Cyber Security Risk Engineer: python/Windows | Linux | MacOS | Mobile OS | AWS | Azure | GCP

Summary: We are seeking a Cyber Security Risk Engineer to join a leading global financial firm, requiring deep technical expertise in enterprise environments. The role involves bridging conversations between engineers, stakeholders, and risk leaders while providing guidance on secure system architectures. The ideal candidate will conduct risk assessments and communicate risks effectively to diverse audiences. This position is pivotal in aligning security with business goals and regulatory needs.

Key Responsibilities:

• Provide expert guidance on secure, resilient system and cloud architectures.
• Collaborate with compliance, legal, IT, business stakeholders, and external clients to align security with business goals and regulatory needs.
• Act as a trusted technical advisor-communicating risks clearly to both technical and non-technical audiences.
• Conduct detailed risk assessments across applications, infrastructure, and business processes.
• Document risks and design compensating controls where standard solutions are not feasible.
• Monitor control effectiveness and propose enhancements to reduce residual risk.
• Stay current with emerging threats, technologies, regulatory changes, and best practices.
• Support incident response efforts and post-incident risk evaluations.

Key Skills:

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or similar.
• 5+ years of experience in IT or Information Security within enterprise environments.
• Strong technical understanding of Operating Systems: Windows, Linux, MacOS, Mobile.
• Cloud Platforms: AWS, Azure, GCP, M365.
• Scripting & Automation: Python, PowerShell.
• Network infrastructure, technologies, and protocols.
• Databases and enterprise architecture.
• Experience working with IT, security, compliance, legal, business teams, and clients.
• Knowledge of risk management frameworks (NIST, ISO 27001, CIS20).
• Excellent analytical, written, and verbal communication skills.

Salary (Rate): undetermined

City: London

Country: UK

Working Arrangements: undetermined

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

We are seeking a Cyber Security Risk Engineer to join a leading global financial firm. This role is ideal for someone with deep technical expertise across enterprise environments and the ability to bridge conversations between engineers, stakeholders, and risk leaders.

Key Responsibilities

• Provide expert guidance on secure, resilient system and cloud architectures.

• Collaborate with compliance, legal, IT, business stakeholders, and external clients to align security with business goals and regulatory needs.

• Act as a trusted technical advisor-communicating risks clearly to both technical and non-technical audiences.

• Conduct detailed risk assessments across applications, infrastructure, and business processes.

• Document risks and design compensating controls where standard solutions are not feasible.

• Monitor control effectiveness and propose enhancements to reduce residual risk.

• Stay current with emerging threats, technologies, regulatory changes, and best practices.

• Support incident response efforts and post-incident risk evaluations.

Required Skills & Experience

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or similar.

• 5+ years of experience in IT or Information Security within enterprise environments.

• Strong technical understanding of:

  • Operating Systems: Windows, Linux, MacOS, Mobile

  • Cloud Platforms: AWS, Azure, GCP, M365

  • Scripting & Automation: Python, PowerShell

  • Network infrastructure, technologies, and protocols

  • Databases and enterprise architecture

• Experience working with IT, security, compliance, legal, business teams, and clients.

• Knowledge of risk management frameworks (NIST, ISO 27001, CIS20).

• Excellent analytical, written, and verbal communication skills.

Desired (Not Essential)

• Experience in financial services or top-tier consulting.

• Familiarity with compensating controls in regulated environments.

• Ability to translate technical risks into business impact for senior leadership.

• Certifications such as CISSP, CISA, CompTIA CySA+.