Vice President, Cyber Hygiene and Metrics Engineer

Job Description

About CLS:

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Job Information:

\n
• Functional Title: Cyber Hygiene and Metrics Engineer
\n
• Department: CISO
\n
• Corporate Level: Vice President
\n
• Reports To: Cyber Hygiene and Metrics Engineering Lead
\n
• Location: Iselin, NJ. On-site 2 days per week
\n
• Expected full-time salary range between $165,000 - $185,000 + variable compensation + 401(k) match + benefits.
\n
• Note: Disclosure as required by NY Pay Transparency Law of the expected salary compensation range for this role.
\n

What you will be doing:

We are seeking a highly skilled Security Data Analytics & Metrics Engineer to architect, engineer, and operate a strategic security analytics platform on AWS from the ground up. The successful candidate will design and build a modular security data architecture that ingests telemetry from security, cloud, infrastructure, identity, and risk management platforms to deliver executive-level metrics, operational insights, regulatory reporting, and continuous control assurance. The platform follows a modern federated architecture built around a Security Data Lake, analytics services, exposure management, and executive reporting capabilities rather than reliance on a traditional monolithic SIEM model.

The role combines data engineering, cloud architecture, analytics engineering, and security domain expertise to create a trusted source of security performance data for technology leadership, regulators, auditors, and the Board.

Key Responsibilities:

Architecture & Engineering

\n
• Design and implement a cloud-based security analytics platform on AWS.
\n
• Architect data pipelines that ingest, normalize, enrich, and correlate telemetry from multiple security and technology platforms.
\n
• Build and operate a Security Data Lake leveraging AWS-native services and open data standards.
\n
• Define scalable data models supporting operational metrics, risk analytics, compliance reporting, and executive dashboards.
\n
• Implement data governance controls, metadata management, lineage tracking, and quality assurance frameworks.
\n

Data Platform Development

\n
• Develop real-time and batch data pipelines using AWS services including S3, Glue, Lambda, Athena, EMR, Redshift, Kinesis, and EventBridge.
\n
• Engineer integrations with:
\n
• SIEM platforms
\n
• IAM systems
\n
• Cloud Security Posture Management (CSPM)
\n
• Endpoint Protection Platforms (EPP)
\n
• Threat Intelligence platforms
\n
• Exposure Management solutions
\n
• Implement common data schemas and normalization standards, including OCSF where appropriate.
\n
• Build reusable APIs and data products enabling self-service analytics.
\n

Metrics Engineering & Analytics

\n
• Define and maintain enterprise security KPIs, KRIs, PLAs, and performance metrics.
\n
• Build metric calculation frameworks covering:
\n
• Incident management
\n
• Mean Time to Respond (MTTR)
\n
• Mean Time to Neutralize (MTTN)
\n
• Security control effectiveness
\n
• Vulnerability remediation
\n
• Identity governance
\n
• Cloud security posture
\n
• Regulatory compliance
\n
• Create automated executive scorecards and Board-level reporting views.
\n
• Develop analytical models to identify trends, risks, control gaps, and performance opportunities.
\n

Executive Reporting & Visualisation

\n
• Design and deliver enterprise dashboards using Power BI and AWS analytics tooling.
\n
• Translate technical security data into meaningful business outcomes and risk indicators.
\n
• Create reporting capabilities aligned to regulatory and operational requirements.
\n
• Partner with CISO, CRO, Internal Audit, and Technology leadership teams to define reporting needs.
\n

DevOps & Platform Reliability

\n
• Implement Infrastructure as Code using Terraform and AWS-native automation.
\n
• Establish CI/CD pipelines for analytics assets, dashboards, metrics, and data pipelines.
\n
• Monitor platform health, performance, cost, and reliability.
\n
• Drive cost optimisation by balancing Security Lake retention, analytics workloads, and SIEM indexing strategies.
\n

Required Experience:

\n
• 7+ years of experience in data engineering, analytics engineering, and cloud platform engineering.
\n
• 3+ years designing and operating AWS-based data platforms.
\n
• Strong experience with:
\n
• AWS Security Lake
\n
• Amazon S3
\n
• AWS Glue
\n
• Athena
\n
• Lambda
\n
• Redshift
\n
• Kinesis
\n
• CloudWatch
\n
• Experience building large-scale data lakes and analytics platforms.
\n
• Strong SQL and Python development skills.
\n
• Experience with dashboard and visualization technologies such as Power BI.
\n
• Experience integrating cybersecurity and risk management datasets.
\n
• Understanding of security operations, security controls, vulnerability management, IAM, and cloud security.
\n

Desirable Experience:

\n
• Financial services or banking experience.
\n
• Experience implementing OCSF or other security telemetry standards.
\n
• Exposure to SIEM platform Splunk.
\n
• Exposure management or cyber performance management platforms.
\n
• Experience with machine learning, AI-assisted analytics, and risk scoring.
\n

Key Deliverables:

The successful candidate will build and maintain:

\n
• Enterprise Security Data Lake on AWS.
\n
• Unified security metrics repository.
\n
• Executive security performance dashboard suite.
\n
• Board and regulatory reporting capability.
\n
• Exposure management analytics models.
\n
• Continuous control assurance metrics framework.
\n
• Automated KPI and KRI reporting pipelines.
\n
• Security analytics APIs and self-service data products.
\n

Success Measures:

\n
• Establish a consolidated security data platform serving executive, operational, and regulatory reporting needs.
\n
• Deliver trusted, near real-time security metrics across all control domains.
\n
• Reduce manual reporting effort through automation and self-service analytics.
\n
• Improve visibility of cyber risk, control effectiveness, and remediation performance.
\n
• Enable data-driven security investment and risk management decisions.
\n

Our commitment to employees:

We are a small company with a big mandate, so every person is essential to our success. We are also committed to employing and retaining the most talented and dedicated people.

What makes us interesting goes beyond our competitive salaries and great benefits. Our work environment is designed around quality outcomes, not output. The FX market would cease to function without our services, and we take pride in being responsible for keeping it running smoothly.

We are different from other financial institutions in that we have a flatter and more transparent structure, with accessible leadership. You will be seen, heard and empowered to develop your career.

We are a purpose-driven organization, with an inclusive culture that focuses on doing what is right. The well-being of our people is as important to us as the resilience of our systems. In addition to encouraging our people to ‘locate for their day,’ we run a range of initiatives that support a sense of belonging, as well as physical, emotional and mental well-being.

Our extensive benefits for employees typically include:

\n
• Vacation/annual leave: 25 days in UK/Asia + 3 life days, 23 in US + 3 life days
\n
• Private medical and dental cover and life insurance
\n
• Generous pension contributions in the UK and Asia; matching 401(k) in the US
\n
• Paid volunteer days
\n
• ‘Locate for your day’ hybrid working - 2 days a week in office
\n
• Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning
\n
• Paid parental leave / Coaching and support services
\n
• Career development / LinkedIn Learning
\n
• ‘Heads down days’ with no meetings on the last Friday of every month
\n
• Wellbeing / Mental health support
\n
• Employee Networks (Black Employee Network, Parents & Caregivers Network, Pride Network, Sustainability Network, Veterans Network, Women’s Forum)
\n
• Social events
\n

Awards:

\n
• The Sunday Times Best Places to Work 2023, 2024, 2025 / Big Company / The Sunday Times Awards
\n
• Third place in Britain’s Healthiest Workplace 2022 / Medium Company / Vitality Awards
\n