Job Search

We are seeking a Senior Security Enablement Engineer to help strengthen security practices across engineering, product, and operational teams. In this role, you will translate security principles into practical guidance, scalable processes, and developer-friendly solutions that support secure delivery without creating unnecessary friction. You will work closely with stakeholders across the organisation to understand technical challenges, identify risks, and promote a culture of shared security ownership.

Your responsibilities will include designing and maintaining security enablement programmes, documentation, training materials, and reusable tools. You will advise engineering teams on secure architecture, threat modelling, vulnerability management, identity and access controls, cloud security, and secure software development practices. You will help define and improve security standards, guardrails, and automation, while supporting the integration of security checks into development and deployment workflows. The role will also involve monitoring emerging threats, contributing to security reviews, helping prioritise remediation activity, and measuring the effectiveness of security initiatives through meaningful metrics.

The successful candidate will have significant experience in application, cloud, product, or platform security, with a strong understanding of modern software development and infrastructure practices. You should be confident communicating complex security topics to both technical and non-technical audiences, and able to influence teams through collaboration, coaching, and clear practical recommendations. Experience with security tooling, CI/CD pipelines, infrastructure as code, threat modelling frameworks, and public cloud environments is highly desirable. We value curiosity, sound judgement, excellent written and verbal communication, and a pragmatic approach to balancing security, usability, and delivery needs. Relevant professional certifications or equivalent hands-on experience are welcome.

We are seeking a skilled Penetration Tester to assess the security of applications, infrastructure, networks, cloud environments, and connected devices. In this role, you will simulate realistic cyberattacks to identify vulnerabilities, validate their potential impact, and provide clear, actionable recommendations to strengthen security controls. You will work with technical and business stakeholders to plan assessments, define testing scopes, manage timelines, and communicate findings effectively.

Your responsibilities will include conducting web, mobile, API, network, wireless, cloud, and social engineering assessments using recognised penetration testing methodologies. You will perform reconnaissance, vulnerability analysis, exploitation, privilege escalation, lateral movement, and post-exploitation activities within agreed rules of engagement. You will document testing procedures, preserve relevant evidence, assess risk, and produce high-quality reports that explain technical issues in language appropriate for both technical and non-technical audiences. You will also support remediation discussions, retesting activities, threat modelling, security reviews, and the continuous improvement of testing processes and tooling.

Applicants should have practical experience in penetration testing, ethical hacking, or a closely related offensive security role, together with a strong understanding of common vulnerabilities, attack techniques, and defensive technologies. Familiarity with tools such as Burp Suite, Nmap, Metasploit, Wireshark, and relevant cloud security tooling is expected, along with the ability to script or automate tasks using languages such as Python, PowerShell, or Bash. Professional certifications such as OSCP, CREST, PNPT, or equivalent experience are desirable. Strong analytical, written, and verbal communication skills are essential, as is a professional approach to confidentiality, evidence handling, and responsible disclosure. The successful candidate will be curious, methodical, adaptable, and comfortable working independently as well as collaboratively.

We are seeking a Senior Manager, Cybersecurity Governance, Risk & Compliance (GRC) to lead the development and continuous improvement of a mature cybersecurity governance and risk management framework. This role will provide strategic direction, independent challenge and practical guidance to ensure security controls, policies and processes align with business objectives, regulatory obligations and recognised industry standards. The successful candidate will work closely with technology, risk, legal, audit and operational teams to strengthen cyber resilience across the organisation.

Key responsibilities include owning and maintaining cybersecurity policies, standards, procedures and control frameworks; overseeing enterprise cyber risk assessments, risk registers, remediation plans and risk acceptance processes; and coordinating compliance activities against applicable laws, regulations and frameworks such as ISO 27001, NIST, CIS Controls and relevant privacy requirements. You will lead the preparation for internal and external audits, assessments and regulatory reviews, track findings through to closure, and provide clear reporting on risk exposure, control effectiveness, compliance status and key performance indicators to senior leadership and governance committees. The role will also support third-party risk management, security exception management, control testing and the development of governance processes for emerging technologies and change initiatives.

To succeed, you will bring significant experience in cybersecurity governance, risk and compliance, including leadership responsibility within a complex or highly regulated environment. You should have strong knowledge of security frameworks, regulatory expectations, risk methodologies, audit practices and control design, alongside the ability to translate technical issues into concise business-focused advice. Relevant professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent stakeholder management, communication, analytical and influencing skills are essential, as is the ability to prioritise competing demands, lead improvement programmes and operate confidently with senior executives. A proactive, pragmatic and collaborative approach will be highly valued.

We are seeking an experienced Chief Information Security Officer Director to lead the development and execution of an organisation-wide information security strategy. This senior leadership role will be responsible for protecting critical systems, data, infrastructure and services while ensuring security supports business objectives and operational resilience. You will provide clear direction to security teams, advise executive leadership on cyber risk, and promote a strong culture of security, accountability and continuous improvement across the organisation.

Key responsibilities include establishing and maintaining security policies, standards, procedures and governance frameworks; overseeing threat management, vulnerability management, security monitoring, identity and access management, data protection and incident response; and directing the investigation and resolution of security breaches. You will lead enterprise risk assessments, define appropriate controls, track remediation activity and ensure effective business continuity and disaster recovery arrangements. The role will also manage regulatory, audit and compliance requirements, maintain relationships with external security partners and authorities, and provide accurate reporting on risk exposure, security performance and emerging threats.

Applicants should have substantial experience in information security leadership, cyber risk management and the design of security programmes within complex environments. A strong understanding of recognised security frameworks, privacy obligations, regulatory expectations and modern cloud, network and application security is essential. Professional qualifications such as CISSP, CISM, CRISC or equivalent are desirable. You will be an influential communicator with the ability to engage technical and non-technical stakeholders, challenge constructively and translate complex risks into practical decisions. Strategic thinking, sound judgement, strong leadership skills and the ability to prioritise effectively during high-pressure incidents are essential. Experience building high-performing teams, managing budgets and delivering security transformation initiatives will be highly valued.