Principal Cyber Security Risk Manager

Added 15/09/2026

We are seeking an experienced Principal Cyber Security Risk Manager to lead the development and continual improvement of cyber security risk management across a complex organisation. In this senior role, you will provide expert advice to executives, technology leaders and business stakeholders, helping them understand cyber threats, make informed risk-based decisions and strengthen the organisation’s overall security posture. You will operate as a trusted authority on cyber risk, influencing strategy, governance and investment priorities across a broad range of services, systems and transformation programmes. Your responsibilities will include establishing and maintaining cyber security risk frameworks, policies, standards and assessment methodologies....

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert leadership across cyber risk, information assurance and security governance. This is a senior opportunity for an experienced professional who can assess complex technology environments, translate risk into practical business decisions and support the delivery of secure, resilient services. The successful candidate will work with technical, operational and senior stakeholder groups to promote effective cyber risk management and assurance practices. Key responsibilities will include developing and maintaining cyber risk management frameworks, policies, standards and assurance processes aligned with ISO 27001, relevant government security principles and industry best...

Principal Cyber Risk Management & Assurance Advisor - (ISO 27001 / Cyber Assurance / AWS / CISSP / CISM - SC Cleared

Added 06/10/2026

We are seeking a Principal Cyber Risk Management & Assurance Advisor to provide expert guidance across cyber security risk, governance and assurance activities within a complex technology environment. This is a senior role for an experienced professional who can translate security requirements into practical, proportionate controls and confidently advise stakeholders at all levels. The successful candidate will support the management of cyber risk across services, programmes, suppliers and cloud platforms, helping to maintain a strong and demonstrable security posture. Key responsibilities will include leading cyber risk assessments, maintaining risk registers and treatment plans, and providing assurance against relevant policies, standards...

Red Team Consultants – Managing, Principal & Executive Principal

Added 30/10/2026

Red Team Consultants are sought at Managing, Principal and Executive Principal levels to lead and deliver sophisticated security assessments for a diverse range of clients. These roles involve emulating realistic adversaries to identify weaknesses in people, processes and technology, while providing clear, practical guidance that helps organisations improve their resilience. Depending on seniority, responsibilities will include planning and managing red team engagements, defining rules of engagement, developing attack scenarios, conducting reconnaissance, exploiting vulnerabilities and assessing detection and response capabilities. You will use a broad range of techniques across infrastructure, cloud environments, applications, identity platforms, physical security and social engineering, while...

Red Team Consultants – Managing, Principal & Executive Principal

Added 30/10/2026

Red Team Consultants are sought at Managing, Principal and Executive Principal levels to lead and deliver sophisticated security assessments for a diverse range of clients. You will help organisations identify, understand and reduce their exposure to real-world cyber threats by combining technical expertise, creative thinking and strong communication skills. Depending on seniority, responsibilities will include planning and conducting red team operations, adversary simulations, penetration tests and physical or social engineering assessments. You will be expected to develop realistic attack scenarios, perform reconnaissance, exploit weaknesses, demonstrate business impact and produce clear, evidence-based reports. You may also support incident response exercises, threat-led...

Senior Risk Manager Technology Risk and Transformation

Added 23/10/2026

We are seeking a Senior Risk Manager – Technology Risk and Transformation to provide experienced leadership across technology risk, change and transformation initiatives. This is an opportunity to shape a proactive risk management approach, helping ensure technology services, systems and strategic programmes are resilient, well controlled and aligned with regulatory and business expectations. You will lead the identification, assessment and management of technology and information risks, working closely with senior stakeholders across technology, change, cyber security, operational resilience, compliance and business functions. You will provide constructive challenge and practical advice on risk appetite, control design, risk acceptance, remediation planning and...

Technical Specialist (cyber related), Operational Risk and Resilience, R&CGI Operational Risk and Resilience Team - Insurance Directorate

Added 29/09/2026

We are seeking a Technical Specialist to support operational risk and resilience across the insurance sector, with a particular focus on cyber-related risks. You will contribute specialist technical insight to the assessment, monitoring and mitigation of risks that could affect the availability, integrity, confidentiality and continuity of important business services. Working as part of a collaborative operational risk and resilience team, you will engage with internal stakeholders, regulated firms and industry contacts to understand emerging threats, assess preparedness and promote effective risk management practices. Your responsibilities will include analysing cyber and technology risks, reviewing firms’ governance, controls and resilience arrangements,...

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Principal Security Architect — DevSecOps (Group Manager II - Information Security)

Added 24/09/2026

We are seeking a Principal Security Architect to provide strategic leadership across DevSecOps, cloud security, application security, and secure technology delivery. In this senior management role, you will define and advance security architecture principles, standards, and patterns that enable secure, scalable, and resilient products and platforms. You will partner with engineering, infrastructure, product, risk, and compliance teams to embed security throughout the software development lifecycle and support informed, risk-based decision-making. You will lead and mentor security architects and specialists, establish consistent ways of working, and promote a culture of shared security ownership. Key responsibilities include developing target-state security architectures; reviewing...

Principal Security Architect — DevSecOps (Group Manager II - Information Security)

Added 23/09/2026

We are seeking a Principal Security Architect to lead the strategic design and delivery of secure, scalable solutions across a complex technology environment. In this Group Manager II-level role, you will provide architectural direction for DevSecOps practices, embedding security throughout the software development lifecycle and enabling engineering teams to deliver resilient products at speed. You will partner with technology, product, infrastructure, risk, and compliance stakeholders to define security strategies, establish standards, and align delivery roadmaps with enterprise risk objectives. Your responsibilities will include developing and maintaining security architecture principles, reference models, patterns, and technical standards; reviewing proposed solutions and identifying...

Senior/Principal Product Manager - Security

Added 14/10/2026

We are seeking a Senior/Principal Product Manager – Security to define and deliver the strategy for security products and capabilities across a complex technology environment. You will work at the intersection of product management, cybersecurity, engineering, risk, compliance and customer experience, turning emerging threats and business needs into clear, prioritised product outcomes. Depending on experience, the role may operate at senior or principal level, with scope ranging from leading individual security products to shaping a broader security product portfolio. You will own the product lifecycle from discovery and strategy through delivery, adoption and continuous improvement. Responsibilities include developing a compelling...

Principal Security Programme Manager & Technical Lead - Engine by Starling

Added 24/09/2026

We are seeking a Principal Security Programme Manager and Technical Lead to shape and deliver a strategic security programme across a complex, technology-led environment. This senior role will combine programme leadership, technical assurance and stakeholder management, helping to strengthen security capabilities while enabling the delivery of innovative products and services. You will establish clear objectives, roadmaps, governance and success measures, ensuring that security initiatives are prioritised and delivered effectively against business and regulatory expectations. You will lead significant, multi-disciplinary security programmes from discovery through to implementation and continuous improvement. Responsibilities will include coordinating engineering, architecture, risk, compliance, product and operational...

Principal IT Security Manager (GRC)

Added 15/09/2026

We are seeking a Principal IT Security Manager (GRC) to lead the development, implementation and continuous improvement of an enterprise-wide governance, risk and compliance framework. This senior role will provide strategic direction on information security risk management, regulatory compliance, policies, standards and control effectiveness across technology and business environments. You will act as a trusted adviser to senior stakeholders, translating complex security and regulatory requirements into practical, risk-based solutions that support business objectives. Key responsibilities include owning the information security risk management lifecycle, including risk identification, assessment, treatment, acceptance and reporting. You will oversee the design, review and maintenance of...

Cyber Manager - Digital, Cyber Risk and Transformation

Added 21/10/2026

We are seeking an experienced Cyber Manager – Digital, Cyber Risk and Transformation to lead the development and delivery of cyber security initiatives across a complex and evolving environment. This is a high-impact role for a confident security professional who can combine strategic thinking with practical delivery, helping to strengthen cyber resilience while enabling digital change. You will manage a portfolio of cyber security, risk and transformation activities, ensuring that priorities are aligned with business objectives and delivered to a high standard. Your responsibilities will include developing cyber strategies and roadmaps, overseeing risk assessments, supporting security-by-design principles, and embedding effective...

Principal Cyber Security Consultant - Cyber Advisory

Added 25/09/2026

We are seeking a Principal Cyber Security Consultant to provide strategic cyber advisory services to a diverse range of clients. In this senior role, you will help organisations understand and manage cyber risk, strengthen their security posture and align their security strategies with business objectives, regulatory obligations and industry best practice. You will act as a trusted adviser to senior stakeholders, translating complex technical and security issues into clear, practical recommendations. Your responsibilities will include leading cyber security assessments, maturity reviews, risk assessments and security transformation initiatives. You will develop and review cyber security strategies, operating models, policies, standards, roadmaps...