Information Security Lead

MDD Forensic Accountants

Information Security Tech Lead overseeing security engineering and incident response for a diverse client base. Collaborating with teams to enhance security posture and compliance across Asta and its clients.

Posted 6/30/2026full-timeLondon • 🇬🇧 United KingdomSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Lead a team of engineers, setting direction, managing workloads, and developing capability. Act as the primary security escalation point across the Infrastructure function.
Own the InfoSec roadmap aligned to Asta’s IT transformation programme.
Implement and maintain security controls across infrastructure & systems. Harden infrastructure by applying best practices for IAM, PIM, PAM encryption, network security.
Review and implement recommendations of security tooling, including AD hardening tools like Ping Castle and Semperis Lightening as well as vendor solutions & systems.
Monitor security alerts and events from SIEM, EDR, firewall, IDS/IPS, & other security tools.
Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using log analysis, packet captures, and forensic techniques.
Define, own, and drive delivery of Asta’s end-toend security programme spanning PAM, EDR, NDR, SIEM, penetration testing, DLP, and compliance.
Provide security advisory and managed security services to 20+ syndicate and MGA clients including Carbon Underwriting, Dale Underwriting Partners, and Beat Capital.
Stay current with emerging threats, vulnerabilities, attack techniques, and security trends.
Support operational resilience and business continuity planning activities including scenario testing and disaster recovery exercises.
Design, implement & manage simulated phishing campaigns to test and improve staff awareness of social engineering threats.

Requirements

What you’ll need

7 years + of hands-on experience with at least at least 3/4 years in a lead, management, or principal role in cybersecurity, combining security engineering and SOC operations or incident response with experience in regulated industry.
Demonstrable experience leading and developing a security team. Confident communicator able to translate complex security risk into business language for C-suite and board audiences.
Strong understanding of cybersecurity principles, attack vectors, defense strategies, OWASP Top 10, and the Mitre Attack framework
Experience with cloud security (Azure/AWS), IAM, secrets management, encryption, & certificate management. Experience with Microsoft 365 security suite including Microsoft Defender, Azure AD Identity Protection, threat analytics, and security compliance tools.
Hands-on experience with SIEM platforms (Splunk, Crowdstrike (Falcon), Log Rhtyhm, Sentinel, and Microsoft Defender)
Experience of working with tools such as Varonis, Tenable, Pentera & external and internal SOC processes

Benefits

Comp & perks

At Asta, you’ll enjoy a market-leading benefits package that puts your wellbeing, career development and financial future first. We combine flexible working, strong family-friendly policies and exceptional rewards to create a supportive, inclusive and high-performing workplace.
**Our benefits include:** ** Work-life balance you can rely on**
- 35-hour working week with hybrid and flexible working
- Generous holiday allowance that increases with service
**Your health & wellbeing covered**
- Private medical insurance with virtual GP access
- Annual health screening, dental cover and eye care
- Subsidised gym or sports club membership
**Support for you and your family**
- Enhanced maternity, paternity, adoption and shared parental pay
**Rewarding your contribution**
- Highly competitive pension with up to 13% employer contribution
- Life assurance and income protection
- Discretionary annual bonus scheme
- Interest-free season ticket loan and salary sacrifice schemes

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Security EngineeringIncident ResponseVulnerability ManagementThreat AnalysisLog AnalysisForensic TechniquesPenetration TestingCompliance ManagementSecurity Risk AssessmentDisaster Recovery Planning

Soft Skills

Confident CommunicationTeam DevelopmentStakeholder EngagementBusiness Language TranslationOperational Resilience