Job Search

We are seeking an experienced Project Security Manager to lead security planning and delivery across complex projects from initiation through completion. The role will be responsible for establishing effective security strategies, ensuring that appropriate controls are embedded into project plans, and supporting teams to manage risks in line with applicable policies, standards, and regulatory requirements. You will work closely with project managers, technical specialists, suppliers, and senior stakeholders to ensure security is considered throughout the project lifecycle.

Key responsibilities will include conducting security risk assessments, defining security requirements, reviewing solution designs, and overseeing the implementation of proportionate physical, personnel, information, and cyber security measures. You will maintain security documentation, risk registers, assurance plans, and governance reports, while providing clear advice on emerging threats, vulnerabilities, and compliance obligations. The role will also involve coordinating security testing and assurance activities, reviewing third-party and supply-chain risks, supporting incident response where required, and tracking remediation actions through to completion. You will facilitate security reviews and decision-making forums, challenge project assumptions constructively, and provide concise updates to governance boards and senior leadership.

Applicants should have proven experience managing security within large, complex, or highly regulated projects, along with a strong understanding of security risk management, assurance, governance, and control frameworks. Experience across cyber security, information security, operational resilience, or physical security would be valuable. You should be confident interpreting technical and business requirements, influencing stakeholders at all levels, and translating complex security matters into practical recommendations. Excellent communication, organisation, analytical, and problem-solving skills are essential, as is the ability to manage competing priorities and work effectively in a changing environment. Relevant professional qualifications or certifications in security, risk, project management, or a related discipline are desirable.

We are seeking a Product Security Engineer to help build secure, resilient products throughout their lifecycle. In this role, you will work closely with software engineering, infrastructure, product management, and quality teams to identify and address security risks from design through deployment and ongoing maintenance. You will contribute to security architecture reviews, threat modelling, secure design guidance, and the development of practical controls that support both customer trust and delivery goals.

Your responsibilities will include reviewing code and technical designs, identifying vulnerabilities, supporting application and API security testing, and helping engineering teams remediate findings effectively. You will establish and improve secure development practices, contribute to security standards and documentation, and assist with integrating security checks into CI/CD pipelines. You may also investigate product security incidents, support vulnerability disclosure and remediation processes, track risks to completion, and provide clear advice to technical and non-technical stakeholders. The role will involve staying current with emerging threats, attack techniques, security tooling, and relevant industry standards.

The successful candidate will have professional experience in product, application, or software security, with a solid understanding of secure software development and common web, cloud, API, and infrastructure vulnerabilities. Experience with threat modelling, code review, penetration testing, vulnerability management, and security automation is desirable. Familiarity with standards and frameworks such as OWASP, NIST, or ISO 27001 would be beneficial. You should be comfortable working collaboratively in a fast-paced environment, communicating complex risks clearly, and balancing security requirements with usability and delivery priorities. Practical programming or scripting skills, curiosity, sound judgement, and a proactive approach to problem-solving are essential.