Cybersecurity Lead Engineer/Architect

The role

The Cybersecurity Lead Engineer/Architect will design, implement, and enhance security controls across endpoint, network, cloud, identity, and SDLC. This role blends high-level strategy and security architecture with hands-on implementation engineering to safeguard firm data and systems.

What you will do

• Architect, design, implement, and enhance security controls across endpoint, network, cloud, identity, and SDLC.
• Lead security-focused projects including scoping, planning, execution, and documentation.
• Own and optimize core security tooling including Application security, AI security, endpoint protection, IDS/IPS, SIEM, vulnerability management, and cloud security.
• Develop and implement automation for threat detection, alerting, response workflows, and reporting.
• Partner with cross-functional technology teams to embed secure design principles and hardening standards.
• Lead the firm's AI security program by establishing governance, guardrails, and technical controls.
• Partner with product and software engineering teams to enable secure AI engineering and development.
• Monitor compliance with cybersecurity policies and regulatory requirements.
• Serve as a technical escalation point during incident response.
• Identify emerging threats, tools, and technologies to recommend strategic direction.

Required qualifications

• Bachelor’s Degree in Computer Science, Information Technology, or equivalent practical experience.
• 8+ years of progressive experience in cybersecurity or information security engineering roles, including time in a lead, principal, or security architect capacity.
• Demonstrated experience implementing and engineering security controls in enterprise environments.
• Experience leading or independently managing technical security projects.
• Strong familiarity with CIS Framework and system hardening standards.
• Hands-on experience securing and monitoring cloud platforms (AWS, Azure, etc.).
• Deep understanding of common security controls including DLP, MFA, encryption, intrusion detection, and mobile device/application management.
• Strong scripting and automation skills (PowerShell, Python, or similar).
• Experience designing and maintaining centralized logging and SIEM solutions.
• Ability to independently assess risk, define problems, and implement practical, scalable solutions.
• Strong communication skills.
• Proven experience designing enterprise security architecture and reference architectures.

Nice to have

• software engineering experience
• Experience in financial services or investment management
• Relevant security certifications (CISSP, CISM, GIAC, AWS Security, etc.)

Benefits

• Comprehensive healthcare coverage (including medical, dental, vision and life insurance)
• Flexible spending accounts
• Employer sponsored retirement plan
• Paid time off
• Parental leave
• Short-term and long-term disability
• Other care/wellness programs

About the company

GCM Grosvenor (Nasdaq: GCMG) is a global alternative asset management solutions provider with approximately $97 billion in assets under management. The firm has specialized in alternatives for more than 54 years and has a diverse team of approximately 560 professionals.