Job Search

We are seeking a Cyber Security Engineer to help protect critical systems, applications and data across a complex technology environment. You will work as part of a collaborative security function, supporting the design, implementation and continuous improvement of effective cyber security controls. The role will involve monitoring threats, investigating security incidents and providing practical advice to technology and business teams.

Your responsibilities will include identifying vulnerabilities, coordinating remediation activity and contributing to security testing across infrastructure, cloud services, networks and applications. You will analyse alerts from security monitoring tools, support incident response investigations and maintain accurate records of findings, risks and corrective actions. You will also help develop and maintain security policies, standards and procedures, contribute to risk assessments, and assist with audit and compliance activities. The role may include supporting security awareness initiatives and producing clear reports for both technical and non-technical audiences.

Applicants should have professional experience in a cyber security, information security or related engineering role, with a sound understanding of security principles, threat detection and incident response. Experience with security information and event management, vulnerability management, identity and access management, endpoint protection, firewalls or cloud security technologies would be highly beneficial. You should be comfortable investigating issues, documenting technical information and working with colleagues to deliver proportionate, risk-based solutions. Relevant qualifications such as CompTIA Security+, Cyber Security certifications, CISSP, CISM or equivalent practical experience are desirable. Strong communication, analytical and problem-solving skills are essential, along with a proactive approach, attention to detail and a commitment to continuous learning in a rapidly changing threat landscape.

We are seeking an experienced SAP Security GRC Analyst to support the design, implementation, and ongoing management of SAP security and governance, risk, and compliance solutions. In this role, you will help protect critical business systems by ensuring that user access is appropriately provisioned, monitored, and reviewed. You will work closely with business stakeholders, functional teams, internal technology teams, and audit partners to maintain secure and compliant SAP environments.

Your responsibilities will include administering SAP GRC Access Control, including access requests, approvals, risk analysis, emergency access management, and user and role provisioning. You will design, maintain, and review SAP roles and authorisations, investigate segregation-of-duties conflicts, and support periodic user access recertification campaigns. The role will also involve analysing security issues, resolving access-related incidents, documenting control processes, and contributing to the development of security standards and operating procedures. You will support internal and external audits by preparing evidence, responding to queries, and tracking remediation activities through to completion.

The successful candidate will have proven experience in SAP security and SAP GRC, with a solid understanding of authorisation concepts, role design, access governance, and segregation-of-duties principles. Experience with SAP ECC and/or S/4HANA, Fiori security, and integration between SAP GRC and connected systems would be advantageous. You should be comfortable interpreting risk reports, troubleshooting complex access issues, and communicating technical matters clearly to both technical and non-technical audiences. Strong analytical, organisational, and documentation skills are essential, along with a proactive approach to identifying control improvements. Relevant SAP security, GRC, or information security certifications are desirable.

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements.

Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders, and advise on risk acceptance, treatment plans and control effectiveness. The role will also contribute to security architecture and project reviews, supplier and third-party risk assessments, business continuity activities, incident response governance, and the implementation of improvements aligned with recognised frameworks such as ISO 27001, NIST, CIS Controls or similar.

The successful candidate will have substantial experience in cyber security governance, risk and compliance, with a strong understanding of security controls, regulatory obligations, audit principles and risk management methodologies. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. You should be confident engaging with technical and non-technical audiences, able to challenge constructively, and skilled at translating complex security issues into practical business recommendations. Strong analytical, documentation and stakeholder-management skills are essential, along with the ability to prioritise competing demands and work independently in a changing environment. Experience with GRC platforms, cloud security risk, third-party assurance and security metrics would be advantageous.