Security and Compliance Engineer

Reference: y5ny85x2w43dsqymlv9m

We are seeking a Security and Compliance Engineer to help protect critical systems, data and services while supporting a strong culture of risk management and regulatory compliance. This role will work across technology, engineering and operational teams to identify security risks, implement effective controls and promote secure-by-design practices throughout the organisation.

You will be responsible for monitoring and improving security controls across cloud and on-premises environments, reviewing system configurations and supporting vulnerability management activities. You will investigate security alerts and incidents, coordinate remediation, and contribute to post-incident reviews. The role will also involve maintaining security documentation, policies, standards and procedures, ensuring they remain practical, current and aligned with business requirements.

A key part of the position will be supporting compliance with relevant legislation, industry standards and internal governance requirements. You will assist with risk assessments, audit preparation, evidence gathering and the tracking of corrective actions. You will work with stakeholders to assess new technologies and suppliers, provide clear security guidance, and help ensure that projects meet applicable security and compliance expectations.

The successful candidate will have experience in information security, cyber security, compliance engineering or a closely related discipline. You should have a sound understanding of security frameworks and controls, such as ISO 27001, NIST or CIS, together with practical knowledge of vulnerability management, identity and access management, incident response and cloud security. Experience using security monitoring, ticketing and governance tools would be advantageous.

We are looking for someone analytical, organised and confident communicating with both technical and non-technical audiences. You will be able to manage competing priorities, explain complex risks clearly and build constructive working relationships. Relevant professional qualifications or certifications, such as CISSP, CISM, Security+, ISO 27001 or equivalent experience, are desirable. A commitment to continuous learning and a proactive approach to improving security practices are essential.

COMPETITIVE SALARY
Added 02/11/2026
Reference: y5ny85x2w43dsqymlv9m

Other similar jobs

Manager: Compliance Advisory and Data Protection

Added 22/10/2026

We are seeking an experienced Manager: Compliance Advisory and Data Protection to provide practical, commercially aware guidance across a complex and evolving organisation. This role will support the development of a strong compliance culture, helping colleagues understand their responsibilities and make informed decisions while enabling effective business delivery. You will lead the provision of day-to-day compliance advice on a broad range of regulatory and data protection matters. This will include interpreting legislation and regulatory expectations, advising on policies, procedures and controls, and supporting the assessment and management of compliance risks. You will also provide guidance on privacy impact assessments, data...

Learn more

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 09/10/2026

We are seeking a Senior Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help maintain confidence in the organisation’s security, privacy and resilience controls by coordinating assurance programmes, supporting regulatory requirements and engaging with internal and external stakeholders. You will work closely with security, compliance, risk, legal, audit and operational teams to assess control effectiveness and promote continuous improvement. Key responsibilities include managing evidence collection for internal and external audits, coordinating responses to customer and regulatory assessments, and preparing clear, accurate reports for senior stakeholders. You will review security and compliance...

Learn more

Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Added 25/09/2026

We are seeking a Security Assurance Specialist to support compliance and security assurance activities across the EMEA region. This role will help demonstrate that cloud services, business processes and operational controls meet applicable regulatory, contractual and industry requirements. You will work with security, legal, privacy, risk, audit and engineering teams to assess control effectiveness, coordinate evidence and communicate assurance outcomes to internal and external stakeholders. Key responsibilities include supporting customer, regulatory and third-party assurance requests; coordinating audit and assessment activities; reviewing policies, procedures and control documentation; and identifying opportunities to improve the efficiency and consistency of assurance processes. You will...

Learn more

Security and Compliance Product Lead

Added 26/10/2026

Security and Compliance Product Lead An exciting opportunity has arisen for an experienced Security and Compliance Product Lead to shape and deliver a product strategy that strengthens security, regulatory compliance and risk management across a growing technology environment. You will define priorities, translate complex requirements into practical product outcomes and ensure that security and compliance are embedded throughout the product lifecycle. You will own and maintain the product roadmap, balancing customer needs, business objectives, emerging threats and regulatory change. Working closely with engineering, information security, legal, risk, operations and customer-facing teams, you will turn legislation, industry standards and internal policies...

Learn more

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Information Security Governance and Compliance Analyst

Added 06/10/2026

We are seeking an Information Security Governance and Compliance Analyst to support the development, implementation, and continuous improvement of information security governance and compliance practices. This role will help ensure that policies, standards, procedures, and controls are aligned with business objectives, regulatory obligations, and recognised security frameworks. The successful candidate will work closely with technology, risk, legal, privacy, audit, and business stakeholders to promote a consistent and effective approach to information security. Key responsibilities include maintaining the information security policy and control framework; coordinating compliance assessments, internal reviews, and external audits; monitoring regulatory and industry developments; and supporting the remediation...

Learn more

Head of Information Security, Risk and Compliance

Added 22/09/2026

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation. Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

UK Head of IT Risk and Compliance

Added 02/11/2026

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience. You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums....

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with the development and delivery of cybersecurity strategy, governance, risk and compliance programmes. You will work with senior stakeholders to understand business objectives, assess cyber maturity and translate regulatory, technological and operational requirements into practical, sustainable improvements. This role offers the opportunity to contribute to varied engagements across multiple industries, advising organisations as they strengthen their resilience in an increasingly complex threat landscape. Your responsibilities will include leading and delivering cybersecurity assessments, maturity reviews, risk assessments and compliance engagements; developing security strategies, policies, standards and governance...

Learn more

Senior Technology Risk and Compliance Analyst

Added 20/10/2026

We are seeking a Senior Technology Risk and Compliance Analyst to support the effective management of technology risk, information security and regulatory compliance across a complex business environment. The successful candidate will provide expert advice to technology and business stakeholders, helping to identify, assess and manage risks while promoting a strong culture of control and continuous improvement. Key responsibilities will include maintaining technology risk and control frameworks, coordinating risk and control assessments, and monitoring remediation activity to ensure issues are addressed within agreed timescales. You will support internal and external audits, regulatory reviews and assurance activities, preparing clear evidence, reports...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business and technology risks, assess current security maturity and design practical, proportionate improvements aligned to regulatory, industry and organisational requirements. This role will involve delivering high-quality advisory engagements across a varied client portfolio, with opportunities to contribute to large-scale transformation programmes and support the development of innovative cybersecurity solutions. Responsibilities will include leading or contributing to cybersecurity strategy reviews, governance assessments, risk and control evaluations, regulatory compliance reviews...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking an experienced Senior Consultant to support clients across the UK and Ireland in strengthening their cybersecurity strategy, governance, risk and compliance capabilities. You will work with senior stakeholders to understand business priorities, assess current security maturity and develop practical, risk-based improvements that align with regulatory obligations, industry standards and organisational objectives. This is an opportunity to contribute to complex transformation programmes while helping organisations build sustainable and effective security practices. Your responsibilities will include leading or contributing to cybersecurity and GRC engagements, including security strategy development, operating model design, governance reviews, risk assessments, control evaluations, compliance assessments...

Learn more

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Added 20/10/2026

We are seeking a Senior Consultant to support clients across the UK and Ireland with cybersecurity strategy, governance, risk and compliance. You will help organisations understand their cyber risk, strengthen their security posture and develop practical, sustainable approaches to managing technology and information security. Working as part of a collaborative consulting team, you will engage with senior stakeholders, translate business objectives into security priorities and provide clear, commercially focused advice. Your responsibilities will include leading and contributing to cybersecurity assessments, maturity reviews, risk and control evaluations, governance framework design and regulatory compliance initiatives. You will help develop policies, standards, procedures,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.