Job Description

Who we are

Hello, we're Zempler Bank, formerly Cashplus Bank. We're here to make money simpler. We know that banking isn't at the top of most people's to do lists, that's why making it less of a chore is at the top of ours. We don't do banking the traditional way - the wrong way. We do banking that works for the people that need it, when they need it. We're for the crafters, the grafters, and the self starters

We are a "Top 100 Best Companies" employer & Top 25 Financial Services businesses to work for in the UK. Our mission statement, which underpins everything we do, is to provide the UK's underserved businesses with easy to access and simple to use banking services that helps them succeed.

Ready to make a real impact in Information Security?

At Zempler Bank, we're not just safeguarding systems! We're protecting trust. We're looking for an Information Security Engineer who's passionate about building robust security frameworks and ensuring compliance that keeps our customers and colleagues safe.

This is your chance to join a forward-thinking team where your expertise will help shape the future of secure banking. We value diversity, collaboration, and fresh ideas because we know the best solutions come from different perspectives. If you're curious, proactive, and driven by doing things the right way, we'd love to hear from you.

Hybrid Working

We are very proud to offer one of the most flexible hybrid working arrangements in the industry!

The expectation for this role, will involve a minimum of one day each month - working out of our London Bridge office.

Key Accountabilities Include

Security Control Framework

Ensure high levels of information security are maintained across Zempler Bank and assist other technical teams to understand and meet those high levels based upon PCI-DSS compliance and NIST CSF

Lifecycle Support

Support management of Information Security assets to ensure they are secure and fully supported, including Patch and Vulnerability management to agreed standards

Incident Response

Configure and respond to monitoring alerts for issues detected by Information security tools, supporting incidents 24x7 (average once per month) as required, escalating when required

Support the Post Incident Resolution (PIR) process and provide recommendations to avoid future incidents

Documentation

Maintain documentation and configuration repositories, including security diagrams, IT asset management systems and agreed

documentation

Document and share knowledge with other members of the team, including delivering training sessions when required

Change Management

Support the wider project and change programme, design and deliver agreed improvements following governance processes and industry best practices including documentation

Ensure all changes are released or made into controlled environments following agreed and repeatable processes, including roll-back to a known working state

Reporting

Provide agreed reporting and updates to the Chief Information Security Officer and wider team, including accurate status of tickets being worked on

Threat and Risk Management

Risk mitigation through best practice and by following company procedures

Identify risks and escalate to management, maintain the Information Security risk register and support the wider Enterprise Risk

Management framework

Use horizon scanning to keep abreast of relevant new technologies, security threats and regulatory changes

Qualifications, skills and experience

Essential:

Prior experience of working within an Information Security team Experience and familiarity with one or more of the following security tools: Logrythm SIEM, McAfee suite, Firewalls, Officer 365 Compliance tools, CASB Experience and ability to achieve and maintain PCI, or similar security standards (e.g. NIST-CSF, ISO 27001) Experience in Windows Server, security configuration: Windows 2012, 2016; Active Directory; Group Policy, Certificate Services; Office 365 and Windows 10 security configuration Automation through scripting and other tools General security technical skills: networks, storage area networks, backups, firewalls, virtualisation, virtual desktop environments, monitoring, alerting, efficiency and optimisation, documentation, procedural controls, identity and access management, automation, 24x7 support Good verbal, written communication and interpersonal skills

Desirable:

Experience with CentOS/RHE, Kali Linux, Penetration Testing, Red Teaming. Ideally CISSP, MCSE and ITIL qualified Experience working in financial services, payment organisations, Banks or an understanding of working in a regulatory environment where good governance is a requirement and a benefit Membership of relevant professional body Strong understanding of open data sources and supporting the delivery of APIs, e.g. for open banking

In Return You'll Enjoy

Competitive basic salary

Additional benefit allowance representing 7.5% of your annual salary allowing you the flexibility to decide your own benefits (or simply absorb this into your monthly income).

26 days' holiday increasing each year of service to 33 days

Ability to buy and sell a further 5 days holiday each year

4 x Life Assurance

Pension salary sacrifice

Option for LinkedIn Learning license

Family friendly policies

Regular social activities and team events

Charity Volunteering Day

Zempler Bank is an equal opportunity employer. Individuals seeking employment are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.

Job Types: Full-time, Permanent

Benefits:

Company pension Employee discount Work from home
Work Location: Hybrid remote in London SE1