Job Search

We are seeking an experienced Privileged Access Management (PAM) Lead to take ownership of the strategy, delivery and ongoing improvement of privileged access controls across a complex technology environment. You will lead the design and implementation of robust PAM capabilities, ensuring that administrative and high-risk accounts are securely managed, monitored and governed in line with security policies, regulatory obligations and industry best practice.

Key responsibilities will include developing and maintaining the PAM roadmap; overseeing the onboarding, discovery and classification of privileged accounts; implementing password vaulting, automated credential rotation, just-in-time access and session monitoring; and establishing effective controls for service, emergency and third-party accounts. You will define and maintain operating procedures, access models and supporting documentation, while ensuring that controls are tested regularly and vulnerabilities or policy exceptions are addressed promptly. The role will also involve leading incident investigations relating to privileged access, supporting audit and compliance activity, and producing meaningful management information on risk, control effectiveness and remediation progress.

You will provide technical leadership and work collaboratively with infrastructure, cloud, engineering, service management, risk and assurance teams to embed secure access practices throughout the organisation. The successful candidate will have substantial experience delivering and operating PAM solutions, with strong knowledge of identity and access management principles, least-privilege design, segregation of duties and access governance. Experience with major PAM platforms, cloud environments, directory services, scripting or automation, and privileged session management is highly desirable. You should be confident engaging with stakeholders at all levels, managing competing priorities and translating technical risk into clear business outcomes. A proactive, analytical approach, excellent communication skills and a commitment to continuous improvement are essential.

We are seeking a Security Analyst – Emerging Technology to support the protection of financial services environments as new technologies, platforms and delivery models continue to evolve. This is an opportunity to join a forward-looking security function that helps the business adopt innovation safely, balancing effective risk management with the need to deliver resilient, customer-focused services.

You will assess the security implications of emerging technologies, including cloud services, artificial intelligence, automation, application programming interfaces and digital platforms. Your responsibilities will include conducting threat, vulnerability and risk assessments; reviewing technical and architectural proposals; monitoring relevant threat intelligence; and recommending practical controls to reduce exposure. You will contribute to security-by-design activities, support the development of policies, standards and guidance, and help maintain risk registers, assurance records and management reporting.

The role will involve working closely with technology, architecture, engineering, risk, compliance and operational teams. You will provide clear advice to both technical and non-technical stakeholders, challenge proposed solutions where appropriate, and help investigate and respond to security incidents or emerging threats. You may also support security testing, control reviews, regulatory or audit activity, and the evaluation of new products and suppliers.

Applicants should have experience in information or cyber security, ideally within financial services or another highly regulated environment. You will need a sound understanding of security principles, risk assessment, cloud and modern technology architectures, identity and access management, data protection and common threat scenarios. Experience with security frameworks, vulnerability management, incident response or third-party assurance would be advantageous. Relevant professional qualifications, such as CISSP, CISM, CRISC, GIAC or equivalent experience, are welcomed.

We are looking for an analytical and adaptable professional who can interpret complex information, communicate confidently and make balanced, evidence-based recommendations. Curiosity about emerging technology, strong stakeholder management skills and a commitment to continuous learning are essential. You will be expected to work collaboratively, demonstrate sound judgement and help establish proportionate security practices that support innovation while protecting customers, colleagues, data and critical services.

We are seeking a Senior Security Engineer with current, valid Security Check (SC) clearance to join a technically skilled team delivering secure, resilient and compliant solutions across complex environments. This is an excellent opportunity for an experienced security professional to take ownership of security engineering activities, provide technical leadership and help protect critical systems, applications and data against evolving threats.

You will design, implement and maintain security controls across infrastructure, cloud, networks and endpoints, ensuring solutions align with relevant policies, standards and risk requirements. Responsibilities will include conducting security reviews and threat assessments, investigating vulnerabilities, supporting incident response, and developing practical remediation plans. You will work closely with architects, developers, infrastructure specialists and service teams to embed security throughout the system development and operational lifecycle. The role will also involve producing clear technical documentation, contributing to security assurance activities, and supporting audits and compliance assessments.

The successful candidate will have substantial experience in a security engineering or cyber security role, with a strong understanding of network security, identity and access management, vulnerability management, encryption, monitoring and secure configuration. Experience with cloud security, security information and event management (SIEM) platforms, incident response processes and automation would be advantageous. You should be confident analysing complex technical issues, communicating risk to both technical and non-technical stakeholders, and providing constructive guidance in a collaborative environment. A proactive approach, strong attention to detail and the ability to manage competing priorities are essential. Current SC clearance is required, and candidates must be willing and able to comply with ongoing security vetting requirements.

We are seeking a Cyber Security Engineer, Cloud Security Specialist, to help protect cloud-based platforms, applications, data and infrastructure across a complex technology environment. This role will contribute to the design, implementation and continuous improvement of secure cloud services, while supporting security operations, risk reduction and regulatory compliance. The successful candidate will work closely with infrastructure, engineering, architecture, development and governance teams to embed security throughout the technology lifecycle.

Key responsibilities include developing and maintaining cloud security controls across environments such as Azure, AWS or Google Cloud; managing identity and access controls, privileged access, encryption, key management, network security and secure configuration standards; and monitoring cloud services for vulnerabilities, misconfigurations and suspicious activity. You will support security assessments, threat modelling, incident response, penetration testing and remediation activities. The role will also involve creating and maintaining security policies, standards, technical documentation and assurance reports, as well as contributing to automation that improves security monitoring, compliance and operational efficiency.

Applicants should have proven experience in cloud security engineering or a closely related cyber security role, with practical knowledge of cloud-native security tools, IAM, logging and monitoring, security information and event management, vulnerability management and infrastructure-as-code. Experience with technologies such as Terraform, Kubernetes, CI/CD pipelines, scripting or security automation would be advantageous. Familiarity with recognised security frameworks and standards, including NIST, CIS, ISO 27001 or the shared responsibility model, is desirable. You will be analytical, collaborative and confident communicating technical risks to both specialist and non-specialist audiences. Relevant professional certifications, such as CCSP, CISSP, cloud-provider security certifications or equivalent practical experience, are welcomed.

We are seeking an experienced Information Security Manager to lead the development, implementation and continual improvement of an organisation-wide information security programme. This role will provide strategic direction and practical leadership across cyber security, information governance, risk management and business resilience. You will work closely with senior stakeholders, technology teams and operational leaders to ensure that information assets, systems and services are appropriately protected against evolving threats.

Key responsibilities will include maintaining security policies, standards and procedures; overseeing risk assessments, control reviews and remediation plans; and ensuring compliance with relevant legislation, regulatory expectations and recognised security frameworks. You will coordinate vulnerability management, security monitoring, incident response and investigation activities, working with internal teams and specialist suppliers where required. The role will also support identity and access management, third-party assurance, business continuity and disaster recovery planning. You will prepare clear reports for senior management, track security performance and provide expert advice on emerging threats, secure technology adoption and the delivery of change programmes. A further important aspect of the position will be promoting a strong security culture through awareness campaigns, training and effective communication.

Applicants should have significant experience in information security, cyber security, IT risk or a closely related discipline, including experience managing security controls and responding to incidents. A strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS is expected, together with knowledge of data protection requirements, risk methodologies and audit processes. Professional qualifications such as CISSP, CISM, CRISC or equivalent experience would be advantageous. You will need excellent analytical, organisational and stakeholder-management skills, with the ability to explain complex technical risks clearly to both technical and non-technical audiences. We are looking for a collaborative, decisive professional who can balance practical business needs with robust security principles and deliver measurable improvements in a changing environment.

We are seeking a Senior Technical Security Consultant to provide expert advice and practical guidance across complex technology and security programmes within highly regulated and business-critical environments. The role will involve working with clients and internal delivery teams to understand security needs, assess risks, and develop proportionate solutions that support operational, regulatory, and strategic objectives. You will contribute throughout the project lifecycle, from early discovery and requirements definition through to design, implementation, assurance, and transition into service.

Key responsibilities will include conducting security assessments, threat modelling, risk analysis, and technical reviews; developing secure architectures, controls, standards, and implementation plans; and advising on cloud, infrastructure, applications, networks, identity, data protection, and emerging technologies. You will produce high-quality security documentation, including architecture decisions, risk registers, control assessments, security cases, and remediation plans. The role will also require close collaboration with architects, engineers, programme managers, suppliers, and senior stakeholders, translating complex technical matters into clear, actionable recommendations. You may also support incident readiness, compliance activities, technical assurance, and the development of security patterns and best practice.

Applicants should have substantial experience in technical security consulting, security architecture, or a closely related discipline, with a strong understanding of recognised security frameworks, risk management methodologies, and secure design principles. Relevant professional certifications such as CISSP, CISM, SABSA, or equivalent experience are desirable. You should be confident operating across multiple projects, prioritising competing demands, and influencing decisions without relying on direct authority. Strong analytical, communication, report-writing, and stakeholder management skills are essential, together with the ability to challenge constructively and provide pragmatic advice. Experience of working in regulated, public-facing, or highly complex environments would be advantageous.

We are seeking an experienced Lead SOC Manager to oversee the operation, development and continuous improvement of a Security Operations Centre. This role will provide strategic and operational leadership across cyber defence, ensuring the effective detection, investigation and response to security threats in a complex and evolving environment. You will manage a team of security analysts and specialists, promote a strong culture of collaboration and accountability, and ensure that security operations align with organisational risk appetite, regulatory requirements and business priorities.

Key responsibilities will include setting the SOC operating model, defining processes and performance standards, and managing day-to-day monitoring, triage, incident response and threat-hunting activities. You will oversee the use and optimisation of SIEM, SOAR, EDR and other security tooling, ensuring that detection rules, playbooks and intelligence are regularly reviewed and improved. The role will lead major incident coordination, root-cause analysis and post-incident reviews, while maintaining clear escalation procedures and accurate reporting. You will also manage relationships with internal technology teams, risk and compliance functions, and external security service providers. Additional duties will include developing team capability, supporting recruitment and performance management, managing budgets, and presenting security metrics, risks and recommendations to senior stakeholders.

The successful candidate will have significant experience leading a SOC, CSIRT or comparable cyber security operations function, together with a strong understanding of security monitoring, incident management, threat intelligence and vulnerability management. Professional experience with modern security platforms and operational frameworks such as MITRE ATT&CK, NIST or ISO 27001 is expected. Relevant industry certifications, such as CISSP, CISM, GIAC or equivalent, would be advantageous. You will be an assured people leader and communicator, capable of making sound decisions under pressure and translating complex technical issues into clear business impacts. A proactive, analytical and continuous-improvement mindset is essential, along with the ability to work effectively across technical and non-technical teams.

We are seeking an Identity Analyst to support the secure and efficient management of digital identities, access rights and authentication services across the organisation. In this role, you will help ensure that employees, contractors, partners and systems have appropriate access to the resources they need, while maintaining strong controls that protect sensitive information. You will work closely with technology, security, compliance and business teams to investigate access-related issues and improve identity management processes.

Your responsibilities will include administering and monitoring user accounts, roles, groups and entitlements; processing joiner, mover and leaver requests; reviewing access approvals; and supporting periodic access certification campaigns. You will analyse identity and access data to identify anomalies, excessive permissions, dormant accounts and potential policy breaches, escalating concerns where appropriate. The role will also involve investigating authentication and authorisation incidents, maintaining accurate records, contributing to audit activities and preparing clear reports and management information. You may assist with the implementation and ongoing support of identity governance, single sign-on, multi-factor authentication and privileged access management solutions.

The successful candidate will have experience in identity and access management, information security, IT operations or a related analytical role. You should understand access control principles, least-privilege practices, authentication methods and common identity lifecycle processes. Familiarity with directory services, ticketing platforms, identity governance tools, cloud environments and reporting or data analysis techniques would be advantageous. Strong attention to detail, sound judgement and the ability to handle confidential information are essential. You will be comfortable analysing problems, communicating with stakeholders at different levels and managing competing priorities in a structured way. Relevant industry certifications or qualifications in cybersecurity, information technology or risk management are desirable, although equivalent practical experience will be considered.

We are seeking a Senior Identity Analyst to support the secure and effective management of identity and access services across a complex technology environment. In this role, you will provide specialist analysis, operational support and guidance across identity governance, access management and authentication services. You will work closely with cybersecurity, infrastructure, applications, compliance and business stakeholders to ensure that access is appropriate, auditable and aligned with organisational policies and risk requirements.

Key responsibilities will include analysing and resolving complex identity and access issues; managing joiner, mover and leaver processes; reviewing access requests, approvals and certifications; investigating authentication and authorisation incidents; and supporting the implementation and improvement of identity lifecycle controls. You will contribute to the administration and optimisation of directory services, privileged access management, single sign-on, multi-factor authentication and role-based access controls. The role will also involve producing reports and management information, identifying control weaknesses, supporting audits, documenting procedures and recommending improvements to increase efficiency, security and user experience.

The successful candidate will have substantial experience in identity and access management, cybersecurity operations or a closely related discipline. You will have a strong understanding of identity governance principles, access control models, authentication technologies and security best practice. Experience with enterprise directory platforms, IAM or IGA solutions, privileged access tools, service management processes and scripting or automation would be highly advantageous. You should be confident analysing data, interpreting access requirements and managing competing priorities in a fast-paced environment. Strong communication and stakeholder management skills are essential, along with the ability to explain technical issues clearly to both technical and non-technical audiences. A methodical approach, sound judgement, attention to detail and a commitment to continuous improvement are also required.

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development and continuous improvement of information security governance, risk management and compliance practices. This role will help strengthen organisational resilience, protect sensitive information and ensure that security activities align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to security.

Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; overseeing risk registers, treatment plans and exception processes; and coordinating internal and external audits, assurance reviews and regulatory submissions. You will monitor compliance with applicable laws, contractual commitments and frameworks such as ISO 27001, NIST, SOC 2 or equivalent standards. The role will also support third-party and supplier risk assessments, security metrics and reporting, control testing, remediation tracking, incident governance and the delivery of security awareness and training initiatives. You will provide clear, practical advice to senior stakeholders and help embed security and compliance requirements into projects, products and operational processes.

The successful candidate will have substantial experience in information security governance, risk and compliance, ideally within a complex or regulated environment. You will have strong knowledge of security frameworks, control design, audit methodology, risk assessment and relevant privacy or regulatory requirements. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, or equivalent experience, are desirable. Excellent communication, influencing, analytical and organisational skills are essential, along with the ability to translate technical and regulatory concepts into clear business actions. We are looking for someone pragmatic, collaborative and confident working independently, with a strong commitment to continuous improvement and sound risk management.