appropriate security measures to safeguard your information in accordance with data protection legislation.  

If you would like further information about how your information may be processed by us, please contact us at privacy@fnality.org. 

Tags