Job Search

We are seeking a Security Analyst – Emerging Technology to support the protection of critical services, data and platforms across a complex financial services environment. This role will focus on assessing new and evolving technologies, identifying security risks and helping the organisation adopt innovation safely and responsibly. You will work closely with technology, architecture, risk, compliance and operational teams to provide practical, proportionate security advice throughout the technology lifecycle.

Your responsibilities will include conducting security assessments of emerging technologies, cloud services, applications and third-party solutions; reviewing designs and implementation plans; and identifying vulnerabilities, control gaps and potential business impacts. You will contribute to threat modelling, risk assessments, security reviews and assurance activities, producing clear reports and recommendations for both technical and non-technical stakeholders. The role will also involve monitoring developments in areas such as artificial intelligence, automation, cloud computing, application programming interfaces and data platforms, assessing their implications for confidentiality, integrity and availability. You will help develop security standards, guidance and reusable assessment methodologies, while supporting the ongoing improvement of governance and risk management processes.

The successful candidate will have experience in information security, technology risk, cyber assurance or a related discipline, ideally within financial services or another highly regulated environment. You should have a sound understanding of security principles, risk management frameworks, cloud security, identity and access management, data protection and secure technology design. Experience evaluating emerging or unfamiliar technologies, communicating risk to senior stakeholders and translating technical findings into practical actions is highly desirable. Relevant professional qualifications, such as CISSP, CISM, CRISC, CCSP or equivalent experience, would be advantageous. We are looking for someone curious, analytical and collaborative, with strong written and verbal communication skills and the confidence to challenge constructively while enabling innovation.

We are seeking a Cloud Security Consultant to help organisations design, implement and improve secure cloud environments. Working with technical and business stakeholders, you will assess cloud architectures, identify security risks and recommend practical, proportionate controls. You will contribute to security strategies across public, private and hybrid cloud platforms, supporting projects from early design and migration through to operational improvement.

Your responsibilities will include carrying out cloud security assessments, threat modelling and risk reviews; developing and maintaining security architectures, policies and standards; and advising on identity and access management, network security, data protection, encryption, logging, monitoring and vulnerability management. You will support the secure configuration of cloud services, review infrastructure-as-code and deployment pipelines, and help teams embed security within DevSecOps practices. You may also contribute to incident response, audit activity, compliance reviews and the production of clear technical and executive-level reports.

Applicants should have professional experience in cloud security, information security, security architecture or a related consultancy role, together with hands-on knowledge of at least one major cloud platform such as AWS, Microsoft Azure or Google Cloud. A good understanding of recognised security frameworks and standards, including ISO 27001, NIST or CIS Controls, is expected. Experience with cloud-native security tools, SIEM platforms, automation, containers or Kubernetes would be advantageous. Relevant certifications, such as CCSP, CISSP, cloud security certification or equivalent, are desirable. You will need strong analytical and communication skills, confidence engaging with stakeholders at all levels, and the ability to explain complex risks in straightforward terms. A structured, collaborative approach and a commitment to continuous learning are essential.

We are seeking a Business Information Security Officer to help strengthen information security across a complex and fast-moving organisation. Working closely with business leaders, technology teams and risk specialists, you will translate security requirements into practical, proportionate controls that support operational objectives. This is an influential role for someone who can build trusted relationships, communicate clearly with a wide range of stakeholders and promote a strong, risk-aware culture.

Your responsibilities will include advising teams on information security risks, policies and standards; supporting security and privacy impact assessments; monitoring compliance with relevant legislation, regulatory expectations and internal controls; and helping to maintain accurate risk registers, assurance records and management reports. You will contribute to security awareness and training initiatives, support the identification and treatment of vulnerabilities, and provide guidance on secure project delivery, supplier assurance, access management and the handling of sensitive information. You will also assist with incident response, investigations and lessons-learned activity, escalating material risks appropriately and tracking agreed remediation actions through to completion.

You will have experience in an information security, cyber risk, governance, risk and compliance, or related business-facing role. A good understanding of recognised security frameworks and standards, such as ISO 27001, NIST or CIS, is desirable, together with awareness of data protection principles and common cyber threats. Professional qualifications in information security, audit, risk or privacy would be advantageous, although relevant practical experience will be equally valued. You should be analytical, organised and confident in challenging constructively, with the ability to explain technical issues in clear business language. The successful candidate will demonstrate sound judgement, attention to detail and a collaborative approach, while being comfortable managing competing priorities and working with colleagues at all levels.

We are seeking an Identity Analyst to support the secure, efficient management of digital identities and access across a complex technology environment. In this role, you will help ensure that employees, contractors, partners and service accounts have appropriate access to the systems and information they need, while maintaining strong security and compliance standards. You will contribute to the operation and continuous improvement of identity and access management processes, working closely with technology, security, human resources and business teams.

Your responsibilities will include administering user accounts, groups, roles and permissions; processing joiner, mover and leaver requests; investigating access issues; and supporting regular access reviews and recertification activities. You will monitor identity-related workflows, identify control gaps, maintain accurate records and assist with the resolution of audit findings. The role will also involve supporting single sign-on, multi-factor authentication, privileged access and identity governance solutions, as well as helping to document procedures and improve the automation of repetitive tasks. You will analyse incidents and requests, escalate risks where appropriate and contribute to the development of clear, user-focused guidance.

The successful candidate will have experience in identity and access management, user administration, service operations or a related technology discipline. A sound understanding of access control principles, least-privilege practices, authentication methods and security policies is essential. Familiarity with identity platforms, directory services, ticketing systems and reporting tools would be advantageous, along with experience using spreadsheets or scripting to analyse data and streamline processes. You should be organised, analytical and attentive to detail, with the ability to manage competing priorities and communicate effectively with both technical and non-technical colleagues. Relevant industry certifications or practical experience in information security, compliance or cloud identity services would be beneficial.

We are seeking an experienced Lead SOC Manager to oversee the effective operation and continuous development of a Security Operations Centre. This role will provide strategic and operational leadership across security monitoring, threat detection, incident response, vulnerability management and cyber threat intelligence. You will lead a team of security analysts and engineers, ensuring that the SOC delivers timely, accurate and actionable outcomes while maintaining a strong service-oriented approach to internal stakeholders and customers.

Key responsibilities will include setting SOC objectives, developing operating procedures and establishing measurable performance standards. You will manage the monitoring and response lifecycle, ensuring alerts are investigated, incidents are contained and root-cause analysis is completed. The role will oversee the use and optimisation of SIEM, SOAR, EDR and other security technologies, working with technical teams to improve detection coverage, automation and response capability. You will also coordinate major incident management, lead post-incident reviews and provide clear reporting on risk, trends, service performance and emerging threats to senior leadership.

The successful candidate will have substantial experience managing a SOC or comparable cyber security function, together with a strong understanding of security operations, incident response frameworks, threat intelligence and security architecture. Experience leading, coaching and developing technical teams is essential, as is the ability to manage suppliers, budgets, projects and competing priorities. Relevant professional certifications such as CISSP, CISM, GIAC or equivalent are desirable. You should be an excellent communicator who can translate complex technical issues into clear business impacts, make sound decisions under pressure and build effective relationships across technical and non-technical teams. A proactive approach to continuous improvement, strong analytical skills and a commitment to maintaining high standards of confidentiality and integrity are essential.

We are seeking a Senior Threat Intelligence Analyst to lead the collection, analysis and dissemination of actionable intelligence relating to cyber threats, adversaries and emerging risks. You will monitor global threat activity, assess indicators of compromise, and develop timely assessments that support security operations, incident response, vulnerability management and wider business decision-making. The role will involve turning complex technical and geopolitical information into clear, concise intelligence for both technical and senior non-technical audiences.

Responsibilities will include maintaining threat intelligence requirements, researching threat actors, campaigns, malware families and attack techniques, and analysing data from open-source, commercial, industry and internal sources. You will produce intelligence reports, briefings, alerts, trend analyses and executive-level updates, while contributing to proactive threat hunting and incident investigations. You will also help improve intelligence processes, develop analytical frameworks, validate intelligence quality and identify opportunities to automate collection and enrichment. Collaboration with security engineering, detection and response, risk, fraud, privacy and other stakeholders will be central to the role, as will participation in relevant information-sharing communities.

The successful candidate will have substantial experience in cyber threat intelligence, security analysis, incident response or a related discipline, with a strong understanding of the threat landscape, adversary behaviours and frameworks such as MITRE ATT&CK or the Cyber Kill Chain. You should be confident analysing technical data, including malware reports, network activity, vulnerability information and indicators of compromise, and be able to communicate findings effectively in written and verbal formats. Experience with intelligence platforms, SIEM tools, scripting or data analysis techniques is desirable. We are looking for an inquisitive, methodical and collaborative professional who can work independently, prioritise competing requirements and provide sound judgement in a fast-changing environment. Relevant professional certifications or equivalent practical experience would be advantageous.

We are seeking a Senior Technical Security Architect to define and strengthen secure technology architectures across a complex, evolving environment. In this influential role, you will translate business and technology requirements into practical security solutions, ensuring that systems, platforms, applications, networks and cloud services are designed and operated in line with recognised security principles. You will work closely with engineering, infrastructure, software development, operations, risk and compliance teams, providing clear guidance throughout the technology lifecycle.

Your responsibilities will include developing and maintaining security architecture standards, patterns and reference designs; reviewing proposed solutions and identifying security risks, control gaps and opportunities for improvement; and advising on identity and access management, network security, cloud security, encryption, data protection, application security and secure integration. You will contribute to threat modelling, risk assessments, architectural reviews and security roadmaps, while helping teams embed secure-by-design practices. The role will also involve supporting incident investigations, resilience planning, vulnerability management and the continuous improvement of security controls. You will communicate complex technical matters clearly to both technical and non-technical stakeholders and may provide leadership and mentoring to security architects and engineering teams.

To succeed, you will have substantial experience in technical security architecture, enterprise architecture or a closely related discipline, with a strong understanding of modern infrastructure, cloud platforms, networks, operating systems, applications and security technologies. Experience designing solutions within regulated or high-risk environments is highly desirable. You should be confident assessing competing risks, making pragmatic recommendations and influencing decisions at senior level. Familiarity with security frameworks and standards such as ISO 27001, NIST, CIS Controls, SABSA or equivalent would be advantageous, as would relevant professional certifications. Excellent analytical, communication and stakeholder-management skills are essential, together with a collaborative approach and the ability to balance robust security with usability, delivery needs and business value.

We are seeking a Cyber Security Engineer to help protect critical systems, applications, networks and data against evolving cyber threats. In this role, you will support the design, implementation and continuous improvement of security controls across cloud and on-premises environments. You will work closely with infrastructure, software development, IT operations and risk teams to embed secure practices throughout the technology lifecycle.

Your responsibilities will include monitoring and investigating security events, responding to incidents, conducting vulnerability assessments and supporting remediation activities. You will help manage security tools such as SIEM, endpoint detection and response, identity and access management, vulnerability management and network security platforms. The role will also involve developing technical documentation, contributing to security standards and procedures, assisting with penetration testing, and supporting audit and compliance requirements. You will be expected to assess emerging threats, recommend practical improvements and help ensure that security risks are identified and addressed promptly.

The successful candidate will have professional experience in cyber security engineering, security operations or a closely related technical discipline. You should have a sound understanding of network security, operating systems, cloud technologies, encryption, authentication and common attack techniques. Experience with security monitoring, incident response, scripting or automation, and platforms such as Microsoft Sentinel, Splunk, Defender, AWS or Azure would be advantageous. Relevant certifications, including Security+, CySA+, CISSP, CISM or cloud security qualifications, are desirable but not essential. Strong analytical and problem-solving skills, clear communication, attention to detail and the ability to collaborate effectively are essential. You will need to manage competing priorities, explain technical risks to varied audiences and maintain a proactive approach to improving the organisation’s overall security posture.

We are seeking a Senior Identity Analyst to support the design, delivery and continuous improvement of identity and access management services across a complex technology environment. The successful candidate will play a key role in protecting systems, applications and data by ensuring that access is granted appropriately, reviewed regularly and removed promptly when no longer required. This is an opportunity to contribute to a mature security function while helping shape effective, user-focused identity processes.

Responsibilities will include analysing and resolving complex identity and access issues, supporting joiner, mover and leaver processes, and administering role-based access controls, privileged access and authentication services. You will investigate access anomalies, contribute to incident and problem management, and assist with access certifications, segregation-of-duties reviews and audit activities. The role will also involve developing and maintaining procedures, controls and knowledge articles, identifying opportunities for automation, and producing clear management information on access risks, service performance and compliance. You will work closely with information security, infrastructure, application, risk and business teams to deliver secure and practical solutions.

Applicants should have substantial experience in identity and access management, security operations or a closely related discipline, together with a strong understanding of access governance, authentication, authorisation and least-privilege principles. Experience with identity platforms, directory services, single sign-on, multi-factor authentication, privileged access management and automated provisioning is highly desirable. Familiarity with service management practices, security frameworks, audit requirements and scripting or workflow automation would be advantageous. You will need excellent analytical and problem-solving skills, strong attention to detail and the ability to explain technical issues clearly to both technical and non-technical audiences. A proactive approach, sound judgement and the ability to manage competing priorities are essential.

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will provide strategic direction while working closely with technology, legal, privacy, internal audit and business teams to ensure security controls support operational objectives and regulatory obligations. You will help promote a strong culture of security, accountability and continuous improvement across the organisation.

Key responsibilities will include developing and maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; maintaining risk registers and overseeing mitigation plans; and coordinating internal and external audits, assessments and certifications. You will monitor regulatory and industry developments, assess their impact, and support the implementation of appropriate controls. The role will also involve preparing governance reports, dashboards and management information, facilitating security and risk committees, supporting third-party risk reviews, and coordinating responses to customer, supplier and regulatory due diligence requests. You will contribute to incident management, business continuity and resilience activities where governance or compliance expertise is required.

The successful candidate will have substantial experience in information security governance, risk and compliance, ideally within a regulated, technology-led or complex enterprise environment. You will have strong knowledge of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent, together with an understanding of data protection, operational resilience and third-party risk requirements. Relevant professional certifications, such as CISM, CISSP, CRISC, CISA or ISO 27001 Lead Implementer/Auditor, are desirable. Excellent communication, influencing and analytical skills are essential, along with the ability to translate technical risks into clear business implications and practical actions. You will be organised, commercially aware and confident engaging with stakeholders at all levels while managing multiple priorities in a changing environment.