Job Search

We are seeking a Security Analyst – Emerging Technology to assess and strengthen the security of new and evolving technologies within a financial services environment. You will help identify risks associated with emerging platforms, applications and delivery models, providing practical advice that supports innovation while maintaining robust security, regulatory and operational standards.

Your responsibilities will include conducting security assessments, threat modelling and control reviews across technologies such as cloud services, artificial intelligence, machine learning, automation, application programming interfaces and distributed ledger solutions. You will analyse vulnerabilities, assess third-party and supply-chain risks, and produce clear reports outlining findings, business impact and recommended remediation. Working closely with technology, architecture, risk, compliance and engineering teams, you will contribute to security-by-design reviews, develop proportionate controls and monitor the resolution of identified issues. You may also support horizon scanning, research emerging threats and brief stakeholders on changes that could affect the organisation’s risk profile.

The successful candidate will have experience in information security, cyber risk, technology assurance or a closely related discipline, ideally within financial services or another highly regulated environment. You should have a sound understanding of security frameworks, risk assessment methodologies, cloud security principles and common technology vulnerabilities, together with the ability to interpret technical detail and communicate it clearly to non-technical audiences. Familiarity with artificial intelligence security, data protection, identity and access management, secure development practices or third-party assurance would be advantageous. Relevant professional qualifications, such as CISSP, CISM, CRISC or equivalent experience, are welcome. We are looking for someone analytical, curious and pragmatic, who can manage competing priorities, challenge constructively and build effective relationships at all levels.

We are seeking a Customer Identity and Access Management (CIAM) Consultant to help design, implement and improve secure, user-friendly identity services across digital channels. In this role, you will work with business and technology stakeholders to understand customer journeys, translate requirements into scalable CIAM solutions, and support the delivery of authentication, authorisation, consent and profile management capabilities. You will contribute to programmes involving identity governance, single sign-on, multi-factor authentication, customer registration, account recovery and privacy-focused data handling.

Your responsibilities will include assessing existing identity processes and architectures, defining target-state solutions, producing technical and functional documentation, and supporting implementation from discovery through to deployment. You will advise on integration patterns for applications, APIs and third-party platforms, while ensuring solutions align with security principles, regulatory obligations and recognised industry standards. You will also help develop roadmaps, identify risks and dependencies, support testing and troubleshooting, and work with delivery teams to resolve complex identity and access challenges. Clear communication will be essential, as you will facilitate workshops, present recommendations and explain technical concepts to both specialist and non-specialist audiences.

The successful candidate will have practical experience in CIAM, IAM or a closely related discipline, together with a strong understanding of identity lifecycle management, authentication protocols and access control models. Experience with technologies such as OAuth 2.0, OpenID Connect, SAML, REST APIs and directory services is expected; familiarity with leading CIAM platforms, cloud environments, consent management and privacy regulations would be advantageous. You should be comfortable producing architecture diagrams and solution designs, analysing requirements and working in Agile or hybrid delivery environments. Strong problem-solving, stakeholder management and written communication skills are required, along with the ability to manage multiple priorities and deliver high-quality outcomes in a changing environment.

We are seeking an experienced Cyber Security Lead to drive the development, implementation and continuous improvement of security capabilities across a complex technology environment. This role will provide strategic direction while remaining engaged with operational delivery, helping to protect critical systems, applications, data and services from evolving cyber threats. You will work closely with technology, risk, compliance and business stakeholders to establish effective security practices and promote a strong culture of security awareness.

Key responsibilities will include defining and maintaining cyber security strategies, policies, standards and control frameworks; leading security risk assessments and supporting remediation planning; monitoring the threat landscape and recommending appropriate preventative, detective and responsive measures; and overseeing incident response, investigation and post-incident improvement activities. You will contribute to security architecture and design reviews, vulnerability and patch management, identity and access management, third-party risk assessments, and the secure delivery of technology and change initiatives. The role will also involve coordinating audits, tracking security metrics, preparing reports for senior stakeholders and managing relationships with external security partners and suppliers.

The successful candidate will have substantial experience in cyber security leadership, information security or a closely related discipline, with a strong understanding of security frameworks, risk management principles, incident response and regulatory requirements. Experience across cloud, infrastructure, applications and endpoint security is highly desirable, as is the ability to translate technical risks into clear business implications. Relevant professional certifications such as CISSP, CISM, CRISC or equivalent would be advantageous. You will be a confident communicator and collaborative leader, capable of influencing stakeholders at all levels, prioritising competing demands and delivering practical, risk-based solutions. A proactive mindset, strong analytical skills and a commitment to continuous improvement are essential.

We are seeking an experienced Security Consultant to help clients strengthen their security posture, manage risk, and protect critical information, systems, and services. In this role, you will work with stakeholders across a range of environments to understand business needs, assess current controls, and develop practical, risk-based recommendations. You will contribute to security assessments, risk reviews, policy and standards development, control design, and the implementation of security improvement initiatives.

Your responsibilities will include gathering and analysing requirements, identifying vulnerabilities and control gaps, preparing clear reports, and presenting findings to both technical and non-technical audiences. You will support the development of security strategies, operating models, governance frameworks, and assurance activities. The role may also involve advising on cloud and infrastructure security, identity and access management, incident readiness, data protection, third-party risk, and regulatory compliance. You will be expected to manage deliverables effectively, maintain accurate documentation, and collaborate with internal teams, clients, and specialist partners to ensure recommendations are practical and measurable.

Applicants should have professional experience in information security, cyber risk, security assurance, or a related consulting environment. A strong understanding of recognised security frameworks, risk management principles, security controls, and relevant legislation or regulatory requirements is essential. Experience conducting security assessments and producing high-quality written outputs is highly desirable. Professional certifications such as CISSP, CISM, CRISC, ISO 27001, or equivalent qualifications would be advantageous. You should be a confident communicator with strong analytical and problem-solving skills, able to manage competing priorities and build effective relationships at all levels. A proactive, collaborative approach and a commitment to delivering high-quality client outcomes are essential.

We are seeking a Security Consultant to help organisations identify, assess and manage information and cyber security risks. In this role, you will work with stakeholders across a range of business and technical environments to understand security requirements, evaluate existing controls and recommend practical improvements. You will contribute to security assessments, risk reviews, compliance activities and the development of policies, standards and procedures aligned with recognised frameworks and regulatory expectations.

Your responsibilities will include conducting security reviews, threat and vulnerability assessments, control gap analyses and risk assessments; producing clear reports and presenting findings to technical and non-technical audiences; supporting the design and implementation of security controls; and advising on incident response, identity and access management, data protection, cloud security and secure architecture. You will also assist with security awareness initiatives, audit preparation, third-party risk reviews and the ongoing monitoring of remediation plans. The role requires you to balance technical detail with business priorities and provide solutions that are proportionate, achievable and effective.

Applicants should have professional experience in information security, cyber security, technology risk or a related consulting environment. Strong knowledge of security principles, risk management methodologies and relevant standards such as ISO 27001, NIST or CIS is expected. Experience with cloud platforms, vulnerability management, governance, risk and compliance tools, penetration testing oversight or security architecture would be advantageous. Relevant certifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or equivalent, are desirable. You should be analytical, organised and confident communicating with varied stakeholders, with the ability to manage multiple assignments, produce high-quality documentation and work independently while contributing effectively to a collaborative team.

We are seeking an experienced Security Analyst: 3rd Line to provide advanced technical support, security monitoring and incident response across a complex IT environment. You will act as a senior escalation point for security-related issues that cannot be resolved by first- or second-line teams, investigating sophisticated threats and helping to maintain the confidentiality, integrity and availability of systems and data. This is a hands-on role for someone who can combine strong analytical skills with practical experience of enterprise security operations.

Key responsibilities will include monitoring and analysing alerts from security information and event management (SIEM), endpoint detection and response, vulnerability management and other security platforms. You will investigate suspected breaches, malware infections, unauthorised access and unusual activity, leading containment, eradication and recovery activities where required. The role will involve performing root-cause analysis, developing remediation plans, tuning detection rules, managing security incidents through to resolution and producing clear technical reports. You will also support vulnerability assessments, penetration-test remediation, security reviews, change management and the continual improvement of operational procedures. Collaboration with infrastructure, cloud, networking and service-desk teams will be essential, as will contributing to security projects and providing guidance to less experienced colleagues.

Applicants should have substantial experience in a third-line security, cyber operations or infrastructure security role, together with a strong understanding of incident response, threat intelligence, vulnerability management and security monitoring principles. Practical knowledge of networking, Windows and Linux environments, identity and access management, firewalls, endpoint protection and cloud technologies is expected. Experience with SIEM platforms, scripting or automation, and recognised security frameworks such as ISO 27001, NIST or CIS would be advantageous. Relevant professional certifications, such as Security+, CySA+, GCIH, CISSP or equivalent experience, are desirable. You should be methodical, calm under pressure and able to communicate complex technical issues clearly to both technical and non-technical audiences.

We are seeking a Cyber Security Risk Analyst to support the identification, assessment and management of information security risks across a complex organisational environment. In this role, you will work with technology, operational and business stakeholders to understand the risk landscape, evaluate existing controls and recommend practical improvements that protect systems, data and services. You will contribute to a proactive security culture by helping teams understand their responsibilities and make informed, risk-based decisions.

Your responsibilities will include conducting cyber security and technology risk assessments, maintaining risk registers, monitoring remediation plans and preparing clear reports for management and governance forums. You will review security controls against relevant policies, standards and regulatory requirements, assist with audits and assurance activities, and support the assessment of risks associated with projects, suppliers, applications and infrastructure changes. You will also analyse threat, vulnerability and incident information to identify emerging risks, escalate significant issues appropriately and track corrective actions through to completion.

The successful candidate will have experience in cyber security, information security, technology risk, governance or a related discipline, together with a sound understanding of risk management principles and security control frameworks. Familiarity with standards such as ISO 27001, NIST or CIS is desirable, as is experience working with third-party risk, vulnerability management, business continuity or regulatory compliance. Strong analytical, communication and stakeholder management skills are essential, along with the ability to translate technical issues into clear business impacts and recommendations. Relevant professional qualifications or certifications in information security, risk or audit would be advantageous. You should be organised, collaborative and comfortable managing multiple priorities while maintaining accuracy and professional judgement.

We are seeking a Critical Incident Responder to coordinate the effective management of high-impact incidents affecting services, systems, customers, or business operations. In this role, you will act as a central point of coordination during major incidents, ensuring that the right technical and business stakeholders are engaged promptly and that response activities remain focused, structured, and clearly communicated. You will assess incident severity, initiate appropriate response procedures, establish communication channels, and maintain accurate records throughout the incident lifecycle.

Your responsibilities will include leading incident bridges, coordinating investigation and recovery activities, tracking actions and decisions, providing regular updates to stakeholders, and escalating issues when required. You will work closely with technical support, engineering, infrastructure, security, suppliers, and business teams to minimise disruption and restore normal service as quickly as possible. Following each incident, you will facilitate post-incident reviews, document root causes and contributing factors, identify lessons learned, and ensure that corrective and preventative actions are assigned and followed through. You will also contribute to the development of incident response procedures, communication templates, service resilience practices, and operational reporting.

The successful candidate will have experience managing critical incidents in a fast-paced technology or service environment, with a strong understanding of incident management principles, escalation processes, and service restoration. You will be confident making decisions under pressure, balancing competing priorities, and communicating clearly with both technical and non-technical audiences. Strong organisational, analytical, and stakeholder management skills are essential, along with the ability to remain calm and impartial during challenging situations. Experience with IT service management frameworks, incident management platforms, operational resilience, problem management, or business continuity would be advantageous. A proactive approach, attention to detail, and commitment to continuous improvement are key to success in this role.

We are seeking an experienced Senior Penetration Tester to identify, assess, and help remediate security vulnerabilities across complex technology environments. In this role, you will plan and deliver penetration tests against web applications, APIs, mobile applications, networks, cloud platforms, infrastructure, and wireless systems. You will define testing objectives and scope, select appropriate methodologies, conduct manual and automated assessments, and safely validate vulnerabilities while minimising operational impact. You will also support threat modelling, security reviews, red team activities, and bespoke assessments based on emerging attack techniques.

You will produce clear, accurate, and commercially focused reports that explain technical findings, business impact, evidence, risk ratings, and practical remediation recommendations. The role involves presenting results to both technical and non-technical stakeholders, helping development and engineering teams understand and resolve identified weaknesses, and performing follow-up validation where required. You will contribute to improving testing standards, tools, playbooks, and internal security practices, while mentoring less experienced testers and helping maintain a high standard of professional and ethical conduct.

Applicants should have substantial professional penetration testing experience and a strong understanding of application, infrastructure, network, cloud, and operating system security. Experience with common tools and frameworks, including Burp Suite, Nmap, Metasploit, Kali Linux, and recognised penetration testing methodologies, is expected. Relevant certifications such as OSCP, CREST, or equivalent qualifications are desirable. You should be comfortable scripting in languages such as Python, PowerShell, or Bash, and able to demonstrate strong knowledge of authentication, privilege escalation, exploitation, secure development, and defensive controls. Excellent written and verbal communication, sound judgement, meticulous documentation, and the ability to manage multiple assessments independently are essential.

We are seeking a Cyber Security Consultant to provide expert guidance on protecting systems, applications, networks, and data from evolving cyber threats. Working with stakeholders across the organisation, you will assess security risks, recommend practical improvements, and support the delivery of secure technology and business solutions. This role will involve balancing technical expertise with strong communication and an understanding of operational and regulatory requirements.

Key responsibilities will include conducting security assessments, threat and vulnerability analysis, risk reviews, and security architecture evaluations. You will develop and maintain security policies, standards, procedures, and risk registers, while contributing to security reviews for projects, cloud services, applications, and infrastructure. You will advise on identity and access management, data protection, incident response, network security, vulnerability management, and secure development practices. The role will also involve supporting audits, tracking remediation activity, preparing clear reports for technical and non-technical audiences, and helping to improve security awareness and resilience across the business.

Applicants should have professional experience in cyber security, information security, risk management, or a closely related discipline, together with a strong understanding of recognised security frameworks and industry good practice. Experience with security assessments, governance, compliance, cloud environments, and security tooling is highly desirable. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001, or equivalent qualifications would be advantageous. You will need excellent analytical and problem-solving skills, the ability to manage competing priorities, and confidence working collaboratively with technical teams, suppliers, and senior stakeholders. A proactive approach, sound judgement, and a commitment to continuous learning are essential.