About CLS:
CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.
Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.
CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.
Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment:
- Pivotal purpose
- Trusted guardian
- Targeted innovation
- Facilitate connections
- Delivering excellence
- Inclusive culture
Job Information:
- Functional Title: Pen Test Coordinator
- Department: IT Security
- Corporate Level: Assistant Vice President
- Reports To: Director of Pen Testing
- Location: London
Overview of the role:
The Pen Test Coordinator is responsible for ensuring that penetration tests are executed efficiently, monitoring remediation activities, and reporting on the state of testing and findings to senior management. Working with multiple external penetration test vendors and internal security and technical staff, they ensure that all test pre-requisites are in place, including access authorizations, and the onboarding of external testers into the CLS network. In addition, unremediated findings are tracked and monitored, and the state of testing and findings are reported on a regular basis to various security committees and to the board. This role forms a vital part of managing and delivering the CLS pen test program, working closely with the Director of Pen Testing to execute existing test requirements and to further develop the CLS pen testing capability.
What you will be doing:
- Managing day to day relationships with Pen Test Vendors:
- Act as the primary interface between external pen test vendors and CLS.
- Ensure vendor pen test rig images are obtained and updated as needed.
- Support the coordination and execution of Penetration Testing engagements:
- Facilitate meetings between CLS and pen test vendors to agree scope, engagement dates and as the main point of contact during testing,
- Ensure access requirements for the test are authorized, actioned and removed after the test,
- Onboard and offboard external pen testers to CLS,
- Ensure any blocking issues are resolved or escalated if necessary.
- Findings management:
- Documenting pen test findings and observations,
- Tracking the remediation progress of findings,
- Obtaining suitable evidence of remediation to support closure.
- Escalation management:
- Assemble data on SLA breaches and present to the escalation forum,
- Follow up on escalation actions to ensure remediation stays on track.
- Metrics production:
- Produce accurate and timely metrics on penetration testing to support governance, regulatory and audit enquiries.
- Support the ongoing management and development of pen testing at CLS:
- Participate in market research into new vendors and pen testing capabilities, and subsequent roll out into production use.
- Production and maintenance of run books,
- Enhancement of pen testing infrastructure, standards and procedures.
What we are looking for:
- Experience in IT security (3-5 years), including 1-2 years coordinating security assessments or vulnerability remediation,
- Production of metrics and reports on vulnerability management,
- Strong stakeholder management across security, vendors and technical teams,
- Operating within regulated environments, adhering to established policies and procedures.
Professional qualifications / certifications:
- Bachelor’s degree or equivalent professional experience.
- Professional security certifications such as CISM, CISSP, Security+, CRISC or equivalent is desirable but not essential.
Our commitment to employees:
At CLS, we celebrate inclusion and consider this to be one of our strongest assets. We are committed to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including:
- Holiday - UK/Asia: 25 holiday days and 3 ‘life days’ (in addition to bank holidays). US: 23 holiday days.
- 2 paid volunteer days so that you can actively support causes within your community that are important to you.
- Generous parental leave policies to ensure you can enjoy valuable time with your family.
- Parental transition coaching programmes and support services.
- Wellbeing and mental health support resources to ensure you are looking after yourself, and able to support others.
- Employee Networks (including our Women’s Forum, Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about inclusivity.
- Hybrid working to promote a healthy work/life balance, enabling employees to work collaboratively in the office when needed and work from home when they don’t.
- Active support of flexible working for all employees where possible.
- Monthly ‘Heads Down Days’ with no meetings across the whole company.
- Generous non-contributory pension provision for UK/Asia employees, and 401K match from CLS for US employees.
- Private medical insurance and dental coverage.
- Social events that give you opportunities to meet new people and broaden your network across the organisation.
- Annual flu vaccinations.
- Discounts and savings and cashback across a wide range of categories including health and retail for UK employees.
- Discounted Gym membership – Complete Body Gym Discount/Sweat equity program for US employees.
- All employees have access to Discover – our comprehensive learning platform with 1000+ courses from LinkedIn Learning.
- Access to frequent development sessions on a number of topics to help you be successful and develop your career at CLS.
CLS Group London, England Office
London, United Kingdom, 0
