Lead Engineer, Cybersecurity, Information Security & Data Protection

Our client is looking for a highly experienced Cybersecurity SME / Consultant to join an Engineering Excellence & Enablement team within a major financial services environment. The role will focus on assessing and improving the cybersecurity maturity of engineering platforms
, ensuring build systems, CI/CD pipelines, runtime infrastructure and developer tooling are secure by design.

• Develop and maintain an Engineering Platform Cybersecurity Maturity Framework
  .
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling
  .
• Perform threat modelling, gap analysis and risk assessments to identify systemic security risks.
• Define secure architecture patterns, security baselines and policy-as-code controls.
• Partner with platform owners to address gaps around artifact integrity, access control and configuration security
  .
• Embed vulnerability management, SBOM, software provenance and code-signing practices.
• Develop security roadmaps based on business risk, regulatory requirements and operational priorities.
• Advise senior technology and cybersecurity stakeholders and translate technical risks into business impact.
• Represent cybersecurity within governance forums and drive adoption across engineering teams.
• Track maturity improvements and continuously evolve security frameworks and secure-by-design practices.
• Strong cybersecurity experience within large-scale regulated financial services or similarly complex environments.
• Deep understanding of engineering platforms, CI/CD, build systems, artifact repositories and developer tooling
  .
• Strong Dev Sec Ops experience, including secure pipeline design and automated security controls.
• Knowledge of service mesh, cryptography, network security, application security, vulnerability and risk management
  .
• Proven experience with threat modelling, security assessments and gap analysis
  .
• Experience developing cybersecurity maturity models, frameworks and strategic roadmaps
  .
• Strong stakeholder management with the ability to influence senior technology leadership.
• Ability to translate complex technical security risks into clear business impact.
• Experience with cloud security (AWS/Azure/GCP) and Kubernetes is advantageous.
• Knowledge of SLSA, SBOM, software supply-chain security or secure developer tooling is highly desirable.