Job Search

We are seeking an experienced Security Consultant to provide expert advice and practical support across a range of information and cyber security initiatives. The successful candidate will work with clients and internal stakeholders to understand business objectives, assess risk and develop proportionate, effective security solutions. This role offers the opportunity to contribute to varied engagements, from security strategy and governance through to technical assurance, compliance and operational improvement.

Responsibilities will include conducting security assessments, risk assessments, gap analyses and control reviews; producing clear reports and recommendations for both technical and non-technical audiences; and supporting the design, implementation and review of security policies, standards and procedures. You will advise on areas such as identity and access management, vulnerability management, secure architecture, incident response, data protection and third-party risk. The role will also involve facilitating workshops, supporting audits, tracking remediation activity and helping clients to improve their security maturity. You may contribute to bids, proposals, service development and the mentoring of less experienced colleagues.

Applicants should have proven experience in a security consultancy, advisory or equivalent information security role, with a sound understanding of recognised frameworks, standards and regulations such as ISO 27001, NIST, the Cyber Essentials scheme and UK data protection requirements. Relevant professional qualifications, including CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. Strong analytical, communication and stakeholder-management skills are essential, along with the ability to manage competing priorities and explain complex risks clearly. A proactive, pragmatic approach and a commitment to maintaining current knowledge of emerging threats, technologies and best practice are expected. The successful applicant must be eligible to work in the UK and may be required to undergo appropriate security screening.

We are seeking an experienced OT Cyber Security Lead to develop and strengthen the cyber security strategy for operational technology environments. You will provide leadership across industrial control systems, manufacturing technology, critical infrastructure, and connected operational platforms, ensuring that security is integrated into the design, operation, and improvement of OT services. Working closely with engineering, infrastructure, risk, compliance, and site-based teams, you will help protect the availability, safety, integrity, and confidentiality of operational systems.

Your responsibilities will include defining and maintaining OT security policies, standards, architectures, and procedures; assessing cyber risks across OT environments; and developing practical controls that reflect operational requirements. You will lead vulnerability management, threat modelling, security monitoring, incident response, and recovery planning for industrial systems. The role will also involve overseeing security assessments, penetration testing, supplier assurance, network segmentation, remote access controls, identity management, endpoint protection, and secure change management. You will support the investigation of security incidents, coordinate remediation activity, and provide clear reporting on risk, compliance, and performance to senior stakeholders.

You will bring substantial experience in OT, ICS, SCADA, industrial networks, or a closely related cyber security discipline, together with a strong understanding of recognised frameworks and standards such as IEC 62443, NIST, ISO 27001, or the NIS2 requirements. Experience of working in safety-critical or highly regulated environments is highly desirable. Strong knowledge of networking, asset discovery, vulnerability assessment, security operations, and incident management is expected, along with the ability to translate complex technical risks into practical business recommendations. Relevant professional certifications and demonstrable experience leading cross-functional programmes would be advantageous. Excellent communication, influencing, analytical, and problem-solving skills are essential.

We are seeking an Identity Analyst to support the secure, reliable and efficient management of digital identities and access across the organisation. In this role, you will help ensure that employees, contractors, partners and systems have the appropriate access to applications, platforms and data, based on business requirements and established security policies.

Your responsibilities will include processing and reviewing identity and access requests, managing joiner, mover and leaver activities, and maintaining accurate records within identity governance and administration tools. You will investigate access issues, support user authentication and account provisioning, and assist with role-based access control and periodic access reviews. The role will also involve monitoring identity-related workflows, identifying unusual or inappropriate access, escalating potential security concerns, and contributing to the resolution of incidents and service requests. You will work closely with technology, security, human resources and business teams to improve processes and ensure timely, consistent outcomes.

Applicants should have experience in identity and access management, IT service operations, information security or a related field. Familiarity with directory services, single sign-on, multi-factor authentication, access governance and ticketing systems is desirable. You should be comfortable working with data, following documented procedures and handling confidential information with discretion. Strong analytical and problem-solving skills are essential, along with the ability to communicate clearly with both technical and non-technical stakeholders. An organised, proactive approach and a willingness to identify process improvements will be highly valued. Relevant certifications or experience with platforms such as Microsoft Entra ID, Active Directory or comparable identity solutions would be advantageous.

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development, implementation and continuous improvement of information security governance and risk management practices. This role will help strengthen organisational resilience, support regulatory compliance and ensure that security controls are aligned with business objectives. You will work closely with technology, legal, privacy, audit, procurement and operational teams to embed effective security practices across the organisation.

Key responsibilities include maintaining and improving security policies, standards, procedures and control frameworks; managing enterprise security risk assessments and treatment plans; coordinating internal and external audits; monitoring compliance with relevant legislation, regulations and industry standards; and preparing clear reports for senior stakeholders and governance forums. You will oversee the security exception and risk acceptance processes, support third-party and supplier risk assessments, track remediation activities, and provide practical guidance on control design and implementation. The role will also contribute to incident preparedness, business continuity, security awareness initiatives and ongoing assurance activities.

The successful candidate will have proven experience in information security governance, risk and compliance, ideally within a complex or regulated environment. You will bring strong knowledge of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent, along with an understanding of privacy, data protection and operational resilience requirements. Relevant professional certifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, are desirable. Excellent communication, stakeholder management, analytical and report-writing skills are essential, together with the ability to translate technical risks into clear business implications. You will be organised, pragmatic and confident working independently while influencing teams at all levels to achieve measurable improvements in security maturity.

We are seeking an experienced Lead SOC Manager to oversee the effective operation and continuous development of a Security Operations Centre. This role will provide strategic direction and hands-on leadership across cyber defence, incident response, threat monitoring and security event management. You will lead a team of security analysts and engineers, ensuring 24/7 monitoring capabilities, consistent operational standards and timely responses to potential threats. The successful candidate will act as a senior point of escalation during significant incidents and will work closely with technology, risk, compliance and business stakeholders to strengthen the organisation’s security posture.

Key responsibilities will include managing SOC processes, procedures and service performance; developing and maintaining incident response, threat detection and vulnerability management capabilities; and improving the use of SIEM, SOAR, EDR and other security technologies. You will establish and monitor operational metrics, service-level objectives and reporting for senior leadership, while identifying opportunities to automate processes and improve detection quality. The role will also involve coordinating investigations, leading post-incident reviews, overseeing third-party security service providers and ensuring that controls align with relevant legal, regulatory and industry requirements. You will support security exercises, threat-hunting initiatives, audit activity and the ongoing development of resilience and response plans.

Applicants should have substantial experience managing a SOC, cyber defence function or similarly complex security operations environment, together with a strong understanding of security monitoring, incident response, threat intelligence and risk management. Experience leading technical teams, managing suppliers and delivering operational change is essential. Professional qualifications such as CISSP, CISM, GIAC or equivalent are desirable, as is familiarity with recognised frameworks including NIST, MITRE ATT&CK and ISO 27001. Strong communication, stakeholder management and decision-making skills are required, along with the ability to remain calm and effective during high-pressure incidents. This is an opportunity to shape a mature security capability and make a measurable impact on organisational resilience.

We are seeking a Senior Business Analyst to support the delivery and continuous improvement of identity and access management capabilities. You will work across business, technology, security and risk functions to understand organisational needs, define effective solutions and ensure that identity services are aligned with strategic objectives. This is an opportunity to contribute to initiatives covering access governance, authentication, authorisation, joiner–mover–leaver processes, privileged access and identity lifecycle management.

Your responsibilities will include engaging stakeholders to gather, analyse and document business and functional requirements; mapping current and future-state processes; identifying risks, dependencies and opportunities for improvement; and translating complex business needs into clear requirements for technical delivery teams. You will facilitate workshops, produce business process models, user stories, acceptance criteria and supporting documentation, and work closely with product owners, architects, engineers and delivery leads throughout the project lifecycle. You will also support prioritisation, test planning, user acceptance testing, implementation readiness and the resolution of issues following delivery.

To succeed in this role, you will have substantial experience as a Business Analyst within identity, access management, cybersecurity or a closely related technology environment. You will understand identity governance concepts, access controls, authentication methods and regulatory or audit requirements, with experience working on IAM platforms, transformation programmes or process improvement initiatives. Strong analytical, communication and stakeholder management skills are essential, as is the ability to operate confidently with both technical and non-technical audiences. Experience working in Agile or hybrid delivery environments, managing competing priorities and producing high-quality documentation will be highly valued. Relevant business analysis, information security or identity-related certifications are desirable.

We are seeking an experienced Director of Information Technology & Security to lead the technology and cyber security strategy for a growing organisation based in Leeds. This is a senior leadership role responsible for ensuring that technology enables business growth, operational efficiency and an excellent employee experience, while maintaining robust security, resilience and regulatory compliance. You will provide clear direction across IT infrastructure, applications, data, service management and information security, working closely with senior stakeholders to align priorities with organisational objectives.

Your responsibilities will include developing and delivering a pragmatic technology and security roadmap; overseeing IT operations, support services, infrastructure and third-party suppliers; and ensuring systems are reliable, scalable and fit for purpose. You will establish and maintain effective cyber security governance, policies, risk management and incident response arrangements, while promoting security awareness across the organisation. The role will also lead business continuity and disaster recovery planning, ensure compliance with relevant data protection and security requirements, and manage technology budgets, investments and vendor performance. You will build, mentor and develop high-performing teams, fostering a culture of collaboration, accountability and continuous improvement.

Applicants should have substantial leadership experience across IT and information security, ideally gained in a complex, regulated or fast-changing environment. You will bring a strong understanding of modern infrastructure, cloud services, enterprise applications, cyber security frameworks, data protection and technology risk. The ability to translate technical issues into clear business advice is essential, as is experience managing transformation programmes, budgets and external partners. Relevant professional qualifications in IT, information security, risk or a related discipline are desirable. We are looking for an inclusive and commercially minded leader who can balance strategic thinking with hands-on operational oversight and communicate confidently at all levels.

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a comprehensive cyber security, information resilience and operational continuity capability. This senior role will provide strategic direction across cyber risk management, information assurance, technology resilience, incident response and business continuity, ensuring that critical services, data and infrastructure remain secure and available in a constantly evolving threat landscape.

You will lead a multidisciplinary team and establish clear governance, policies, standards and assurance frameworks aligned with relevant regulatory obligations and recognised industry practices. Responsibilities will include identifying and managing cyber and information risks; overseeing vulnerability management, security monitoring and incident response; coordinating business continuity and disaster recovery planning; and ensuring that resilience requirements are embedded across programmes, suppliers, systems and operational processes. You will lead the response to significant cyber or information incidents, provide clear reporting to senior stakeholders, and drive continuous improvement through testing, lessons learned, metrics and assurance activity. The role will also involve managing budgets, developing capability, and building strong relationships with technical, operational, risk, compliance and executive teams.

Applicants should have substantial senior-level experience in cyber security, information resilience, technology risk, business continuity or a closely related discipline, together with a proven record of leading teams and delivering organisation-wide change. You will bring strong knowledge of cyber security principles, risk management, incident management, disaster recovery, regulatory expectations and relevant frameworks such as ISO 27001, ISO 22301 or NIST. Excellent communication, influencing and decision-making skills are essential, as is the ability to translate complex technical and risk issues into clear, practical advice for varied audiences. Professional qualifications in cyber security, information assurance, risk, resilience or related fields are desirable. A strategic outlook, calm approach under pressure, and commitment to developing a strong culture of security and resilience are key to success.

We are seeking a skilled Penetration Tester to assess the security of applications, infrastructure, networks and cloud environments. In this role, you will plan and deliver authorised security assessments that identify vulnerabilities, validate business risk and help strengthen defensive controls. You will work with technical and non-technical stakeholders to understand testing objectives, define scope and ensure all activities are conducted safely, ethically and in line with agreed rules of engagement.

Your responsibilities will include performing web, mobile, API, network, wireless and cloud penetration tests; conducting vulnerability analysis and manual exploitation; reviewing source code and configurations where appropriate; and researching emerging attack techniques. You will document testing activity, maintain clear evidence, and produce high-quality reports that explain technical findings, potential business impact, remediation guidance and opportunities for improvement. You will also present results to relevant stakeholders, support retesting activities and contribute to the development of repeatable testing methodologies, tools and internal security standards.

Applicants should have practical experience in penetration testing, ethical hacking or a closely related security discipline, together with a strong understanding of common vulnerabilities, attack paths and defensive technologies. Experience with tools such as Burp Suite, Nmap, Metasploit, Wireshark and scripting languages including Python, PowerShell or Bash is desirable. Familiarity with OWASP testing methodologies, cloud platforms, Active Directory, identity systems and recognised reporting frameworks will be advantageous. Professional certifications such as CREST, OSCP, PNPT, GPEN or equivalent are welcomed, although demonstrable hands-on capability is equally important. You should be analytical, curious and comfortable explaining complex issues clearly, while maintaining high standards of confidentiality, professionalism and responsible disclosure.

We are seeking an experienced SME – IT Security to provide specialist guidance and operational leadership across information security, infrastructure protection and risk management. The successful candidate will help maintain a secure and resilient technology environment by advising on security standards, assessing risks and supporting the implementation of effective controls. This role requires strong technical expertise, sound judgement and the ability to communicate security matters clearly to both technical and non-technical stakeholders.

Key responsibilities include developing and reviewing security policies, standards and procedures; conducting security assessments, vulnerability reviews and risk analyses; and recommending practical measures to protect systems, networks, applications and data. You will support the monitoring and investigation of security incidents, contribute to incident response and remediation activities, and help ensure that lessons learned are incorporated into future controls. The role will also involve reviewing technical designs, supporting security architecture decisions, managing third-party security requirements and contributing to audit, compliance and business continuity activities. You may also provide guidance on identity and access management, encryption, endpoint protection, cloud security and secure system configuration.

Applicants should have substantial experience in an IT security, cyber security or information assurance role, with a strong understanding of security frameworks, risk management principles and relevant regulations. Experience with vulnerability management, incident response, security monitoring and security tooling is highly desirable. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 or equivalent are advantageous. You will be organised, analytical and proactive, with the ability to prioritise competing demands and work effectively across multiple teams. Strong written and verbal communication skills are essential, as is a commitment to confidentiality, continuous improvement and maintaining a high standard of professional integrity.