Job Search

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices.

Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear reports for governance forums and senior stakeholders. The role will also involve reviewing policies, standards and procedures, supporting risk assessments for new technologies and projects, and helping to ensure alignment with relevant regulatory, industry and internal requirements. You may also contribute to audit activity, incident reviews, third-party risk assessments and continuous improvement initiatives.

The successful candidate will have experience in technology risk, cyber security controls, IT assurance, internal audit or a related discipline. You should understand common control frameworks and principles, such as ISO 27001, NIST, COBIT or similar, and be comfortable evaluating risks across areas including access management, change management, vulnerability management, data protection, resilience and supplier security. Strong analytical, written and verbal communication skills are essential, together with the ability to interpret technical information and explain it clearly to non-technical audiences. Experience using governance, risk and compliance tools, managing multiple priorities and working collaboratively with stakeholders at different levels would be advantageous. Relevant qualifications in information security, technology, risk or audit are desirable.

We are seeking an experienced OT SIEM Engineer to support the development, operation and continual improvement of security monitoring across operational technology environments. You will play a key role in protecting industrial systems, control networks and connected assets by ensuring that relevant security events are collected, analysed and acted upon effectively. Working closely with operational technology, information security, infrastructure and engineering teams, you will help strengthen visibility and resilience across critical environments.

Your responsibilities will include designing, configuring and maintaining SIEM use cases, dashboards, alerts and correlation rules relevant to OT and industrial control systems. You will onboard and validate data sources such as firewalls, network monitoring tools, endpoint technologies, identity services and OT security platforms, ensuring that logs are accurate, appropriately retained and fit for detection purposes. You will investigate security alerts and incidents, undertake threat-led analysis, support incident response activities and contribute to root-cause investigations. You will also tune detection content to reduce false positives, identify gaps in monitoring and develop meaningful reporting for technical and senior stakeholders.

The successful candidate will have practical experience with SIEM technologies and security monitoring, ideally within an OT, ICS, SCADA, manufacturing, energy or similarly complex environment. You should understand common OT protocols, network architectures, asset management principles and the operational constraints associated with industrial systems. Knowledge of threat intelligence, incident response, vulnerability management and relevant frameworks such as MITRE ATT&CK for ICS, NIST or IEC 62443 would be advantageous. Strong analytical and communication skills are essential, alongside the ability to document technical findings clearly and work collaboratively with a range of stakeholders. Relevant security certifications or demonstrable equivalent experience are desirable.

We are seeking a Privacy Compliance Associate to support the delivery and ongoing development of privacy compliance activities across the organisation. This role will help ensure that personal data is handled lawfully, fairly and transparently, while supporting the implementation of effective controls, policies and procedures. You will work closely with colleagues across legal, information security, risk, technology and business operations to provide practical advice and promote a strong culture of data protection.

Key responsibilities will include maintaining records of processing activities, supporting data protection impact assessments, reviewing data protection queries and assisting with the management of individual rights requests. You will help monitor compliance with relevant privacy legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018, and contribute to the review and maintenance of privacy notices, policies, procedures and internal guidance. The role will also involve supporting the assessment and management of personal data breaches, assisting with supplier and third-party due diligence, tracking compliance actions and preparing clear reports for relevant stakeholders. You may also contribute to privacy training, awareness initiatives, audits and continuous improvement projects.

The successful candidate will have experience in a privacy, data protection, compliance, risk or governance environment, with a sound understanding of UK data protection requirements and their practical application. You should be organised, analytical and confident in managing competing priorities, with excellent written and verbal communication skills. The ability to interpret complex information, identify risks and provide clear, proportionate advice to non-specialist audiences is essential. Experience of maintaining compliance records, handling data subject rights requests, supporting impact assessments or working with information governance tools would be advantageous. A relevant professional qualification, such as a CIPP/E, CIPM or an equivalent data protection or compliance qualification, is desirable but not essential.

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and information security risks across a complex, regulated environment. You will provide constructive challenge, practical advice and independent oversight, helping the business to identify, assess and manage risks within appetite while supporting the delivery of strategic technology objectives.

Key responsibilities will include maintaining and enhancing cyber and technology risk and control frameworks; conducting risk assessments, control reviews and thematic deep dives; and monitoring the effectiveness of preventative and detective controls. You will oversee the identification, recording and remediation of control weaknesses, ensuring that actions are appropriately prioritised, evidenced and completed within agreed timescales. The role will also involve reviewing policies, standards and procedures, supporting technology change and transformation initiatives, and assessing risks relating to areas such as cloud services, third-party suppliers, operational resilience, access management, data protection and vulnerability management.

You will prepare clear risk reporting and management information for senior stakeholders and relevant governance forums, highlighting emerging threats, trends, incidents and areas requiring attention. You will work closely with cyber security, technology, audit, compliance, legal and operational teams, promoting a strong risk culture and consistent control ownership across the organisation. The successful candidate will have demonstrable experience in technology, cyber security, IT risk, controls or assurance, ideally within a large or regulated organisation. You should be confident interpreting technical information, challenging constructively and communicating complex issues to both technical and non-technical audiences. Knowledge of recognised frameworks and standards such as ISO 27001, NIST, COBIT, ITIL or the Three Lines Model would be advantageous, as would relevant professional qualifications in risk, audit, information security or technology.

We are seeking an experienced Cyber Fusion CSIRT Lead to direct the organisation’s cyber incident response capability and coordinate the effective detection, investigation, containment, and remediation of security threats. You will lead a team of incident responders and work closely with security operations, threat intelligence, digital forensics, vulnerability management, infrastructure, legal, risk, and business stakeholders. The role requires calm, decisive leadership during high-impact incidents and the ability to translate complex technical issues into clear advice for senior decision-makers.

Responsibilities will include defining and continuously improving incident response processes, playbooks, escalation procedures, and communication plans; leading the triage and management of suspected and confirmed cyber incidents; coordinating forensic investigations and root-cause analysis; and ensuring timely recovery and lessons learned. You will oversee the development of proactive threat-hunting and intelligence-led response activities, assess emerging threats, and help strengthen detection and response capabilities across the environment. The role will also involve managing incident reporting, metrics, post-incident reviews, regulatory or contractual notifications where required, and relationships with external partners, law enforcement, and specialist providers.

Applicants should have substantial experience in cyber incident response, CSIRT, SOC, digital forensics, or a closely related discipline, including demonstrable experience leading major or complex security incidents. Strong knowledge of attack techniques, incident-handling frameworks, threat intelligence, endpoint and network investigations, cloud security, and security monitoring technologies is essential. Experience developing operational processes and mentoring technical teams is highly desirable. Relevant professional certifications, such as CISSP, CISM, GIAC, or equivalent, would be advantageous. You will need excellent communication, prioritisation, and stakeholder-management skills, a structured approach to problem-solving, and the resilience to operate effectively in a fast-paced environment, including participation in an out-of-hours incident escalation rota.

We are seeking a Cyber Compliance Specialist to support the development, implementation and continuous improvement of cybersecurity compliance activities across the organisation. The successful candidate will help ensure that security controls, policies and procedures align with applicable laws, regulations, industry standards and internal requirements. This role will work closely with technology, risk, legal, audit and business teams to promote a consistent, practical and risk-based approach to cybersecurity governance.

Key responsibilities will include maintaining compliance registers, control frameworks, policies, standards and supporting documentation; coordinating internal and external audits; gathering evidence and tracking remediation actions; and monitoring changes in legislation, regulatory expectations and recognised security frameworks. You will assist with risk assessments, control testing, exception management and reporting, while helping to identify opportunities to strengthen cyber controls and improve operational resilience. The role will also contribute to security awareness initiatives, supplier and third-party assessments, incident and issue reviews, and the preparation of clear management information for relevant governance forums.

Applicants should have experience in cybersecurity, IT risk, compliance, governance, audit or a related discipline, with a sound understanding of security and privacy principles. Familiarity with frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, COBIT, PCI DSS or applicable data protection requirements is highly desirable. You will be confident interpreting requirements, documenting evidence and explaining technical or regulatory matters to both specialist and non-specialist audiences. Strong analytical, organisational and communication skills are essential, along with the ability to manage competing priorities, work collaboratively and maintain attention to detail. Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor are advantageous, as is experience with compliance, risk or governance platforms.

We are seeking an experienced Cyber Security Lead to provide strategic direction and operational leadership across a broad information security landscape. You will be responsible for strengthening security maturity, protecting critical systems and data, and ensuring that cyber security risks are identified, assessed, and managed effectively. This role will work closely with technology, risk, compliance, and business stakeholders to embed secure practices across projects, services, and day-to-day operations.

Key responsibilities will include developing and maintaining the cyber security strategy, policies, standards, and controls; leading security risk assessments and supporting risk treatment plans; overseeing vulnerability management, security monitoring, incident response, and threat intelligence activities; and coordinating investigations into suspected security events. You will provide expert advice on secure architecture, cloud services, applications, infrastructure, and third-party relationships. The role will also contribute to business continuity and disaster recovery planning, support audits and regulatory assessments, and ensure that security requirements are incorporated into change and delivery processes. You will monitor the effectiveness of controls, produce clear reports for senior stakeholders, and drive continual improvement through measurable security objectives.

To succeed, you will have substantial experience in cyber security, information security, or a related discipline, including experience leading security programmes, teams, or significant projects. Strong knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, or comparable approaches is expected, along with practical understanding of identity and access management, network security, endpoint protection, cloud security, data protection, and incident management. Relevant professional certifications, such as CISSP, CISM, CRISC, or equivalent, are desirable. You will be an effective communicator who can translate complex technical risks into clear business recommendations, influence stakeholders at all levels, and balance robust security with practical delivery. A proactive, analytical, and collaborative approach is essential.

We are seeking a Cyber Fusion CSIRT Lead to direct and strengthen incident response, cyber threat intelligence and security operations across a complex technology environment. This role will lead the coordination of responses to significant cyber incidents, ensuring that threats are identified, contained, investigated and resolved efficiently. You will act as a senior point of contact during critical events, providing clear updates to technical teams, leadership and relevant stakeholders while maintaining a calm, structured and evidence-led approach.

Key responsibilities include managing and mentoring a team of incident responders and cyber analysts; developing and maintaining CSIRT processes, playbooks and operating procedures; coordinating investigations into malware, ransomware, phishing, data loss, insider threats and other security events; and overseeing the collection, preservation and analysis of forensic evidence. You will work closely with security operations, infrastructure, application, risk, legal and compliance teams to improve detection and response capabilities. The role will also contribute to threat hunting, intelligence-led defence, vulnerability prioritisation, crisis exercises, post-incident reviews and the continuous improvement of security controls. You will establish meaningful performance metrics, identify recurring attack patterns and ensure lessons learned are converted into practical actions.

The successful candidate will bring substantial experience in cyber incident response, digital forensics, threat intelligence or security operations, including experience leading responses to high-impact incidents. Strong knowledge of incident management frameworks, attack techniques, malware analysis, network and endpoint security, cloud environments and security monitoring technologies is required. Experience with SIEM, EDR, SOAR and threat intelligence platforms, along with familiarity with recognised frameworks such as NIST or MITRE ATT&CK, would be highly beneficial. Professional certifications in cybersecurity, incident handling or digital forensics are desirable. You will need excellent communication and stakeholder-management skills, sound judgement under pressure, strong analytical capability and the ability to translate complex technical issues into clear recommendations. This role may require participation in an on-call or out-of-hours incident response rota.

We are seeking an Associate Security Architect to support the design, implementation, and continuous improvement of secure technology solutions across a complex and evolving environment. Working alongside experienced security architects, engineers, developers, and business stakeholders, you will help translate security principles into practical, scalable controls that protect systems, applications, data, and services. This is an opportunity to develop your architectural expertise while contributing to initiatives that have a direct impact on organisational resilience and risk management.

Your responsibilities will include contributing to security architecture reviews, documenting current and target-state designs, and assessing proposed solutions against established policies, standards, and regulatory requirements. You will help identify security risks, recommend appropriate mitigations, and support the creation of security patterns, reference architectures, and technical standards. The role will involve collaborating with delivery teams throughout the solution lifecycle, from early requirements and design through implementation and operational handover. You may also assist with threat modelling, security assessments, cloud and infrastructure reviews, identity and access management design, network security, vulnerability management, and incident response improvements.

Applicants should have practical experience in information security, security engineering, infrastructure, software development, or a related technical discipline, together with a strong interest in security architecture. Familiarity with cloud platforms, enterprise networks, operating systems, application security, authentication technologies, and common security frameworks is desirable. You should be able to analyse complex technical information, explain risks clearly to both technical and non-technical audiences, and produce accurate architecture documentation. Relevant certifications or qualifications, such as those in cloud security, architecture, or information security, are advantageous. We are looking for a collaborative, curious, and methodical professional who can manage competing priorities, challenge assumptions constructively, and continually develop their knowledge in a changing threat landscape.

We are seeking an Associate Security Architect to help design, implement and improve secure technology solutions across a complex and evolving environment. Working alongside experienced architects, engineers, developers and business stakeholders, you will contribute to security architecture activities that protect applications, infrastructure, data and services. This is an excellent opportunity for a security professional looking to broaden their architectural experience while developing practical expertise across enterprise security, cloud technologies and risk management.

Your responsibilities will include supporting the development of security architectures, principles, standards and patterns; reviewing proposed solutions and identifying security risks; and helping teams select appropriate controls and mitigations. You will assist with threat modelling, security assessments, design reviews and risk analysis, translating technical findings into clear recommendations for both technical and non-technical audiences. You may also contribute to identity and access management, network security, application security, cloud security, data protection and secure software development initiatives. Maintaining accurate documentation, monitoring emerging threats and technologies, and supporting the continuous improvement of security processes will also be important parts of the role.

Applicants should have practical experience in information security, cybersecurity, infrastructure, software development or a related technical discipline, together with an understanding of common security frameworks, principles and controls. Familiarity with cloud platforms, networking, operating systems, authentication, encryption, vulnerability management and secure development practices would be beneficial. We are looking for someone analytical, collaborative and curious, with strong communication skills and the ability to explain complex security matters clearly. Relevant certifications or formal training in security, architecture, risk or cloud technologies are advantageous, but a demonstrable commitment to learning and professional development is equally valued.