Job Search

An experienced IT Security Auditor is sought to assess, strengthen and improve information security controls across a complex technology environment. This role will provide independent assurance that systems, processes and controls are designed and operating effectively, while helping to identify opportunities to reduce cyber risk and support regulatory compliance.

Key responsibilities will include planning and delivering risk-based IT and information security audits, reviewing access controls, infrastructure, cloud services, applications, networks, data protection and third-party arrangements. You will conduct interviews, examine documentation, analyse technical evidence and test controls against recognised frameworks and applicable legislation. The role will also involve evaluating incident management, vulnerability management, change control, business continuity and disaster recovery arrangements.

You will prepare clear, well-evidenced audit reports, highlighting control weaknesses, root causes, risk implications and practical recommendations. Working with control owners and senior stakeholders, you will agree remediation plans, monitor progress and validate completed actions. You may also contribute to risk assessments, policy reviews, security projects and continuous improvement initiatives, providing constructive challenge while maintaining effective working relationships across technical and non-technical teams.

Applicants should have proven experience in IT audit, information security, cyber risk or a closely related discipline, together with a sound understanding of security principles, governance and control frameworks. Familiarity with standards such as ISO 27001, COBIT, NIST or CIS Controls is desirable, as is experience auditing cloud environments and suppliers. A relevant professional qualification, such as CISA, CISSP, CISM or equivalent experience, would be advantageous.

You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to communicate findings clearly at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining independence, professional judgement and confidentiality.

An experienced Identity & Access Management (IAM) Manager is sought to lead the development, operation and continual improvement of identity and access services across a complex technology environment. This is a key role responsible for ensuring that colleagues, customers, applications and third parties have secure, appropriate and timely access to the resources they need.

You will own the IAM roadmap and establish effective governance, policies and standards covering identity lifecycle management, authentication, authorisation, privileged access and access reviews. Working closely with cyber security, infrastructure, applications, risk and business teams, you will translate organisational requirements into practical, scalable solutions that support security, compliance and operational efficiency.

Key responsibilities will include managing joiner, mover and leaver processes; overseeing role-based access control and segregation of duties; improving single sign-on and multi-factor authentication adoption; and managing privileged access controls. You will lead regular access certifications, investigate control weaknesses, support audit activity and ensure that risks and incidents are identified, documented and resolved appropriately. The role will also involve supplier management, budget oversight, service reporting and the leadership or coordination of IAM specialists and delivery partners.

The successful candidate will have substantial experience managing IAM services within a medium-sized or enterprise environment, together with a strong understanding of identity governance, directory services, federation protocols and access management technologies. Experience with cloud platforms, automation, IT service management and security frameworks will be highly valued. You should be confident working with tools such as Active Directory or equivalent directory platforms, single sign-on solutions, privileged access management systems and identity governance products.

You will combine strong technical knowledge with excellent stakeholder and communication skills. The ability to influence senior colleagues, manage competing priorities and explain complex security matters clearly is essential. Experience of delivering IAM transformation, developing policies and controls, and working within regulated or highly controlled environments would be advantageous. Relevant professional qualifications in information security, risk, IT service management or identity management are desirable.

We are seeking an experienced Identity & Access (IAM) Specialist to support the secure and efficient management of digital identities, access rights and authentication services across a complex technology environment. This is an excellent opportunity for a security-focused professional who can combine technical expertise with strong communication and stakeholder management skills.

You will be responsible for administering and improving IAM platforms, ensuring that users have appropriate access to systems and data in line with business requirements, security policies and regulatory obligations. Key duties will include managing joiner, mover and leaver processes; maintaining role-based access controls; reviewing privileged accounts; supporting single sign-on and multi-factor authentication; and investigating access-related incidents.

The role will involve working closely with information security, infrastructure, applications, service management and business teams to identify risks, resolve issues and deliver effective access solutions. You will contribute to access recertification campaigns, audit activities, control testing and the development of IAM standards, procedures and documentation. You will also help identify opportunities to automate manual processes and improve the overall user experience without compromising security.

Applicants should have proven experience in an IAM, cyber security or systems administration role, with a good understanding of identity lifecycle management, authentication methods, authorisation models and least-privilege principles. Familiarity with directory services, privileged access management, single sign-on, multi-factor authentication and cloud identity platforms is highly desirable. Experience using service management tools, scripting or workflow automation would also be beneficial.

You will be analytical, organised and comfortable managing competing priorities in a changing environment. The ability to explain technical matters clearly to both technical and non-technical audiences is essential, as is a proactive approach to problem-solving and continuous improvement. Relevant professional qualifications or certifications in cyber security, IAM or an associated discipline would be advantageous.

We are seeking a Lead Edge Platform Security Engineer to provide technical leadership for the security of internet-facing platforms, edge services and distributed infrastructure. You will help protect critical systems that operate at scale, combining strategic thinking with hands-on engineering to strengthen resilience, reduce risk and enable secure delivery.

In this role, you will define and implement security standards for edge computing, content delivery, networking, application gateways, API platforms and cloud-based services. You will work closely with platform, infrastructure, software engineering and operations teams to embed security throughout the design, development and deployment lifecycle.

Your responsibilities will include assessing architectural designs, identifying vulnerabilities and advising on appropriate controls across networks, workloads, identity, encryption, traffic management and service-to-service communication. You will lead threat modelling and security reviews, support incident response, improve detection and monitoring capabilities, and ensure that security risks are clearly documented, prioritised and managed.

You will also contribute to security automation, policy-as-code and continuous compliance initiatives, helping teams replace manual processes with reliable, scalable controls. The role involves influencing technical direction, mentoring engineers, establishing good practice and representing security in architecture and engineering forums. You will be expected to stay informed about emerging threats, industry developments and changes in relevant regulatory requirements.

Applicants should have substantial experience in platform, infrastructure, cloud or application security, including a strong understanding of edge technologies, distributed systems and modern networking. Experience with public cloud platforms, infrastructure as code, CI/CD pipelines, containerised environments, Kubernetes, identity and access management, and security tooling is highly desirable. You should be comfortable reviewing code and architecture, investigating complex security issues and communicating technical risks to both specialist and non-specialist audiences.

We are looking for a collaborative and pragmatic security professional who can balance robust protection with operational performance and engineering efficiency. A proactive approach, strong problem-solving skills and the ability to lead through influence are essential. Relevant professional certifications or equivalent practical experience would be advantageous.

An experienced IT Security Engineer is sought to support the delivery of secure, reliable Microsoft 365 and endpoint environments for a varied client base. This is an excellent opportunity for a technically capable professional who enjoys working in a managed services environment, resolving complex security challenges and helping organisations strengthen their cyber resilience.

In this role, you will design, implement and maintain security controls across Microsoft 365, Entra ID, Intune and endpoint platforms. Responsibilities will include managing identity and access, conditional access policies, multi-factor authentication, device compliance, endpoint protection, mobile device management and security baselines. You will investigate alerts and incidents, carry out threat assessments, support vulnerability remediation and contribute to the development of secure, repeatable solutions.

You will work closely with internal teams and customers to understand requirements, provide technical guidance and deliver projects from planning through to completion. The role will also involve producing clear technical documentation, maintaining accurate records, contributing to service improvement and supporting escalated incidents. You will be expected to explain technical risks and recommendations clearly to both technical and non-technical stakeholders.

The successful candidate will have strong practical experience of Microsoft 365 security and endpoint management, including Intune, Entra ID, Defender for Endpoint and Microsoft 365 Defender. Knowledge of Windows security, Active Directory, PowerShell, security monitoring and common cyber security frameworks is highly desirable. Experience within a managed service provider or multi-client environment would be advantageous, as would relevant Microsoft or cyber security certifications.

You should be analytical, organised and confident managing competing priorities in a customer-focused environment. Strong communication skills, a methodical approach to troubleshooting and a commitment to continual learning are essential. In return, you can expect varied technical work, opportunities to develop your expertise, support for professional certifications and the chance to make a direct contribution to the security of multiple organisations.

We are seeking a Cyber Threat & Vulnerability Analyst to help identify, assess and reduce cyber security risks across a complex technology environment. This is an opportunity to contribute to the protection of critical systems, applications and data by turning threat intelligence and vulnerability information into practical, prioritised action.

You will monitor and analyse emerging cyber threats, vulnerabilities and attack techniques, assessing their potential impact on the organisation’s infrastructure and services. Working with security, infrastructure, application and risk teams, you will coordinate vulnerability identification, validation, remediation and reporting. You will also support the investigation of suspicious activity and contribute to the development of effective threat detection and response procedures.

Key responsibilities will include reviewing vulnerability scans and penetration testing results, validating findings, prioritising remediation according to risk, and tracking actions through to completion. You will produce clear reports and dashboards for technical and non-technical stakeholders, maintain accurate risk records, and provide advice on appropriate controls and mitigation measures. The role will also involve threat hunting, analysing indicators of compromise, supporting incident response and helping to improve security monitoring and operational processes.

We are looking for experience in cyber security analysis, vulnerability management, threat intelligence or a related discipline. You should have a sound understanding of common vulnerabilities, attack methodologies, security controls and risk assessment principles, together with practical knowledge of networks, operating systems, cloud environments and security technologies. Familiarity with tools such as vulnerability scanners, SIEM platforms, endpoint detection solutions and threat intelligence services would be advantageous.

Strong analytical, communication and organisational skills are essential, as is the ability to explain technical risks clearly and work effectively with colleagues at all levels. Relevant professional qualifications or certifications in cyber security, vulnerability management or incident response are desirable, although equivalent practical experience will be considered. In return, you will have the opportunity to develop your expertise while making a visible contribution to strengthening cyber resilience.

We are seeking a motivated Junior Security Analyst to join a collaborative cyber security team in Basingstoke. This is an excellent opportunity for someone at the start of their cyber security career to develop practical experience while supporting the protection of systems, networks and data. You will work alongside experienced analysts and technical teams, gaining exposure to security monitoring, incident response and a range of security technologies.

Your responsibilities will include monitoring security alerts and logs, investigating unusual activity, escalating potential incidents and maintaining accurate records of actions taken. You will assist with triaging phishing reports, malware alerts and other security events, helping to determine their impact and urgency. The role will also involve supporting vulnerability management activities, reviewing security dashboards, contributing to threat intelligence research and helping maintain clear security documentation and procedures. You may also assist with access reviews, audit requests, security awareness activities and the preparation of regular reports.

Applicants should have a genuine interest in cyber security and a basic understanding of networking, operating systems, common attack techniques and information security principles. Familiarity with security monitoring tools, SIEM platforms, ticketing systems or vulnerability scanners would be beneficial, although full training will be provided. Relevant qualifications or certifications, such as CompTIA Security+, Microsoft security certifications or a degree in cyber security, computing or a related subject, are desirable but not essential. We are looking for someone analytical, organised and eager to learn, with strong attention to detail and the confidence to communicate clearly with both technical and non-technical colleagues. The successful candidate must be willing to participate in structured learning and follow established security processes carefully.

We are seeking an experienced IT Security Engineer to help protect critical systems, applications, networks and data against evolving cyber threats. In this role, you will support the design, implementation and continuous improvement of security controls across a complex technology environment. You will work closely with infrastructure, cloud, software development and operations teams to identify risks, strengthen resilience and promote secure working practices.

Your responsibilities will include monitoring security events, investigating alerts and incidents, and coordinating appropriate containment and recovery activities. You will administer and improve security technologies such as endpoint protection, vulnerability management, firewalls, identity and access management, security information and event management, and cloud security platforms. You will conduct vulnerability assessments, support penetration testing activities, track remediation plans and provide clear reporting on security risks and control effectiveness. The role will also involve contributing to security policies, standards, procedures and technical documentation, as well as supporting audits and regulatory requirements.

Applicants should have proven experience in an IT security, infrastructure security or similar engineering role, with a strong understanding of network protocols, operating systems, authentication methods, encryption and common cyber-attack techniques. Practical knowledge of cloud environments, incident response, vulnerability management and security monitoring is highly desirable. Relevant professional certifications or demonstrable equivalent experience will be valued. You should be analytical, methodical and comfortable explaining technical issues to both specialist and non-specialist audiences. The successful candidate will be proactive, collaborative and committed to continuous learning in a rapidly changing threat landscape.

We are seeking an Operational Security Analyst to support the protection, resilience and continuous improvement of information systems and business operations. The successful candidate will monitor security events, assess potential threats and help maintain effective controls across the organisation’s technology environment. This role will work closely with infrastructure, application, risk and compliance teams to identify vulnerabilities, respond to incidents and promote secure operational practices.

Key responsibilities include monitoring security alerts and logs, investigating suspicious activity, documenting findings and escalating incidents in line with established procedures. You will assist with incident response, threat analysis, vulnerability management, access reviews and the maintenance of security policies, standards and operating procedures. The role will also involve supporting security assessments, coordinating remediation activities, preparing management reports and contributing to audit and regulatory requirements. You may be required to help develop operational metrics, improve monitoring capabilities and participate in exercises designed to test business continuity and incident response arrangements.

Applicants should have experience in a security operations, IT risk, infrastructure or related analytical role, with a sound understanding of security principles, common attack techniques and incident management processes. Familiarity with SIEM platforms, endpoint protection, vulnerability scanners, identity and access management, network technologies and cloud environments is desirable. Strong analytical and problem-solving skills are essential, along with the ability to interpret technical information, prioritise competing tasks and communicate clearly with both technical and non-technical stakeholders. Relevant industry certifications or formal qualifications in cyber security, information technology or risk management would be advantageous. The role requires integrity, attention to detail, a proactive approach and a commitment to continuous learning in a changing threat environment.

We are seeking an experienced Business Information Security Officer & Cybersecurity Programme Lead to strengthen information security governance, manage cyber risk, and lead the delivery of strategic security initiatives. This role will act as a trusted adviser to business and technology stakeholders, translating regulatory obligations and security requirements into practical, risk-based solutions. You will help promote a strong security culture while ensuring that information assets, systems, and services are appropriately protected.

Key responsibilities include maintaining and enhancing information security policies, standards, procedures, and control frameworks; coordinating risk assessments, control reviews, and remediation plans; and providing clear reporting on security risks, compliance, incidents, and programme progress. You will lead a portfolio of cybersecurity projects from planning through implementation, managing scope, dependencies, budgets, risks, and benefits. The role will also support security incident management, business continuity, third-party assurance, audit activity, vulnerability management, and the continuous improvement of security controls. You will work closely with architecture, infrastructure, applications, data protection, legal, procurement, and operational teams, as well as external partners where appropriate.

The successful candidate will have substantial experience in information security, cyber risk, governance, or security programme delivery, ideally within a complex or regulated environment. You should be confident interpreting frameworks and regulations such as ISO 27001, NIST, CIS, or applicable data protection requirements, and experienced in presenting security matters to senior stakeholders. Strong programme and project management skills, excellent written and verbal communication, and the ability to influence without direct authority are essential. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Auditor, or recognised project management certification, would be advantageous. A pragmatic, collaborative approach and a commitment to continuous improvement are vital for success.