Security Engineer - CIS Controls - Contract

Reference: j2kh2hixqdnmx0u9k0jy

We are seeking a Security Engineer for a contract engagement focused on implementing, assessing and improving security capabilities in alignment with the CIS Controls. The successful candidate will work across technical and operational teams to strengthen cyber resilience, reduce risk and support the delivery of practical, measurable security improvements. This role is suited to an experienced security professional who can translate control requirements into effective processes, technical solutions and clear evidence of compliance.

Key responsibilities will include reviewing current security practices against the CIS Controls, identifying control gaps and prioritising remediation activities. You will help implement and maintain safeguards relating to asset and software inventory, secure configuration, identity and access management, vulnerability management, audit logging, incident response, data protection and security awareness. The role will also involve developing and maintaining security documentation, procedures, standards and control metrics; supporting risk assessments and audit activities; coordinating remediation plans; and producing concise reports for technical and non-technical stakeholders. You may also contribute to security monitoring, incident investigations, supplier reviews and the continuous improvement of security operations.

Applicants should have proven experience in a security engineering, cyber security or information security role, with strong knowledge of the CIS Critical Security Controls and their practical application in an enterprise environment. Experience with vulnerability management, endpoint protection, identity platforms, cloud security, SIEM solutions, configuration management and security automation is highly desirable. You should be comfortable analysing technical information, managing competing priorities and working collaboratively with infrastructure, development, risk and compliance teams. Relevant professional certifications, such as CISSP, CISM, GIAC, Security+ or equivalent experience, would be advantageous. The contract requires excellent communication skills, a structured approach to problem-solving and the ability to deliver outcomes within agreed timelines.

COMPETITIVE SALARY
Added 12/10/2026
Reference: j2kh2hixqdnmx0u9k0jy

Security Engineer - CIS Controls - Contract

London, England, United Kingdom Contract Security Engineer

Other similar jobs

Business Analyst (Cyber Controls & Compliance) - Contract

Added 17/09/2026

We are seeking an experienced Business Analyst to support cyber controls and compliance activities on a contract basis. The successful candidate will work with cybersecurity, technology, risk, audit and business stakeholders to understand regulatory obligations, assess control effectiveness and help strengthen the organisation’s overall control environment. This role is suited to someone who can translate complex security and compliance requirements into practical, clearly documented processes and actionable improvements. Key responsibilities will include gathering and analysing business and control requirements; documenting current and future-state processes; mapping controls to relevant policies, standards and regulatory frameworks; and identifying gaps, risks, dependencies and opportunities...

Learn more

Security Consultant (Network & Change Assurance) - Contract

Added 09/10/2026

We are seeking an experienced Security Consultant to support network security and change assurance activities within a complex technology environment. This contract role will provide independent oversight of security-related changes, helping to ensure that proposed modifications to network infrastructure, systems and services are appropriately assessed, documented, tested and implemented in line with agreed security standards and risk controls. You will review change requests, technical designs and implementation plans to identify security implications, dependencies and potential operational risks. Working closely with infrastructure, network, cyber security, architecture and service management teams, you will challenge assumptions, recommend appropriate controls and confirm that security...

Learn more

Platform Security Consultant - Contract

Added 08/09/2026

We are seeking an experienced Platform Security Consultant to support the design, implementation, and continuous improvement of secure technology platforms in a contract capacity. The successful candidate will work with engineering, infrastructure, architecture, and risk teams to assess security requirements, identify vulnerabilities, and provide practical guidance across cloud, on-premises, and hybrid environments. This role is suited to a security professional who can balance strategic thinking with hands-on technical delivery. Key responsibilities will include reviewing platform and infrastructure designs, conducting security assessments, and recommending appropriate controls for identity and access management, network security, encryption, endpoint protection, logging, monitoring, and secrets management....

Learn more

Senior Security Consultant (Platform Security Engineer) - Permanent

Added 07/10/2026

We are seeking a Senior Security Consultant (Platform Security Engineer) to strengthen the security, resilience and compliance of critical technology platforms. This permanent role is suited to an experienced security professional who can combine hands-on engineering expertise with strategic consulting skills. You will work with technology, product and operational teams to identify security risks, design effective controls and embed secure practices throughout the platform lifecycle. Your responsibilities will include assessing platform architectures, cloud environments, infrastructure and deployment pipelines; defining security requirements; and advising on identity and access management, network security, encryption, secrets management, vulnerability management and secure configuration. You will...

Learn more

Senior Security Consultant (Delivery & Commercial Growth)

Added 02/09/2026

We are seeking a Senior Security Consultant to lead the delivery of high-quality cybersecurity consulting engagements while contributing to commercial growth. This role combines technical leadership, client advisory, solution development and business development, making it ideal for an experienced security professional who enjoys working across both delivery and strategic growth activities. You will work with clients to understand their security objectives, assess their current capabilities and design practical, risk-based solutions aligned with business priorities and regulatory expectations. Responsibilities will include leading security assessments, reviews and transformation programmes; developing project plans, methodologies, reports and executive presentations; and providing clear, actionable recommendations...

Learn more

Lead Software Engineer, Cyber Security Controls Automation

Added 02/09/2026

We are seeking a Lead Software Engineer, Cyber Security Controls Automation to design, build and lead the delivery of scalable solutions that strengthen security control compliance across a complex technology environment. You will work at the intersection of software engineering, cyber security, cloud platforms and governance, translating control requirements into reliable, automated capabilities that improve visibility, reduce operational risk and support continuous assurance. In this role, you will provide technical leadership across the full software development lifecycle, from discovery and architecture through development, testing, deployment and ongoing optimisation. You will develop automation for security control monitoring, evidence collection, exception management,...

Learn more

Risk & Controls Consulting - Enterprise Security

Added 06/10/2026

Join a specialist team delivering risk and controls consulting across enterprise security environments. In this role, you will help organisations understand, manage and improve their information security, technology risk and control frameworks. You will work with stakeholders across business and technology functions to assess current capabilities, identify weaknesses and develop practical, sustainable solutions aligned with regulatory expectations and business objectives. Your responsibilities will include planning and delivering risk and controls assessments, reviewing security policies and procedures, evaluating the design and operating effectiveness of controls, and documenting findings and recommendations. You will support activities such as access governance, identity and privileged...

Learn more

Senior Data Scientist - (Privacy & Security Controls)

Added 23/09/2026

We are seeking a Senior Data Scientist to lead the development of privacy and security controls across data products, analytical platforms, and machine learning workflows. In this role, you will apply advanced statistical, analytical, and engineering expertise to identify risks, strengthen safeguards, and enable responsible use of data at scale. You will work closely with data engineering, security, privacy, legal, compliance, and product teams to translate complex requirements into practical, measurable controls. Your responsibilities will include designing and implementing methods for data classification, anonymisation, pseudonymisation, access monitoring, retention management, and sensitive-data detection. You will develop metrics, models, and testing frameworks...

Learn more

IT Security Governance, Risk & Controls Analyst

Added 22/09/2026

We are seeking an IT Security Governance, Risk & Controls Analyst to support the development, operation and continuous improvement of information security governance and risk management processes. In this role, you will help ensure that technology environments, business processes and third-party services are aligned with internal policies, regulatory expectations and recognised security frameworks. You will work closely with technology, risk, compliance, audit and business stakeholders to identify security risks, assess control effectiveness and support practical remediation plans. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; coordinating periodic risk and control assessments; documenting risks, findings, action plans...

Learn more

Cyber Security Controls Tester (Contractor)

Added 11/09/2026

We are seeking an experienced Cyber Security Controls Tester to support the assessment, validation and continuous improvement of security controls across a complex technology environment. Working on a contract basis, you will help determine whether controls are appropriately designed, consistently implemented and operating effectively in line with internal policies, recognised security frameworks and applicable regulatory requirements. You will work closely with control owners, technology teams, risk specialists and internal stakeholders to gather evidence, clarify processes and communicate findings. Your responsibilities will include planning and executing control testing activities across areas such as access management, vulnerability management, change management, incident response,...

Learn more

1st Line Security Controls Testing Manager

Added 26/08/2026

We are seeking a 1st Line Security Controls Testing Manager to lead the effective delivery of first-line security control testing across a complex and evolving environment. You will be responsible for establishing and maintaining a robust testing approach that provides clear assurance over the design, implementation and operating effectiveness of key information and cyber security controls. Working closely with control owners, risk teams, internal audit and technology stakeholders, you will help identify weaknesses, assess risk exposure and drive timely remediation. Your responsibilities will include developing risk-based testing plans; prioritising activities in line with regulatory, business and threat requirements; overseeing control...

Learn more

Senior Data Scientist - (Privacy & Security Controls)

Added 20/08/2026

We are seeking a highly skilled Senior Data Scientist specializing in Privacy & Security Controls to join our dynamic team. In this role, you will lead the development and implementation of advanced analytical models to ensure data privacy and security across various platforms. You will be responsible for analyzing complex datasets, identifying vulnerabilities, and creating solutions that adhere to compliance regulations. Collaborating with cross-functional teams, you will help to design and enhance privacy and security features within our products while ensuring that data handling practices meet industry standards. The ideal candidate will possess a strong background in data science, machine...

Learn more

Senior Data Scientist - (Privacy & Security Controls)

Added 19/08/2026

We are seeking a highly skilled Senior Data Scientist specializing in Privacy & Security Controls to join our dynamic team. In this role, you will be responsible for developing and implementing advanced data analytics solutions that ensure the privacy and security of sensitive information. You will work closely with cross-functional teams to design data-driven strategies that mitigate risks, enhance compliance, and promote best practices in data governance. Your expertise will be pivotal in analyzing large datasets to identify vulnerabilities and recommend actionable insights that support organizational objectives. The ideal candidate will possess a deep understanding of data privacy regulations, security...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and operational risks across a complex organisation. This role will provide independent challenge, practical guidance and assurance over the design and effectiveness of controls, helping to maintain a robust risk management framework and support informed decision-making at all levels. You will partner with technology, cyber security, risk, compliance, audit and business stakeholders to identify, assess and monitor risks across areas including cyber security, infrastructure, cloud services, third-party providers, data protection, resilience and technology change. Key responsibilities will include maintaining risk...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.