at Berenberg
Investment BankingPosted 5 days ago
No clicks
**Senior PAM Engineer** in London: Lead our PAM strategy, govern privileged access, and protect Berenberg's digital assets. 3-5+ years in PAM, PAM platforms (CyberArk, BeyondTrust), identity security. Collaborate with Cyber Security Operations team on incident response. Strong communication & stakeholder management skills.
- Compensation
- Not specified
- City
- London
- Country
- United Kingdom
Currency: Not specified
Full Job Description
Job details
(Senior) PAM Engineer
London
Reference: 2703
Apply nowFor our Global Technology SPEAR division in London, we are looking to hire a:
Privileged Access Management (PAM) Engineer, Full time, Permanent Position - London
Your role in the team:
We are seeking an experienced PAM Engineer to strengthen our award-winning Cyber Security Operations team. As the financial sector faces increasingly complex cyber threats, the Cyber Security Operations (CSO) team is recognised across the industry for its excellence in defending against sophisticated adversaries and ensuring operational resilience. Joining the team means becoming part of a function that is critical to the banks success and highly respected within the wider cyber security community.
As an experienced PAM Engineer, you will play a pivotal role in the team, taking responsibility for the security, management, and governance of privileged access. You will oversee privileged account auditing, design effective access control strategies, and produce comprehensive reports for senior management and relevant stakeholders. Your expertise will be instrumental in enhancing the banks monitoring and detection capabilities regarding privileged access, helping to maintain a proactive and resilient security posture. You will also have the opportunity to extend our threat detection capabilities around credential usage and to mentor other members of the team, sharing best practices and driving continuous improvement across our access management and incident response processes.
You will be at the forefront of protecting Berenbergs digital assets, client relationships, and global reputation, supporting a business that operates across global capital markets and serves international institutional clients to the highest standards of performance and service. We are looking for a motivated, energetic, and analytical professional with strong expertise in privileged access management, identity governance, and the technical investigation of credential-based threats, ideally gained within the financial services sector.
What will you do?
The primary responsibilities will be to lead and advance the Berenberg PAM strategy and ensure that it conforms with all relevant laws and regulations. Additionally support the creation and upkeep of a PAM governance framework, including the establishment of policies, standards, and procedures.
- Lead PAM Strategy, Governance & Compliance: Advance Berenbergs PAM strategy and governance framework (policies, standards, and procedures), partnering with the first line of defence and audit stakeholders to ensure full alignment with internal and external regulatory requirements.
- Deploy, Integrate & Maintain PAM Platforms: Configure, administer, and maintain enterprise PAM solutions such as CyberArk, BeyondTrust, or Delinea (formerly Thycotic/Centrify) integrating them seamlessly with Active Directory, LDAP, and Microsoft Entra ID (Azure AD) while acting as the primary technical contact for vendor support, upgrades, and patching.
- Enforce Least Privilege & Account Lifecycle Governance: Design and enforce granular access control policies centred on Role-Based Access Control (RBAC), Just-In-Time (JIT) access, and the Principle of Least Privilege, while partnering with system owners to discover, categories, and audit privileged accounts (system, administrative, and service accounts) from creation through deactivation.
- Monitor, Detect & Respond to Credential Threats: Collaborate closely across the Cyber Security Operations team to monitor privileged session activities, detect and respond to unauthorised access attempts or policy violations, and support credential-related incident response investigations, containment, and remediation.
- Champion Privileged Security Best Practices: Educate and guide technical teams and business stakeholders on privileged access security standards, mentoring peers and driving a strong, proactive security-first culture across the organisation.
Who are we looking for?
- 35+ years of hands-on experience operating within the Privileged Access Management (PAM) and Identity Security space.
- Proven technical expertise in deploying, administering, and troubleshooting leading PAM platforms (e.g., CyberArk, BeyondTrust, or Delinea/Thycotic/Centrify) and related security technologies.
- Demonstrated track record of successfully designing, implementing, and maturing a PAM programme and governance framework within a complex enterprise environment.
- Strong integration knowledge across core directory and identity services (Active Directory, LDAP, Microsoft Entra ID / Azure AD) and enterprise security applications.
- Operational security experience collaborating within or alongside a Cyber Security Operations team on privileged access monitoring, auditing, and incident response.
- Strong communication and stakeholder management skills, with the ability to translate complex access policies into clear guidance for both technical teams and senior management.
- Financial services or regulated industry experience is highly desirable.
What we offer you:
- Private pension plan - 10% of base salary contribution by Berenberg.
- Generous 30-day holiday allowance.
- Private Health Insurance.
- Life Insurance scheme.
- Flexible working hours.
- Enhanced parental leave policies.
- Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics.
Apply online now to join our team we look forward to receiving your application!
We are a leading European private bank, with over 430 years of experience and deep-rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.
We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.
Were an ambitious, forward-looking business, backed by centuries of tradition and built on innovation. Youll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo. Together we collaborate to shape our business and fulfil our ambitious goals.
We welcome you to join us in our commitment to always do the right thing for our people, clients and our business Our future is where you take us!
We will only accept applications submitted through our online application management system on the website.
Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential.
Were committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on recruitment@berenberg.com to discuss.
London office
Take a closer lookWhat now?
See all Innovation & Technology jobs See all London jobs Find out more about Berenberg Email job to a friend Apply nowOther jobs you may be interested in
Senior SOC Analyst Engineer (German Speaking)
London
Job Details
1st line IT Support Engineer
London
Job Details
Senior Compliance Officer (Investment Banking Compliance)
London
Job Details
See all jobs Join our Talent Community
Can't find the job you are looking for?
If you can't see a job that interests you, why not join our Talent Community? By joining we can get in touch with you as and when we have a role that matches your requirements. And by staying connected we can also keep you informed of news, events and other opportunities that match your interests.
