Job Search

We are seeking an experienced IT Security Engineer to help protect critical systems, networks, applications and data against evolving cyber threats. In this role, you will design, implement and maintain effective security controls across cloud and on-premises environments, while supporting a strong culture of security and resilience. You will work closely with infrastructure, development, operations and compliance teams to identify risks, improve defensive capabilities and ensure security is integrated into technology and business processes.

Key responsibilities include monitoring security alerts and events, investigating incidents, supporting threat detection and response activities, and contributing to vulnerability management and remediation programmes. You will configure and manage security technologies such as firewalls, endpoint protection, identity and access management, security information and event management platforms, encryption tools and vulnerability scanners. You will also conduct security assessments, review system and application designs, develop technical standards, maintain clear documentation and support audits, risk assessments and compliance requirements. The role may include participation in an out-of-hours incident response rota.

Applicants should have proven experience in an IT security, infrastructure security or similar engineering role, with a strong understanding of networking, operating systems, authentication, access controls, cloud security principles and secure configuration practices. Experience with incident response, vulnerability assessment, security monitoring and scripting or automation is highly desirable. Relevant professional certifications are welcome, but practical capability and sound technical judgement are equally valued. You will be analytical, collaborative and able to explain complex security issues clearly to both technical and non-technical audiences. A proactive approach, strong attention to detail and a commitment to continuous learning are essential for success.

We are seeking a Senior Systems & Cyber Engineer to design, maintain and enhance secure, resilient technology environments. This role will combine systems engineering, infrastructure operations and cybersecurity expertise to support critical services and protect information assets. You will work across cloud and on-premises platforms, networks, endpoints and enterprise applications, ensuring systems remain available, compliant and capable of meeting evolving business and security requirements.

Your responsibilities will include designing and implementing secure infrastructure solutions; administering and hardening Windows and Linux environments; managing identity, access controls, patching, vulnerability remediation and configuration standards; and supporting cloud platforms, virtualisation technologies, networks and backup services. You will monitor security events, investigate incidents, coordinate containment and recovery activities, and contribute to threat detection and response processes. The role will also involve developing technical documentation, maintaining system and security controls, supporting audits, and advising stakeholders on risks, improvements and technology decisions.

Applicants should have substantial experience in systems engineering, infrastructure administration and cybersecurity, ideally within a complex or regulated environment. Strong knowledge of networking, Active Directory or equivalent identity services, endpoint security, firewalls, SIEM platforms, vulnerability management and cloud security is expected. Experience with scripting or automation, such as PowerShell or Python, and familiarity with recognised security frameworks and risk management practices would be advantageous. Relevant professional certifications in systems, cloud or cybersecurity are desirable. You will be a structured problem-solver with excellent communication skills, able to manage priorities, explain technical issues clearly and collaborate effectively while responding calmly to incidents and operational challenges.

We are seeking a skilled Data Protection Officer to lead and oversee data privacy and protection activities across the organisation. You will provide expert advice on applicable data protection legislation, regulatory guidance and industry best practice, helping to ensure that personal data is collected, used, stored and deleted lawfully, fairly and transparently. The role will involve working with colleagues at all levels to promote a strong culture of privacy, accountability and responsible information management.

Your responsibilities will include maintaining and reviewing data protection policies, procedures, records of processing activities, retention schedules and privacy notices. You will monitor compliance, conduct and support data protection impact assessments, advise on information-sharing arrangements, and contribute to the assessment and management of data breaches and incidents. You will also provide guidance on data subject rights requests, oversee responses within required timescales, and support due diligence relating to suppliers, processors and other third parties. Regular reporting to senior stakeholders and relevant governance forums will be an important part of the role.

Applicants should have substantial experience in data protection, privacy, information governance or a closely related field, together with a strong understanding of the UK GDPR, Data Protection Act 2018 and associated regulatory expectations. A recognised privacy or data protection qualification is desirable, as is experience of delivering training, audits, risk assessments and compliance improvement programmes. You will need excellent analytical, organisational and communication skills, sound professional judgement, and the ability to explain complex legal and technical matters clearly to varied audiences. The successful candidate will be proactive, discreet and collaborative, able to manage competing priorities while maintaining high standards of accuracy, confidentiality and integrity.

We are seeking a Junior Cyber Security Analyst to support the protection of systems, networks, applications, and data across a growing technology environment. This is an excellent opportunity for an early-career security professional to develop practical experience in monitoring, investigation, vulnerability management, and incident response while working alongside experienced analysts and technical teams.

In this role, you will monitor security alerts and events using security information and event management tools, investigate suspicious activity, and escalate potential incidents in line with established procedures. You will assist with triaging phishing reports, reviewing logs, analysing endpoint and network activity, and documenting findings clearly. The role will also involve supporting vulnerability scans, tracking remediation actions, contributing to access reviews, and helping maintain accurate security documentation, playbooks, and incident records. You may participate in security awareness initiatives, compliance activities, and investigations following security incidents or policy violations.

Applicants should have a foundational understanding of cyber security principles, including common threats, attack methods, authentication, networking, operating systems, and security controls. Practical experience with tools such as SIEM platforms, endpoint detection systems, vulnerability scanners, ticketing systems, or network monitoring solutions is desirable. Relevant qualifications, training, or certifications in cyber security, information technology, or a related discipline are advantageous, but equivalent hands-on experience will also be considered. You should demonstrate strong analytical and problem-solving skills, attention to detail, sound judgement, and a willingness to learn. The ability to communicate technical information clearly, manage competing priorities, maintain confidentiality, and work effectively as part of a team is essential. A proactive approach and commitment to following secure working practices will be highly valued.

We are seeking a Senior M365 Security & Modern Workplace Consultant to lead the design, implementation and continuous improvement of secure, user-focused Microsoft 365 environments. In this role, you will work closely with clients and internal stakeholders to understand business objectives, assess existing technology estates and develop practical roadmaps for modern workplace transformation. You will provide expert guidance across Microsoft 365 security, identity, endpoint management, collaboration and productivity services.

Your responsibilities will include designing and delivering solutions using Microsoft Entra ID, Microsoft Intune, Microsoft Defender, Microsoft Purview, Microsoft Teams, SharePoint Online and Exchange Online. You will configure and optimise security policies, conditional access, endpoint compliance, data loss prevention, information protection, device management and threat detection capabilities. You will also lead technical workshops, produce high-quality architecture and implementation documentation, support migrations and deployments, and provide mentoring to less experienced consultants. Staying informed about Microsoft product developments and emerging security threats will be an important part of the role.

The successful candidate will have substantial experience delivering Microsoft 365 security and modern workplace projects in complex environments, together with strong knowledge of cloud identity, endpoint security, governance and compliance. Relevant Microsoft certifications, such as those covering Security, Enterprise Mobility, Endpoint Administration or Microsoft 365 Administration, would be advantageous. You should be confident communicating with both technical and non-technical audiences, able to translate business needs into effective solutions, and comfortable taking ownership from initial discovery through to delivery and optimisation. A structured, collaborative approach, strong problem-solving skills and a commitment to delivering secure, scalable and user-friendly outcomes are essential.

We are seeking a Solution Architect – IS&O Enterprise Security to define and advance secure, resilient technology solutions across a complex enterprise environment. In this role, you will translate business and security requirements into practical architecture principles, standards and roadmaps that support digital transformation while managing risk. You will work closely with infrastructure, cloud, application, data and operational teams to ensure security is embedded throughout the technology lifecycle.

Your responsibilities will include designing target and transitional architectures for enterprise security capabilities, including identity and access management, network security, cloud security, endpoint protection, vulnerability management, security monitoring and incident response. You will assess existing platforms, identify gaps and dependencies, and recommend improvements that balance security, performance, usability and cost. You will also contribute to architecture reviews, technology evaluations, solution designs, risk assessments and governance forums, ensuring that proposed solutions align with security policies, regulatory obligations and recognised industry practices. Clear documentation, effective stakeholder communication and the ability to influence decisions will be essential.

The successful candidate will bring significant experience in security architecture, enterprise architecture, infrastructure or technology operations, ideally within a large and complex environment. You will have strong knowledge of security principles, cloud platforms, network and systems architecture, identity services, threat modelling and security controls. Experience developing architecture patterns, standards and roadmaps, together with familiarity with frameworks such as NIST, ISO 27001, CIS or SABSA, would be advantageous. Relevant professional qualifications in information security, architecture or cloud technologies are desirable. You should be analytical, pragmatic and confident engaging with both technical specialists and senior stakeholders. The role requires strong problem-solving skills, sound judgement, and the ability to turn complex security challenges into clear, actionable solutions.

We are seeking an experienced OT Network & Security Engineer to support the design, operation and continuous improvement of secure operational technology environments. In this role, you will help protect industrial control systems, manufacturing networks and critical infrastructure from cyber threats while maintaining the availability, safety and performance of essential operations. You will work closely with engineering, infrastructure, automation, operations and cybersecurity teams to ensure that OT systems are resilient, well monitored and aligned with recognised security standards.

Your responsibilities will include designing and maintaining secure OT network architectures, including segmentation, firewalls, secure remote access, industrial switches, wireless infrastructure and intrusion detection capabilities. You will configure and troubleshoot network and security devices, investigate alerts and incidents, and support vulnerability management, patching and risk remediation across operational environments. You will also contribute to asset discovery, network mapping, access control reviews, backup and recovery planning, change management and the development of technical documentation, procedures and security standards. Where required, you will assist with assessments, audits, incident response exercises and the implementation of new security controls.

The successful candidate will have proven experience in OT, ICS, SCADA or industrial network security, together with strong knowledge of TCP/IP, VLANs, routing, firewalls, VPNs, network monitoring and common industrial protocols such as Modbus, DNP3 or OPC. Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001 or comparable standards is highly desirable. Experience with vulnerability assessment tools, SIEM platforms and secure access technologies would be advantageous. You should be analytical, methodical and confident working in environments where safety and operational continuity are essential. Strong communication skills are required, along with the ability to explain technical risks clearly and collaborate with both technical and non-technical stakeholders. Relevant certifications in networking, cybersecurity or industrial control systems are welcome.

We are seeking an experienced Data Protection Officer to lead and oversee the organisation’s data protection and privacy framework. The successful candidate will provide independent advice on compliance with applicable data protection legislation, regulatory guidance and internal policies, while promoting a strong culture of privacy and responsible information handling across the organisation. This role will work closely with senior leaders, legal, information security, technology, human resources and operational teams.

Key responsibilities will include monitoring compliance with data protection requirements; maintaining and reviewing privacy policies, procedures and records of processing activities; advising on data protection impact assessments, legitimate interest assessments and privacy-by-design initiatives; and supporting the management of individual rights requests, personal data breaches and regulatory enquiries. The Data Protection Officer will also provide practical guidance on data sharing, international transfers, retention schedules, consent, direct marketing and the use of new technologies. They will develop and deliver training and awareness programmes, conduct audits and reviews, track remedial actions, and prepare clear reports and recommendations for relevant governance forums.

Applicants should have substantial experience in a data protection, privacy, compliance or information governance role, with a strong understanding of relevant legislation and regulatory expectations. Professional qualifications or recognised certification in data protection, privacy or information governance are desirable. The successful candidate will be analytical, organised and confident in interpreting complex requirements and translating them into practical solutions. Excellent written and verbal communication skills are essential, along with the ability to build trusted relationships, challenge constructively and work independently. Experience managing data breaches, conducting privacy assessments, supporting audits and advising on data processing arrangements will be highly valued.

We are seeking a SOC Analyst to support the monitoring, investigation, and response to cybersecurity events across a dynamic technology environment. In this role, you will work as part of a security operations team responsible for identifying potential threats, assessing risk, and helping to protect systems, applications, networks, and data. You will review alerts from security monitoring platforms, investigate suspicious activity, and determine whether events represent genuine incidents or false positives.

Your responsibilities will include monitoring security information and event management (SIEM) dashboards, endpoint detection and response tools, intrusion detection systems, firewalls, and other security technologies. You will analyse logs and indicators of compromise, perform initial incident triage, document findings, and escalate confirmed or complex incidents in accordance with established procedures. You will also contribute to incident response activities, including containment, evidence gathering, remediation support, and post-incident reviews. Maintaining accurate case records and preparing clear reports for technical and non-technical stakeholders will be an important part of the role.

Applicants should have experience in a security operations, incident response, IT support, or related cybersecurity environment, together with a sound understanding of networking, operating systems, authentication, malware, vulnerabilities, and common attack techniques. Familiarity with SIEM platforms, security monitoring tools, ticketing systems, and frameworks such as MITRE ATT&CK is desirable. Relevant certifications or formal training in cybersecurity are advantageous. The successful candidate will be analytical, methodical, and calm under pressure, with strong written and verbal communication skills. A willingness to work rotational shifts, including occasional evenings, nights, weekends, or public holidays, may be required to support continuous monitoring.

We are seeking a Senior Information Security Consultant (GRC) to provide expert guidance on governance, risk and compliance across a complex technology and business environment. The successful candidate will work with stakeholders at all levels to assess information security risks, strengthen control frameworks and support the continued development of effective security governance practices. This role requires a pragmatic consultant who can translate regulatory, technical and business requirements into clear, achievable improvements.

Responsibilities will include conducting information security and technology risk assessments, maintaining risk registers and developing appropriate mitigation plans. You will support the design, implementation and review of security policies, standards, procedures and control frameworks, while coordinating assurance activities, internal audits and external assessments. The role will also involve mapping controls to relevant legislation, regulations and industry standards, such as ISO 27001, NIST, COBIT or applicable data protection requirements. You will prepare clear reports and management information, track remediation actions, and provide constructive advice on control gaps and emerging risks.

You will build strong working relationships with technology, business, legal, privacy, procurement and operational teams, helping to embed security and risk management into projects, change initiatives and day-to-day processes. Experience supporting third-party risk management, security questionnaires, supplier reviews, business continuity or incident management would be valuable. Applicants should have substantial experience in information security governance, risk or compliance, with a strong understanding of security principles, control testing and regulatory expectations. Relevant professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, analytical and stakeholder management skills are essential, along with the ability to work independently, prioritise competing demands and present complex information clearly to both technical and non-technical audiences.