IT Security Officer

Role summary

Do you have a passion for cybersecurity & technology? Do you want to make a difference, delivering Cyber Security within some of the biggest companies in the Financial Markets Industry and a critical player as a CCP (clearing house)?

We are seeking a skilled IT Security SecOps to join LCH SA IT Security team located in Paris. This role aims at securing LCH SA IT infrastructure and Business application, controlling protection & detection systems, and managing cybersecurity incidents in coordination with Security Operations Centre, to ensure LCH SA Information System is secure, resilient, scalable, and highly available. The ideal candidate will have experience in all key aspects of the cyber security framework and related to vulnerability management, cyber incident management, identity and privileged access management, cyber security service management (reporting & dashboards KPI / SLA).

Key responsibilities and accountabilities

• Deliver the LCH SA cyber security controls’ library by performing checks on the pillars based on the NIST framework (Identify, Protect, Detect, Respond and Recover).

• Perform LCH SA cyber security controls, and assess / challenge controls performed by outsourcers.

• Assess the CIAT (Confidentiality, Integrity, Availability and Traceability) needs for the Business and Technology Applications used by the company.

• Deliver cyber security service activities within LCH SA, in particular production and monitoring of SLA and KPI related to controls activities.

• Oversee the outsourced cyber security services with the outsourcers.

• Provide support / expertise to other IT Security officers in charge of controls’ execution & assessment.

What you’ll be doing

• Delivery of Cyber security controls : Perform cyber security checks to ensure that there are no gaps in the LCH SA cyber security posture (anti-malware coverage, Firewall rules recertification, outstanding vulnerabilities without remediation etc.)

• Enhancement of cyber security controls : Automate some controls by scripting (Python, Perl etc.) to enhance the delivery of the controls (reconciliation between different data sources etc.)

• Assessment of security controls : Assess the outcomes of controls performed by LCH SA outsourcers.

• Assessment of CIAT needs for Business and Technology applications.

• Reporting : Provide providing with SLA and KPI related to controls’ delivery and related identified gaps.

• ITIL cyber security management : Review and challenge the changes, the closure of problems etc. (tech / Business) which may impact on the cyber security profile of the CCP.

You’ll bring

• Education :

• Bachelor’s degree in computer science, Engineering, or a related field (or equivalent experience).

• Professional experience :

• At least 5 years as a Security Engineer, or similar role, with a focus on controlling Security and Tech solutions in regulated and highly available environment.

• An experience as IT / Cyber auditor will be a plus.

• Cyber security certification will be a plus such as CISSP, GIAC etc.

• Fluent English mandatory , in a context of cooperation across an international Group.

• Mandatory Technology Expertise

• Network Security

• OS / Databases / Middleware / Applications Security

• VMware Cloud Security

• Secret Management

• Encryption

• Vulnerability Management

• EDR/AV

• IAM/PAM

• SIEM / SOC

• Soft Skills

• Good communication

• Teamwork and collaboration

• Problem-Solving

• Adaptability

Career Stage:

Senior Associate

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.