Job Search

We are seeking a Business Information Security Officer to support the development, implementation and continuous improvement of information security across a complex business environment. This is an excellent opportunity for an experienced security professional to help protect information assets, strengthen organisational resilience and promote a positive security culture.

You will work closely with teams across the business to identify and assess information security risks, recommend proportionate controls and monitor the effectiveness of existing measures. Responsibilities will include maintaining security policies and standards, supporting risk assessments, coordinating security reviews, and providing practical advice on data protection, access management, secure working practices and the use of technology.

The role will also involve contributing to incident management, business continuity and disaster recovery activities. You will help investigate and document security incidents, track remedial actions, support audit and assurance programmes, and prepare clear reports for senior stakeholders. You will build strong working relationships with colleagues, suppliers and technical teams, ensuring that security requirements are understood and embedded throughout projects and operational processes.

Applicants should have demonstrable experience in information security, cyber security, risk management or a closely related discipline. You will need a good understanding of recognised security frameworks, information risk principles, security controls and relevant data protection requirements. Experience of policy development, audit preparation, incident response or third-party assurance would be advantageous.

We are looking for someone analytical, organised and confident in communicating with both technical and non-technical audiences. You should be able to prioritise competing demands, explain complex issues clearly and influence positive change without unnecessary bureaucracy. A relevant professional qualification, such as CISSP, CISM, ISO 27001 or an equivalent certification, is desirable but not essential where equivalent practical experience can be demonstrated.

This role offers the opportunity to make a visible contribution to the security and resilience of a growing organisation. Flexible working arrangements may be available, alongside a supportive environment focused on professional development and continuous improvement.

We are seeking an experienced System Security Architect to design, develop and maintain secure, resilient technology architectures across a complex IT environment. You will provide expert guidance on security strategy, architecture and engineering, ensuring that systems, applications, networks and cloud services are designed and operated in line with organisational risk appetite, regulatory obligations and industry best practice.

You will work closely with infrastructure, software development, cloud, data and operational teams to embed security throughout the technology lifecycle. Responsibilities will include producing security architecture principles, reference models, patterns and design documentation; reviewing proposed solutions; identifying vulnerabilities and architectural risks; and recommending proportionate controls and remediation plans. You will also contribute to threat modelling, security assessments, technology roadmaps, incident learning and the continuous improvement of security capabilities.

The role will involve translating business and technical requirements into practical security designs covering areas such as identity and access management, encryption, network security, endpoint protection, application security, secure development, monitoring and resilience. You will communicate complex risks clearly to both technical and non-technical stakeholders, supporting informed decision-making and helping teams understand their security responsibilities.

Applicants should have substantial experience in security architecture, systems engineering or a closely related discipline, with a strong understanding of modern infrastructure, cloud platforms, networking and enterprise security controls. Experience applying recognised frameworks and standards, such as NIST, ISO 27001, CIS or SABSA, would be advantageous. Relevant professional certifications, including CISSP, CISM, SABSA or cloud security qualifications, are desirable.

You will be a confident communicator and collaborative problem-solver, able to influence without direct authority and balance security, usability, cost and delivery pressures. Strong analytical skills, sound judgement and the ability to manage competing priorities are essential. This is an opportunity to shape secure technology solutions, strengthen organisational resilience and contribute to a mature, forward-looking security function.

We are seeking an Identity Engineer to design, implement and support secure identity and access management services across a complex technology environment. You will play a key role in protecting systems and information by ensuring that users, applications and devices have the appropriate access at the right time.

You will be responsible for administering and developing identity platforms, including directory services, single sign-on, multi-factor authentication, privileged access management and identity governance solutions. Your duties will include managing joiner, mover and leaver processes; configuring role-based access controls; supporting access reviews; investigating authentication issues; and contributing to the resolution of security incidents.

The role will involve working closely with infrastructure, cyber security, service delivery and application teams to integrate new systems and improve existing controls. You will help develop automation using scripting and workflow tools, maintain accurate technical documentation, and contribute to standards, procedures and architectural decisions. You will also support audit activity and ensure identity services remain aligned with relevant security policies and regulatory requirements.

Applicants should have practical experience in identity and access management, with a sound understanding of authentication protocols, authorisation principles and directory technologies. Experience with Microsoft Entra ID, Active Directory, SAML, OAuth, OpenID Connect, PowerShell and multi-factor authentication would be advantageous. Familiarity with privileged access management, identity governance, cloud environments and automated provisioning is also desirable.

You will be an analytical and collaborative professional who can communicate technical information clearly to both specialist and non-specialist audiences. The ability to manage competing priorities, troubleshoot complex problems and work effectively across teams is essential. Relevant professional certifications or equivalent experience in cyber security, infrastructure or identity engineering would be welcomed.

This is an opportunity to contribute to the development of resilient, user-focused identity services while helping to strengthen security across a diverse and evolving technical landscape.

An exciting opportunity has arisen for an Information Security Executive to support the development, implementation and continuous improvement of an organisation-wide information security framework. This role will help protect critical systems, data and services by promoting effective security practices, managing risk and ensuring compliance with relevant legislation, standards and internal policies.

Working closely with technology, risk, compliance and operational teams, you will maintain information security policies, procedures and guidance, while supporting the delivery of security awareness and training programmes. You will contribute to risk assessments, control reviews, audit activity and the monitoring of security performance, ensuring that issues are documented, prioritised and addressed appropriately.

The role will also involve assisting with the identification, investigation and management of security incidents, including coordinating actions, maintaining accurate records and supporting post-incident reviews. You will help assess suppliers and third parties, contribute to business continuity and disaster recovery planning, and provide clear advice on security requirements for new projects, systems and processes.

We are looking for someone with experience in information security, cyber security, IT risk or a related discipline, ideally within a complex or regulated environment. You should have a sound understanding of security principles, risk management, data protection and recognised frameworks such as ISO 27001, Cyber Essentials or the NIST Cybersecurity Framework. Relevant professional qualifications or certifications would be advantageous.

You will be analytical, organised and confident communicating with colleagues at all levels. The ability to explain technical and regulatory requirements in a clear, practical manner is essential, as is a proactive approach to problem-solving and continuous improvement. Strong attention to detail, sound judgement and the ability to manage competing priorities will be key to succeeding in this role.

We are seeking a Senior Security Consultant to join a growing Security Strategy, Risk and Compliance Services team. This is an opportunity to advise a diverse range of clients on improving their information security, governance and resilience. You will work closely with senior stakeholders to understand business risks, develop practical recommendations and support the delivery of security transformation programmes.

Your responsibilities will include leading security assessments, maturity reviews and gap analyses against recognised frameworks and regulatory requirements. You will develop and review security strategies, policies, standards, risk management frameworks and compliance programmes, ensuring they are proportionate, effective and aligned with business objectives. You will also support clients with audit preparation, regulatory engagements, third-party risk management, incident readiness and remediation planning.

As a senior member of the team, you will manage client engagements from planning through to delivery, preparing high-quality reports and presenting findings to technical and executive audiences. You will identify opportunities to improve processes and controls, provide constructive challenge and help clients translate complex security requirements into clear, actionable outcomes. You may also contribute to proposals, practice development, knowledge sharing and the mentoring of less experienced consultants.

We are looking for substantial experience in information security, cyber security, risk, governance or compliance, gained within a consultancy, professional services or complex in-house environment. You should have a strong understanding of frameworks and standards such as ISO 27001, NIST, CIS Controls, COBIT or equivalent, together with knowledge of relevant privacy and regulatory obligations. Experience of security risk assessments, policy development, control testing and working with senior stakeholders is essential.

Excellent communication, analytical and report-writing skills are required, alongside the ability to manage competing priorities and work independently. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. The role may involve occasional travel to client sites and offers the opportunity to work on varied, high-impact assignments across multiple sectors.

We are seeking a Red Team Operator (Cyber Resilience) to help assess and strengthen the resilience of critical systems, services and people against realistic cyber threats. You will plan and deliver authorised red team and threat emulation exercises, working across infrastructure, cloud, applications, identities, networks and physical environments where appropriate. Your work will support the identification of weaknesses that could affect confidentiality, integrity, availability and operational continuity.

Responsibilities will include developing exercise plans and rules of engagement; conducting reconnaissance, initial access, privilege escalation, lateral movement, persistence and exfiltration simulations; and safely testing detection, response and recovery capabilities. You will use a blend of commercial tools, open-source frameworks and bespoke techniques, while maintaining strict control of scope, evidence and operational risk. You will also collaborate with blue teams and security operations functions to validate alerts, defensive controls, incident response procedures and recovery arrangements.

You will document technical findings and business impact clearly, producing reports that include practical remediation recommendations and prioritised improvements. You will brief technical and non-technical stakeholders, contribute to lessons-learned sessions and help track actions through to completion. The role may also involve supporting vulnerability assessments, purple team activities, tabletop exercises, security architecture reviews and the development of repeatable testing methodologies.

Applicants should have proven experience in red teaming, penetration testing, adversary simulation or a closely related cyber security discipline, together with a strong understanding of common attack paths, the MITRE ATT&CK framework and modern defensive technologies. Practical experience with Windows and Linux environments, Active Directory, cloud platforms, scripting and network protocols is expected. Relevant qualifications such as CREST, OSCP, OSEP, CRTO or equivalent experience are desirable. You must demonstrate sound judgement, excellent written and verbal communication skills, a methodical approach to evidence handling and a commitment to responsible, lawful and ethical security testing.

We are seeking an experienced CTI Lead to develop and mature a cyber threat intelligence capability within a complex, fast-paced environment. You will lead the collection, analysis and dissemination of intelligence that supports security operations, incident response, vulnerability management and strategic risk decisions. This is an influential role requiring strong technical understanding, sound judgement and the ability to communicate clearly with both technical and non-technical audiences.

You will define and deliver the threat intelligence strategy, establish effective processes and maintain a clear operating model for the function. Responsibilities will include monitoring the threat landscape, assessing relevant actors, campaigns, vulnerabilities and emerging risks, and producing timely intelligence reports, briefings and alerts. You will work closely with security engineering, detection and response teams to translate intelligence into practical defensive controls, detection content and incident response guidance.

The role will also involve managing intelligence requirements, evaluating internal and external sources, and maintaining relationships with trusted industry, government and security partners. You will lead intelligence-led threat hunting and support investigations by providing context, indicators of compromise, tactical assessments and longer-term trend analysis. You will measure the effectiveness of the capability and identify opportunities to improve tooling, automation, data quality and stakeholder engagement.

Applicants should have substantial experience in cyber threat intelligence, security operations, incident response or a closely related discipline, together with experience of leading programmes or small teams. You will have strong knowledge of the intelligence lifecycle, threat actor methodologies, the MITRE ATT&CK framework and common analysis techniques. Experience with SIEM, TIP, EDR or other security platforms, alongside the ability to handle open-source and technical intelligence, is essential.

Excellent written and verbal communication skills are required, as is the ability to prioritise competing demands and present complex findings with clarity. Relevant professional qualifications, experience in regulated or high-risk sectors, and knowledge of scripting, automation or data analysis would be advantageous.

We are seeking a Senior Technical Consultant to provide expert advice and delivery across security intelligence and operations consulting services. This is an opportunity to work with a range of stakeholders to assess security capabilities, identify risks and design practical, technology-led improvements that strengthen organisational resilience.

The successful candidate will lead and contribute to consulting engagements from discovery through to delivery. Responsibilities will include assessing security operations, intelligence processes, monitoring capabilities and incident response arrangements; developing target operating models and roadmaps; and producing clear recommendations for technical and business audiences. You will also support the design and implementation of security solutions, ensuring that outcomes align with strategic objectives, regulatory expectations and recognised industry standards.

You will work closely with clients, delivery teams and senior decision-makers to understand complex requirements, facilitate workshops and translate technical findings into actionable plans. The role may also involve developing architecture and process documentation, reviewing existing controls, supporting transformation programmes, managing workstreams and mentoring less experienced consultants. A strong focus on quality, effective communication and the delivery of measurable business value is essential.

Applicants should have substantial experience in cybersecurity consulting, security operations, security intelligence or a closely related discipline. You will need a strong understanding of security monitoring and incident management, threat intelligence, vulnerability management, security information and event management, and relevant governance and risk practices. Experience with cloud security, security operations centre transformation, automation, threat modelling or digital forensics would be advantageous.

Excellent stakeholder management and presentation skills are required, together with the ability to communicate confidently with both technical specialists and senior leaders. You should be comfortable working independently, managing competing priorities and contributing effectively within multidisciplinary teams. Professional security certifications, such as CISSP, CISM, GIAC or equivalent, are desirable, as is experience working within regulated or complex enterprise environments.

This role offers the chance to influence security strategy, solve challenging problems and make a tangible contribution to the protection of critical systems, information and services.

An opportunity is available for a Junior Cyber Security Specialist to support the protection of systems, networks and data in a fast-paced technology environment. This role would suit someone at the early stage of their cyber security career who is keen to develop practical experience while contributing to the prevention, detection and response to security threats.

Working as part of a collaborative security team, you will monitor alerts and events using security monitoring tools, investigate suspicious activity and help assess potential vulnerabilities. You will support the triage and documentation of security incidents, escalate issues in line with established procedures and contribute to post-incident reviews. The role will also involve assisting with vulnerability scanning, patch verification, access reviews and the maintenance of accurate security records.

You will help promote secure working practices by contributing to security awareness activities, updating guidance and supporting colleagues with routine security queries. You may also assist with audits, risk assessments, security testing and the implementation of controls designed to protect confidential information and business services. A willingness to learn new technologies and stay informed about emerging threats will be important.

Applicants should have a foundational understanding of cyber security principles, including common attack methods, network security, identity and access management, malware and data protection. Some practical experience through employment, study, training or personal projects would be beneficial. Familiarity with tools such as vulnerability scanners, endpoint protection platforms, ticketing systems or security information and event management solutions is desirable, but full commercial experience is not essential.

Strong analytical and problem-solving skills are required, together with careful attention to detail and the ability to communicate technical information clearly. You should be organised, dependable and comfortable working both independently and as part of a team. Relevant qualifications or certifications, such as a degree in cyber security or computing, or an entry-level industry certification, would be welcomed. Training and development support will be available to help you build your career.

We are seeking an experienced Senior Security Consultant – Data Security to provide expert guidance on protecting sensitive information across complex technology environments. You will work with stakeholders at all levels to assess data security risks, shape practical solutions and support the delivery of robust controls aligned with business and regulatory requirements.

In this role, you will lead data security assessments, identify vulnerabilities and recommend improvements across data classification, governance, access management, encryption, retention and loss prevention. You will contribute to security architecture and design reviews, ensuring that new systems, applications and services are built with appropriate protections from the outset.

You will advise on the implementation and ongoing improvement of data protection controls, policies and standards. Responsibilities will include producing risk assessments, security requirements, design documentation and remediation plans, as well as supporting audit activity, incident investigations and responses to data-related security events. You will also help monitor emerging threats, technologies and regulatory developments, translating these into clear and actionable advice.

The successful candidate will have substantial experience in information or data security consulting, with a strong understanding of security principles, risk management and privacy obligations. Experience with data loss prevention, cloud security, identity and access management, encryption technologies, security monitoring or data discovery tools would be highly valuable. You should be confident working across technical and non-technical audiences and able to explain complex risks in a clear, concise manner.

Relevant professional certifications, such as CISSP, CISM, CRISC, SABSA or a recognised data protection qualification, are desirable. You will be analytical, collaborative and commercially aware, with the ability to manage competing priorities and influence decisions without direct authority. A proactive approach, strong written and verbal communication skills, and a commitment to continuous improvement are essential.

This is an opportunity to play a key role in strengthening data security maturity, supporting secure transformation and helping to protect critical information in an evolving threat landscape.