Role Summary:

We are seeking an experienced and proactive Cyber Security Lead to take a hands-on role in securing our digital assets, protecting our financial data and systems from cyber threats, and maintaining compliance with industry regulations. At CoinShares we see cyber security as not just a necessity but an opportunity to maintain a competitive advantage over our peers in the industry. Working closely with our IT and trading system development teams, you’ll ensure our SaaS and cloud based infrastructure meet the highest security standards. You’ll be responsible for building a strong security framework, mentoring a talented team, and driving innovative solutions to counteract emerging cyber threats in an ever-evolving digital landscape. This is a unique opportunity to shape the future of cyber security in a fast-paced, forward-thinking environment.

Duties & Responsibilities:

• Conduct risk assessments, security audits, vulnerability scans and penetration testing to identify potential security threats or weaknesses in our systems and develop plans to address them.
• Implement and maintain security systems, including firewalls, intrusion detection and prevention systems, and identity management systems.
• Collaborate with the IT, DevOps, Engineering and broader business stakeholders to identify and prioritise security initiatives and projects.
• Monitor and respond to security alerts and incidents, including conducting investigations, incident response and providing remediation recommendations.
• Manage our outsourced Security Operations Center (SOC) and ensure performance expectations are met and security outcomes are continuously improved.
• Conduct initial and on-going security reviews on vendors and other third parties.
• Implement and maintain security policies, procedures, and best practices to ensure the confidentiality, integrity, and availability of our data and systems.
• Ensure security controls are compliant with industry security standards, regulatory requirements and security frameworks (e.g., ISO 27001, SOC 2, DORA, GDPR).
• Provide training and awareness programs to educate employees on security best practices and to foster a security-first culture.
• Stay up to date with emerging threats, industry trends and technologies.
• Prepare and present regular reports on the status of our security program to leadership.

Undertaking any other such duties as may be reasonably required by the role.

Qualifications, Skills & Experience:

• Previous proven experience in Cyber Security, with a focus on financial services.
  
• Significant hands-on experience with security tools, such as firewalls, intrusion detection and prevention systems, and vulnerability scanners.
  
• Strong experience with AWS (preferable), Google Cloud or Microsoft Azure.
  
• Experience with Infrastructure as Code (Terraform) and integrating security into the CI/CD pipeline is an advantage.
  
• In-depth knowledge of security frameworks, such as NIST, ISO 27001, and CIS Controls.
  
• Strong analytical and problem-solving skills, with the ability to think creatively and strategically.
  
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams and business stakeholders.
  
• Previous experience leading and managing cyber security teams in a fast-paced and dynamic environment.
  
• Industry certifications, such as CISSP, CISM, or CISA, are a plus.