Job Search

We are seeking an experienced Governance, Risk & Compliance (GRC) Infosec Manager with strong expertise in Payment Card Industry Data Security Standard (PCI DSS) compliance. This role will lead the development, implementation and continuous improvement of information security governance, risk management and compliance activities across a complex technology and business environment. You will act as a trusted adviser to senior stakeholders, helping to embed effective security practices while ensuring regulatory, contractual and industry requirements are consistently met.

Key responsibilities will include owning the PCI DSS compliance programme, coordinating assessments and audits, maintaining policies, standards and control frameworks, and monitoring remediation plans for identified risks and control gaps. You will conduct security and compliance risk assessments, support evidence collection, manage relationships with internal and external auditors, and provide clear reporting on compliance status, risk exposure and performance indicators. The role will also contribute to incident response, third-party risk management, security awareness initiatives and the design of practical controls aligned with recognised frameworks and best practice.

To be successful, you will have significant experience in information security governance, risk and compliance, including hands-on responsibility for PCI DSS. You should have a strong understanding of security controls, audit methodologies, risk assessment techniques and regulatory obligations, together with the ability to interpret technical information and communicate it effectively to non-technical audiences. Experience working with frameworks such as ISO 27001, NIST or COBIT would be advantageous. Relevant professional certifications, such as CISM, CISSP, CRISC, QSA or equivalent, are desirable. Excellent organisation, attention to detail, influencing skills and the ability to manage multiple priorities are essential.

We are seeking a Cyber Security Engineer / Architect to design, implement and continuously improve secure technology environments across cloud, infrastructure, applications and enterprise networks. You will work closely with technology, development, operations and risk teams to establish resilient security architectures that support business objectives while meeting regulatory, contractual and internal standards. The role combines strategic design with practical engineering, requiring someone who can translate security principles into effective, scalable controls.

Your responsibilities will include developing security architectures, reference designs and technical standards; assessing new technologies and proposed solutions; and identifying risks, vulnerabilities and opportunities for improvement. You will contribute to threat modelling, security reviews, incident response, vulnerability management and the implementation of identity and access management, network security, endpoint protection, encryption, logging and monitoring controls. You will also support cloud security across major platforms, help define secure development practices, and provide expert guidance during projects, audits and technical investigations. Clear documentation, effective stakeholder communication and the ability to explain complex risks to both technical and non-technical audiences will be essential.

The successful candidate will have proven experience in cyber security engineering, security architecture or a closely related discipline, together with a strong understanding of defence-in-depth principles, secure design patterns and current threat landscapes. Experience with cloud platforms, security tooling, infrastructure as code, SIEM technologies, vulnerability assessment and common security frameworks such as ISO 27001, NIST or CIS is highly desirable. Relevant professional certifications in security architecture, cloud security or information security would be advantageous. You will be analytical, collaborative and pragmatic, with strong problem-solving skills and the confidence to challenge decisions constructively. A commitment to continuous learning and the ability to manage multiple priorities in a changing environment are also important.

We are seeking a Cyber Security Engineer / Architect to design, implement and continuously improve secure technology environments across cloud, on-premises and hybrid platforms. You will work closely with infrastructure, software development, data and operational teams to embed security into the full technology lifecycle, from initial design through to deployment and ongoing service management. This is an opportunity to influence security strategy while remaining actively involved in practical engineering and technical delivery.

Your responsibilities will include developing security architectures, reference patterns and technical standards; assessing systems, applications and infrastructure against security requirements; and identifying risks, vulnerabilities and opportunities for improvement. You will design and implement controls across areas such as identity and access management, network security, endpoint protection, encryption, security monitoring and vulnerability management. You will also contribute to threat modelling, risk assessments, security reviews, incident response planning and the continuous enhancement of detection and prevention capabilities.

The successful candidate will have substantial experience in cyber security engineering, security architecture or a closely related role, with a strong understanding of secure design principles, defence-in-depth and recognised security frameworks. Experience with cloud security, DevSecOps, infrastructure as code, SIEM platforms, vulnerability management tools and enterprise networking is highly desirable. You should be able to translate complex technical risks into clear, practical recommendations for both technical and non-technical stakeholders. Relevant professional certifications or demonstrable equivalent experience are welcome. Strong communication, analytical and problem-solving skills are essential, along with a collaborative approach and the ability to manage multiple priorities in a changing environment.

We are seeking an Information Security Manager - AI to lead the development and implementation of security strategies for artificial intelligence, machine learning, and data-driven technologies. This role will help ensure that AI solutions are designed, developed, deployed, and operated securely, responsibly, and in accordance with applicable regulatory and industry requirements. You will work closely with technology, engineering, data, risk, legal, compliance, and business stakeholders to identify risks and embed effective security controls throughout the AI lifecycle.

Key responsibilities include establishing and maintaining an AI security framework; assessing threats and vulnerabilities across models, data, applications, infrastructure, and third-party services; and defining security requirements for AI products and use cases. You will lead security reviews, threat modelling, risk assessments, control testing, and incident response activities relating to AI systems. The role will also involve developing policies, standards, and guidance covering areas such as model protection, data privacy, access management, secure development, prompt and input security, model integrity, supply-chain risk, monitoring, and misuse prevention. You will support audits and regulatory engagements, track remediation activity, and provide clear reporting to senior leadership.

The successful candidate will have substantial experience in information security, cybersecurity, technology risk, or a related discipline, together with practical knowledge of AI and machine learning security risks. Experience designing security controls, conducting risk assessments, and working within recognised security or governance frameworks is essential. Strong understanding of cloud security, identity and access management, data protection, secure software development, vulnerability management, and incident response is highly desirable. Relevant professional qualifications or certifications are advantageous. You should be an effective communicator who can translate complex technical issues into clear business risks and actionable recommendations, influence stakeholders at all levels, and operate confidently in a fast-changing environment. A proactive, analytical, and collaborative approach is essential.

We are seeking a Senior Security Operations Engineer to lead the monitoring, investigation and improvement of a modern security operations environment. You will play a key role in detecting and responding to cyber threats, protecting critical systems and data, and strengthening operational resilience. The position will involve working closely with infrastructure, cloud, software engineering and risk teams to ensure security controls are effective, measurable and aligned with business requirements.

Responsibilities will include managing and tuning security monitoring tools, SIEM platforms, endpoint detection and response technologies, vulnerability management solutions and related security services. You will investigate and triage alerts, coordinate incident response activities, conduct root-cause analysis and support the development of playbooks, detection rules and threat-hunting capabilities. You will also contribute to security investigations, forensic reviews, control testing, audit preparation and the continuous improvement of operational processes. The role will require participation in an on-call or out-of-hours response rota and may involve mentoring engineers and providing technical guidance across the wider technology function.

Applicants should have substantial experience in a security operations, incident response or security engineering role, with a strong understanding of network, endpoint, identity and cloud security. Practical experience with SIEM, EDR, vulnerability management and security automation technologies is essential, along with the ability to analyse logs, investigate suspicious activity and communicate technical findings clearly. Knowledge of threat intelligence frameworks, common attack techniques, secure configuration standards and relevant security legislation or industry frameworks would be advantageous. Professional security certifications or equivalent experience are desirable. You should be analytical, methodical and comfortable working under pressure, with strong collaboration skills and a proactive approach to identifying and reducing risk.

We are seeking a skilled Information Security Architect to join our dynamic team. In this role, you will be responsible for designing and implementing robust security architectures that safeguard our systems and data from potential threats. Your primary duties will include assessing current security measures, identifying vulnerabilities, and establishing policies that ensure compliance with industry standards. You will collaborate closely with IT teams to integrate security into all technology initiatives and provide expert advice on security best practices.

The ideal candidate will possess a deep understanding of security frameworks and methodologies, including risk assessment, threat modeling, and incident response. You should have experience with security technologies such as firewalls, intrusion detection systems, and encryption protocols. A strong ability to communicate complex security concepts to both technical and non-technical stakeholders is essential. Additionally, you will lead training sessions to enhance awareness of security policies and procedures across the organization.

To be successful in this role, you should hold relevant certifications (such as CISSP, CISM, or similar) and have a proven track record in information security architecture. Strong analytical and problem-solving skills are crucial, as is the ability to stay abreast of the latest security trends and technologies. If you are passionate about protecting sensitive information and have the expertise to design secure systems, we encourage you to apply and contribute to our mission of maintaining a secure environment.