Director, Cyber Hygiene and Metrics Engineering Lead

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counter parties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Our ambition to make a positive difference starts with our people. Our values – Protect, Improve, Grow – underpin everything that we do at CLS and define and shape a supportive and inclusive working environment in which everyone is encouraged to be open and forward-thinking

• Functional title – Cyber Hygiene and Metrics Engineering Lead
• Department - CISO
• Report to – Nathan Macrides (Head of Security Architecture, Design and Engineering)
• Location – London, 2 days on-site per week

Lead the end-to-end design and implementation of the cyber hygiene security tooling and the security metrics analytics and reporting platform. The lead will work closely with the security operation teams that run the security controls related to cyber hygiene and security analytics, measurement, metrics and reporting:

• Mature the cyber hygiene architecture across CLS to ensure comprehensive discovery of vulnerabilities, misconfigurations.
• Vulnerability management (VM) lifecycle, standardized processes, modernization in the face of AI, standardization and optimization.
• Support AI application remediation and patching.
• Ensure scan completeness of the estate against the CMDB.
• Experience with Service Now VM modules, Qualys and Wiz desirable.
• Experience with security configuration baselines and automated testing.
• Crypto Discovery and Inventory Engineering – engineer the solution to discover and inventory crypto key material across the estate in preparation for a post quantum crypto world.
• Experience with EDR deployment and management.
• Secure Storage & Transfer Engineering – develop solutions to securely transfer files in and out of the organization, at the user and application levels.
• API Security Engineering – implementation of API security platform to inventory apis and find vulnerabilities and misconfiguration in APIs.
• Application Security Testing engineering (SAST/DAST/SCA/Frontier AI code scanning)
• Integration the code scanning tooling into the CI/CD pipelines.
• Integration with developer tooling and reconciliation with SNOW VMR ticketing.
• Working closely with cyber hygiene operations teams to ensure that the processes are consistent and vulnerabilities and remediate with SLA and directed to the correct remediation owners.
• Threat Modelling Engineering – development of automated threat modelling platforms and integration the with security architects design processes to ensure threat modelling is executed as part the architecture design process.
• CLS will be building a platform to measure the effectiveness of security controls across the estate this will require a big data and analytics platform that will necessitate metrics platform engineering (data architecture and data models, data governance, analytics and BI, big data technologies, data engineering, cloud engineering, data normalization and ETL).
• Experience with AI Security
• Build controls to limit LLM risks including prompt injection, data leakage, model poisoning and hallucination exploitation etc.
• Define and implement AI guardrails and policy enforcement mechanisms (prompt filtering, output validation, access control etc.)
• Design and implement secure AI architecture patterns.
• Implement monitoring and detection controls from AI misuse.
• Experience…