Information Security Engineer – CISO Track

🕒 Yesterday

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tangible

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Tangible is a London-based financial technology company and secondary markets platform that provides liquidity solutions and advisory for institutional investors. It operates auction and liquidity hub products for closed-end and semi-liquid funds, serving limited partners (LPs), general partners (GPs), wealth managers and secondary liquidity providers. Tangible offers a tech suite and strategic/financial advisory for secondary transactions and works with regulated broker partners to facilitate securities offers.

📋 Description

• Own security in the AWS environment, including IAM, least privilege, network segmentation, encryption, logging, and detection • Build security into the development pipeline through secrets management, dependency and container scanning, risky-change code reviews, and threat modeling • Automate detection rules, alerting, compliance evidence, and infrastructure-as-code guardrails • Run vulnerability management and incident response; write runbooks and conduct drills • Define security rules for AI and LLM use, including vendor data handling, approved models, and prompt/output logging • Assess prompt-injection and data-leakage risks and design practical controls • Own SOC 2 control design, automated evidence collection, and auditor relationships • Handle regulatory requirements for financial-institution customers, including GDPR, CCPA, DORA, EBA outsourcing guidelines, GLBA, and SEC/FINRA expectations • Lead customer security reviews, due-diligence questionnaires, RFPs, contract security terms, and calls with bank security teams • Run vendor reviews and third-party risk management • Build security awareness training, phishing resilience, and device and identity hygiene • Set security strategy, report risk to leadership, choose tooling, build a budget, and hire as the role grows • Grow into a CISO role and report to the CTO

🎯 Requirements

• 5+ years in security engineering or security-heavy infrastructure work • Depth in AWS security, including IAM, SCPs, logging, detection, and encryption • Python and Terraform, or close equivalents • Experience automating evidence collection • SOC 2 experience, ideally owning a Type II audit • Working knowledge of privacy legislation • Exposure to financial-services customer scrutiny, or appetite to make it a specialty • Working view on LLM security risks, or strong fundamentals and curiosity to build one • Judgment about which risks matter • Ability to explain controls to auditors and engineers • Clear writing for async work, policies, and risk memos • Ambition to grow into an executive role and people skills to support it • Nice to have: fintech or another regulated B2B environment with large financial-institution customers • Nice to have: DORA, EBA/ESMA outsourcing guidelines, or NYDFS 500 • Nice to have: experience securing SSO/SCIM, SFTP feeds, and APIs • Nice to have: experience as the first security hire • CET timezone or close

🏖️ Benefits

• Fully remote, flexible hours • Competitive pay • Equity • Learning budget • Direct access to leadership and customer security teams at major financial institutions • A blank slate with real ownership • A committed path to CISO