Job Search

We are seeking an experienced Information Security Officer to help protect information assets, systems and services across a complex and evolving environment. In this role, you will support the development, implementation and continuous improvement of information security policies, standards and controls. You will work closely with technology, risk, compliance and operational teams to identify security risks, recommend practical mitigations and promote a strong culture of security awareness.

Key responsibilities will include maintaining security policies and procedures; coordinating risk assessments, control reviews and compliance activities; monitoring security incidents and supporting effective investigation and response; and contributing to business continuity, disaster recovery and third-party assurance processes. You will help manage vulnerability and remediation programmes, track security actions, prepare clear reports for senior stakeholders and support audits or regulatory reviews. The role will also involve advising on secure system design, access management, data protection and the security implications of new projects, suppliers and technology changes. You may be required to deliver training and awareness initiatives for colleagues at all levels.

Applicants should have demonstrable experience in information security, cybersecurity, risk management or a related discipline, together with a sound understanding of recognised security frameworks, data protection principles and relevant regulatory requirements. Experience of security governance, incident management, vulnerability management, audit preparation and supplier assurance is desirable. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 or equivalent would be advantageous. You will need strong analytical and problem-solving skills, excellent written and verbal communication, and the ability to explain technical issues to non-technical audiences. The successful candidate will be organised, collaborative and able to manage competing priorities while maintaining a proportionate, risk-based approach to security.

We are seeking an experienced and highly capable Deputy Principal Security Adviser to support the delivery of effective, proportionate and risk-based security across a complex operating environment. Working closely with senior leaders, operational teams and external partners, you will provide authoritative advice on protective security, resilience and the management of security risks. You will contribute to the development of security strategies, policies and assurance frameworks, ensuring that they remain aligned with relevant legislation, recognised standards and organisational priorities.

Your responsibilities will include assessing threats and vulnerabilities, advising on risk mitigation, and overseeing the implementation of appropriate physical, personnel, information and technical security controls. You will support incident preparedness and response, coordinate investigations where required, and help ensure that lessons are identified and embedded. The role will also involve leading or contributing to security reviews, audits, exercises and business continuity planning, as well as preparing clear reports and recommendations for senior decision-makers. You will build constructive relationships with stakeholders at all levels and may represent the organisation at inter-agency meetings, professional forums and other external engagements.

You will bring substantial experience in a senior security, resilience, risk or protective security role, together with a strong understanding of security governance, threat assessment and assurance. Excellent analytical, communication and influencing skills are essential, as is the ability to translate complex security issues into practical advice. You should be confident working independently, managing competing priorities and making sound judgements in sensitive or high-pressure situations. Relevant professional qualifications or demonstrable equivalent experience would be advantageous. Integrity, discretion and a collaborative approach are fundamental to success in this role. The successful candidate will be expected to maintain current knowledge of emerging threats, security best practice and regulatory developments, and to support a culture in which security is understood as a shared responsibility.

We are seeking an experienced Head of Security, Risk & Compliance to lead the development and delivery of a global security, risk and compliance strategy. This is a senior leadership role with responsibility for protecting people, systems, data and operations across multiple regions, while enabling business growth and supporting a strong culture of accountability. You will advise executive stakeholders and the wider leadership team on security threats, regulatory obligations, risk exposure and appropriate investment priorities.

You will own the information security, cyber risk, governance, compliance and business continuity frameworks, ensuring they remain effective, proportionate and aligned with organisational objectives. Key responsibilities include establishing policies, standards and controls; maintaining enterprise risk and compliance registers; overseeing security monitoring, incident response and investigations; managing third-party and supply-chain risk; and coordinating resilience, disaster recovery and crisis management activities. You will also lead audit and assurance programmes, support regulatory engagements, track remediation activity and provide clear reporting to senior governance forums. Building collaborative relationships with technology, legal, privacy, people and operational teams will be central to your success.

The successful candidate will bring substantial experience in a senior security, risk or compliance leadership position, ideally within a complex, international or highly regulated environment. You will have a strong understanding of information security principles, cyber risk management, privacy, regulatory compliance and recognised frameworks such as ISO 27001, NIST or SOC 2. Relevant professional qualifications, such as CISSP, CISM, CRISC, CISA or equivalent, are desirable. We are looking for a confident communicator and pragmatic decision-maker who can translate complex issues into clear business priorities, influence at executive level and lead teams through change. A strategic mindset, sound judgement, commercial awareness and a commitment to continuous improvement are essential.

We are seeking an experienced Cyber Security Manager to lead the development, implementation and continuous improvement of an organisation-wide information security programme. This role will provide strategic direction and practical leadership across cyber security, risk management, governance and operational resilience, ensuring that systems, services and data are protected against evolving threats. You will work closely with technology, compliance, risk, legal and business teams to embed effective security practices and support informed decision-making.

Key responsibilities will include maintaining and enhancing security policies, standards and procedures; overseeing vulnerability management, security monitoring, incident response and threat management; and coordinating the investigation, containment and resolution of security incidents. You will manage security risk assessments, track remediation activity and provide clear reporting on risk exposure, control effectiveness and key performance indicators to senior stakeholders. The role will also contribute to secure architecture and project reviews, supplier and third-party assurance, identity and access management, data protection initiatives, disaster recovery planning and compliance with relevant legislation, regulations and industry frameworks.

The successful candidate will have substantial experience in cyber security, information assurance or a related discipline, with a strong understanding of security governance, risk assessment, incident management and security controls. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or equivalent are desirable. You will be an effective communicator with the ability to translate complex technical matters into clear business advice, influence stakeholders at all levels and lead teams or external partners effectively. A proactive, analytical and collaborative approach is essential, together with a commitment to continuous improvement and keeping up to date with emerging threats, technologies and best practice.