Job Search

We are seeking an experienced Senior Manager, Business Information Security to lead the development and delivery of a robust information security programme across a complex business environment. This is a strategic leadership role, responsible for ensuring that security risks are identified, assessed and managed effectively while enabling the organisation to meet its operational and commercial objectives. You will work closely with senior stakeholders, technology teams, risk and compliance functions, and business leaders to promote secure-by-design ways of working.

Your responsibilities will include developing and maintaining information security policies, standards and procedures; overseeing business security risk assessments; and advising on appropriate controls, risk treatments and assurance activities. You will lead the monitoring and reporting of security risks, vulnerabilities, incidents and control effectiveness, providing clear insight and recommendations to senior management. The role will also support security incident response, business continuity and crisis management, ensuring that lessons learned are embedded across the organisation. You will help manage regulatory, audit and customer assurance requirements, while contributing to security awareness and training initiatives.

The successful candidate will have substantial experience in information security, cyber risk, governance, risk and compliance, or a closely related discipline, including experience leading teams or large-scale security programmes. You will have a strong understanding of recognised security frameworks and standards, such as ISO 27001, NIST or CIS, together with practical knowledge of risk management, control assurance, third-party security and incident management. Excellent communication and stakeholder management skills are essential, as is the ability to translate complex technical and regulatory matters into clear, commercially relevant advice. Professional security qualifications, such as CISSP, CISM or CRISC, would be advantageous. You will be a confident, collaborative leader who can influence at all levels and deliver meaningful improvements in a changing environment.

We are seeking an experienced Cyber Security Manager to lead and strengthen the organisation’s information security capability. This is a key role responsible for protecting business systems, data and services against evolving cyber threats while supporting secure, effective and compliant operations. You will develop and maintain the cyber security strategy, policies and standards, ensuring they remain aligned with business objectives, regulatory obligations and recognised industry frameworks.

You will manage the identification, assessment and treatment of information and cyber security risks, providing clear advice to senior stakeholders and service owners. Responsibilities will include overseeing security monitoring, vulnerability management, incident response, penetration testing, access controls, security architecture and third-party assurance. You will coordinate investigations and responses to security incidents, ensuring that lessons learned are documented and translated into practical improvements. The role will also involve maintaining risk registers, preparing management reports, supporting audits and ensuring appropriate business continuity and disaster recovery arrangements are in place.

The successful candidate will have substantial experience in a cyber security, information security or technology risk leadership role, together with a strong understanding of security governance, threat management and operational controls. Professional qualifications such as CISSP, CISM, CRISC or an equivalent certification would be advantageous. You should be confident communicating complex technical and risk matters to both technical and non-technical audiences, with the ability to influence decisions at all levels. Strong analytical, organisational and problem-solving skills are essential, as is a proactive approach to improving security culture and resilience. Experience of leading teams, managing suppliers and delivering security improvement programmes would be highly desirable.

We are seeking a Security Engineering Manager to lead application security engineering across the EMEA region. This is a hands-on leadership role responsible for building and developing a high-performing team, strengthening secure software development practices and helping engineering teams deliver resilient, secure products at scale. You will work closely with engineering, product, infrastructure, risk and compliance stakeholders to embed security throughout the software development lifecycle.

Your responsibilities will include setting the regional application security strategy, managing priorities and delivery plans, and overseeing programmes covering secure design, threat modelling, code review, vulnerability management, security testing and remediation. You will establish effective standards, guidance and metrics, while improving the adoption of security tooling and automated controls within development pipelines. The role will also involve reviewing architecture and designs, supporting incident response where application security is implicated, communicating risk to senior stakeholders and ensuring that security findings are addressed in a timely and proportionate manner. You will coach engineers and security specialists, support recruitment and performance development, and promote a culture of shared ownership for security.

The successful candidate will have substantial experience in application security, product security or software engineering, together with proven experience managing and mentoring technical teams. You should have a strong understanding of secure software development methodologies, modern application architectures, cloud environments, APIs, identity and access management, and common web and software vulnerabilities. Experience with security testing tools, DevSecOps practices, continuous integration and delivery, and vulnerability management programmes is essential. Strong communication, stakeholder management and prioritisation skills are required, as is the ability to explain complex technical risks clearly to both technical and non-technical audiences. Relevant industry certifications or demonstrable equivalent expertise would be advantageous. The role is suited to an inclusive, pragmatic leader who can balance strategic direction with practical delivery in a geographically distributed environment.

We are seeking an experienced Cyber Security Manager to lead the development, implementation and continuous improvement of cyber security practices across a complex organisation. This is a key role responsible for protecting information, systems and services from evolving threats while supporting the delivery of business objectives. You will provide clear advice to senior stakeholders, promote a strong security culture and ensure that security risks are identified, assessed and managed effectively.

Your responsibilities will include developing and maintaining cyber security policies, standards and procedures; overseeing vulnerability management, security monitoring and incident response; and coordinating investigations, containment and recovery activities when incidents occur. You will manage risk assessments, security reviews and compliance requirements, ensuring appropriate controls are implemented and regularly tested. The role will also involve working closely with technology, data protection, risk, audit and operational teams, as well as managing relationships with external suppliers and security partners. You will contribute to business continuity and disaster recovery planning, support secure project and system delivery, and provide meaningful reports, metrics and recommendations to senior management.

Applicants should have substantial experience in a cyber security management or senior information security position, with a strong understanding of governance, risk and compliance principles. You will ideally hold a relevant professional qualification, such as CISSP, CISM, CRISC or an equivalent certification, alongside practical knowledge of recognised security frameworks and data protection requirements. Experience of leading security incident response, vulnerability management, technical assurance and third-party risk assessments is essential. Strong communication, influencing and leadership skills are required, together with the ability to explain complex technical risks clearly to non-technical audiences. A proactive, analytical and collaborative approach, sound judgement and a commitment to continuous improvement will be highly valued.

We are seeking an experienced Identity Security Manager to lead the development and operation of robust identity and access management practices across a complex organisation. This role will help protect critical systems, data and services by ensuring that users, applications and privileged accounts have appropriate access throughout their lifecycle. You will provide strategic direction while remaining close enough to operational delivery to identify risks, improve controls and support effective incident response.

Key responsibilities will include overseeing identity governance, access reviews, joiner, mover and leaver processes, privileged access management, authentication and authorisation controls, and the continual improvement of identity security policies and standards. You will manage the assessment and remediation of access-related risks, monitor control effectiveness, and support audits, regulatory activity and security assurance programmes. The role will also involve working with technology, information security, risk, human resources and business teams to embed least-privilege principles and ensure that identity controls are practical, proportionate and consistently applied.

You will bring substantial experience in identity and access management, cyber security or a closely related discipline, together with a strong understanding of modern identity security principles and technologies. Experience with identity governance and administration, single sign-on, multi-factor authentication, directory services, role-based access control and privileged access solutions is highly desirable. You should be confident interpreting risk, defining appropriate controls and presenting recommendations to senior stakeholders. Strong communication, influencing and delivery skills are essential, as is the ability to manage competing priorities and lead work across multiple teams. Relevant professional qualifications in information security, risk or identity management would be advantageous.

We are seeking an experienced IT & Security Manager to lead the effective, secure and reliable operation of our technology environment. This is a hands-on role with responsibility for IT service delivery, infrastructure, information security and the continuous improvement of systems and processes. You will work closely with senior stakeholders and colleagues across the organisation to ensure technology supports operational objectives while meeting appropriate security, compliance and resilience standards.

Your responsibilities will include managing day-to-day IT operations, networks, systems, hardware, software, cloud services and third-party suppliers. You will oversee user support, access management, device provisioning, patching, backups, disaster recovery and the resolution of technical incidents. You will also develop and maintain security policies, procedures and controls; monitor risks and vulnerabilities; coordinate security testing; and respond to incidents promptly and effectively. The role will involve maintaining accurate documentation, preparing management reports, supporting audits and ensuring compliance with relevant data protection and cyber-security requirements.

Applicants should have proven experience in IT management, infrastructure administration and information security, together with a practical understanding of cyber-security frameworks, risk management and business continuity. Experience with Microsoft 365, cloud platforms, identity and access management, endpoint protection and network security would be advantageous. Relevant professional qualifications or certifications are desirable, such as those relating to IT service management, information security or cyber-security. You will be an organised and approachable professional who can communicate clearly with both technical and non-technical audiences, prioritise competing demands and manage suppliers effectively. A proactive attitude, strong problem-solving skills and a commitment to safeguarding information and delivering dependable technology services are essential.

We are seeking an experienced Technology and Cybersecurity Assurance and Risk Manager to lead the development, coordination and continuous improvement of technology assurance, cybersecurity risk management and governance activities. You will provide independent oversight and constructive challenge across technology services, projects, suppliers and business change, helping to ensure that risks are identified, assessed, managed and reported effectively.

Key responsibilities will include maintaining technology and cybersecurity risk frameworks, policies, standards and control requirements; conducting risk and control assessments; overseeing remediation plans; and preparing clear reports for senior stakeholders and relevant governance forums. You will support security assurance reviews, audit activity, regulatory assessments, third-party risk management and the testing of key controls. The role will also involve monitoring emerging threats, vulnerabilities and technology developments, translating them into meaningful business impacts, and promoting a culture of security, resilience and accountability.

You will bring substantial experience in technology risk, cybersecurity assurance, information security governance, IT controls or a closely related discipline, ideally gained within a complex or regulated environment. You should have a strong understanding of recognised security and risk frameworks, control assurance methodologies, audit principles, vulnerability management and third-party risk. Relevant professional qualifications, such as CISM, CISSP, CRISC, CISA, ISO 27001 or equivalent experience, would be advantageous. Excellent analytical, communication and influencing skills are essential, together with the ability to explain complex technical and risk matters clearly to both technical and non-technical audiences. You will be organised, pragmatic and confident in working collaboratively with senior leaders, technology teams, internal audit, compliance colleagues and external partners.

We are seeking an experienced Information Security Manager to lead the development, implementation and continuous improvement of an organisation-wide information security programme. This role will provide strategic direction and practical guidance to protect information assets, technology platforms and business operations from evolving cyber threats. You will work closely with senior stakeholders, technology teams and business leaders to promote a strong security culture and ensure that security considerations are embedded into decision-making, projects and operational processes.

Key responsibilities will include maintaining information security policies, standards and procedures; managing security risk assessments, control frameworks and treatment plans; and overseeing compliance with relevant legislation, regulatory requirements and recognised industry standards. You will coordinate vulnerability management, incident response, security monitoring and investigations, ensuring that issues are prioritised, contained and resolved effectively. The role will also support business continuity and disaster recovery planning, supplier and third-party risk reviews, access governance, data protection activities and regular security testing. You will prepare clear reports and metrics for leadership, track remediation activity and provide assurance on the effectiveness of security controls.

The successful candidate will have substantial experience in information security, cyber risk or a related discipline, preferably gained in a complex or highly regulated environment. You should have strong knowledge of security frameworks and practices such as ISO 27001, NIST, CIS Controls or equivalent, together with experience managing audits, incidents, risk registers and improvement programmes. Relevant professional qualifications, such as CISSP, CISM, CRISC or equivalent, are desirable. Excellent communication and influencing skills are essential, as is the ability to translate technical risks into clear business impacts and practical actions. You will be organised, analytical and confident working independently while building effective relationships across all levels of the organisation.

We are seeking an Engineering Manager, Security to lead a talented team responsible for protecting products, platforms, systems, and customer data. In this role, you will set the technical direction for security engineering, translate organisational risk into practical engineering priorities, and ensure that security is embedded throughout the software development and operational lifecycle. You will partner closely with engineering, infrastructure, product, privacy, compliance, and incident response teams to build secure, resilient, and scalable solutions.

Your responsibilities will include managing, mentoring, and developing security engineers; establishing clear goals, delivery plans, and performance expectations; and supporting a culture of collaboration, accountability, and continuous learning. You will oversee initiatives such as threat modelling, vulnerability management, application and cloud security, identity and access management, security automation, detection improvements, and incident readiness. You will review architectural decisions, help prioritise remediation work, define meaningful security metrics, and communicate technical risks and progress to both technical and non-technical stakeholders. You will also contribute to hiring, workforce planning, engineering standards, and the development of repeatable processes that improve security without unnecessarily slowing delivery.

The successful candidate will have experience leading or managing security engineering teams, with a strong understanding of modern application, infrastructure, cloud, and software development practices. You should be comfortable balancing strategic planning with hands-on technical engagement and have a track record of delivering security improvements in complex environments. Strong communication, influencing, and stakeholder management skills are essential, as is the ability to explain risk clearly and make pragmatic decisions. Experience with secure development lifecycles, security tooling, automation, and relevant industry frameworks or compliance requirements is desirable. We welcome applicants who bring curiosity, sound judgement, and an inclusive leadership style, along with a commitment to helping teams build secure products by design.

We are seeking a Software Development Manager – Application Security to lead a team responsible for building secure, scalable, and reliable software solutions. In this role, you will combine people leadership, technical direction, and security expertise to strengthen application security throughout the software development lifecycle. You will work closely with engineering, product, infrastructure, and risk teams to ensure security is embedded into design, development, testing, and deployment processes.

Your responsibilities will include managing, mentoring, and developing software engineers and security-focused specialists; setting technical priorities and delivery plans; and establishing effective engineering standards and practices. You will guide the design and implementation of application security capabilities, including secure coding frameworks, vulnerability management, threat modelling, security testing, identity and access controls, and automated security checks within CI/CD pipelines. You will also oversee the investigation and remediation of security vulnerabilities, support incident response activities, and communicate risks, progress, and recommendations to technical and senior stakeholders. A key part of the role will be promoting a practical security culture while enabling development teams to deliver efficiently.

The successful candidate will have significant experience leading software engineering or application security teams, along with a strong understanding of modern application architectures, cloud environments, APIs, databases, and DevSecOps practices. You should be confident working with security testing tools, code analysis, dependency management, and industry-standard secure development frameworks. Experience with relevant regulations, security standards, and risk management approaches is desirable. Excellent communication, coaching, prioritisation, and stakeholder management skills are essential, as is the ability to translate complex security issues into clear, actionable guidance. Relevant qualifications in computer science, software engineering, cybersecurity, or a related discipline are advantageous, as are professional certifications in application security or cloud security.