Job Search

An opportunity has arisen for a Senior IT Risk and Governance Analyst to support the development, implementation and continuous improvement of technology risk and governance practices. This role will help strengthen the organisation’s control environment, promote effective risk management and provide clear insight to senior stakeholders across technology and the wider business.

Working closely with technology, security, audit, compliance and business teams, you will identify, assess and monitor IT risks, ensuring that appropriate controls and mitigation plans are in place. You will maintain risk registers, track remediation activity and provide regular reporting on key risks, issues, control effectiveness and emerging threats. The role will also involve supporting governance forums and preparing concise, accurate information for senior management.

Your responsibilities will include developing and maintaining IT policies, standards, procedures and control frameworks; coordinating risk and control self-assessments; supporting internal and external audits; and monitoring compliance with relevant regulatory, legal and industry requirements. You will contribute to the review of third-party technology risks, assist with information security and operational resilience activities, and help embed a consistent risk-aware culture across technology teams.

The successful candidate will have substantial experience in IT risk, governance, controls, audit or information security, ideally within a complex or regulated environment. You will be confident interpreting technical and business information, assessing risk and translating complex issues into clear, practical recommendations. Experience with recognised frameworks such as COBIT, ITIL, ISO 27001, NIST or similar would be advantageous.

Strong analytical, organisational and stakeholder management skills are essential, together with excellent written and verbal communication. You will be comfortable challenging constructively, managing competing priorities and working independently while contributing effectively to a collaborative team. Relevant professional qualifications, such as CISA, CRISC, CISM, CISSP or equivalent experience, would be desirable.

We are seeking an Identity Analyst to support the secure and efficient management of digital identities, access rights and authentication services across a complex technology environment. In this role, you will help ensure that users have appropriate access to systems and information while maintaining strong security controls and compliance with relevant policies and standards. You will work closely with technology, security, human resources and business teams to resolve access-related issues and improve identity management processes.

Your responsibilities will include administering user accounts, groups, roles and permissions across multiple platforms; processing joiner, mover and leaver requests; investigating access discrepancies; and supporting periodic access reviews and certifications. You will monitor identity and access management queues, assess requests against established approval requirements, and maintain accurate records and audit evidence. The role will also involve troubleshooting authentication issues, supporting password and multi-factor authentication processes, reviewing system-generated alerts, and escalating potential security concerns appropriately.

The successful candidate will have experience in identity and access management, user administration, service operations or a related technology function. Familiarity with directory services, single sign-on, role-based access control, privileged access management and multi-factor authentication is desirable. You should be comfortable interpreting policies, analysing data, documenting procedures and working with confidential information. Strong attention to detail, sound judgement and a customer-focused approach are essential, together with the ability to prioritise tasks and communicate clearly with both technical and non-technical colleagues. Experience with ticketing systems, reporting tools, access governance platforms or basic scripting would be advantageous. This is an excellent opportunity for someone who wants to develop their expertise in identity security while contributing to reliable, well-controlled access across the organisation.

We are seeking an experienced Infrastructure & Network Security Specialist to help protect, maintain, and improve a complex technology environment. In this role, you will contribute to the design, implementation, and ongoing management of secure infrastructure and network services across on-premises and cloud platforms. You will work closely with technology, engineering, and business teams to identify risks, strengthen controls, and ensure systems remain resilient, available, and compliant with relevant policies and standards.

Your responsibilities will include configuring and administering firewalls, intrusion prevention systems, secure remote-access solutions, network segmentation, vulnerability management tools, and security monitoring platforms. You will investigate security events, support incident response activities, analyse logs and alerts, and coordinate remediation of identified weaknesses. The role will also involve reviewing infrastructure and network changes, maintaining security documentation, contributing to disaster recovery and business continuity planning, and supporting audits and compliance assessments. You will be expected to recommend practical improvements, automate repeatable security tasks where appropriate, and keep informed of emerging threats, technologies, and industry best practice.

Applicants should have proven experience in infrastructure, network, or cyber security, with strong knowledge of TCP/IP, routing and switching, DNS, VPNs, firewalls, identity and access management, endpoint protection, and security monitoring. Experience with cloud security, SIEM platforms, vulnerability scanners, configuration management, and scripting or automation tools would be advantageous. Relevant professional certifications or equivalent practical experience are welcomed. You should be analytical, methodical, and confident communicating technical issues to both specialist and non-specialist audiences. The successful candidate will demonstrate sound judgement, a proactive approach to risk reduction, and the ability to manage competing priorities while working effectively as part of a collaborative team.

We are seeking an experienced Lead SOC Manager to oversee the day-to-day operation, performance and continuous improvement of a security operations centre. This is a senior leadership role responsible for directing analysts, coordinating incident response and ensuring that security monitoring capabilities effectively protect critical systems, applications and data. You will establish clear operational priorities, maintain high service standards and act as a trusted point of contact for stakeholders across technology, risk and business functions.

Key responsibilities will include leading and developing a multidisciplinary SOC team, managing shift coverage and workload allocation, and creating a culture of accountability, collaboration and continuous learning. You will oversee the detection, investigation, escalation and resolution of security incidents, ensuring that procedures are consistently followed and lessons learned are incorporated into future improvements. The role will also involve defining and monitoring operational metrics, developing reporting for senior leadership, managing security tooling and supporting the tuning of SIEM, SOAR, endpoint and threat intelligence capabilities. You will contribute to incident response exercises, threat hunting, vulnerability management and the development of playbooks, processes and governance controls.

The successful candidate will have significant experience managing a SOC or comparable cyber security operations function, together with a strong understanding of security monitoring, incident response, threat detection and operational risk management. Experience leading technical teams in a complex environment and working with internal and external stakeholders is essential. You should be confident making decisions during high-pressure incidents, communicating clearly with both technical and non-technical audiences, and using data to drive service improvements. Relevant professional certifications such as CISSP, CISM, GIAC, or equivalent are desirable. A practical, strategic and people-focused approach, along with a commitment to maintaining current knowledge of emerging threats and industry best practice, will be highly valued.

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will help ensure that security practices support business objectives while meeting regulatory, contractual and industry requirements. You will work closely with technology, legal, privacy, internal audit and operational teams to establish effective controls, promote security awareness and provide clear, practical advice on managing information and cyber risk.

Key responsibilities will include maintaining and improving security policies, standards, procedures and control frameworks; coordinating enterprise security risk assessments; managing risk registers, treatment plans and exception processes; and monitoring the effectiveness of security controls. You will support internal and external audits, regulatory reviews, customer assessments and certification activities, ensuring that evidence is accurate, complete and delivered on time. The role will also oversee third-party and supplier security reviews, contribute to incident response governance, track remediation actions and produce meaningful reports and metrics for senior stakeholders and governance forums.

The successful candidate will have substantial experience in information security governance, risk and compliance, with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent. Experience interpreting privacy, regulatory and contractual obligations, assessing technology and operational risks, and engaging confidently with senior stakeholders is essential. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. You will be organised, analytical and able to translate complex security requirements into clear actions. Strong communication, influencing and documentation skills are required, along with a pragmatic approach to balancing risk, compliance and business priorities.

We are seeking a Senior Information Security Consultant to provide expert advice and practical support across a broad range of cyber security, risk and assurance activities. This role will work closely with stakeholders at all levels to understand business requirements, identify security risks and develop proportionate solutions that protect information, systems and services. The successful candidate will be confident operating in complex environments and able to translate technical issues into clear, actionable recommendations.

Key responsibilities will include leading security assessments, risk analyses and reviews of technical and organisational controls; advising on security architecture, cloud services, applications and infrastructure; and supporting the development, implementation and maintenance of security policies, standards and procedures. You will contribute to incident response, vulnerability management, threat assessment and business continuity activities, while helping teams prepare for audits and demonstrate compliance with relevant legal, regulatory and industry requirements. The role will also involve producing high-quality reports, presenting findings to senior stakeholders, tracking remediation plans and mentoring colleagues or less experienced security professionals.

Applicants should have substantial experience in information security consultancy, governance, risk management or a related discipline, together with a strong understanding of recognised security frameworks and standards such as ISO 27001, NIST or CIS Controls. Experience across areas including security architecture, identity and access management, data protection, cloud security and secure development would be advantageous. Professional certification such as CISSP, CISM, CRISC, SABSA or an equivalent qualification is desirable. You will need excellent analytical, communication and stakeholder-management skills, sound professional judgement and the ability to manage competing priorities. A proactive, collaborative approach and a commitment to continuous improvement are essential.

We are seeking a Security Infrastructure Systems Engineer to design, implement, maintain and secure the platforms that support critical business services. You will work across infrastructure, cloud, networks and security operations to ensure systems are resilient, scalable and protected against evolving threats. The role involves collaborating with technical teams, service owners and stakeholders to translate security requirements into practical, reliable solutions.

Your responsibilities will include administering and hardening Windows and Linux systems, virtualisation platforms, cloud services, identity and access management technologies, endpoint security tools and network security controls. You will develop and maintain secure configuration standards, monitor infrastructure for vulnerabilities and suspicious activity, and lead remediation activities in line with risk and compliance requirements. You will also support security monitoring, incident response, investigations and recovery activities, as well as contribute to vulnerability management, patching, system lifecycle planning and disaster recovery exercises.

The successful candidate will have proven experience in infrastructure engineering, systems administration or a closely related security role, with strong knowledge of secure operating system configuration, network fundamentals, authentication protocols and cloud security principles. Experience with security information and event management platforms, vulnerability scanners, scripting or automation tools, and infrastructure-as-code practices would be advantageous. You should be comfortable analysing technical issues, documenting solutions and communicating clearly with both technical and non-technical audiences. Relevant professional certifications or equivalent practical experience are welcome. A methodical, collaborative approach and a commitment to continuous improvement are essential, along with the ability to manage competing priorities and respond effectively to security incidents.

We are seeking a SOC Lead Technical Engineer to provide technical leadership within a Security Operations Centre and help strengthen the organisation’s ability to detect, investigate and respond to cyber threats. This role will lead the design, operation and continuous improvement of security monitoring capabilities across a complex technology environment. You will work closely with security analysts, infrastructure teams, incident responders and wider technology stakeholders to ensure effective protection of critical systems and data.

Key responsibilities will include leading the technical development of SIEM, SOAR, EDR and other security monitoring platforms; onboarding and tuning log sources; creating and maintaining detection rules, use cases, dashboards and alerting workflows; and improving the quality and efficiency of incident triage and response. You will oversee the investigation of complex or high-impact security events, provide technical guidance during incidents and support root-cause analysis and remediation. The role will also involve identifying operational risks, reducing false positives, maintaining technical documentation and contributing to threat hunting, vulnerability management and security engineering initiatives.

The successful candidate will have substantial experience in a SOC, security engineering or incident response environment, with a strong understanding of security monitoring principles, threat detection methodologies and cyber incident management. Practical expertise with SIEM and automation technologies, endpoint security platforms, network monitoring and cloud security services is essential. You should be confident analysing security telemetry, developing detections using query languages and scripting tools, and translating threat intelligence into actionable controls. Strong communication and leadership skills are required, together with the ability to manage competing priorities, mentor technical colleagues and work effectively with both technical and non-technical stakeholders. Relevant professional certifications in security operations, cloud security or incident response would be advantageous.

We are seeking a SOC Security Infrastructure Engineer to strengthen and maintain the security infrastructure supporting a modern Security Operations Centre. In this role, you will design, implement, monitor and improve the platforms and services used to detect, investigate and respond to cyber threats. You will work closely with security analysts, infrastructure teams and other technical stakeholders to ensure security controls are resilient, effective and aligned with operational needs.

Your responsibilities will include administering and tuning SIEM, SOAR, EDR, network monitoring and vulnerability management platforms; developing and maintaining detection rules, dashboards, alerts and automated response workflows; and integrating security tools with cloud, network, identity and endpoint environments. You will investigate infrastructure-related security events, support incident response activities, troubleshoot service issues and contribute to root-cause analysis. You will also help manage platform upgrades, system hardening, access controls, logging standards, backup procedures and disaster recovery testing. Clear technical documentation, operational procedures and knowledge-sharing materials will be an important part of the role.

The successful candidate will have experience in security engineering, SOC operations, infrastructure administration or a closely related discipline. You should be comfortable working with SIEM technologies, security monitoring tools, Windows and Linux environments, networking concepts, identity and access management, and cloud security services. Experience with scripting or automation, particularly using Python, PowerShell or similar technologies, is highly desirable. Familiarity with threat intelligence, incident response frameworks, vulnerability management and security standards such as ISO 27001 or NIST would be advantageous. Strong analytical and problem-solving skills, attention to detail, effective communication and the ability to prioritise work in a changing operational environment are essential. Relevant professional certifications in cybersecurity, cloud, networking or infrastructure security are welcomed.

We are seeking an experienced SOC Security Architect to design, develop and continuously improve the security architecture supporting a modern Security Operations Centre. In this role, you will define scalable capabilities for threat detection, monitoring, incident response and security analytics across cloud, on-premises and hybrid environments. You will translate business and cyber-risk requirements into practical technical solutions, establish architectural standards and ensure that security controls are effective, resilient and aligned with recognised frameworks and best practices.

Key responsibilities will include developing SOC reference architectures, evaluating security technologies and leading the integration of SIEM, SOAR, EDR, NDR, vulnerability management and threat intelligence platforms. You will work closely with security operations, infrastructure, cloud, engineering, risk and compliance teams to improve detection coverage, automate response workflows and strengthen operational processes. The role will also involve conducting architecture reviews, identifying control gaps, supporting technology selection, producing technical documentation and contributing to incident response, threat modelling and continuous service improvement. You will provide technical leadership on complex security initiatives and communicate recommendations clearly to both technical and senior stakeholders.

The successful candidate will have significant experience in security architecture, SOC engineering or cyber defence, with a strong understanding of security monitoring and incident response processes. You should have hands-on knowledge of SIEM and SOAR platforms, security telemetry, log management, detection engineering, cloud security and network defence. Experience with security frameworks such as NIST, ISO 27001, CIS or MITRE ATT&CK is highly desirable, as is familiarity with automation, scripting and modern DevSecOps practices. Relevant professional certifications in security architecture, cloud security or incident response would be advantageous. Strong analytical, problem-solving and communication skills are essential, together with the ability to influence stakeholders and deliver robust solutions in a changing threat environment.