Job Search

An opportunity is available for a Cyber Security Information Assurance Lead (Pre Ops) to support the secure delivery and operational readiness of complex technology, infrastructure and business change programmes. The successful candidate will provide informed security and information assurance leadership from the pre-operational phase through to service acceptance, ensuring that risks are identified, assessed and managed before systems are introduced into live environments.

Responsibilities will include developing and maintaining security assurance plans, conducting risk assessments and supporting the production of security cases, accreditation evidence and risk treatment plans. You will work closely with delivery teams, architects, service owners, suppliers and operational stakeholders to ensure that security requirements are understood and embedded throughout the project lifecycle. The role will involve reviewing designs and technical documentation, assessing compliance with relevant policies, standards and regulatory obligations, and providing clear recommendations to support informed decision-making. You will also coordinate assurance activities, track remediation actions, challenge incomplete or ineffective controls, and contribute to go-live readiness reviews and formal acceptance decisions.

Applicants should have proven experience in cyber security, information assurance, security governance or risk management, ideally within complex or highly regulated environments. You will be confident interpreting security frameworks and standards, translating technical risks for non-technical audiences, and producing concise, evidence-based reports for senior stakeholders. Strong knowledge of security controls, risk assessment methodologies, system development lifecycles and operational readiness processes is required. Relevant professional qualifications or certifications in information security, audit, risk or assurance would be advantageous. Excellent communication, organisation and stakeholder-management skills are essential, together with the ability to work independently, manage competing priorities and maintain a pragmatic, proportionate approach to security.

We are seeking an IT Infrastructure Engineer specialising in Cloud Services Security and Compliance to help design, operate and continuously improve secure, resilient cloud environments. The role will focus on protecting infrastructure, platforms and services across cloud and hybrid environments while supporting business objectives, regulatory obligations and enterprise security standards. You will work closely with infrastructure, architecture, development, service management and risk teams to embed security throughout the technology lifecycle.

Key responsibilities include administering and securing cloud infrastructure, identity and access management, network controls, encryption, logging, monitoring, backup and disaster recovery capabilities. You will assess cloud configurations against recognised security frameworks, identify vulnerabilities and misconfigurations, coordinate remediation activities and contribute to incident response. The role will also involve developing and maintaining security policies, standards, procedures and technical documentation; supporting audits and compliance assessments; preparing evidence for control reviews; and tracking risks, exceptions and corrective actions. You will help automate security and compliance checks through scripting, infrastructure-as-code and continuous monitoring, while promoting secure-by-design practices across technology teams.

The successful candidate will have practical experience in cloud infrastructure engineering, cloud security or a comparable technical role, with a strong understanding of services such as compute, storage, networking, containers, databases and serverless platforms. Familiarity with major cloud providers, Microsoft Azure or AWS, is expected, along with knowledge of IAM, network security, vulnerability management, SIEM solutions, security monitoring and relevant compliance frameworks such as ISO 27001, NIST, CIS or SOC 2. Experience with Terraform or similar infrastructure-as-code tools, scripting languages such as PowerShell or Python, and CI/CD security controls would be advantageous. Strong analytical, communication and stakeholder-management skills are essential, as is the ability to manage competing priorities and explain technical risks clearly. Relevant cloud, security or infrastructure certifications are desirable.