Chief Security Officer (CSO)
Hybrid
London, United Kingdom
Full Time
16-04-2025
Job Specifications
About Us
We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.
We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.
Information technology lies at the heart of Swift's services and plays a vital and ever-expanding role in Swift's mission. Swift's information technology environment is highly distributed and diverse, with strong leadership and coordination. Swift seeks an experienced, energetic, engaging and visionary security leader who wants to become part of an exciting, vibrant community of information technology professionals supporting Swift's mission.
We’ve been driving a program of transformation and investment across the IT area to deliver an agile, responsive, and highly business engaged technology capability that can meet the high expectations of the Swift organization, providing a highly resilient and secure network that supports transactions representing trillions of dollars per day and carrying more than 10 billion transactions per year.
Security plays a vital role in ensuring the operational integrity of Swift's services and maintaining its reputation as a global service provider to the industry. With cyber security a fundamental business enabler, the organization is seeking a strong and knowledgeable Chief Security Officer (CSO) to provide vision, strategy, broad-based planning, and hands-on responsibility.
By leading the Global Security team (GS), you will report to the Chief Technology Officer (CTO) and lead a team of security professionals organized around the core domains of: Cyber Fusion Centre, Cyber Threat Management, Attack Surface Management, Identity and Access Management, Governance and Strategy, Security in Business, Corporate (Physical) Security, and Zero Trust Security
Your role is to lead and support the Global Security organization to meet its strategic objectives and enable your teams to be successful by ensuring a common vision and aligned priorities. With a focus on delivery, collaboration, and efficiency, you will help teams identify and solve impediments. Beyond this, your role is also to support interactions with the rest of the organization and key external stakeholders, including regulators and customers.
The role will be location flexible across our locations in EMEA with preference for Belgium, with the UK or The Netherlands as options reporting to the CTO who is based in Virginia. Ideally, the candidate will relocate to Belgium in the future. The CSO is a member of the Technology Platform Management Team, and plays a key role in Swift's IT and information security strategy working closely with senior department leadership, industry leaders, government agencies and the Swift Board and community. The incumbent will be an advocate for Swift's overall information security needs.
The role is responsible for the delivery of a comprehensive information security strategy and operations to optimize the security posture of the organization. The role leads the development and implementation of a security program that leverages collaboration and company-wide resources, facilitates information security governance, advises senior leadership on security direction and resource investments, and designs appropriate policies to manage information security risk.
The mission is to build, evolve and communicate our overall cyber strategy in line with the changing threat landscape, Swift business and technology evolution, industry best practices and regulatory changes. The CSO will lead a team of more than 200 professionals located in key Swift office geographic locations and will be responsible for translating the strategy into an execution plan and for driving its implementation for both change and run activities. The CSO is also responsible for identifying and progressing Global Security transformations required to improve engagement with security staff and the efficiency and effectiveness of our controls. The CSO and their team are also responsible for managing human security investments and operations to ensure the right level of security awareness at Swift.
The complexity of this position requires a leadership approach that is experienced, engaging, imaginative, and collaborative, with a demonstrated ability to work with other leaders to set the best balance between security strategies, risk and business priorities at the program level. Developing the overall security capability and developing talent is a key priority for this role.
Direct reports: 9 across Global Security; approx. 230 in 8 countries across 3 continents (APAC, EMEA & US).
Company And Program Leadership
Responsible for the strategic and operational leadership of Swift's global information security program leading global security and risk mitigation strategies
Drive the evolution of the global security function towards a service organization (identify customers and develop a service catalogue with proper service level management, capacity management, cost management, etc.)
Provide support to help the organization move towards a risk-based approach where risks, controls and costs are managed as interrelated dimensions to help drive "Operational readiness, resilience and efficiency" investments
Improve employee experience and overall engagement and retention by further developing areas such as functional identity, upskilling the workforce, strengthening the feedback culture, uplifting leadership skills and empowerment of employees
Create more security ownership across the organization to help spread accountability on risks and controls and go beyond changing behavior by changing attitudes and perceptions of security
Continue to transition the cyber program to a risk-based organization that prioritizes security controls and delivers value to the organization (quarterly defined priorities, sprint objectives, value monitoring, etc.)
Enable the secure adoption of Cloud Services and AI (people, process and technology perspectives) and support the transition to a first line of defense and risk-based approach from security perspective in an agile environment, adopting market ...
About the Company
Swift is a global member-owned cooperative and the world’s leading provider of secure financial messaging services. We provide our community with a platform for messaging and standards for communicating, and we offer products and services to facilitate access and integration, identification, analysis and regulatory compliance. Our messaging platform, products and services connect more than 11,000 banking and securities organisations, market infrastructures and corporate customers in more than 200 countries and territori... Know more
Related Jobs
- Company Name
- RiverSafe
- Job Title
- Senior Business Development Executive - DevOps / Cloud / Cyber Security
- Job Description
- The Senior Business Development Executive is responsible for identifying, developing and closing new business opportunities and will be targeted on net new logo acquisition. The ideal candidate will possess knowledge of Cyber Security or AWS / Cloud / DevOps services, be a self-starter with strong sales acumen, and have professional services sales or consultative sales experience. **This is a hybrid role requiring some time in our London office each week - and with the flexibility to travel as required, to meet clients and attend industry events.** Identify and pursue new business opportunities in the IT services industry, with a focus on our core offerings of Cyber Security, DevOps and Application Security. Develop and execute strategic sales plans to achieve sales targets and expand the customer base. Build and maintain relationships with key decision-makers, influencers and stakeholders. Develop a deep understanding of clients' business objectives, challenges and opportunities related to Cyber Security, DevOps and AppSec, and present appropriate solutions. Provide consultative sales support to potential clients by demonstrating deep knowledge of the value our services provide. Skills Minimum of 4 years of professional service/consulting experience in business development or sales within the IT services sector, focused on Cyber Security, DevOps or Application Security. Proven track record of meeting or exceeding sales targets. Strong relationship-building skills with the ability to engage C-level executives. Excellent communication, negotiation and presentation skills. Proficiency in using CRM systems (e.g. Salesforce, HubSpot).
- Company Name
- Meta
- Job Title
- Security Engineer Investigator, Insider Trust
- Job Description
- The Insider Trust team is looking for a Security Engineer to investigate, build and improve internal tools and systems to identify malicious activities related to insider threats. Candidates are expected to analyze and monitor internal tools, hunt for insider threats against company data and infrastructure, and have experience carrying out complex internal investigations from collection to reporting and collaboration skills, working closely with engineering teams, Human Resources, and Legal teams. Security Engineer Investigator, Insider Trust Responsibilities: Develop understanding of problem space and provide technical direction during investigations and threat hunts Develop workflows and automations to streamline signals, hunts and investigative processes Perform analysis of logs from a variety of sources (e.g., individual host logs, network traffic logs) to identify potential insider threats Build operational workflows and actions to auto-resolve false positives and provide context, scaling investigative workflows Identify gaps in our infrastructure, and work with cross-functional teams to gain visibility through logging and automation Minimum Qualifications: Bachelor's degree in Computer Science, Engineering, or equivalent experience 4+ years of experience in Detection & Response Engineering, Threat Intelligence or similar Security Engineering role Experience conducting technical security investigations (response, forensics, log analysis) Experience interpreting information from multiple sources and working with data sets Knowledge with database tools/systems such as Hbase, SQL, Hive Query Language Preferred Qualifications: Coding proficiency in Python, PHP, and/or C++, or similar high level languages About Meta: Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics. Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.
- Company Name
- Verimatrix
- Job Title
- Engineering Manager - Mobile App Security Team
- Job Description
- Engineering Managers are passionate people leaders. You take pride in building great products and growing people and leaders. You represent the engineering organization and can turn undefined or partial requirements into an execution plan. You understand technology and can dive deep when needed to remove obstacles and address challenges by suggesting realistic solutions. You have an eye for talent and are skilled at hiring and developing the best. You seek different perspectives before making decisions. You know when to take calculated risks to move the organization forward. You respectfully challenge decisions and requests you disagree with, all while committing to execute. You recognize that your position and career are not about only yourself, but about your team(s). When you speak, you speak for the business and for your team. Daily Engineering Manager Responsibilities Include Managing engineering requests and desired outcomes: Collaborate with Product Management to define the scope of products and deliverables. Estimate and communicate efforts timelines and feasibility to the organization. Drive with Architects and Engineers to produce technical solutions and review, edit and implement software requirements. Create and communicate project plan(s) to ensure the on-time delivery. Ensure high-quality software releases. Prioritize initiatives and objectives to respond to business requests. Balance creating and repaying technical debt and developing new features. Facilitate technical discussions and decision-making to support the team in solving complex security challenges. Stay informed on the latest trends and advancements in mobile app security and integrate them into the team’s practices. Managing their direct reports by: Hire, train and mentor engineers as well as other technical specialists Set objectives and identify growth opportunities both career and personal Provide meaningful performance feedback. Promote a culture of autonomy, resilience, respect, and accountability. Display, embody and promote the Verimatrix leadership values. Encourage continuous improvement (both technical and process) Finding the right fit between individuals and assignments. (Re)Organize the team when needed. Assist with customer escalations. Participate in setting and maintaining the department budget. Required Qualifications Bachelor’s degree in computer science or related engineering or scientific field. 5+ years of experience leading a team of software engineers or other technical specialists (System Administrators, Professional Services, Technical Consultants) 10+ years of experience in data and/or software engineering/development. 4+ years of programming experience in 2 or more programming languages. Proven ability to communicate with technical and non-technical audiences. Experience with large, multi-faceted and complex systems. Experience with agile Development Practices. Experience running distributed teams. Technical Skills Proficiency in C, C++ Understanding of security principles and secure coding practices. Strong analytical and problem-solving skills. Expertise in reverse engineering and debugging tools is a plus Experience in mobile app development and associated tools (e.g., xcode, Android Studio) is a plus By submitting this form, I agree to the processing of my personal data for the purpose of processing my job application and replying to my request, in compliance with Verimatrix’s privacy notice
- Company Name
- Amazon Web Services (AWS)
- Job Title
- Senior Security Engineer, AWS Security
- Job Description
- Description Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’ multi-tenant infrastructure. Key job responsibilities As a Senior Security Engineer, you’ll help to build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon’s infrastructure. You’ll work with data scientists, software development engineers, and other security engineers across multiple teams to develop innovative security solutions. Our services protect the AWS cloud for all customers and preserves our customers’ trust in us. You’ll get to use the full power and breadth of AWS technologies to build services that proactively protect AWS customers, both internally and externally, from security threats. You will be working in a team of industry-leading security experts working with UK customers to operate and continuously improve industry-leading security programs and processes. This team manages the underlying security programs and processes for personnel security, physical and logical accreditations, education, awareness and training, assurance, and cyber security. This position will have visibility at senior levels of government agencies, commercial institutions, and AWS including interaction with CISOs, CTOs, their staffs, and AWS senior leadership. In addition to a strong understanding of security technologies, tool development, offensive and defensive security tactics, and ideally some experience with distributed systems, you’ll need a number of other qualities to be successful in this role. The team has a mix of experience levels, and we’re building an environment that celebrates knowledge sharing and mentorship. Our senior engineers, data scientists, and managers truly enjoy mentoring junior engineers, data scientists, and engineers from non-traditional backgrounds through one-on-one mentoring and thorough, but kind, code reviews. About The Team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications Extensive experience performing security investigations, penetration testing, and/or incident response in the context of large organisations In-depth understanding of security threats, hands-on experience detecting and defending from cyber attacks, and experience using big data analytics and orchestration to address security challenges. Ability to develop code with at least one modern language such as Java, Go, TypeScript, Python, Rust and security code review Demonstrated technical leadership in security (e.g., tech lead, developed security architecture for a product or system, led technical component of security project, etc.) Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications BS or MS in a STEM related field. Understanding of the Mitre ATT&CK framework and knowledge of host and network telemetry data (e.g., process lists, application logs, NetFlow) Have awareness and understanding of current cyber security threats, actors and their techniques. Experience with data science, big data analytics technology stack, analytic development for endpoint and network security, and streaming technologies (e.g., Kafka, Spark Streaming, and Kinesis) Strong sense of ownership combined with collaborative approach to overcoming challenges and influencing organisational change Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Company - AWS EMEA SARL (UK Branch) Job ID: A2813747