Job Search

We are seeking a GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance activities. This is an excellent opportunity for an analytical and organised professional who can work confidently with stakeholders across the organisation and help strengthen the control environment.

In this role, you will maintain risk and compliance registers, support risk assessments and monitor the progress of mitigation plans. You will help develop, review and maintain policies, standards, procedures and control documentation, ensuring that these remain aligned with business needs, regulatory expectations and recognised frameworks. You will also coordinate evidence collection for internal and external audits, track findings and support the timely completion of remediation actions.

Key responsibilities will include preparing management information and reports, monitoring key risk and compliance indicators, supporting control testing and documenting outcomes. You will contribute to governance meetings by preparing papers, recording actions and following up on agreed activities. The role will also involve assisting with security and compliance questionnaires, third-party risk assessments, business continuity activities and awareness initiatives.

The successful candidate will have experience in a governance, risk, compliance, information security or assurance environment, with a good understanding of risk management principles and internal controls. Familiarity with frameworks such as ISO 27001, NIST, COBIT or similar would be advantageous. You should be confident analysing information, identifying gaps and presenting clear, practical recommendations to varied audiences.

Strong written and verbal communication skills are essential, together with excellent attention to detail and the ability to manage competing priorities. You will be comfortable working independently while collaborating effectively with colleagues and external stakeholders. Professional qualifications or relevant training in risk, audit, compliance, information security or data protection would be beneficial. A proactive, curious and improvement-focused approach is highly valued.

We are seeking an experienced OT Security Engineer to help protect operational technology environments across critical industrial and infrastructure systems. This role will focus on strengthening the security, resilience and availability of control systems while supporting safe and reliable operations. You will work closely with engineering, IT, operations and risk teams to identify vulnerabilities, manage cyber security risks and implement practical improvements across complex OT environments.

Your responsibilities will include designing and maintaining OT security controls, conducting risk assessments and supporting secure architecture reviews for industrial control systems, SCADA, PLCs, networks and associated technologies. You will monitor security events, investigate incidents and coordinate effective responses, ensuring that operational impact is carefully managed. You will also contribute to vulnerability management, configuration reviews, patching strategies and the development of security standards, procedures and technical documentation.

The role will involve assessing third-party and remote-access arrangements, supporting security testing and ensuring that changes to operational environments follow appropriate governance and change-control processes. You will help develop incident response and recovery plans, participate in exercises and provide clear advice to stakeholders on emerging threats and recommended mitigations. Where required, you may support audits and demonstrate compliance with relevant legislation, regulations and industry standards.

Applicants should have practical experience in OT, industrial cyber security, control systems engineering or a closely related discipline. Knowledge of commonly used OT protocols, network segmentation, firewalls, secure remote access, asset discovery and monitoring tools is essential. Familiarity with standards and frameworks such as IEC 62443, NIST Cybersecurity Framework, ISO 27001 or the NIS Regulations would be advantageous.

Strong analytical, communication and problem-solving skills are required, together with the ability to explain technical risks to both specialist and non-specialist audiences. A methodical approach, sound judgement and an understanding of safety-critical environments are important. Relevant professional qualifications in cyber security, networking, industrial automation or engineering are desirable, alongside a commitment to continuous learning and maintaining current knowledge of OT threats and defensive practices.

We are seeking a Senior Identity Infrastructure Engineer to design, implement and operate secure, scalable identity and access management services across a complex technology environment. You will play a key role in shaping identity strategy, strengthening authentication and authorisation controls, and ensuring reliable access to applications, platforms and infrastructure. The role will involve close collaboration with security, infrastructure, engineering and application teams to deliver resilient solutions that support business and technical requirements.

Responsibilities will include leading the engineering and administration of identity platforms, directory services, privileged access management, single sign-on, multi-factor authentication and identity governance capabilities. You will develop and maintain integrations using modern protocols such as SAML, OAuth 2.0 and OpenID Connect, while supporting automated provisioning and deprovisioning through APIs and standards such as SCIM. You will establish secure configuration baselines, improve monitoring and alerting, troubleshoot complex incidents, and contribute to access reviews, audit activity and disaster recovery planning. You will also provide technical leadership, mentor colleagues and help define standards, documentation and operational processes.

The successful candidate will have substantial experience in identity engineering, infrastructure or security operations, with a strong understanding of directory technologies, authentication mechanisms, role-based access control and least-privilege principles. Experience with cloud identity services, Microsoft Entra ID or equivalent platforms, Active Directory, scripting and infrastructure-as-code will be highly beneficial. You should be comfortable working across hybrid environments, analysing problems methodically and communicating technical concepts to both specialist and non-specialist audiences. A proactive approach, strong ownership, attention to detail and the ability to influence stakeholders are essential. Relevant professional certifications or demonstrable experience in identity, cloud or cybersecurity engineering are desirable.