Job Search

We are seeking an experienced Cyber Policy Lead to develop, maintain and promote a clear, effective cyber security policy framework. This is an influential role, working across technology, risk, legal, compliance and operational teams to strengthen cyber resilience and ensure that security expectations are understood and consistently applied.

You will lead the creation, review and implementation of cyber security policies, standards and supporting guidance. This will include translating regulatory requirements, recognised industry frameworks and emerging threats into practical organisational controls. You will oversee the policy lifecycle, ensuring that documents remain accurate, proportionate and aligned with changing business needs, technology developments and the wider risk environment.

The role will involve engaging with senior stakeholders to communicate policy requirements, secure approval and support adoption. You will provide expert advice on policy interpretation, assess and manage exceptions, and contribute to governance forums and assurance activities. You will also work with control owners to monitor compliance, identify areas for improvement and support remediation where requirements are not being met.

As part of the wider cyber security function, you will contribute to risk assessments, audits, regulatory reviews and security awareness initiatives. You will be expected to monitor developments in legislation, regulation and threat activity, assessing their potential impact and recommending appropriate responses. The role may also include mentoring colleagues and supporting the development of consistent policy management processes.

Applicants should have substantial experience in cyber security policy, governance, risk or compliance, with a strong understanding of security frameworks such as ISO 27001, NIST or equivalent. Experience of interpreting regulatory obligations and producing clear, practical policy documentation is essential. You will need excellent written and verbal communication skills, sound judgement and the ability to influence stakeholders at all levels.

We are looking for someone who is organised, collaborative and confident operating in a complex environment. Relevant professional qualifications in cyber security, information assurance, risk management or governance are desirable. A commitment to continuous improvement, strong attention to detail and the ability to manage competing priorities will be key to success.

We are seeking an Operational/Cyber Resilience Technical Specialist to support the development, implementation and continuous improvement of resilience capabilities across critical technology, operational and business services. This role will work with technical teams, service owners, risk specialists and senior stakeholders to identify vulnerabilities, strengthen resilience and ensure the organisation can prepare for, respond to and recover from disruptive events.

Key responsibilities will include assessing operational and cyber resilience across systems, applications, infrastructure, suppliers and business processes. You will help maintain resilience frameworks, policies, standards and control requirements, while contributing to impact assessments, risk analysis, scenario testing and remediation planning. The role will also involve supporting the design and delivery of tabletop exercises, simulations and recovery tests, documenting outcomes and tracking actions through to completion.

You will provide specialist advice on continuity, disaster recovery, incident response, crisis management and technology recovery arrangements. This will include reviewing recovery strategies, recovery time and recovery point objectives, technical dependencies, system resilience patterns and third-party arrangements. You will analyse incidents, near misses and exercise findings to identify trends, strengthen controls and promote continual improvement.

The successful candidate will have experience in operational resilience, cyber resilience, business continuity, disaster recovery, technology risk or a closely related discipline. You will possess a sound understanding of information security principles, service management, risk and control frameworks, cloud and infrastructure technologies, and incident or crisis response practices. Experience of working with regulatory requirements and recognised standards such as ISO 22301, ISO 27001, NIST or similar would be advantageous.

Strong analytical, communication and stakeholder-management skills are essential, alongside the ability to translate complex technical risks into clear, practical recommendations. You should be organised, collaborative and comfortable managing multiple priorities in a changing environment. Relevant professional qualifications or certifications in cyber security, business continuity, risk management, IT service management or a related field would be beneficial.

An Interim Cyber Security Internal Auditor is required to provide independent assurance over the organisation’s information security, technology and cyber risk controls. The successful candidate will assess the design and operating effectiveness of controls, identify vulnerabilities and evaluate whether processes align with relevant policies, regulatory expectations and recognised frameworks.

Key responsibilities will include planning and delivering risk-based internal audits across areas such as access management, identity and privilege controls, vulnerability management, incident response, security monitoring, data protection, third-party risk, business continuity and cloud security. You will conduct interviews, review documentation and technical evidence, perform control testing and analyse findings to determine the potential impact and root cause of any weaknesses.

You will prepare clear and well-supported audit reports, setting out conclusions, risks and practical recommendations for improvement. The role will also involve discussing findings with control owners and senior stakeholders, agreeing appropriate management actions, monitoring remediation activity and providing regular updates on progress. Where required, you may contribute to wider assurance reviews, risk assessments and the development of the annual audit plan.

Applicants should have proven experience in cyber security, information technology or internal audit, ideally gained within a complex or highly regulated environment. A strong understanding of recognised frameworks and standards, such as ISO 27001, NIST, COBIT or the Cyber Assessment Framework, is desirable. Experience of auditing technical controls and translating complex issues into concise, business-focused reports is essential.

You will need excellent analytical, written and verbal communication skills, together with the confidence to challenge constructively and work effectively with stakeholders at all levels. Professional qualifications such as CISA, CISSP, CRISC, CIA or equivalent experience would be advantageous. The interim nature of the appointment requires someone who can quickly understand the environment, build effective working relationships and deliver high-quality assurance within agreed timescales.

We are seeking an experienced Cyber Security Business Partner / Cyber Risk Lead to support the effective management of cyber security risk across a complex organisation. This is a contract opportunity, operating inside IR35, and is suited to a security professional who can combine strong technical understanding with excellent stakeholder engagement and business-focused risk management.

The successful candidate will act as a trusted adviser to senior business and technology stakeholders, helping them understand cyber security risks, regulatory obligations and appropriate controls. You will identify, assess and prioritise cyber risks; maintain clear risk records; support the development and monitoring of remediation plans; and provide regular reporting on risk exposure, control effectiveness and emerging threats.

Key responsibilities will include partnering with delivery, technology and operational teams to embed security by design; challenging and advising on risk decisions; supporting risk acceptance and exception processes; contributing to security governance forums; and ensuring that cyber risks are aligned with wider enterprise risk management principles. You will also help interpret security policies and standards, support audits and assurance activity, and promote practical improvements in security awareness and control maturity.

Applicants should have proven experience in cyber security risk management, information security governance, security assurance or a related discipline. You will need a strong understanding of cyber risk frameworks, control assessment and risk treatment, together with experience of producing clear reports for senior audiences. Familiarity with recognised standards such as ISO 27001, NIST or CIS would be advantageous, as would experience working within regulated or highly complex environments.

Excellent communication, influencing and relationship-building skills are essential. You should be comfortable translating technical issues into clear business impacts, managing competing priorities and working collaboratively with stakeholders at all levels. The ability to operate independently, demonstrate sound judgement and deliver tangible risk reduction in a fast-paced environment is also required.

This contract role offers the opportunity to make a meaningful contribution to cyber resilience, strengthen risk management practices and support informed, proportionate security decision-making across the organisation.

An exciting opportunity is available for a Senior DevSecOps Engineer to join a high-performing technology team on a contract basis. You will play a key role in embedding security throughout the software development lifecycle, improving delivery processes and supporting the development of resilient, scalable and secure platforms.

You will design, implement and maintain CI/CD pipelines, infrastructure automation and cloud-based environments, ensuring that security controls are integrated from development through to deployment. The role will involve working closely with software engineers, architects, infrastructure specialists and security teams to identify risks, resolve vulnerabilities and promote secure engineering practices.

Key responsibilities will include developing and maintaining DevSecOps tooling, automating security testing, managing infrastructure as code and contributing to containerisation and orchestration strategies. You will monitor platform performance, investigate incidents, support remediation activities and help establish effective standards for logging, monitoring, access management and compliance. You will also provide technical guidance, contribute to design decisions and assist with the continuous improvement of engineering processes.

The successful candidate will have substantial experience in DevOps, DevSecOps, platform engineering or a closely related discipline, together with strong knowledge of cloud technologies such as AWS, Azure or Google Cloud. You should be confident working with CI/CD tools, Git-based workflows, infrastructure as code, containers and orchestration platforms such as Kubernetes. Practical experience with security scanning, vulnerability management, secrets management and automated testing is essential.

Strong scripting or programming skills, ideally using Python, PowerShell or Bash, are required, alongside a sound understanding of networking, identity and access management and secure system design. Experience working within regulated or highly controlled environments would be advantageous. Relevant professional certifications in cloud, security or DevOps are desirable but not essential.

This contract role requires excellent communication and collaboration skills, a proactive approach and the ability to work independently in a fast-paced environment. You must be comfortable influencing technical decisions, explaining security requirements clearly and delivering practical solutions to complex challenges.

We are seeking a Senior DevSecOps Engineer for a contract engagement, supporting the design, delivery and continuous improvement of secure, reliable and scalable software platforms. You will work closely with development, operations, architecture and security teams to embed security throughout the software development lifecycle and improve the speed and quality of delivery.

The role will involve designing and maintaining CI/CD pipelines, automating infrastructure and deployment processes, and enabling consistent delivery across cloud and hybrid environments. You will help establish robust infrastructure-as-code practices, improve system observability, and promote resilient approaches to availability, performance, backup and disaster recovery.

You will be responsible for integrating security controls into build and release processes, including vulnerability scanning, secrets management, code analysis, container security and compliance checks. You will investigate and resolve complex technical issues, support incident response activities, and identify opportunities to reduce operational risk through automation and standardisation.

The successful candidate will have substantial experience in a senior DevSecOps, cloud engineering or platform engineering role, with a strong understanding of modern software delivery practices. You should be confident working with public cloud platforms such as Azure, AWS or Google Cloud, alongside technologies including Kubernetes, Docker, Terraform and configuration management tools. Experience with scripting or programming languages such as Python, PowerShell or Bash is also required.

You will bring practical knowledge of Linux and Windows environments, networking, identity and access management, monitoring and logging platforms, and secure development principles. Familiarity with recognised security frameworks, threat modelling, regulatory requirements and DevSecOps tooling will be highly beneficial.

Excellent communication and collaboration skills are essential, as you will work with stakeholders at varying levels of technical understanding. This contract would suit an engineer who can operate independently, provide technical leadership, challenge existing practices constructively and deliver measurable improvements within a fast-moving environment.

An experienced Senior DevSecOps Engineer is required for a contract opportunity supporting the secure, reliable and efficient delivery of technology services. You will work across development, operations, infrastructure and security teams to embed security throughout the software development lifecycle and improve the automation, resilience and performance of engineering platforms.

Responsibilities will include designing, implementing and maintaining secure CI/CD pipelines, infrastructure as code and automated testing processes. You will develop and enforce DevSecOps practices, integrating security scanning, vulnerability management, compliance checks and quality controls into build and deployment workflows. You will also support cloud infrastructure, containerised environments and orchestration platforms, ensuring systems are scalable, observable and appropriately protected.

The role will involve identifying and resolving complex technical issues, contributing to incident response and problem management, and helping to establish effective monitoring, logging and alerting. You will provide technical guidance to colleagues, promote engineering best practice and collaborate with stakeholders to assess risks, define controls and deliver continuous improvements. Clear documentation of architectures, processes, standards and operational procedures will also be required.

Applicants should have substantial experience in a DevSecOps, platform engineering, cloud security or related role, with strong knowledge of automated delivery pipelines and modern software development practices. Hands-on experience with public cloud platforms, configuration management, infrastructure as code, containers and orchestration tools is expected. You should be confident working with scripting or programming languages such as Python, PowerShell, Bash or similar, and familiar with source control and security tooling.

A strong understanding of secure design principles, identity and access management, vulnerability assessment, networking and relevant security frameworks is essential. Experience working in Agile environments and communicating with both technical and non-technical audiences would be advantageous. This contract requires a proactive, analytical professional who can work independently, manage competing priorities and deliver practical solutions in a complex technical environment.

An experienced Senior DevSecOps Engineer is required for a contract assignment, supporting the delivery of secure, resilient and scalable technology services. You will work across development, operations, infrastructure and security teams to embed security throughout the software development lifecycle and improve the efficiency of engineering practices.

The role will involve designing, implementing and maintaining CI/CD pipelines, infrastructure-as-code and automated testing processes. You will help establish secure deployment patterns, improve release reliability and promote consistent engineering standards across cloud and hybrid environments. You will also monitor platform performance, investigate incidents and contribute to the continual improvement of operational processes.

Security will be central to the position. Responsibilities will include identifying and managing vulnerabilities, integrating security tooling into development workflows, supporting threat modelling and ensuring that systems meet relevant governance, risk and compliance requirements. You will contribute to security reviews, audit preparation and the development of practical controls that enable teams to deliver at pace without compromising resilience or protection.

The successful candidate will have strong commercial experience in a DevSecOps, platform engineering or cloud security role, with a proven record of delivering automation and secure engineering solutions. You should be confident working with cloud platforms, containers, orchestration technologies and configuration management tools, alongside scripting or programming languages such as Python, PowerShell or Bash. Experience with source control, pipeline technologies, vulnerability management and observability tools is also expected.

Excellent communication and collaboration skills are essential, as you will work with both technical and non-technical stakeholders and help promote a positive security culture. The ability to assess complex problems, explain risks clearly and deliver pragmatic solutions in a changing environment will be highly valued.

This is a contract opportunity offering the chance to make a tangible impact on engineering capability, platform security and delivery performance. Candidates must be able to work effectively within agreed delivery timeframes and hold the right to work for the duration of the engagement.

We are seeking a Client Service Delivery Lead / Cyber Analyst to support the secure and effective delivery of technology services within a commercial banking environment. This is a varied role combining client relationship management, service delivery leadership and cyber security analysis, with responsibility for maintaining high standards of operational resilience, risk management and customer satisfaction.

You will act as a key point of contact for internal stakeholders and business clients, ensuring that services are delivered in line with agreed service levels and regulatory expectations. Responsibilities will include monitoring service performance, leading service review meetings, managing incidents and escalations, coordinating problem resolution, and producing clear reports on service quality, risks and improvement actions. You will build strong working relationships across technology, operations, risk and business teams to ensure issues are addressed promptly and effectively.

Alongside service delivery responsibilities, you will analyse cyber security events, vulnerabilities and control effectiveness. You will support the investigation and management of security incidents, assess potential business impact, contribute to threat and risk assessments, and help ensure appropriate remediation is completed. The role will also involve reviewing security data, identifying trends, maintaining accurate records and supporting the development of policies, procedures and control frameworks.

The successful candidate will have experience in IT service delivery, client relationship management, cyber security operations or a closely related discipline, ideally within financial services or another highly regulated environment. You will be confident managing competing priorities, communicating with stakeholders at all levels and translating technical matters into clear business language. Knowledge of incident, problem and change management, security monitoring, vulnerability management and risk assessment is highly desirable.

You should be organised, analytical and commercially aware, with a collaborative approach and strong attention to detail. Relevant qualifications in cyber security, information technology, service management or risk would be advantageous. This is an excellent opportunity for a proactive professional who can combine customer focus with technical insight and help strengthen secure, reliable and resilient banking services.

Research Associate – AI for Cyber Security

An exciting opportunity is available for a research associate to contribute to the development of advanced artificial intelligence and machine learning techniques for cyber security. The successful candidate will undertake innovative, applied research addressing current and emerging security challenges, with the aim of producing robust, explainable and trustworthy solutions for real-world environments.

Responsibilities will include reviewing relevant academic and industry literature; formulating research questions and technical approaches; designing, implementing and evaluating machine learning models; and analysing complex cyber security data. You will investigate areas such as threat detection, malware analysis, anomaly detection, adversarial machine learning, secure software or network security, depending on project requirements. You will also contribute to experimental design, data preparation, reproducible research practices and the production of technical documentation.

The role involves working collaboratively with researchers, technical specialists and external stakeholders. You will communicate findings through research papers, reports, presentations and demonstrations, and may contribute to funding proposals, project planning and the supervision or support of students and junior colleagues. A commitment to responsible research, data protection and the ethical use of AI is essential.

You should hold, or be close to completing, a PhD in computer science, artificial intelligence, cyber security, mathematics or a closely related discipline, or have equivalent research experience. Applicants should have strong programming skills, particularly in Python, and practical experience with machine learning frameworks and data analysis tools. Knowledge of cyber security principles, network protocols, operating systems or secure systems would be highly desirable.

The successful candidate will demonstrate sound analytical and problem-solving abilities, an ability to work independently and collaboratively, and excellent written and verbal communication skills. Experience of publishing research, using experimental datasets, working with cloud or high-performance computing environments, or applying explainable and trustworthy AI methods would be advantageous.