Job Search

We are seeking an experienced PAM Consultant to design, implement and support privileged access management solutions across a complex technology environment. You will work with security, infrastructure, applications and compliance teams to improve the control, monitoring and governance of privileged accounts, credentials and sessions. The role will involve assessing current capabilities, defining target-state architecture and delivering practical improvements aligned with security and business requirements.

Key responsibilities will include gathering requirements, producing technical designs and configuring PAM platforms and associated integrations. You will onboard privileged accounts, service accounts, applications and infrastructure, establish secure credential vaulting and rotation processes, and implement appropriate access workflows. You will also develop role-based access controls, session monitoring and recording, emergency access procedures, onboarding standards and operational documentation. The successful candidate will investigate incidents, support audit and compliance activities, contribute to risk remediation, and provide guidance to technical teams and stakeholders. You may also be required to assist with migrations, upgrades, testing and the transition of new services into operational support.

Applicants should have demonstrable experience delivering or supporting PAM technologies, such as CyberArk, BeyondTrust, Delinea or comparable solutions, together with a strong understanding of privileged account security and identity governance. You will need practical knowledge of Active Directory, Windows and Linux administration, networking concepts, authentication protocols and enterprise application integrations. Experience with scripting or automation, particularly PowerShell, Python or REST APIs, would be advantageous. Strong analytical, documentation and problem-solving skills are essential, as is the ability to communicate effectively with both technical and non-technical audiences. Relevant security certifications or experience working within regulated environments would be beneficial. The role requires a proactive, methodical consultant who can manage competing priorities, build trusted relationships and deliver secure, sustainable solutions from initial assessment through to implementation and ongoing improvement.

We are seeking an experienced Senior Data Protection Manager to lead and develop data protection, privacy and information governance practices across a complex organisation. This is a senior advisory role, responsible for ensuring that personal data is handled lawfully, securely and transparently, while supporting effective business operations and the responsible use of data. You will provide authoritative guidance to senior stakeholders, advise on privacy risks and promote a strong culture of compliance across all functions.

Key responsibilities will include overseeing compliance with the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations and other relevant legislation; maintaining and enhancing policies, procedures and internal standards; and advising on data protection impact assessments, legitimate interest assessments, data sharing arrangements, international transfers and privacy by design. You will manage the response to individual rights requests, personal data breaches and regulatory enquiries, ensuring that matters are assessed, documented and resolved within appropriate timescales. You will also maintain records of processing activities, support information asset governance and provide clear reporting on risks, incidents and compliance performance.

The successful candidate will have substantial experience in a senior data protection, privacy or information governance position, ideally within a large or regulated environment. You will have strong knowledge of UK and European data protection law, excellent analytical and risk management skills, and the confidence to interpret complex requirements and translate them into practical advice. Experience of leading programmes, managing stakeholders and influencing at senior level is essential, along with the ability to communicate clearly with both technical and non-technical audiences. A relevant professional qualification, such as CIPP/E, CIPM, or membership of an appropriate data protection body, would be advantageous. You will be pragmatic, organised and committed to maintaining high standards of confidentiality, integrity and professional judgement.

We are seeking an experienced Senior Manager, Business Information Security to lead the development and delivery of a robust information security programme across a complex business environment. This is a strategic leadership role, responsible for ensuring that security risks are identified, assessed and managed effectively while enabling the organisation to meet its operational and commercial objectives. You will work closely with senior stakeholders, technology teams, risk and compliance functions, and business leaders to promote secure-by-design ways of working.

Your responsibilities will include developing and maintaining information security policies, standards and procedures; overseeing business security risk assessments; and advising on appropriate controls, risk treatments and assurance activities. You will lead the monitoring and reporting of security risks, vulnerabilities, incidents and control effectiveness, providing clear insight and recommendations to senior management. The role will also support security incident response, business continuity and crisis management, ensuring that lessons learned are embedded across the organisation. You will help manage regulatory, audit and customer assurance requirements, while contributing to security awareness and training initiatives.

The successful candidate will have substantial experience in information security, cyber risk, governance, risk and compliance, or a closely related discipline, including experience leading teams or large-scale security programmes. You will have a strong understanding of recognised security frameworks and standards, such as ISO 27001, NIST or CIS, together with practical knowledge of risk management, control assurance, third-party security and incident management. Excellent communication and stakeholder management skills are essential, as is the ability to translate complex technical and regulatory matters into clear, commercially relevant advice. Professional security qualifications, such as CISSP, CISM or CRISC, would be advantageous. You will be a confident, collaborative leader who can influence at all levels and deliver meaningful improvements in a changing environment.

We are seeking an experienced GRC Consultant to support the development, implementation and continuous improvement of governance, risk and compliance frameworks. Working with stakeholders across the organisation, you will provide pragmatic advice that strengthens control environments, supports informed decision-making and helps ensure compliance with relevant legislation, regulations, standards and internal policies.

Your responsibilities will include conducting risk assessments, control reviews and compliance gap analyses; maintaining risk registers, policies, procedures and control documentation; and supporting the design and delivery of governance frameworks. You will coordinate audit and assurance activities, track remediation plans and prepare clear reports for senior stakeholders. The role will also involve monitoring regulatory developments, assessing their potential impact, contributing to third-party risk management and supporting the delivery of awareness and training initiatives. You will be expected to challenge effectively, identify opportunities for improvement and help embed a culture of accountability and continuous improvement.

The successful candidate will have demonstrable experience in governance, risk and compliance, ideally within a regulated, technology-led or complex environment. You will have a strong understanding of risk management principles, internal controls, audit methodologies and relevant frameworks such as ISO 27001, ISO 31000, COBIT, NIST or equivalent. Experience of working with data protection, information security, business continuity or third-party assurance would be advantageous. Strong analytical, organisational and communication skills are essential, along with the ability to translate complex requirements into practical actions for a range of audiences. Professional qualifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer or Auditor, or a relevant risk and compliance qualification, would be welcomed. You must be confident working independently, managing competing priorities and building constructive relationships at all levels.

We are seeking an experienced PAM Architect to design, develop and oversee secure privileged access management solutions across a complex technology environment. You will define the architectural direction for privileged identity, access controls and account governance, ensuring that solutions align with security policies, regulatory obligations and recognised industry standards. The role will involve working closely with cyber security, infrastructure, cloud, applications and risk teams to deliver a consistent and resilient approach to privileged access.

Your responsibilities will include assessing current PAM capabilities, defining target-state architecture and producing clear technical designs, standards and implementation roadmaps. You will provide guidance on the onboarding and management of privileged accounts, service accounts, applications, devices and cloud platforms, including password vaulting, credential rotation, session monitoring, just-in-time access and approval workflows. You will also support integration with identity providers, directories, security monitoring platforms and automated provisioning tools. As a senior technical authority, you will review proposed solutions, identify risks and dependencies, oversee architectural governance and contribute to the resolution of complex incidents or control weaknesses.

Applicants should have substantial experience designing and implementing PAM solutions within large or highly regulated environments, together with a strong understanding of privileged identity, zero-trust principles, identity governance and access control frameworks. Experience with leading PAM technologies, cloud platforms, automation and scripting will be important, as will knowledge of authentication protocols, directory services, logging and security operations. Relevant professional certifications in cyber security, identity and access management or architecture would be advantageous. You will need excellent communication and stakeholder management skills, with the ability to translate technical risks into practical recommendations for both technical and non-technical audiences. This is an opportunity to shape a strategic security capability and make a measurable contribution to the protection of critical systems and data.

We are seeking an experienced Security Service Designer to shape and improve secure, user-centred services across a complex organisation. You will work at the intersection of service design, cybersecurity and operational delivery, helping teams understand security needs and turn them into practical, effective services. This is an opportunity to influence how security is experienced by colleagues, customers and partners, while supporting the delivery of resilient and trustworthy digital services.

You will lead discovery and design activities, including user research, stakeholder interviews, journey mapping, service blueprinting and the development of clear, accessible service propositions. You will identify pain points, risks and opportunities across end-to-end security journeys, then collaborate with security specialists, product managers, engineers, architects, delivery teams and policy colleagues to develop and test improvements. Your responsibilities will include translating complex security requirements into straightforward guidance and service patterns, defining user needs and outcomes, creating prototypes, facilitating workshops, and using evidence and feedback to iterate designs. You will also help establish consistent design standards, document service models and contribute to roadmaps, governance and continuous improvement.

You will bring proven experience in service design, user-centred design or a related discipline, ideally within cybersecurity, technology, regulated services or another complex environment. You should be confident conducting qualitative research, analysing insight and communicating recommendations to both technical and non-technical audiences. Experience of designing security, identity, access management, incident response or risk-related services would be valuable, as would familiarity with agile delivery, design systems and accessibility standards. We are looking for someone who can balance user needs with security, privacy, compliance and operational considerations; build strong relationships across diverse teams; and challenge existing ways of working constructively. You will need excellent facilitation, storytelling and stakeholder management skills, along with the ability to manage competing priorities and deliver high-quality work in a changing environment.

We are seeking an experienced Manager, Support Engineering, Identity and Access Management, to lead a specialist team responsible for delivering reliable, secure and customer-focused support across identity and access services. You will provide direction and technical leadership for day-to-day operations, ensuring issues are resolved efficiently and that service levels, security controls and operational standards are consistently maintained. This role will work closely with engineering, security, compliance and customer-facing teams to improve the resilience and usability of authentication, authorisation, directory and access management capabilities.

Your responsibilities will include managing, mentoring and developing support engineers; establishing effective processes for incident, problem and change management; and overseeing the investigation and resolution of complex technical issues. You will monitor service performance, identify recurring problems and lead continuous improvement initiatives that reduce operational risk and improve the user experience. You will also contribute to service planning, workforce management, documentation, reporting and operational readiness for new products and significant changes. Where required, you will participate in an escalation rota and support the management of critical incidents, ensuring clear communication and timely stakeholder updates.

The successful candidate will have substantial experience leading technical support or operations teams within identity and access management, cybersecurity or a closely related discipline. You will have strong knowledge of authentication and authorisation concepts, directory services, single sign-on, privileged access, access governance and relevant protocols such as SAML, OAuth and OpenID Connect. Experience working with cloud-based identity platforms, IT service management practices and operational metrics is highly desirable. You should be an effective people manager and communicator, capable of translating complex technical matters for varied audiences, prioritising competing demands and making sound decisions under pressure. A proactive, collaborative approach and a commitment to secure, dependable service delivery are essential.

We are seeking a Privacy & AI Governance Specialist to support the responsible use of personal data and artificial intelligence across a complex, evolving organisation. This is an opportunity to help shape practical governance frameworks that enable innovation while protecting individuals, meeting regulatory obligations and maintaining public trust. The role follows a hybrid work model, combining remote working with regular attendance at a designated office location.

You will develop, maintain and improve privacy and AI governance policies, standards, procedures and guidance. Key responsibilities will include advising stakeholders on data protection, privacy by design, automated decision-making and the ethical deployment of AI; conducting or supporting data protection impact assessments and AI risk assessments; reviewing new technologies, products and suppliers; and maintaining clear records of processing, risk decisions and mitigating actions. You will monitor legislative and regulatory developments, translate them into practical business requirements, and contribute to assurance reporting, audits, training and awareness programmes. The role will also involve working with legal, information security, procurement, technology and operational teams to investigate issues and ensure that appropriate controls are embedded throughout the project lifecycle.

The successful candidate will have demonstrable experience in privacy, data protection, information governance, AI governance or a closely related discipline, together with a sound understanding of UK GDPR, the Data Protection Act 2018 and emerging AI regulation and standards. Experience of carrying out risk assessments, interpreting complex requirements and providing clear, proportionate advice to varied audiences is essential. Relevant professional qualifications, such as CIPP/E, CIPM, CIPT, a data protection certification or equivalent experience, would be advantageous. You will be analytical, organised and confident managing competing priorities, with the communication skills to influence constructively at all levels. A proactive approach, sound judgement, attention to detail and a commitment to fairness, transparency and continuous improvement are vital.

We are seeking an experienced PAM Engineer to support the design, implementation and ongoing management of privileged access management capabilities within a highly regulated financial services environment. You will help protect critical systems, applications and data by ensuring privileged accounts are securely controlled, monitored and regularly reviewed. The role will involve working closely with cyber security, infrastructure, engineering, risk and compliance teams to strengthen access controls and reduce operational risk.

Key responsibilities will include administering and enhancing PAM technologies, onboarding privileged accounts and service accounts, configuring password vaulting and automated rotation, and managing just-in-time or least-privilege access workflows. You will investigate access-related incidents, review audit logs, support access certifications and produce clear reporting for technical and governance stakeholders. You will also contribute to the development of operating procedures, technical standards and control documentation, while supporting vulnerability remediation, platform upgrades, integrations and continual service improvement. The role may include participation in project delivery, change management and out-of-hours support arrangements where required.

Applicants should have proven experience in a PAM engineering, identity security or privileged access role, ideally within banking, insurance or another regulated sector. Strong practical knowledge of PAM concepts, privileged account discovery, credential management, session monitoring, access governance and secrets management is essential. Experience with tools such as CyberArk, BeyondTrust, Delinea or comparable platforms would be advantageous, together with familiarity with Active Directory, cloud platforms, Unix or Linux, Windows administration, scripting and API-based integrations. You should understand security frameworks and principles including least privilege, separation of duties, zero trust and regulatory control requirements. Excellent analytical, communication and problem-solving skills are required, along with the ability to manage competing priorities and explain technical matters clearly to both technical and non-technical audiences. Relevant security or identity certifications would be beneficial.

We are seeking a Director of Security Assurance & Trust to lead the development and delivery of a mature, risk-based security assurance programme. This senior role will provide strategic direction across information security, privacy, resilience and third-party assurance, helping to build confidence with customers, partners, regulators and internal stakeholders. You will establish clear governance, strengthen security culture and ensure that assurance activities support business objectives while meeting relevant legal, regulatory and industry requirements.

You will oversee security assurance frameworks, policies, controls and reporting, ensuring that risks are identified, assessed, treated and communicated effectively. Responsibilities will include leading audit and certification programmes, managing customer and supplier assurance activity, coordinating responses to due diligence requests, and maintaining oversight of regulatory obligations and emerging threats. You will work closely with technology, engineering, legal, privacy, risk and operational teams to embed security by design and improve the organisation’s overall control environment. The role will also involve developing meaningful metrics and board-level reporting, monitoring remediation plans, and providing constructive challenge where standards or risk tolerances are not being met.

The successful candidate will bring substantial experience in security assurance, governance, risk or compliance, ideally within a complex technology-led or regulated environment. You will have a strong understanding of recognised frameworks and standards such as ISO 27001, SOC 2, NIST, CIS Controls or equivalent, together with experience of audit management, control testing, third-party risk and information security practices. Excellent communication and influencing skills are essential, as is the ability to translate technical and regulatory matters into clear business decisions. You will be a pragmatic, trusted leader who can operate strategically while remaining comfortable with detail, ambiguity and pace. Relevant professional qualifications, such as CISM, CISSP, CISA, CRISC or equivalent experience, would be advantageous.