Job Search

We are seeking an experienced PAM Consultant to design, implement and support privileged access management solutions across a complex technology environment. You will work with security, infrastructure, applications and compliance teams to improve the control, monitoring and governance of privileged accounts, credentials and sessions. The role will involve assessing current capabilities, defining target-state architecture and delivering practical improvements aligned with security and business requirements.

Key responsibilities will include gathering requirements, producing technical designs and configuring PAM platforms and associated integrations. You will onboard privileged accounts, service accounts, applications and infrastructure, establish secure credential vaulting and rotation processes, and implement appropriate access workflows. You will also develop role-based access controls, session monitoring and recording, emergency access procedures, onboarding standards and operational documentation. The successful candidate will investigate incidents, support audit and compliance activities, contribute to risk remediation, and provide guidance to technical teams and stakeholders. You may also be required to assist with migrations, upgrades, testing and the transition of new services into operational support.

Applicants should have demonstrable experience delivering or supporting PAM technologies, such as CyberArk, BeyondTrust, Delinea or comparable solutions, together with a strong understanding of privileged account security and identity governance. You will need practical knowledge of Active Directory, Windows and Linux administration, networking concepts, authentication protocols and enterprise application integrations. Experience with scripting or automation, particularly PowerShell, Python or REST APIs, would be advantageous. Strong analytical, documentation and problem-solving skills are essential, as is the ability to communicate effectively with both technical and non-technical audiences. Relevant security certifications or experience working within regulated environments would be beneficial. The role requires a proactive, methodical consultant who can manage competing priorities, build trusted relationships and deliver secure, sustainable solutions from initial assessment through to implementation and ongoing improvement.

We are seeking a Cyber Security Engineer to help protect critical systems, applications and data across a complex technology environment. You will work as part of a collaborative security function, supporting the design, implementation and continuous improvement of effective cyber security controls. The role will involve monitoring threats, investigating security incidents and providing practical advice to technology and business teams.

Your responsibilities will include identifying vulnerabilities, coordinating remediation activity and contributing to security testing across infrastructure, cloud services, networks and applications. You will analyse alerts from security monitoring tools, support incident response investigations and maintain accurate records of findings, risks and corrective actions. You will also help develop and maintain security policies, standards and procedures, contribute to risk assessments, and assist with audit and compliance activities. The role may include supporting security awareness initiatives and producing clear reports for both technical and non-technical audiences.

Applicants should have professional experience in a cyber security, information security or related engineering role, with a sound understanding of security principles, threat detection and incident response. Experience with security information and event management, vulnerability management, identity and access management, endpoint protection, firewalls or cloud security technologies would be highly beneficial. You should be comfortable investigating issues, documenting technical information and working with colleagues to deliver proportionate, risk-based solutions. Relevant qualifications such as CompTIA Security+, Cyber Security certifications, CISSP, CISM or equivalent practical experience are desirable. Strong communication, analytical and problem-solving skills are essential, along with a proactive approach, attention to detail and a commitment to continuous learning in a rapidly changing threat landscape.

We are seeking an experienced Senior Data Protection Manager to lead and develop data protection, privacy and information governance practices across a complex organisation. This is a senior advisory role, responsible for ensuring that personal data is handled lawfully, securely and transparently, while supporting effective business operations and the responsible use of data. You will provide authoritative guidance to senior stakeholders, advise on privacy risks and promote a strong culture of compliance across all functions.

Key responsibilities will include overseeing compliance with the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations and other relevant legislation; maintaining and enhancing policies, procedures and internal standards; and advising on data protection impact assessments, legitimate interest assessments, data sharing arrangements, international transfers and privacy by design. You will manage the response to individual rights requests, personal data breaches and regulatory enquiries, ensuring that matters are assessed, documented and resolved within appropriate timescales. You will also maintain records of processing activities, support information asset governance and provide clear reporting on risks, incidents and compliance performance.

The successful candidate will have substantial experience in a senior data protection, privacy or information governance position, ideally within a large or regulated environment. You will have strong knowledge of UK and European data protection law, excellent analytical and risk management skills, and the confidence to interpret complex requirements and translate them into practical advice. Experience of leading programmes, managing stakeholders and influencing at senior level is essential, along with the ability to communicate clearly with both technical and non-technical audiences. A relevant professional qualification, such as CIPP/E, CIPM, or membership of an appropriate data protection body, would be advantageous. You will be pragmatic, organised and committed to maintaining high standards of confidentiality, integrity and professional judgement.

We are seeking an experienced Senior Manager, Business Information Security to lead the development and delivery of a robust information security programme across a complex business environment. This is a strategic leadership role, responsible for ensuring that security risks are identified, assessed and managed effectively while enabling the organisation to meet its operational and commercial objectives. You will work closely with senior stakeholders, technology teams, risk and compliance functions, and business leaders to promote secure-by-design ways of working.

Your responsibilities will include developing and maintaining information security policies, standards and procedures; overseeing business security risk assessments; and advising on appropriate controls, risk treatments and assurance activities. You will lead the monitoring and reporting of security risks, vulnerabilities, incidents and control effectiveness, providing clear insight and recommendations to senior management. The role will also support security incident response, business continuity and crisis management, ensuring that lessons learned are embedded across the organisation. You will help manage regulatory, audit and customer assurance requirements, while contributing to security awareness and training initiatives.

The successful candidate will have substantial experience in information security, cyber risk, governance, risk and compliance, or a closely related discipline, including experience leading teams or large-scale security programmes. You will have a strong understanding of recognised security frameworks and standards, such as ISO 27001, NIST or CIS, together with practical knowledge of risk management, control assurance, third-party security and incident management. Excellent communication and stakeholder management skills are essential, as is the ability to translate complex technical and regulatory matters into clear, commercially relevant advice. Professional security qualifications, such as CISSP, CISM or CRISC, would be advantageous. You will be a confident, collaborative leader who can influence at all levels and deliver meaningful improvements in a changing environment.

We are seeking an experienced GRC Consultant to support the development, implementation and continuous improvement of governance, risk and compliance frameworks. Working with stakeholders across the organisation, you will provide pragmatic advice that strengthens control environments, supports informed decision-making and helps ensure compliance with relevant legislation, regulations, standards and internal policies.

Your responsibilities will include conducting risk assessments, control reviews and compliance gap analyses; maintaining risk registers, policies, procedures and control documentation; and supporting the design and delivery of governance frameworks. You will coordinate audit and assurance activities, track remediation plans and prepare clear reports for senior stakeholders. The role will also involve monitoring regulatory developments, assessing their potential impact, contributing to third-party risk management and supporting the delivery of awareness and training initiatives. You will be expected to challenge effectively, identify opportunities for improvement and help embed a culture of accountability and continuous improvement.

The successful candidate will have demonstrable experience in governance, risk and compliance, ideally within a regulated, technology-led or complex environment. You will have a strong understanding of risk management principles, internal controls, audit methodologies and relevant frameworks such as ISO 27001, ISO 31000, COBIT, NIST or equivalent. Experience of working with data protection, information security, business continuity or third-party assurance would be advantageous. Strong analytical, organisational and communication skills are essential, along with the ability to translate complex requirements into practical actions for a range of audiences. Professional qualifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer or Auditor, or a relevant risk and compliance qualification, would be welcomed. You must be confident working independently, managing competing priorities and building constructive relationships at all levels.

We are seeking an Associate Security Engineer to support the design, implementation and maintenance of effective cyber security controls across a complex technology environment. Working alongside experienced security professionals, you will help protect systems, applications and data by monitoring security events, investigating potential incidents and contributing to the continuous improvement of defensive capabilities. This is an excellent opportunity for someone at an early stage of their security career who is keen to develop practical experience across a broad range of technologies and security disciplines.

Responsibilities will include reviewing alerts from security monitoring tools, assisting with the triage and investigation of suspected incidents, and escalating issues in line with established procedures. You will support vulnerability assessments, track remediation activity and help maintain accurate security documentation, asset records and risk information. The role will also involve contributing to access reviews, security testing, audit preparation and the implementation of policies and technical controls. You will work collaboratively with infrastructure, software development and service teams to promote secure practices, provide clear advice and help resolve security-related issues.

Applicants should have a foundational understanding of cyber security principles, including network security, identity and access management, vulnerability management and common attack techniques. Familiarity with security monitoring platforms, endpoint protection, cloud technologies, scripting or incident response processes would be advantageous. You should be analytical, curious and methodical, with the ability to communicate technical information clearly to both technical and non-technical colleagues. Relevant qualifications or certifications, such as a degree in cyber security or computing, CompTIA Security+, Microsoft security certifications or equivalent practical experience, are welcome but not essential. A commitment to learning, strong attention to detail and the ability to manage competing priorities are essential.

We are seeking a Cyber Security Engineer to help protect critical systems, applications and data in a complex and continually evolving threat landscape. You will work across security operations, infrastructure and software teams to identify vulnerabilities, strengthen controls and support the delivery of secure, resilient technology services. This is an opportunity to contribute to practical cyber security improvements while developing your expertise across a broad range of technologies and environments.

Your responsibilities will include monitoring and investigating security events, supporting incident response activities and conducting vulnerability assessments across networks, endpoints, cloud platforms and applications. You will help design, implement and maintain security controls, including identity and access management, endpoint protection, firewalls, intrusion detection and security information and event management solutions. You will also contribute to penetration testing, threat modelling, risk assessments and the secure configuration of systems. The role will involve producing clear technical reports, tracking remediation activity and advising colleagues on security risks and appropriate mitigating actions. You may also support security audits, compliance reviews and the development of policies, standards and operational procedures.

Applicants should have professional experience in cyber security engineering, security operations, infrastructure security or a related technical discipline. Strong knowledge of networking, operating systems, cloud security principles and common attack techniques is essential, together with practical experience using security monitoring, vulnerability management or incident response tools. Familiarity with scripting, automation and security frameworks such as NIST or ISO 27001 would be advantageous. Relevant certifications, such as CISSP, CISM, CompTIA Security+, GIAC or cloud security qualifications, are welcomed but not essential. You will need strong analytical and problem-solving skills, excellent written and verbal communication, and the ability to explain technical risks clearly to both technical and non-technical audiences. A proactive, collaborative approach and commitment to continuous learning are essential.

We are seeking an experienced Cyber Security Manager to lead and strengthen the organisation’s information security capability. This is a key role responsible for protecting business systems, data and services against evolving cyber threats while supporting secure, effective and compliant operations. You will develop and maintain the cyber security strategy, policies and standards, ensuring they remain aligned with business objectives, regulatory obligations and recognised industry frameworks.

You will manage the identification, assessment and treatment of information and cyber security risks, providing clear advice to senior stakeholders and service owners. Responsibilities will include overseeing security monitoring, vulnerability management, incident response, penetration testing, access controls, security architecture and third-party assurance. You will coordinate investigations and responses to security incidents, ensuring that lessons learned are documented and translated into practical improvements. The role will also involve maintaining risk registers, preparing management reports, supporting audits and ensuring appropriate business continuity and disaster recovery arrangements are in place.

The successful candidate will have substantial experience in a cyber security, information security or technology risk leadership role, together with a strong understanding of security governance, threat management and operational controls. Professional qualifications such as CISSP, CISM, CRISC or an equivalent certification would be advantageous. You should be confident communicating complex technical and risk matters to both technical and non-technical audiences, with the ability to influence decisions at all levels. Strong analytical, organisational and problem-solving skills are essential, as is a proactive approach to improving security culture and resilience. Experience of leading teams, managing suppliers and delivering security improvement programmes would be highly desirable.

An exciting opportunity has arisen for a Security Analyst specialising in emerging technology within the financial services sector. This role will support the assessment, monitoring and assurance of new technologies, helping to identify and manage cyber security risks across a complex and highly regulated environment. You will work closely with technology, risk, compliance and business teams to ensure that innovation is introduced securely and in line with internal policies and regulatory expectations.

Your responsibilities will include assessing the security implications of emerging technologies such as cloud services, artificial intelligence, automation, blockchain and connected platforms. You will contribute to security reviews, threat modelling, risk assessments and control testing, while identifying vulnerabilities and recommending practical improvements. The role will also involve monitoring the evolving threat landscape, researching new attack techniques and preparing clear reports, briefings and risk summaries for technical and non-technical stakeholders. You may support incident investigations, vulnerability management, security architecture reviews and the development of standards, procedures and guidance.

Applicants should have experience in cyber security, information security, technology risk or a related discipline, ideally within financial services or another regulated industry. You will have a sound understanding of security principles, risk management frameworks, identity and access management, cloud security and relevant regulatory requirements. Familiarity with security tools, vulnerability assessment methods and emerging technologies would be advantageous. Strong analytical, communication and problem-solving skills are essential, along with the ability to manage competing priorities and explain complex issues clearly. Professional qualifications such as CISSP, CISM, CRISC, GIAC or equivalent experience are desirable. This is an excellent opportunity for a curious and proactive security professional to influence how new technology is adopted safely and responsibly.

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices.

Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear reports for governance forums and senior stakeholders. The role will also involve reviewing policies, standards and procedures, supporting risk assessments for new technologies and projects, and helping to ensure alignment with relevant regulatory, industry and internal requirements. You may also contribute to audit activity, incident reviews, third-party risk assessments and continuous improvement initiatives.

The successful candidate will have experience in technology risk, cyber security controls, IT assurance, internal audit or a related discipline. You should understand common control frameworks and principles, such as ISO 27001, NIST, COBIT or similar, and be comfortable evaluating risks across areas including access management, change management, vulnerability management, data protection, resilience and supplier security. Strong analytical, written and verbal communication skills are essential, together with the ability to interpret technical information and explain it clearly to non-technical audiences. Experience using governance, risk and compliance tools, managing multiple priorities and working collaboratively with stakeholders at different levels would be advantageous. Relevant qualifications in information security, technology, risk or audit are desirable.