Cybersecurity Engineer at GCM Grosvenor

<p><strong>SUMMARY</strong></p> <p><span data-contrast="auto">The Cybersecurity Engineer&nbsp;joins an existing security operations team of 2 that&nbsp;are&nbsp;responsible for&nbsp;the continued evolution, design, and advancement of the firm’s cybersecurity program. This role safeguards the confidentiality, integrity, and availability of firm data, systems, and facilities in alignment with organizational policies and regulatory expectations. The&nbsp;security operations team&nbsp;leads the implementation of security architecture, controls, and technical solutions across the enterprise, while proactively&nbsp;identifying&nbsp;risks and recommending strategic improvements.</span><span data-ccp-props="{}">&nbsp;</span></p> <p><span data-contrast="auto">This individual&nbsp;operates&nbsp;as a highly self-directed contributor within a nimble global team responsible for cybersecurity and enterprise risk. The role requires independent assessment of emerging threats, evaluation of control effectiveness, prioritization of initiatives, and ownership of security-focused projects from concept through execution. The Cybersecurity Engineer regularly collaborates with infrastructure, software engineering,&nbsp;and the service desk teams to drive measurable improvements in the firm’s security posture.</span><span data-ccp-props="{}">&nbsp;</span></p> <p>As an onsite/hybrid employee, you are expected to be in the office on Tuesdays, Wednesdays and Thursday.</p> <p>&nbsp;</p> <p><strong>RESPONSIBILITIES</strong></p> <ul> <li><span data-contrast="auto">Design, implement, and enhance security controls across&nbsp;endpoint,&nbsp;network,&nbsp;cloud, identity, and&nbsp;SDLC.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Lead security-focused projects, including scoping, planning, execution, stakeholder communication, and documentation.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Own and&nbsp;optimize&nbsp;core security tooling (Application security, AI security, endpoint&nbsp;protection, IDS/IPS, SIEM, vulnerability management, threat intelligence platforms, etc.), ensuring effective configuration and continuous improvement.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Develop and implement automation to enhance threat detection, alerting, response workflows, ticket creation, and reporting metrics.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Conduct and oversee annual penetration testing, social engineering exercises, and remediation tracking.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Partner with cross-functional technology teams to embed secure design principles and hardening standards into infrastructure,&nbsp;cloud platforms, and&nbsp;application development&nbsp;(DevSecOps).</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Monitor compliance with cybersecurity policies and regulatory requirements;&nbsp;identify&nbsp;gaps and drive remediation efforts.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Serve as a technical escalation&nbsp;point during incident response and contribute to post-incident analysis&nbsp;and control improvements.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Identify&nbsp;emerging threats, tools, and technologies and recommend strategic direction for the cybersecurity program.</span><span data-ccp-props="{}">&nbsp;</span></li> </ul> <p>&nbsp;</p> <p><strong>EDUCATION, SKILLS AND EXPERIENCE REQUIREMENTS</strong></p> <ul> <li><span data-contrast="auto">Bachelor’s Degree in Computer Science, Information Technology, or equivalent practical experience.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">5+ years of progressive experience in cybersecurity or information security engineering roles.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Demonstrated experience&nbsp;implementing and&nbsp;engineering security controls in enterprise environments.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Experience leading or independently managing technical security projects.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Strong familiarity with CIS Framework and system hardening standards.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Hands-on experience securing and monitoring cloud platforms (AWS, Azure, etc.).</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Deep understanding of common security controls including DLP, MFA, encryption, intrusion detection, and mobile device/application management.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Strong scripting and automation skills (PowerShell, Python, or similar)&nbsp;with software engineering experience&nbsp;preferred</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Experience designing and&nbsp;maintaining&nbsp;centralized logging and SIEM solutions.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Ability to independently assess risk, define problems, and implement practical, scalable solutions.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Strong communication&nbsp;skills with the ability to influence stakeholders and represent the security function effectively.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Experience in financial services or investment management preferred.</span><span data-ccp-props="{}">&nbsp;</span></li> <li><span data-contrast="auto">Relevant security certifications (CISSP, CISM, GIAC, AWS Security, etc.) are a plus.</span><span data-ccp-props="{}">&nbsp;</span></li> </ul> <p>&nbsp;</p> <p><strong>AT A GLANCE - GCM’s CYBERSECURITY &amp; RISK TEAM</strong></p> <ul> <li>Oversees the firm’s Cybersecurity, Risk Management, Business Continuity, Change Management, and Disaster Recovery programs.</li> <li>Collaborates with IT and business teams to embed security best practices across the enterprise.</li> <li>Participates in client meetings, regulatory examinations, and security due diligence processes.</li> <li>Utilizes Agile principles to prioritize, plan, and execute cybersecurity initiatives.</li> <li>Maintains a strong team culture centered on accountability, ownership, and continuous improvement.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p>Actual base salary may vary based on factors such as individual's experience, skills, and qualifications for the role.&nbsp; Employees may be eligible for a discretionary bonus based on factors such as individual, team, and company performance as well as a comprehensive benefits package.</p></div><div class="title">CHICAGO ANNUAL PAY RANGE</div><div class="pay-range"><span>$130,000</span><span class="divider">&mdash;</span><span>$200,000 USD</span></div></div></div><div class="content-conclusion"><p><strong>ABOUT THE FIRM</strong></p> <p>GCM Grosvenor (Nasdaq: GCMG) is a global alternative asset management solutions provider with approximately $91 billion in assets under management across private equity, infrastructure, real estate, credit, and absolute return investment strategies.</p> <p>The firm has specialized in alternatives for more than 54 years and has a diverse, engaged team of approximately 560 professionals serving a global client base. Eligible employees can elect to participate in comprehensive healthcare coverage (including medical, dental, vision and life insurance), flexible spending accounts, and the employer sponsored retirement plan.&nbsp; Additionally, employees are eligible for paid time off, parental leave, short-term and long-term disability, as well as other care/wellness programs.</p> <p>The firm is headquartered in Chicago, with offices in New York, Toronto, London, Frankfurt, Tokyo, Hong Kong, Seoul, and Sydney. For more information, visit: <strong><a href="https://www.gcmgrosvenor.com">gcmgrosvenor.com</a>.</strong></p> <p><strong>EQUAL OPPORTUNITY EMPLOYER M/F/D/V</strong></p></div>