We are seeking a Security Consultant to help organisations in the Health and Public Services sector strengthen their... Read more
We are seeking a Security Consultant to help organisations in the Health and Public Services sector strengthen their security posture, manage risk and respond effectively to an evolving threat landscape. In this role, you will work with clients and internal teams to understand business requirements, assess security capabilities and develop practical, risk-based solutions that support the delivery of critical services. You will contribute across the full consulting lifecycle, from discovery and analysis through to implementation, assurance and continuous improvement.
Your responsibilities will include conducting security assessments, identifying vulnerabilities and control gaps, and recommending appropriate mitigation strategies. You will support the development and review of security policies, standards, procedures, architectures and operating models, ensuring they align with relevant regulatory, privacy and industry requirements. You may also contribute to risk assessments, audit preparation, incident response planning, security governance and the delivery of transformation programmes. The role involves producing clear reports and presentations, communicating complex technical and business risks to a range of stakeholders, and helping clients make informed security decisions.
We are looking for experience in security consulting, information security, cyber risk, governance, risk and compliance, or a related field. You should have a sound understanding of security principles, common frameworks and controls, with the ability to translate technical issues into practical business recommendations. Experience working with public sector, healthcare or other highly regulated environments would be beneficial. Strong analytical, communication and stakeholder-management skills are essential, along with the ability to work independently and collaboratively in a changing environment. Relevant professional certifications, such as CISSP, CISM, CRISC, ISO 27001 or equivalent, are desirable. This opportunity offers the chance to work on varied, high-impact engagements while helping improve the security and resilience of essential services.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Senior Technical Security Consultant to provide expert guidance on the design, implementation and assurance... Read more
We are seeking a Senior Technical Security Consultant to provide expert guidance on the design, implementation and assurance of secure technology solutions across complex programmes and client environments. Working with technical and business stakeholders, you will assess security risks, define appropriate controls and translate security requirements into practical, scalable architectures. The role will support projects within health and public service environments, where confidentiality, availability, resilience and regulatory compliance are critical.
Your responsibilities will include leading security assessments, threat modelling and risk analysis; reviewing solution and infrastructure designs; developing security architectures, standards and patterns; and advising on identity and access management, cloud security, network protection, data security, vulnerability management and secure software development. You will contribute to security governance, assurance and compliance activities, prepare clear technical documentation and reports, and support the resolution of security findings. You will also work closely with delivery teams, suppliers and senior stakeholders to embed secure-by-design principles throughout the project lifecycle.
The successful candidate will have substantial experience in technical security consulting, security architecture or a related role, with a strong understanding of enterprise infrastructure, cloud platforms, applications and modern cyber threats. Experience delivering security outcomes in regulated, public-sector or other complex environments is highly desirable. You should be confident engaging with both technical and non-technical audiences, able to challenge constructively and communicate complex risks in clear business terms. Relevant professional certifications such as CISSP, CISM, SABSA, CCSP or equivalent would be advantageous. Strong analytical, problem-solving and stakeholder-management skills are essential, together with the ability to work independently, manage competing priorities and provide pragmatic recommendations that support secure and effective service delivery.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Security Services Engineer I to support the delivery, maintenance and continuous improvement of secure... Read more
We are seeking a Security Services Engineer I to support the delivery, maintenance and continuous improvement of secure technology services across a UK-based environment. This is an early-career opportunity for someone with a strong interest in information security, infrastructure and service operations. You will work as part of a collaborative technical team, helping to protect systems, applications and data while providing reliable support to internal users and technical stakeholders.
Your responsibilities will include monitoring security tools and alerts, investigating and escalating potential incidents, supporting vulnerability management activities, and assisting with the implementation of security controls. You will help maintain security configurations across endpoints, networks, servers and cloud services, contribute to access management and review processes, and support routine audits and compliance checks. You will also create and maintain technical documentation, follow incident and change management procedures, participate in service improvement initiatives, and communicate clearly with colleagues when resolving issues. The role may include participation in an out-of-hours support rota as required.
Applicants should have practical experience or a relevant qualification in cybersecurity, information technology, networking or a related discipline. A foundational understanding of security principles, identity and access management, endpoint protection, vulnerability scanning and common network technologies is desirable. Familiarity with security monitoring platforms, ticketing systems, Microsoft or cloud-based environments, and recognised security frameworks would be beneficial. You should be analytical, organised and eager to learn, with the ability to prioritise tasks, investigate problems methodically and handle sensitive information responsibly. Strong written and verbal communication skills are essential, along with a proactive approach and a commitment to delivering dependable, customer-focused technical support.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Systems Security Engineer to support the design, implementation, and maintenance of secure, resilient technology... Read more
We are seeking a Systems Security Engineer to support the design, implementation, and maintenance of secure, resilient technology environments. The successful candidate will work across infrastructure, applications, networks, and cloud services to identify security risks and develop practical solutions that protect systems, data, and users. This role will contribute to security architecture, system hardening, vulnerability management, incident response, and the continuous improvement of security controls throughout the technology lifecycle.
Key responsibilities include assessing security requirements for new and existing systems; conducting threat, risk, and vulnerability assessments; developing and maintaining secure configuration standards; and supporting security testing, monitoring, and remediation activities. You will collaborate with engineering, operations, and project teams to embed security into system design and delivery. The role will also involve investigating security events, supporting incident response and recovery, maintaining technical documentation, and contributing to security policies, procedures, and compliance evidence. You may also provide technical advice on identity and access management, network security, encryption, endpoint protection, logging, and cloud security.
Applicants should have demonstrable experience in systems security engineering, infrastructure security, or a closely related discipline, together with a strong understanding of security principles, risk management, and secure system design. Experience with operating systems, networking, cloud platforms, security monitoring tools, vulnerability scanners, and configuration management technologies is highly desirable. Familiarity with recognised security frameworks and standards, as well as relevant professional certifications, would be advantageous. Strong analytical, communication, and problem-solving skills are essential, along with the ability to manage competing priorities, explain technical risks to varied audiences, and work effectively both independently and as part of a multidisciplinary team. An eligibility check and background screening may be required.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking an experienced Manager to lead cybersecurity, privacy and technology compliance activities across the UK and... Read more
We are seeking an experienced Manager to lead cybersecurity, privacy and technology compliance activities across the UK and Ireland. This role will help protect business operations, customer information and technology environments by strengthening governance, managing risk and embedding practical security and privacy controls. You will work closely with senior stakeholders, technology teams, legal and compliance specialists, and operational leaders to ensure that security and privacy requirements are understood and consistently applied.
Your responsibilities will include developing and maintaining cybersecurity and privacy policies, standards and risk management frameworks; overseeing control assessments, audits and assurance activities; identifying and prioritising information security and data protection risks; and supporting remediation plans through to completion. You will advise on regulatory and contractual requirements, including relevant UK and European data protection obligations, and contribute to security and privacy considerations throughout the technology and project lifecycle. The role will also involve supporting incident response, business continuity, third-party risk management, security awareness initiatives and regular reporting to leadership. You will manage competing priorities, provide clear recommendations and promote a culture of accountability and continuous improvement.
The successful candidate will have proven experience in cybersecurity, information security, privacy, technology risk or compliance, ideally within a complex or highly regulated environment. You should be confident translating technical and regulatory issues for non-technical audiences and influencing stakeholders at all levels. Experience with recognised security and privacy frameworks, audit and assurance processes, risk assessments, regulatory requirements and supplier governance is highly desirable. Relevant professional qualifications, such as CISSP, CISM, CRISC, CIPM, CIPP/E, ISO 27001 or equivalent, would be an advantage. Strong communication, relationship-building, analytical and organisational skills are essential, along with the ability to lead initiatives, challenge constructively and deliver results across multiple teams and locations.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Senior Manager, Cyber Architect to provide strategic security architecture leadership within a complex financial... Read more
We are seeking a Senior Manager, Cyber Architect to provide strategic security architecture leadership within a complex financial services environment. This role will shape and govern secure, resilient technology solutions across business applications, infrastructure, cloud platforms, data, and emerging technologies. You will work closely with senior stakeholders, technology leaders, risk specialists, and delivery teams to ensure security is embedded throughout the design, development, and implementation lifecycle.
Key responsibilities will include defining and maintaining enterprise and domain security architecture principles, standards, reference models, and roadmaps; assessing proposed technology solutions and identifying cyber risks, control gaps, and appropriate remediation actions; and providing authoritative guidance on cloud security, identity and access management, network security, application security, data protection, and secure engineering practices. You will lead architecture reviews, support major transformation and change programmes, contribute to threat modelling and risk assessments, and help ensure alignment with regulatory obligations, internal policies, and recognised security frameworks. The role will also involve mentoring architects and security professionals, influencing senior decision-makers, and promoting a consistent security-by-design culture.
To succeed, you will bring significant experience in cyber security architecture, technology risk, or a related discipline, ideally gained within financial services or another highly regulated environment. You should have a strong understanding of enterprise architecture, modern cloud technologies, cyber threat landscapes, security controls, and regulatory expectations. Experience developing architecture strategies, governing complex programmes, and communicating technical risk to both technical and non-technical audiences is essential. Relevant professional certifications such as CISSP, CISM, SABSA, TOGAF, or cloud security qualifications would be advantageous. We are looking for a confident, collaborative leader who can balance security, customer needs, operational resilience, and commercial priorities while delivering practical, sustainable outcomes.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Senior Consultant specialising in Cyber Security, Cloud and Financial Services to support clients through... Read more
We are seeking a Senior Consultant specialising in Cyber Security, Cloud and Financial Services to support clients through complex technology and transformation challenges. This role will involve working with senior stakeholders to assess cyber and cloud environments, identify risks and opportunities, and design practical solutions that strengthen resilience, improve governance and enable secure business growth. You will contribute across the full consulting lifecycle, from discovery and requirements gathering through to solution design, implementation support and benefits realisation.
Key responsibilities will include leading or supporting cyber security and cloud engagements; conducting risk, maturity and control assessments; developing target operating models, policies, standards and roadmaps; and advising on cloud adoption, secure architecture, identity and access management, data protection, resilience and regulatory compliance. You will produce high-quality reports, presentations and client deliverables, facilitate workshops, manage workstreams and help translate complex technical issues into clear recommendations for both technical and non-technical audiences. The role may also involve coaching junior colleagues, contributing to proposals and supporting the development of new approaches, tools and market offerings for financial services clients.
The successful candidate will have significant experience in cyber security, cloud consulting, technology risk or a related field, ideally within banking, insurance, investment management or another regulated financial services environment. Strong knowledge of relevant security frameworks, risk management principles, cloud technologies and regulatory expectations is required. Experience with major cloud platforms, cyber transformation, governance and operating models, or security architecture would be advantageous. You should be confident engaging with senior stakeholders, managing competing priorities and delivering work to a high standard in a client-facing environment. Excellent analytical, communication and report-writing skills are essential, together with the ability to work collaboratively, demonstrate commercial awareness and take ownership of complex assignments. Relevant professional certifications in cyber security, cloud, audit, risk or project delivery are desirable.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking an experienced Security Consultant to provide expert advice and practical support across a range of... Read more
We are seeking an experienced Security Consultant to provide expert advice and practical support across a range of information and cyber security initiatives. The successful candidate will work with stakeholders to assess risks, strengthen security controls, and help protect systems, data, and services from evolving threats. This role offers the opportunity to contribute to strategic improvement while delivering hands-on consultancy across varied technical and business environments.
Responsibilities will include conducting security assessments, risk analyses, and maturity reviews; developing and maintaining security policies, standards, procedures, and guidance; and supporting the design and implementation of appropriate technical and organisational controls. You will advise on cloud security, identity and access management, vulnerability management, incident response, data protection, and secure architecture. The role will also involve reviewing solutions and projects, documenting findings, recommending remediation activities, and tracking actions through to completion. You may contribute to security testing, audit preparation, third-party assurance, security awareness initiatives, and the investigation of incidents or control weaknesses.
Applicants should have demonstrable experience in a security consultancy, information security, cyber security, or related role, together with a strong understanding of recognised security frameworks, risk management principles, and relevant data protection requirements. Practical knowledge of security technologies, cloud platforms, network and application security, and governance processes is desirable. Professional certifications such as CISSP, CISM, CRISC, ISO 27001, or equivalent qualifications would be advantageous. You should be analytical, organised, and confident communicating complex technical matters to both technical and non-technical audiences. The ability to build effective relationships, manage competing priorities, produce clear written recommendations, and work independently is essential.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking an experienced Head of Information Security to lead the development and execution of a comprehensive... Read more
We are seeking an experienced Head of Information Security to lead the development and execution of a comprehensive security strategy across the organisation. This is a senior leadership role responsible for protecting information assets, technology platforms, and business operations while enabling secure growth and innovation. You will provide clear direction on information security, cyber risk, governance, and resilience, working closely with executive stakeholders and technology leaders to ensure security is embedded into business decision-making.
Key responsibilities will include defining and maintaining the information security strategy, policies, standards, and operating model; overseeing risk assessment and treatment; and ensuring compliance with relevant legal, regulatory, and industry requirements. You will lead security monitoring, incident response, vulnerability management, identity and access management, security architecture, and third-party risk oversight. The role will also involve developing business continuity and disaster recovery capabilities, coordinating responses to significant security incidents, and providing regular risk reporting and assurance to senior leadership. You will manage security budgets, suppliers, and specialist teams, while promoting a strong culture of security awareness throughout the organisation.
The successful candidate will have substantial experience leading information security or cyber security functions, ideally within a complex, regulated, or technology-driven environment. You will bring strong knowledge of recognised security frameworks and standards, risk management, data protection, cloud security, and incident management. Relevant professional certifications such as CISSP, CISM, CRISC, or equivalent experience are desirable. Excellent communication and influencing skills are essential, as is the ability to translate technical risks into clear business priorities. You should be commercially aware, pragmatic, and confident operating at both strategic and operational levels, with a collaborative leadership style and a commitment to continuous improvement.
Read lessEdinburgh, Scotland, United KingdomPermanent
We are seeking a Security Engineer to help protect systems, applications, networks and data across a complex technology... Read more
We are seeking a Security Engineer to help protect systems, applications, networks and data across a complex technology environment. In this role, you will design, implement and maintain effective security controls, monitor for potential threats, and support the ongoing improvement of security operations. You will work closely with infrastructure, software development, cloud and business teams to embed security throughout the technology lifecycle and help ensure that solutions are resilient, compliant and fit for purpose.
Your responsibilities will include investigating security alerts and incidents, performing vulnerability assessments, coordinating remediation activities and contributing to threat modelling and risk assessments. You will help manage security tools and services such as endpoint protection, identity and access management, security information and event monitoring, vulnerability management and cloud security controls. You will also support penetration testing, security reviews, incident response exercises and the development of clear technical documentation, standards and procedures. Where appropriate, you will provide practical guidance to engineering teams and promote secure development and operational practices.
The successful candidate will have professional experience in a security engineering, cyber security or related technical role, with a strong understanding of network security, operating systems, authentication, encryption and common attack techniques. Experience with cloud platforms, scripting or automation, security monitoring tools and vulnerability management is highly desirable. Relevant certifications or equivalent practical experience will be valued. You should be analytical, curious and able to communicate technical risks clearly to both technical and non-technical audiences. The role requires a collaborative approach, sound judgement, attention to detail and the ability to prioritise effectively when responding to incidents or managing competing security improvements.
Read lessEdinburgh, Scotland, United KingdomPermanent
All your saved jobs are no longer available or you've already applied.
for the following search criteria