Job Search

We are seeking a Senior Threat Intelligence Analyst to lead the collection, analysis and communication of intelligence relating to cyber threats, threat actors and emerging risks. You will assess information from open-source, commercial, technical and internal sources to identify relevant developments and produce clear, actionable intelligence for security, technology and business stakeholders. The role will involve developing intelligence assessments, tracking threat actor activity, analysing tactics, techniques and procedures, and supporting the improvement of organisational threat awareness and resilience.

Key responsibilities include maintaining threat intelligence requirements and collection plans; monitoring geopolitical, criminal and technology-related developments; conducting strategic, operational and tactical analysis; and producing concise reports, briefings, alerts and executive-level presentations. You will contribute to incident response and proactive investigations by providing context, indicators of compromise, risk assessments and investigative leads. You will also help refine intelligence processes, maintain analytical documentation, support threat modelling and detection initiatives, and collaborate with security operations, vulnerability management, engineering, risk and wider business teams. Where appropriate, you may represent the intelligence function in working groups and engage with trusted external communities and information-sharing partners.

The successful candidate will have substantial experience in cyber threat intelligence, security analysis, incident response or a related discipline, together with strong knowledge of threat actor behaviours, the cyber kill chain, MITRE ATT&CK and intelligence lifecycle principles. Experience using intelligence platforms, SIEM technologies, malware or log analysis tools, and structured analytical techniques is desirable. You should be confident evaluating source reliability, identifying patterns in complex information and communicating findings to both technical and non-technical audiences. Strong writing, presentation, critical-thinking and prioritisation skills are essential, as is the ability to work independently while contributing effectively within a collaborative environment. Relevant professional certifications or equivalent practical experience will be valued.

We are seeking a Senior Information Security Consultant to provide expert guidance on the design, implementation and improvement of information security strategies across a varied client portfolio. The successful candidate will work with stakeholders at all levels to assess cyber risk, strengthen security controls and support the delivery of resilient technology and business services. This role offers the opportunity to lead complex advisory engagements, influence security maturity and translate technical risks into clear, practical recommendations.

Key responsibilities will include conducting security assessments, risk reviews, gap analyses and control evaluations against recognised frameworks and regulatory requirements. You will develop and maintain security policies, standards, procedures and roadmaps; advise on governance, risk and compliance matters; and support the implementation of effective security architectures and operating models. You will also contribute to incident preparedness, third-party risk assessments, business continuity planning and security awareness initiatives. The role involves producing high-quality reports and presentations, managing project deliverables, facilitating workshops and mentoring less experienced consultants. You will be expected to build trusted relationships with clients, challenge assumptions constructively and communicate complex security topics to both technical and non-technical audiences.

Applicants should have significant professional experience in information security, cyber risk, security consulting or a closely related discipline, together with a strong understanding of security governance, risk management and control frameworks such as ISO 27001, NIST or CIS. Experience across areas including cloud security, identity and access management, vulnerability management, data protection, security architecture or regulatory compliance would be highly valued. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent are desirable. You will need excellent analytical, writing, presentation and stakeholder management skills, as well as the ability to work independently and manage competing priorities. A proactive, commercially aware approach and a commitment to continuous professional development are essential.

We are seeking a Third Party Cyber Assurance Analyst to support the assessment and ongoing monitoring of suppliers, partners, and service providers that have access to sensitive information or critical systems. You will help ensure that third parties meet required cybersecurity, privacy, and resilience standards throughout the relationship lifecycle, from onboarding and due diligence through to renewal, remediation, and exit. This role will work closely with procurement, legal, risk, technology, and business stakeholders to identify and manage third-party cyber risk effectively.

Key responsibilities will include reviewing security questionnaires, independent assurance reports, certifications, penetration testing results, policies, and other evidence provided by third parties. You will assess control effectiveness against recognised frameworks and internal requirements, document findings, assign risk ratings, and track corrective actions through to completion. You will maintain accurate records of assessments and risk decisions, produce clear management information, and escalate significant issues or overdue remediation where appropriate. The role will also contribute to improving assessment methodologies, strengthening supplier security requirements, and supporting periodic reviews of higher-risk relationships.

The successful candidate will have experience in third-party risk management, cyber assurance, information security, technology risk, audit, or a related discipline. You should be comfortable interpreting technical and non-technical evidence, challenging responses constructively, and communicating risk clearly to stakeholders with varying levels of technical knowledge. Familiarity with frameworks and standards such as ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, or equivalent regulatory requirements is desirable. Strong analytical, organisational, and report-writing skills are essential, along with the ability to manage multiple assessments and deadlines. Relevant professional qualifications in cybersecurity, information assurance, risk, audit, or privacy would be advantageous.

We are seeking an experienced Cyber Security Lead to provide strategic direction and operational leadership across the organisation’s information security landscape. This role will be responsible for protecting systems, data, applications and infrastructure against evolving cyber threats, while ensuring security is embedded into business and technology initiatives. You will lead the development, implementation and continuous improvement of security policies, standards, controls and processes in line with recognised frameworks and regulatory requirements.

Key responsibilities include managing security risk assessments, vulnerability management, incident response, threat monitoring and security assurance activities. You will coordinate investigations into security incidents, oversee remediation plans and ensure lessons learned are translated into preventative improvements. The role will also involve leading penetration testing, audit preparation and compliance reviews, as well as supporting secure architecture, identity and access management, cloud security and third-party risk management. You will work closely with technology, governance, legal and operational teams to provide clear, practical security advice and communicate risk to senior stakeholders. In addition, you will help develop security awareness initiatives and contribute to a culture of shared responsibility for cyber security.

The successful candidate will have substantial experience in cyber security, information security or a closely related discipline, including experience leading security programmes or specialist teams. A strong understanding of security frameworks such as ISO 27001, NIST or CIS Controls is required, together with practical knowledge of incident management, risk assessment, vulnerability remediation, security operations and relevant data protection obligations. Professional certifications such as CISSP, CISM, CRISC or equivalent are desirable. You will be an analytical and confident communicator who can influence at all levels, manage competing priorities and make sound decisions in a fast-changing environment. A proactive approach, strong attention to detail and the ability to translate complex technical issues into clear business recommendations are essential.