Security Controls Specialist Stock Exchange Group

Job Description

Are you a top-tier Cyber Security specialist who wants to use your expertise to help safeguard the infrastructure that powers global financial markets? We are seeking a Cyber Security Controls Specialist to work within the engineering team. This role is important in ensuring that our controls are well‑understood, effectively implemented, and accurately represented during internal and external audits and assessments. The ideal candidate will bring a strong blend of technical expertise, audit experience and risk management knowledge.

You will lead the representation of technical controls to auditors, translating sophisticated security controls into clear, auditable evidence and narratives, and help teams ensure robust evidence exists to support control design and operation on an ongoing basis.

• Conduct proactive internal control assessment activities to validate the effectiveness of controls and identify areas for improvement; ensure controls are accurately documented, maintained, and measured to simplify audit and assessment activities.

• Lead the team’s response to audits, regulatory, customer assessments and compliance reviews by providing clear, concise and technically accurate evidence and explanations; service multiple concurrent audit and assessment activities through standardized processes and evidence.

• Translation: Translate sophisticated technical security concepts and measures into plain‑friendly language appropriate for collaborators, auditors and risk managers.
• Risk Management: Collaborate with teams to ensure cyber risks are identified, assessed, accurately recorded and mitigated through effective control design and operation.
• Continuous Improvement: Identify gaps or weaknesses in existing controls and related documentation, and recommend improvements by working closely with control owners. Ability to understand how security controls work and influence their design, implementation and measurement.

• Proven experience working in a technical audit role, assessing controls in highly regulated global organisations; comprehensive understanding of control evidencing and appropriate robust measures.

• Strong understanding of common security technologies, security threats, security frameworks, foundational technologies such as cloud and associated processes.
• Practical experience guiding first‑line defence technical engineering teams in uplifting control‑related evidence and measures, and continuous learning to expand technical understanding of controls.

• Outstanding ability to communicate technical concepts to non‑technical audiences, including auditors, senior management and business partners; comfortable questioning and challenging assertions when facts, metrics and anecdotes differ.

• Solid understanding of risk management principles and their application to cyber security controls and governance; experience transforming risk conversations from theoretical to actionable; bridging the gap between policy and practice; experience with GRC tooling platforms to capture and handle issues and risks.

• Continuous Control Monitoring & Automation: Experienced in automating controls monitoring, analysis and evidence collection to simplify assurance processes.
• Certifications: CISSP, CISA, CRISC or similar, and technical security certifications are highly desirable.

Join us and be part of a team that values innovation, quality and continuous improvement. If you’re ready to take your career to the next level and make a significant impact, we’d love to hear from you.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They guide our decision making and everyday actions.

Working with…