Sr IT Security Engineer

About This Opportunity

Our talent team is representing a confidential financial services organization seeking a Senior IT Security Engineer. This is a critical senior-level cybersecurity role supporting enterprise security programs across security architecture, identity and access management, vulnerability management, and third-party risk. You'll work directly with the CISO and technology stakeholders to identify, assess, and mitigate cybersecurity risks in a highly regulated banking environment.

We're looking for a collaborative security professional with strong technical expertise and risk-based judgment who can translate cybersecurity requirements into practical, sustainable solutions. This role offers the opportunity to influence security strategy, drive automation, and strengthen the overall security posture of a growing financial institution.

Responsibilities

• Conduct security architecture reviews for applications, infrastructure, cloud services, SaaS platforms, and AI-enabled solutions throughout the technology lifecycle
• Partner with architects, developers, and project managers to identify and validate security requirements including authentication, encryption, data protection, logging, and monitoring
• Assess emerging technologies including artificial intelligence, generative AI, and machine learning platforms to ensure appropriate security controls and governance
• Provide identity and access management oversight, including verification of role-based access controls, privileged access, and segregation of duties requirements
• Manage and support authentication technologies including SSO, MFA, Conditional Access, and identity federation using Microsoft Entra ID and Active Directory
• Lead enterprise vulnerability management activities including identification, risk-based prioritization, remediation tracking, validation, and reporting across all technology environments
• Participate in third-party security reviews and vendor risk assessments, evaluating security posture, controls, and resilience of critical vendors and technology providers
• Conduct periodic user access reviews, privileged access reviews, and independent security control validation testing
• Lead enterprise phishing awareness program by conducting monthly simulation campaigns and tracking performance metrics
• Support incident response, cybersecurity investigations, and initiatives that strengthen organizational resilience
• Develop cybersecurity metrics, KRIs, and KPIs to measure control effectiveness, remediation progress, and program maturity
• Prepare management-level reporting on cybersecurity risks, control effectiveness, and emerging threats
• Support audit requests, regulatory examinations, and control assessments

What We're Looking For

Required Qualifications:

• 5+ years of experience in cybersecurity, information security, or security engineering
• Experience working within banking, financial services, or other highly regulated industries
• Working knowledge of FFIEC guidance, banking regulatory expectations, and cybersecurity requirements for financial institutions
• Strong understanding of NIST Cybersecurity Framework, CIS Controls, and risk-based cybersecurity programs
• Experience supporting Identity and Access Management programs, processes, and technologies
• Experience conducting security architecture reviews and technical risk assessments
• Experience managing or supporting enterprise vulnerability management programs
• Experience conducting vendor security reviews and third-party security assessments
• Experience with Microsoft Entra ID, Active Directory, Microsoft 365 security technologies, and cloud-based platforms
• Familiarity with regulatory examinations, internal audits, and cybersecurity control assessments

Preferred Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
• Familiarity with AI governance, AI risk management concepts, and secure adoption of emerging technologies
• Professional certifications such as CISSP, CISA, CompTIA Security+, ISC2 CC, Microsoft SC-900, AZ-900, SC-300, or related cybersecurity, cloud security, or identity-focused certifications

How We Work With You

When you apply through Get A Job.ai, our recruiting team will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please note that you should apply only through Get A Job.ai and not contact the client organization directly during this process. Our team will guide you through each step and provide updates as your candidacy progresses.

Pay

Compensation details will be discussed with qualified candidates during the screening process.

Equal Employment Opportunity: Get A Job.ai is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other protected characteristic. We value diversity and inclusion in our candidate network.