Job Search

We are seeking an experienced Senior Information Security Officer to lead and strengthen information security practices across a complex organisation. This is an influential role for a security professional who can combine strategic thinking with practical delivery, helping to protect information assets, technology services and business operations against evolving threats.

You will develop, maintain and continuously improve information security policies, standards and procedures, ensuring they reflect current legislation, recognised frameworks and organisational risk appetite. Working closely with technology, risk, compliance and business teams, you will identify security risks, assess their potential impact and agree proportionate mitigation plans. You will also provide clear, evidence-based advice to senior stakeholders and support informed decision-making on security matters.

Key responsibilities will include overseeing risk assessments, security assurance activities, third-party reviews and compliance monitoring. You will contribute to incident response planning and investigations, helping to ensure that security incidents are managed effectively and lessons are captured. The role will also involve supporting vulnerability management, access control reviews, security awareness initiatives and the development of meaningful management information and reporting.

You will have substantial experience in information security, cyber risk, governance, risk and compliance, or a closely related discipline. A strong understanding of security frameworks such as ISO 27001, the NIST Cybersecurity Framework or CIS Controls is essential, together with knowledge of UK data protection and relevant regulatory requirements. Experience of working with risk registers, audit processes, supplier assurance and security incident management is highly desirable.

We are looking for an articulate and collaborative professional who can build trusted relationships at all levels, communicate complex issues clearly and influence positive change. You should be analytical, organised and comfortable managing competing priorities, while maintaining a pragmatic and commercially aware approach. Relevant professional certification, such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer or Auditor, would be advantageous.

We are seeking an experienced Lead Cloud Security Engineer to shape and deliver robust security capabilities across a modern, multi-cloud environment. This is a senior technical role with responsibility for improving cloud security architecture, strengthening engineering practices and guiding teams towards secure-by-design delivery.

You will lead the design, implementation and continuous improvement of security controls across cloud platforms, infrastructure, applications and data services. Working closely with engineering, platform, architecture, risk and compliance teams, you will identify threats, assess vulnerabilities and develop practical solutions that protect services without unnecessarily restricting innovation.

Key responsibilities will include defining cloud security patterns and standards; implementing identity and access management, encryption, network security and secrets management controls; and embedding security checks into infrastructure-as-code and CI/CD pipelines. You will oversee cloud security monitoring, logging and alerting, support incident response activities, and coordinate remediation of risks identified through assessments, testing and threat modelling.

You will also provide technical leadership to security engineers and delivery teams, reviewing designs, mentoring colleagues and promoting consistent engineering standards. The role will involve contributing to security strategy, maintaining clear technical documentation and supporting audits against relevant regulatory, governance and industry frameworks.

The successful candidate will have substantial experience in cloud security engineering, with strong knowledge of platforms such as AWS, Microsoft Azure or Google Cloud. You should be confident working with infrastructure-as-code, automation, containers, Kubernetes, networking and security tooling. Experience with cloud-native identity services, SIEM platforms, vulnerability management and DevSecOps practices is highly desirable.

We are looking for someone who combines deep technical expertise with sound judgement and effective communication. You will be able to explain complex security risks clearly, influence stakeholders at all levels and balance business needs with appropriate controls. Relevant professional certifications, such as CISSP, CCSP or a cloud security qualification, would be advantageous.

We are seeking a Security Engineer III to design, implement, and maintain robust security solutions across cloud, infrastructure, application, and enterprise environments. This role will help protect systems and data by identifying vulnerabilities, improving security controls, and supporting the development of resilient security architecture. You will work closely with engineering, operations, compliance, and product teams to embed security throughout the technology lifecycle and provide practical guidance on risk reduction.

Key responsibilities include monitoring and analysing security events, investigating incidents, and coordinating containment, remediation, and recovery activities. You will conduct vulnerability assessments, penetration testing support, configuration reviews, and threat modelling, while helping prioritise remediation based on business impact. The role will also involve developing and maintaining security standards, automated controls, detection rules, dashboards, and technical documentation. You will contribute to identity and access management, endpoint protection, network security, cloud security, encryption, secrets management, and secure software development practices. As a senior technical resource, you will mentor less experienced engineers, review designs and solutions, and communicate security risks and recommendations clearly to both technical and non-technical stakeholders.

The successful candidate will have substantial experience in security engineering, incident response, vulnerability management, or a related discipline, along with strong knowledge of security principles, threat landscapes, and defence-in-depth strategies. Experience with cloud platforms, infrastructure as code, security information and event management tools, endpoint technologies, scripting, and security automation is highly desirable. Familiarity with common frameworks and standards such as NIST, CIS Controls, ISO 27001, or similar is advantageous. You should be analytical, collaborative, and able to manage multiple priorities in a changing environment. Relevant professional certifications or equivalent practical experience are welcomed.

We are seeking an experienced Technology and Cyber Employee Platforms Risk Executive Director to lead the development and execution of risk management strategies across technology, cybersecurity, and employee-facing platforms. This senior role will provide independent challenge and expert guidance to technology and business leaders, ensuring that risks are identified, assessed, managed, and reported in line with regulatory expectations and organisational risk appetite. The successful candidate will operate across a complex, highly regulated environment and influence decisions at executive and board level.

Key responsibilities include setting the strategic direction for technology and cyber risk oversight; maintaining effective risk and control frameworks; reviewing risk assessments, control designs, and remediation plans; and monitoring emerging threats, vulnerabilities, resilience concerns, and third-party exposures. You will oversee risk reporting, ensure material issues are escalated appropriately, and provide clear analysis and recommendations to senior governance forums. The role will also support audits, regulatory reviews, incident investigations, control testing, and transformational programmes involving employee platforms, identity and access management, cloud services, data protection, and operational resilience. Success will require close collaboration with technology, cybersecurity, compliance, legal, internal audit, and business stakeholders.

Applicants should bring significant experience in technology risk, cyber risk, operational risk, internal controls, or a related discipline, ideally gained within a large, complex, or regulated organisation. A strong understanding of cybersecurity principles, technology architecture, risk governance, control frameworks, and relevant regulatory requirements is essential. You will be an influential communicator with the confidence to challenge constructively, simplify complex issues, and engage effectively with executive audiences. Strong analytical, decision-making, stakeholder management, and written communication skills are required, together with a proven ability to lead through ambiguity and deliver practical, sustainable outcomes. Professional qualifications in risk, technology, cybersecurity, audit, or information security would be advantageous.