The group provides comprehensive breadth and depth of coverage across four core services: clearing, agency and execution, market making, and hedging and investment solutions. It has a leading franchise in many major metals, energy and agricultural products, with access to 60 exchanges. The group provides access to the world’s major commodity markets, covering a broad range of clients that include some of the largest commodity producers, consumers and traders, banks, hedge funds and asset managers. With more than 40 offices worldwide, the group has over 3,000 employees across Europe, Asia and the Americas.

For more information visit https://www.marex.com/

Position Reference: VN2822

Department description

Marex has unique access across markets with significant share globally both on and off exchange. The depth of knowledge amongst its teams and divisions provides its customers with clear advantages, and its technology-led service provides access to all major exchanges, order-flow management via screen, voice and DMA, plus award-winning data, insights and analytics.

The Technology Department delivers differentiation, scalability and security for the business. Technology provides digital tools, software services and infrastructure globally to all business groups. Software development and support teams work in agile ‘streams’ aligned to specific business areas. Our other teams work enterprise-wide to provide critical services including our global service desk, network and system infrastructure, IT operations, security, enterprise architecture and design.

The Information Security team reports to the CTO and is responsible for protecting Marex data and assets, as well as providing security advice. The team is relatively small; therefore, its members have a chance to experience various areas of security.

Role Summary

The Information Security Officer will work alongside the Head of Information Security to lead and report on security programs across Marex entities in the Americas. The primary responsibility is to ensure consistent application and adherence to the Group's information security policies and local Information Systems Security Programs (ISSP).

The role requires an experienced security professional capable of managing a wide range of tasks, including access management audits, third-party security assessments, and participation in formal management committees. Ability to effectively manage multiple stakeholders and priorities, as well as wide security knowledge and expertise, are key to be successful in this position.

Responsibilities

Role specific:

• Working with regulators and agencies, such as FCA
• Coordination and participation in external and internal audits
• Maintenance of Information Security Policies and related controls
• Conducting risk assessments in accordance with Marex policies, regulatory requirements, and recognized security frameworks
• Ensuring effective protection of Marex data
• Conducting security reviews of third-party vendors and suppliers
• Providing expert security guidance and direction at both technical and managerial levels.
• Assessing the security of potential acquisitions
• Implementing and leading Information Security initiatives, such as Insider Threat assessments
• Developing and documenting security standards and procedures
• Responding and investigating security incidents and exceptions
• Providing relevant KPI and KRI metrics
• Participating in Group activities such as penetration testing, privileged access monitoring, access reviews, and Data Loss Prevention
• Provide management, leadership and mentoring to junior officers. 

All staff:

• Adhere to the operational risk framework for your role ensuring that all regulatory or company determined parameters are complied with.
• Role model for demonstrating highest level standards of integrity and conduct and reflecting Company Values.
• At all times comply with the Marex’s Code of Conduct
• Ensure that you are fully aware of and adhere to internal policies that relate to you, your role or any other activities for which you have any level of responsibility.
• Report any breaches of policy to Compliance and/ or your supervisor as required.
• Escalate risk events immediately.
• Provide input to risk management processes, as required.

Competencies, Skills, Experience & Qualifications:

Competencies:

• A collaborative team player, approachable, self-efficient and influences a positive work environment.
• Demonstrates curiosity.
• Resilient in a challenging, fast-paced environment.
• Ability to take a high level of responsibility in a fast pace and high-volume environment.
• Excels at building relationships, networking and influencing others.
• Strategic collaborator with insight and agility, able to anticipate future challenges, ensuring operational effectiveness.

Skills and Experience:

• A minimum of 5 years of experience in the field of Information Security.
• Demonstrated ability to successfully lead and manage information security programs.
• Understanding US financial regulatory landscape and requirement.
• Proficiency in managing interactions with regulatory bodies and audit entities.
• Comprehensive knowledge and expertise across multiple security domains.
• Excellent communication skills, with the ability to effectively engage with stakeholders, regulators, and auditors.
• Strong presentation skills: ability to effectively communicate complex information and ideas to a variety of audiences, using clear and concise language, visual aids, and engaging delivery techniques.
• Excellent verbal and written communication skills

Conduct Rules, You must:

• Act with integrity
• Act with due skill, care and diligence
• Be open and cooperative with the FCA, the PRA and other regulators
• Pay due regard to the interests of customers and treat them fairly
• Observe proper standard of market conduct
• Act to deliver good outcomes for retail customers

Company Values

Acting as a role model for the values of the Company:

Respect - Clients are at the heart of our business, with superior execution and superb client service the foundation of the firm. We respect our clients and always treat them fairly.

Integrity - Doing business the right way is the only way. We hold ourselves to a high ethical standard in everything we do – our clients expect this and we demand it of ourselves.

Collaborative - We work in teams - open and direct communication and the willingness to work hard and collaboratively are the basis for effective teamwork. Working well with others is necessary for us to succeed at what we do.

Developing our People - Our people are the basis of our competitive advantage. We look to “grow our own” and make Marex the place ambitious, hardworking, talented people choose to build their careers.

Adaptable and Nimble - Our size and flexibility is an advantage. We are big enough to support our client’s various needs, and adaptable and nimble enough to respond quickly to changing conditions or requirements. A non-bureaucratic, but well controlled environment fosters initiative as well as employee satisfaction.

Marex is fully committed to being an inclusive employer and providing an inclusive and accessible recruitment process for all. We will provide reasonable adjustments to remove any disadvantage to you being considered for this role. We value the differences that a diverse workforce brings to the company.  We welcome applications from candidates returning to the workforce.  Also, Marex is committed to avoiding circumstances in which the appearance or possibility of conflicts of interest may exist within the hiring process.

If you would like to receive any information in a different way or would like us to do anything differently to help you, please include it in your application.