Job Search

We are seeking a Senior Manager, Technology Risk Assurance to lead the delivery of high-quality technology risk assessments and assurance reviews across a complex business environment. This is an influential role for an experienced technology risk professional who can provide clear, practical challenge and help strengthen governance, controls and resilience.

You will lead a portfolio of assurance activity covering areas such as information security, technology governance, IT operations, third-party risk, cloud services, change management, resilience and regulatory controls. Responsibilities will include developing risk-based review plans, assessing the design and operating effectiveness of controls, identifying emerging risks and producing concise reports for senior stakeholders and governance forums.

The role will involve managing assurance engagements from planning through to issue validation, ensuring findings are supported by robust evidence and that agreed actions are proportionate, sustainable and delivered on time. You will work closely with technology, cyber security, risk, compliance, audit and business teams, providing constructive challenge while building strong working relationships. You will also contribute to the ongoing development of technology risk methodologies, reporting and assurance standards.

Applicants should have significant experience in technology risk, IT audit, controls assurance or a related discipline, gained within a complex or regulated organisation. You will have a strong understanding of technology control frameworks, risk management principles and current technology risks, including cyber security, cloud and third-party services. Experience leading teams or multi-disciplinary review engagements is essential, along with the ability to communicate complex issues clearly to both technical and non-technical audiences.

Relevant professional qualifications, such as CISA, CISSP, CISM, CRISC, ACA, ACCA or equivalent experience, are desirable. You should be analytical, commercially aware and confident operating with senior stakeholders. A pragmatic approach, strong attention to detail and the ability to prioritise effectively will be essential in this high-impact position.

We are seeking an Information Security Assurance Manager to lead the delivery of robust security assurance activities across a complex organisation. This is an influential role for an experienced information security professional who can provide clear advice, challenge constructively and help embed effective security practices across technology, projects and business operations.

You will develop and maintain the information security assurance framework, ensuring that policies, standards and controls remain aligned with recognised industry practices, regulatory obligations and organisational risk appetite. You will plan and deliver assurance reviews, control assessments and audits, identifying weaknesses and agreeing practical remediation plans with relevant stakeholders.

Key responsibilities will include managing the security risk and assurance portfolio, monitoring the progress of corrective actions, and producing accurate reports for senior management and governance forums. You will support compliance activities, contribute to internal and external audits, and provide assurance over third-party suppliers, cloud services and significant technology or business change initiatives.

You will work closely with cyber security, technology, risk, compliance, procurement and operational teams to promote a consistent approach to security assurance. The role will also involve developing meaningful metrics, improving assurance processes, maintaining supporting documentation and providing guidance on control design, evidence requirements and risk treatment.

Applicants should have substantial experience in information security assurance, governance, risk or audit, with a strong understanding of security frameworks such as ISO 27001, NIST or CIS Controls. Experience of assessing technical and organisational controls, managing audit activity and working with third-party risk is essential. Relevant professional qualifications, such as CISM, CISSP, CRISC, CISA or an equivalent, would be advantageous.

You will be an excellent communicator with strong analytical and organisational skills, able to translate complex security matters into clear business advice. A pragmatic, collaborative approach, sound judgement and the confidence to influence stakeholders at all levels are essential. This is an opportunity to make a meaningful contribution to security maturity while supporting responsible delivery and continuous improvement.

We are seeking a Consultant – Information Assurance & Secure by Design to provide expert advice on the development, implementation and continuous improvement of secure information systems. You will work with technical and non-technical stakeholders to ensure that security, privacy and resilience are considered from the earliest stages of product, service and technology development.

You will assess business and technical requirements, identify information and cyber security risks, and recommend proportionate controls in line with relevant policies, standards and regulatory obligations. The role will involve contributing to security architectures, assurance cases, risk assessments, threat modelling, security reviews and design approvals across a varied portfolio of projects and services.

Key responsibilities will include advising delivery teams on secure-by-design principles; reviewing proposed solutions and technical documentation; supporting security governance and risk acceptance processes; and monitoring the effective implementation of agreed controls. You will help establish repeatable assurance methods, produce clear reports for senior stakeholders, and provide constructive challenge where designs or delivery approaches may introduce unacceptable risk.

You will also contribute to the development of security policies, standards, guidance and patterns, while helping to promote a strong culture of information assurance. The role may include supporting audits, responding to security incidents, evaluating suppliers and third-party services, and ensuring that lessons learned are incorporated into future designs and operating practices.

To succeed, you will have demonstrable experience in information assurance, cyber security, risk management or secure solution design. You should be confident interpreting security requirements and translating them into practical recommendations. Experience of recognised frameworks, standards or methods such as ISO 27001, NIST, Cyber Essentials, SABSA, TOGAF or the NCSC principles would be advantageous.

Strong communication, influencing and analytical skills are essential, along with the ability to manage competing priorities and work collaboratively across multidisciplinary teams. Relevant professional certifications or memberships, such as CISSP, CISM, CRISC, or equivalent experience, would be desirable.

An opportunity is available for a Consultant – Information Assurance & Secure by Design to help embed robust security, privacy and risk management throughout the design and delivery of digital services. You will provide expert advice across the full service lifecycle, ensuring that security considerations are addressed early and remain aligned with business objectives, regulatory obligations and user needs.

Key responsibilities will include conducting information assurance reviews, security risk assessments and threat modelling activities; defining appropriate security controls; and producing clear, evidence-based recommendations for technical and non-technical stakeholders. You will support the development of secure-by-design patterns, assurance cases, risk treatment plans and governance documentation, while tracking actions through to completion.

The role will involve working closely with architects, delivery teams, product owners, suppliers and senior stakeholders to identify security requirements and assess proposed designs, technologies and changes. You will contribute to security and privacy impact assessments, support audit and compliance activities, and help verify that services meet relevant policies, standards and regulatory expectations. You may also be required to advise on incident preparedness, third-party risk and the secure management of information assets.

Applicants should have proven experience in information assurance, cyber security, risk management or a closely related discipline, with a strong understanding of secure-by-design principles and risk-based decision-making. Experience of applying recognised frameworks and standards, such as ISO 27001, NIST, UK Government security principles or NCSC guidance, would be valuable. Knowledge of data protection requirements, including UK GDPR, is also desirable.

You will be an analytical and confident communicator, able to explain complex risks clearly and influence decisions at all levels. The ability to manage competing priorities, challenge constructively and work collaboratively across multidisciplinary teams is essential. Relevant professional qualifications or certifications, such as CISSP, CISM, CRISC, SABSA or equivalent experience, would be advantageous.

We are seeking an experienced Commercial Security and Information Assurance Lead to provide strategic direction and practical leadership across commercial security, information assurance and risk management. This is an influential role responsible for protecting sensitive information, strengthening security practices and ensuring that commercial activity supports regulatory, contractual and organisational requirements.

You will lead the development, implementation and continual improvement of security and information assurance frameworks, policies and processes. Working with colleagues across procurement, legal, technology, operations and senior leadership, you will assess risks, define appropriate controls and provide clear, proportionate advice throughout the commercial lifecycle. You will also support security input to tenders, contracts, supplier due diligence, assurance reviews and ongoing relationship management.

Key responsibilities will include maintaining security standards and governance arrangements; overseeing information assurance activities and risk registers; reviewing supplier security obligations and performance; supporting incident response and remediation; and preparing concise reports, briefings and recommendations for senior stakeholders. You will promote a strong security culture by developing guidance, delivering awareness activities and ensuring that relevant teams understand their responsibilities.

The successful candidate will have substantial experience in commercial security, information assurance, supplier assurance, governance or a closely related field. You will be confident interpreting security requirements, assessing risk and translating technical or regulatory matters into clear commercial advice. Experience of working with recognised security and information assurance frameworks, data protection requirements, contractual controls and third-party risk management is essential.

You should be an effective communicator and relationship builder, capable of influencing stakeholders at all levels while maintaining sound professional judgement and attention to detail. The ability to manage competing priorities, work independently and deliver practical outcomes in a changing environment is important. Relevant professional qualifications or certifications in information security, risk, audit, data protection or commercial management would be advantageous.

We are seeking a Security Assurance Specialist to support the delivery of effective security governance, risk management and assurance across a complex technology and business environment. This role will help ensure that security controls are appropriately designed, implemented and operating effectively, while promoting a practical, risk-based approach to information security.

You will plan and conduct security assurance reviews, control assessments and compliance activities across systems, services, suppliers and business processes. Responsibilities will include gathering and evaluating evidence, identifying control weaknesses, documenting findings and agreeing proportionate remediation plans with relevant stakeholders. You will monitor actions through to completion and provide clear, concise reporting on risk, assurance outcomes and emerging issues.

The role will also involve supporting internal and external audits, maintaining security assurance documentation, contributing to risk assessments and reviewing security aspects of projects, change initiatives and third-party engagements. You will work closely with technology, risk, compliance, procurement and operational teams to embed security requirements and improve the consistency and effectiveness of assurance practices.

Applicants should have experience in information security, IT risk, compliance, audit or security assurance, with a sound understanding of security frameworks, control principles and risk management methodologies. Familiarity with standards such as ISO 27001, NIST or CIS is desirable, as is experience assessing cloud services, suppliers or technology environments.

You will be analytical, organised and confident in interpreting complex information and translating it into practical recommendations. Strong written and verbal communication skills are essential, along with the ability to build effective relationships and influence stakeholders at different levels. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor or equivalent experience, would be advantageous.

This is an opportunity to contribute to a mature and continually evolving security function, helping strengthen resilience, accountability and confidence in the organisation’s information and technology environment.

We are seeking an experienced Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role for an individual who can translate regulatory expectations into practical controls, measurable outcomes and clear assurance plans, while providing constructive challenge to technology and business leaders.

You will define and maintain the cyber assurance framework, ensuring alignment with relevant legislation, regulatory requirements, industry standards and internal policies. You will oversee risk-based assurance reviews covering areas such as governance, identity and access management, infrastructure security, cloud services, third-party risk, vulnerability management, resilience and incident response. Your work will provide senior stakeholders with confidence that key cyber risks are understood, managed and appropriately reported.

Key responsibilities will include setting the annual assurance plan; leading regulatory assessments, thematic reviews and control testing; evaluating evidence and identifying control weaknesses; tracking remediation activity; and producing concise reports for executive and governance forums. You will also support responses to regulatory enquiries and examinations, contribute to policy and control improvements, and promote consistent assurance practices across teams and suppliers.

The successful candidate will have substantial experience in cyber security assurance, audit, risk management or regulatory compliance, ideally within a complex or regulated sector. You will possess strong knowledge of recognised frameworks and standards, such as NIST, ISO 27001, COBIT, CIS Controls or equivalent, alongside a sound understanding of data protection, operational resilience and technology risk. Relevant professional qualifications, such as CISA, CISSP, CRISC, CISM or equivalent experience, are desirable.

You will be confident engaging with senior stakeholders, technical specialists, auditors and regulators, and able to communicate complex issues clearly to both technical and non-technical audiences. Strong analytical, report-writing and influencing skills are essential, as is the judgement to prioritise material risks and challenge constructively. The role requires integrity, independence, attention to detail and a pragmatic approach to achieving sustainable improvements in cyber resilience.

We are seeking a Senior Consultant to join a Technology Risk and Assurance team supporting clients across Belfast, Derry and Londonderry. This role offers the opportunity to work with a broad range of organisations, helping them understand, manage and improve the risks associated with technology, systems and data. You will contribute to high-quality advisory and assurance engagements, building trusted relationships with stakeholders at all levels and delivering practical recommendations that support effective governance and business performance.

Your responsibilities will include planning and delivering technology risk reviews, IT audits and controls assessments across areas such as information security, access management, change management, IT operations, resilience, third-party risk and data governance. You will assess the design and operating effectiveness of controls, identify potential weaknesses, document findings and prepare clear, well-supported reports. You will also support risk assessments, regulatory and compliance reviews, control improvement programmes and the development of policies, procedures and governance frameworks. As a senior member of the team, you will help supervise colleagues, review their work, contribute to project planning and manage delivery against agreed objectives, budgets and timescales.

Applicants should have experience in technology risk, IT audit, information security, internal controls or a related area, gained within a professional services, consultancy or in-house environment. A relevant degree or professional qualification, or progress towards one, would be advantageous. You will need strong analytical and problem-solving skills, excellent written and verbal communication, and the confidence to present findings to both technical and non-technical audiences. The ability to manage multiple priorities, work collaboratively and build effective client relationships is essential. Familiarity with recognised technology, risk or control frameworks and relevant regulatory requirements would be beneficial. Some travel may be required, and you should be comfortable working flexibly across client sites and remotely.

We are seeking a Senior Software Engineer, Security Assurance to help strengthen the security, resilience and quality of software systems delivered across a remote engineering environment in the UK. You will work closely with software engineers, security specialists, architects and product teams to embed secure development practices throughout the software development lifecycle. This role combines hands-on engineering with technical leadership, enabling teams to identify and address security risks early while maintaining a practical, delivery-focused approach.

Your responsibilities will include designing and implementing security assurance processes, reviewing application and infrastructure designs, and supporting threat modelling, secure code reviews and vulnerability management. You will develop automation and tooling to improve security testing within CI/CD pipelines, assess the effectiveness of existing controls, and help define standards for authentication, authorisation, data protection, dependency management and secure configuration. You will also investigate security findings, support remediation planning, contribute to incident response where required, and communicate risks and recommendations clearly to both technical and non-technical stakeholders. As a senior member of the team, you will mentor colleagues, promote continuous improvement and help shape engineering practices that are secure by design.

You will bring substantial experience in software engineering, application security or security assurance, with a strong understanding of modern development methodologies and cloud-based environments. We are looking for proficiency in one or more programming languages, experience with source control and automated delivery pipelines, and practical knowledge of security testing tools and techniques. Familiarity with common security frameworks, threat modelling approaches, vulnerability management and relevant data protection principles is desirable. You should be comfortable balancing security requirements with usability, performance and delivery needs, while working independently and collaboratively in a distributed team. Excellent communication skills, sound judgement and a proactive approach to problem-solving are essential.

We are seeking a Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role responsible for providing trusted advice on cyber risk, regulatory obligations and the effectiveness of security controls. You will work closely with technology, risk, compliance, audit and operational teams to ensure that cyber assurance is embedded into decision-making and supports the organisation’s strategic objectives.

Your responsibilities will include establishing and maintaining a robust cyber assurance framework; interpreting relevant regulatory, legislative and industry requirements; and translating these into practical control objectives, assurance plans and measurable outcomes. You will oversee control assessments, risk-based reviews, regulatory submissions and remediation activity, challenging findings where appropriate and ensuring that issues are clearly owned and tracked to completion. You will also contribute to internal and external audits, engage with regulators and senior stakeholders, and produce concise reports that communicate risk exposure, control effectiveness and areas requiring investment. A key part of the role will be influencing teams to improve security maturity and promoting a culture of continuous assurance.

You will bring substantial experience in cyber security, technology risk, regulatory assurance or a related discipline, gained within a complex or regulated organisation. Strong knowledge of recognised security and risk frameworks, regulatory expectations, governance principles and control testing methodologies is essential. Relevant professional qualifications, such as CISM, CISSP, CRISC, CISA or equivalent experience, would be advantageous. You will be an accomplished communicator, capable of explaining complex technical and regulatory matters to both specialist and non-specialist audiences. A pragmatic, analytical and collaborative approach is required, together with the confidence to provide constructive challenge, manage competing priorities and operate effectively with senior stakeholders.