Plan and execute independent tests of enterprise cybersecurity controls across TT’s technology estate, with a high degree of autonomy over scoping, methodology, sampling and scheduling.
Assess both the design and the operating effectiveness of controls, combining evidence review and control owner walkthroughs with hands-on technical validation of configurations, logs, identity and access data, and cloud environments.
Document findings clearly and defensibly, setting out the condition, criteria, cause, risk and impact, and rating them consistently against TT’s risk criteria.
Partner with control owners and TT Security to design workable remediations, then validate closure through retesting rather than accepting assertion alone.
Track findings and remediation plans through to closure, escalating overdue or inadequately addressed items where necessary.
Build and maintain automated and continuous control monitoring so that control health is visible between formal assessment cycles.
Contribute to the continuous improvement of the control framework itself, refining control definitions, testing procedures, evidence requirements and the annual assessment plan.
Map the control environment to SOC 2, ISO 27001 and NIST frameworks, identifying gaps, duplication and opportunities to test once and satisfy multiple obligations.
Manage relationships with internal stakeholders and control owners, setting expectations, communicating requirements clearly, and holding a firm, evidence-based position when findings are challenged.
Support external audits and customer assessments by providing tested, reliable control evidence.
Skills, Knowledge and Expertise
8 to 10 years of IT experience, including at least 5 years focused on information security.
Professional certification required: CISM, CISSP, CISA, CRISC or equivalent.
Demonstrable experience designing and executing security control tests and producing findings and workpapers that withstand audit scrutiny.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
Trading Technologies is seeking a Senior Platform Engineer to build and operate an internal developer platform for low-latency capital markets systems. The role focuses on Backstage, AWS modernization, Linux SRE, CI/CD,
Strong working knowledge of cybersecurity controls and frameworks, including SOC 2, ISO 27001, the NIST Cybersecurity Framework and NIST SP 800-53.
Technical depth across identity and access management, cloud infrastructure (AWS certification is a plus), endpoint and network security, logging and monitoring, vulnerability management and secure development practices.
Experience automating control testing or building continuous control monitoring, using scripting, queries, APIs or GRC platform automation.
Familiarity with GRC platforms such as OneTrust, Vanta, Drata, ServiceNow IRM or similar.
Exceptional spoken and written English, with the ability to explain technical requirements and findings clearly to both engineers and senior stakeholders.
Confidence and diplomacy to challenge control owners constructively and to hold a position under pressure when the evidence supports it.
Ability to work autonomously, manage a portfolio of concurrent assessments and deliver to deadline with minimal supervision.
Strong attention to detail and follow-through.
Experience in financial services, capital markets or another regulated industry is highly regarded.
Benefits
Health & Financial Security: Medical, Dental, and Vision coverage
Medical, Dental, and Vision coverage
Time Off & Flexibility: Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture. 21 days of Paid Time Off (PTO) per year, with the option to roll over unused days. One dedicated day per year for volunteering. Two professional development days per year to allow uninterrupted professional development. An additional PTO day is added during milestone anniversary years. Robust paid holiday schedule with early dismissal. Generous parental leave for all parents (including adoptive parents).
Enjoy the best of both worlds: the energy and collaboration of in-person work, combined with the convenience and focus of remote days. This is a hybrid position requiring three days of in-office collaboration per week, with the flexibility to work remotely for the remaining two days. Our hybrid model is designed to balance individual flexibility with the benefits of in-person collaboration, enhanced team cohesion, spontaneous innovation, hands-on mentorship opportunities and strengthens our company culture.
21 days of Paid Time Off (PTO) per year, with the option to roll over unused days.
One dedicated day per year for volunteering.
Two professional development days per year to allow uninterrupted professional development.
An additional PTO day is added during milestone anniversary years.
Robust paid holiday schedule with early dismissal.
Generous parental leave for all parents (including adoptive parents).
Work-Life Support & Resources: Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment. Milestone anniversary bonuses.
Budget for tech accessories, including monitors, headphones, keyboards, and other office equipment.
