Nucleus Financial

We're on the lookout for someone to lead the Security Operations activities within our Information Security team.

About the role

This role is responsible for ensuring Nucleus can detect, analyse and respond to security threats across our internal and outsourced operations. The Security Operations Lead will ensure that Nucleus is effectively monitoring the security resilience of our technology estate through the selection, development and embedding of appropriate capabilities. The Security Operations lead must be able to manage relationships: with Critical Outsource Partners to ensure they are meeting their obligations; with teams across Nucleus to collaborate on improvements; and line manage a security operations team.

The information Security team aims make sure that Nucleus is a trusted partner to the firms and people we work with. Being able to demonstrate that our systems are secure, through clear and structured reporting, is a core component of building that trust. This role is critical to delivering that outcome: being the subject matter expert for our BAU operations and continuous improvement.

You’ll work with SMEs across Nucleus, and within the team you’ll ensure that the Information Security Analysis team have appropriate evidence to demonstrate that our risks are effectively managed and provide input to the Application Security team that facilitates an effective change programme.

Responsibilities

• Subject Matter Expert for security monitoring, making sure we have capabilities that enable appropriate detective controls, and response processes, to mitigate Nucleus’s security risks.
• Threat Hunting to ensure that emerging or unforeseen risks are identified and managed, either through continuous improvement or broader change programs
• Manage a security operations team, producing relevant MI, and work closely with related vendors
• Support the oversight of Critical Outsource Partners
• Able to engage and influence stakeholders across the business with the ability to explain complex issues and agree plans across teams
• Help maintain the information security policy suite
• Oversee security operations for other members of the Nucleus Group, to ensure Nucleus has an end to end understanding of our exposures and capabilities.
• Ensure appropriate management of security incidents by creating clarity in complex and developing circumstances and making rapid decisions. Providing input to the company-wide Incident, Crisis, and Operational Resilience plans.
• Support Audit and Due Diligence activities to help evidence Nucleus’s capabilities.
• Working with Application Security and information Security Analysis teams to define standards that ensures Nucleus continues to manage our security risks effectively, as part of our company wide Risk Management Framework.
• Take responsibility in everything you do to deliver good outcomes for our customers
• Positively demonstrate the Nucleus Smart, Heart and Courage values and behaviours
• Ensure compliance with Code of Conduct at all times
• Our key Security Operations tools currently include: Rapid7 InsightIDR, Microsoft 365 suite with Security and Compliance features.

About you

Your friends might describe you as ‘the safe pair of hands’. You love to pay attention to the details, identifying where things can go wrong, being hands on and collaborating to put solutions in place to catch them before it can happen.

You’ll enjoy working within a fast-paced environment that gives you the opportunity to multi-task within set deadlines. Professional with a positive outlook, you’ll take great pride in your ability to act on your own initiative and remain flexible in changing circumstances and priorities.

You’ll also enjoy working as part of a diverse and supportive team, collaborating with your colleagues to share ideas and knowledge and suggest improvements.

At Nucleus, we’ve always placed high value in cultural contribution and growing our diversity of thought, over technical capability. But it would great if you had some of the following:

• Significant Information Security experience, preferably within financial services, focused around operational processes and incident response.
• Strong knowledge of best practice in security capabilities, frameworks and concepts.
• Expert experience using Security Tooling to create security dashboards, alerts, playbooks and reporting.
• Experience with Powershell or Python is beneficial
• Able to identify areas for continuous improvement, either using in house capabilities or by working with external tools/providers.
• An excellent communicator, able to discuss security effectively with areas of the business.
• Able to understand other people’s views and provide appropriate challenges to ensure our Information Security risks are effectively managed.
• Good knowledge of IT, Development and Networking concepts.
• Ownership of tasks, attention to detail and following through to conclusion.
• Ability to prioritise and remain agile with competing work demands.
• Excellent attention to detail

.

A little about us

We are the Nucleus Financial Platforms group and we help make retirement more rewarding. Here at Nucleus, people come first - whether it’s our colleagues, or the advisers and customers we support, we know that working in partnership and collaboration leads to the best outcomes. Together, we’ve shaped the platform to how it is today. We work hard, and we celebrate hard too.

Our ambition is to create a platform with a difference, putting the customer centre stage meant tearing up the rule book and starting from scratch. We’ve come a long way since then, but our mission remains just as focused. That’s why our culture, values, and social responsibility are things we keep at the top of our agenda – because we know they matter and have a big impact.

Our culture is one of the many things that sets us apart from the pack. We want to have an environment where our people feel that they can make a real difference, know they’ll be rewarded for their efforts and more importantly, enjoy themselves at work.

Are we a perfect match? Check out this video and find out!

Inclusion and diversity at Nucleus

As with most things in life, who cares, wins. We really care about inclusion.

For us it’s not a tick box exercise; inclusion and diversity are embedded in our culture and everything we do. It’s a commercial imperative. It isn’t about being PC. It’s about being future-relevant and durable. We owe it to ourselves and the industry to ensure we are playing our part in creating a fair, balanced and transparent financial services sector.

More diversity means broader experience, a wider set of perspectives and a better collective ability to problem-solve. And it means being more representative of customer groups, which supports areas such as product development.

At Nucleus, we offer a generous blend of benefits for the things that really matter to our people, including a non-contributory pension, bonus, enhanced parental leave, paid time off for emergencies, health and wellbeing initiatives and flexible working options.

If you’d like to find out more about us or the role, please get in touch with Hannah in our People team.