Information Security Technical Lead

Description

Information Security Tech Lead is responsible for owning and driving the end-to-end information security programme across Asta & its client base. This role leads a team of engineers and provides authoritative security direction across PAM, EDR, SIEM, DLP, identity governance, vulnerability management, and regulatory compliance. The role requires hands-on security engineering, continuous monitoring, and effective operational resilience. Responsibilities include making risk-based decisions during incidents, prioritising alerts, coordinating containment actions, recommending remediation strategies, delivering infrastructure hardening, threat detection, vulnerability management and supporting Microsoft 365 security improvements.

Department and Location

Department: IT

Location: London, UK

Key Responsibilities

• Security Leadership & Team Management: Lead a team of engineers, setting direction, managing workloads, developing capability, acting as primary escalation point across Infrastructure, and owning the InfoSec roadmap aligned to Asta’s IT transformation programme.
• Infrastructure Security Engineering & Hardening: Implement and maintain security controls across infrastructure & systems, harden infrastructure with IAM, PIM, PAM encryption, network security best practices, review and implement recommendations of tools like Ping Castle, Semperis Lightning, and vendor solutions. Collaborate on implementing & integrating security controls into pipelines including scans, policy enforcement, and dependency checking.
• Security Monitoring & Incident Response: Monitor alerts from SIEM, EDR, firewall, IDS/IPS, triage and prioritise based on severity, investigate incidents using log analysis, packet captures, forensic techniques, lead containment, eradication, recovery, maintain alerting, and integrate with SIEM/SOAR platforms.
• Security Strategy & Programme Delivery: Define, own and drive delivery of the end-to-end security programme covering PAM, EDR, NDR, SIEM, penetration testing, DLP and compliance. Translate regulatory obligations (FCA/PRA, Lloyd’s Principle 12, CBEST, ISO 27001, Cyber Essentials) into actionable technical controls.
• Client Security Services: Provide security advisory and managed services to 20+ syndicate and MGA clients, conduct security reviews, Secure Score assessments, Semperis/Entra evaluations, PAM deployment planning, act as escalation point for client-facing incidents.
• Threat Intelligence & Detection: Stay current with emerging threats, vulnerabilities, attack techniques, apply threat intelligence to improve detection, contribute to threat hunting and proactive monitoring.
• Compliance & Documentation: Support compliance and audits for ISO 27001, NIST, SOC2, Lloyd’s Principle 12; prepare incident reports, maintain event logs, produce metrics, coordinate Cyber Essentials certification.
• Operational Resilience & DR: Support resilience and business continuity planning, scenario testing, disaster recovery, post-incident reviews and lessons learned.
• Phishing Campaign Management: Design and manage simulated phishing campaigns, analyze results, identify training needs, track resilience metrics.

Skills, Knowledge & Expertise

• 7+ years of hands-on experience, with 3-4 years in a lead/management/principal cybersecurity role, combining security engineering, SOC operations or incident response within regulated industries.
• Demonstrated experience leading and developing a security team, confident communicator translating risk into business language for C-suite and board.
• Strong understanding of cybersecurity principles, attack vectors, defense strategies, OWASP Top 10 and Mitre Attack framework.
• Experience with cloud security (Azure/AWS), IAM, secrets management, encryption, certificate management, and Microsoft 365 security suite (Microsoft Defender, Azure AD Identity Protection, threat analytics, compliance tools).
• Hands-on experience with SIEM platforms (Splunk, CrowdStrike Falcon, LogRhythm, Sentinel, Microsoft Defender).
• Experience with tools such as Varonis, Tenable, Pentera and establishing external/internal SOC processes.

Job Benefits

Work-life balance:

• 35-hour working week with hybrid and flexible working.
• Generous holiday allowance that increases with service.

Your health & wellbeing:

• Private medical insurance with virtual GP access.
• Annual health screening, dental cover and eye care.
• Subsidised gym or sports club membership.

Support for you and your family:

• Enhanced maternity, paternity, adoption and shared parental pay.

Rewarding your contribution:

• Highly competitive pension with up to 13 % employer contribution.
• Life assurance and income protection.
• Discretionary annual bonus scheme.
• Interest-free season ticket loan and salary sacrifice schemes.

• 7+ years of hands-on experience, with 3-4 years in a lead/management/principal cybersecurity role, combining security engineering, SOC operations or incident response within regulated industries.
• Demonstrated experience leading and developing a security team, confident communicator translating risk into business language for C-suite and board.
• Strong understanding of cybersecurity principles, attack vectors, defense strategies, OWASP Top 10 and Mitre Attack framework.
• Experience with cloud security (Azure/AWS), IAM, secrets management, encryption, certificate management, and Microsoft 365 security suite (Microsoft Defender, Azure AD Identity Protection, threat analytics, compliance tools).
• Hands-on experience with SIEM platforms (Splunk, CrowdStrike Falcon, LogRhythm, Sentinel, Microsoft Defender).
• Experience with tools such as Varonis, Tenable, Pentera and establishing external/internal SOC processes.

Work-life balance:

• 35-hour working week with hybrid and flexible working.
• Generous holiday allowance that increases with service.

Your health & wellbeing:

• Private medical insurance with virtual GP access.
• Annual health screening, dental cover and eye care.
• Subsidised gym or sports club membership.

Support for you and your family:

• Enhanced maternity, paternity, adoption and shared parental pay.

Rewarding your contribution:

• Highly competitive pension with up to 13 % employer contribution.
• Life assurance and income protection.
• Discretionary annual bonus scheme.
• Interest-free season ticket loan and salary sacrifice schemes.