Job Search

We are seeking a Data Protection and Data Governance Consultant to support the development, implementation and continuous improvement of robust data management practices. In this role, you will advise stakeholders on data protection obligations, governance frameworks and responsible data use, helping to ensure that personal and business-critical information is managed securely, transparently and in accordance with applicable laws, regulations and internal policies.

Your responsibilities will include conducting data protection impact assessments, reviewing data processing activities, maintaining records of processing, and supporting the management of data subject rights and information requests. You will contribute to the creation and maintenance of policies, standards, procedures and guidance relating to data privacy, retention, classification, access control and information security. The role will also involve assessing third-party data processing arrangements, supporting contract reviews, identifying compliance risks and recommending appropriate remedial actions. You will work closely with legal, security, technology, risk and operational teams to embed effective controls and promote a culture of accountability.

The successful candidate will have demonstrable experience in data protection, privacy, information governance or a closely related discipline, with a sound understanding of relevant legislation such as the UK GDPR and Data Protection Act 2018, or equivalent international requirements. Experience with data mapping, governance frameworks, audit activity, risk assessment and policy development is highly desirable. Relevant professional qualifications, such as CIPP/E, CIPM, CDPO, or an information governance certification, would be advantageous. You should be an excellent communicator, capable of explaining complex requirements clearly to both technical and non-technical audiences. Strong analytical, organisational and stakeholder-management skills are essential, together with a practical, collaborative approach and the ability to manage competing priorities in a changing environment.

We are seeking a Senior Technical Business Analyst specialising in Identity and Access Management (IAM) and cybersecurity to support the delivery of secure, scalable technology solutions. In this role, you will act as the bridge between business stakeholders, security teams, architects, engineers and delivery partners, translating complex security needs into clear business and technical requirements. You will contribute to initiatives covering identity governance, privileged access management, single sign-on, multi-factor authentication, role-based access control and access lifecycle management.

Your responsibilities will include leading discovery workshops, documenting current and future-state processes, defining user stories, acceptance criteria and functional specifications, and supporting requirements prioritisation throughout the delivery lifecycle. You will analyse access models, identify control gaps and process improvements, and ensure proposed solutions align with cybersecurity policies, regulatory obligations and industry good practice. You will also support solution design reviews, testing, implementation planning, defect resolution and post-release validation. Clear communication will be essential, particularly when explaining technical risks, dependencies and recommendations to non-technical audiences and senior stakeholders.

The successful candidate will bring substantial experience as a Technical Business Analyst, ideally within IAM, cybersecurity, infrastructure or enterprise technology environments. You should have strong knowledge of identity lifecycle management, authentication and authorisation principles, access certification, segregation of duties and security controls. Experience working with IAM platforms, directory services, cloud identity providers, security standards and Agile delivery methods will be highly valued. Strong analytical, documentation, stakeholder management and problem-solving skills are essential, along with the confidence to work independently across multiple concurrent initiatives. Relevant certifications in business analysis, cybersecurity, IAM or Agile delivery would be advantageous.

We are seeking an experienced IM&T Security Officer to support the protection of information, systems, networks and digital services across a complex operational environment. The postholder will help maintain a strong security culture, ensure effective risk management and contribute to the continual improvement of information and communications technology security arrangements. This is an opportunity to work across technical and non-technical teams, providing practical advice and helping services operate securely, efficiently and in line with relevant policies and legislation.

Key responsibilities will include monitoring and assessing information security risks; supporting the implementation and review of security policies, procedures and controls; coordinating vulnerability management, security assessments and remediation activity; and contributing to incident detection, investigation, reporting and lessons learned. You will assist with access control reviews, audit preparation, business continuity and disaster recovery planning, supplier assurance, security awareness training and the secure introduction of new technologies and services. The role will also involve maintaining accurate records, preparing reports for governance forums and advising colleagues on data protection, secure working practices and the management of sensitive information.

Applicants should have demonstrable experience in information, cyber or IT security, together with a sound understanding of security frameworks, risk assessment, incident management and relevant data protection requirements. Knowledge of recognised standards and good practice, such as ISO 27001, NIST or the Cyber Essentials principles, would be beneficial. You will need strong analytical, organisational and communication skills, with the confidence to explain technical issues clearly to a range of audiences and to challenge constructively when required. The successful candidate will be proactive, discreet and methodical, able to manage competing priorities, work collaboratively and exercise sound judgement when handling confidential information. Relevant professional qualifications or practical experience in a comparable security role are desirable.

We are seeking a DLP Security Specialist to help protect sensitive information across enterprise systems, endpoints, cloud platforms and communication channels. The successful candidate will support the design, implementation and ongoing improvement of data loss prevention controls, ensuring that confidential, personal and regulated data is identified, monitored and protected throughout its lifecycle. This role will work closely with cybersecurity, infrastructure, compliance, legal and business teams to reduce the risk of accidental or malicious data exposure while enabling secure and productive business operations.

Key responsibilities include developing and maintaining DLP policies, rules and detection mechanisms; monitoring alerts and investigating potential data leakage incidents; tuning controls to reduce false positives; and coordinating appropriate remediation with relevant stakeholders. You will assist with data discovery and classification activities, assess information flows, and support the protection of data across email, web traffic, endpoints, removable media, SaaS applications and cloud environments. The role will also contribute to incident response, evidence gathering, root-cause analysis and reporting, as well as the preparation of management information and compliance documentation. You may participate in security assessments, control reviews, audit activities and projects involving new technologies or changes to the information security environment.

Applicants should have practical experience in data loss prevention, information security operations, security monitoring or a closely related discipline. A good understanding of data classification, access controls, encryption, endpoint security, cloud services and common regulatory requirements is essential. Experience with DLP or security information and event management platforms, scripting, incident management and policy development would be advantageous. You should be analytical, methodical and confident investigating complex issues, with the ability to explain technical risks clearly to both technical and non-technical audiences. Relevant professional certifications in cybersecurity, information security, privacy or risk management are desirable. The role requires strong attention to detail, sound judgement, discretion and a proactive approach to improving security controls.

We are seeking a Data Protection Specialist to support the effective management, implementation and continuous improvement of data protection and privacy practices. The successful candidate will help ensure that personal data is handled lawfully, securely and transparently, in line with applicable legislation, regulatory expectations and internal policies. This role will work closely with colleagues across information security, legal, technology, human resources, procurement and operational teams to provide practical, proportionate advice on privacy matters.

Key responsibilities will include maintaining records of processing activities, supporting data protection impact assessments, reviewing privacy notices, and advising on data sharing, retention, international transfers and the use of suppliers or third-party services. You will assist with the management of individual rights requests, personal data breaches, audits and compliance reviews, ensuring that issues are accurately recorded, investigated and resolved within required timescales. The role will also contribute to policy development, staff guidance and awareness initiatives, helping to embed good data protection practice throughout the organisation. You may be required to monitor regulatory developments and assess their potential impact on business processes.

Applicants should have practical experience in data protection, privacy, information governance or a closely related field, together with a sound understanding of relevant data protection principles and legislation. Experience of conducting risk assessments, documenting processing activities, handling rights requests or supporting breach management would be advantageous. Strong analytical, organisational and communication skills are essential, as is the ability to explain complex requirements clearly to both technical and non-technical audiences. You will be expected to manage competing priorities, maintain accurate records, exercise sound judgement and work collaboratively while handling sensitive information with discretion. Relevant professional qualifications or membership of a recognised privacy or information governance body would be desirable.

We are seeking a DLP Security Specialist to help protect sensitive information across endpoints, networks, cloud services and corporate applications. The successful candidate will be responsible for the design, implementation, monitoring and continual improvement of data loss prevention controls, ensuring that confidential, personal and regulated data is handled securely and in line with internal policies and applicable regulatory requirements.

Key responsibilities include developing and maintaining DLP policies, rules and detection mechanisms; investigating and responding to data protection alerts; tuning controls to minimise false positives; and carrying out detailed analysis of incidents involving unauthorised access, transmission, copying or disclosure of information. You will work closely with security operations, infrastructure, identity, legal, compliance and business teams to assess risks, coordinate remediation and support investigations. The role will also involve monitoring data flows, reviewing DLP events and reports, contributing to security incident response, documenting procedures and preparing management information on trends, risks and control effectiveness. You may also support data classification initiatives, security awareness activities, control testing and the secure onboarding of new technologies.

Applicants should have proven experience in data loss prevention, information security or a closely related field, with practical knowledge of DLP technologies and security monitoring platforms. You will be comfortable working with endpoint, email, web, network and cloud data protection controls, and have an understanding of data classification, encryption, access management, incident response and information governance. Strong analytical and problem-solving skills are essential, along with the ability to interpret technical events, identify root causes and communicate findings clearly to both technical and non-technical audiences. Experience with scripting, automation, security frameworks and relevant privacy or security standards would be advantageous. Professional certifications in information security, privacy or risk management are desirable.

We are seeking an experienced Security Compliance Manager to lead the development, implementation and continuous improvement of information security compliance programmes. The successful candidate will help ensure that security controls, policies and processes meet applicable legal, regulatory and industry requirements, while supporting business objectives and operational resilience. This role will work closely with technology, risk, legal, privacy, internal audit and business stakeholders to promote a consistent, risk-based approach to security and compliance.

Key responsibilities include maintaining the security compliance framework, policies, standards and control library; monitoring changes in relevant laws, regulations and industry frameworks; and assessing their impact on existing processes. You will coordinate internal and external audits, manage evidence collection, track remediation activities and report compliance status, risks and exceptions to senior stakeholders. The role will also involve conducting control assessments, supporting customer and supplier assurance activities, reviewing security questionnaires, and helping manage security incidents, risk acceptances and corrective action plans. You will contribute to awareness initiatives and provide practical guidance that enables teams to meet security requirements effectively.

Applicants should have substantial experience in information security, governance, risk or compliance, ideally within a regulated or complex operating environment. A strong understanding of frameworks and standards such as ISO 27001, SOC 2, NIST, CIS Controls or applicable data protection legislation is required. Experience managing audits, developing policies, interpreting regulatory requirements and presenting compliance information to senior audiences will be highly valued. Relevant professional qualifications, such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor, are advantageous. You will need excellent analytical, organisational and communication skills, sound judgement, attention to detail and the ability to influence stakeholders at all levels. A proactive, collaborative approach and the confidence to challenge constructively are essential.

We are seeking an experienced AWS Security Engineer to help design, implement and maintain secure, resilient cloud environments. In this role, you will work closely with infrastructure, development, operations and compliance teams to embed security throughout the cloud lifecycle. You will contribute to cloud security strategy, improve risk management practices and support the delivery of reliable services across AWS environments.

Your responsibilities will include designing and reviewing secure AWS architectures; implementing identity and access management controls using services such as IAM, IAM Identity Center and AWS Organizations; and configuring security monitoring, logging and threat detection through tools including CloudTrail, GuardDuty, Security Hub and Amazon Inspector. You will develop and maintain infrastructure security controls using infrastructure-as-code, support vulnerability management and incident response, and investigate security events when required. You will also help establish secure network designs involving VPCs, security groups, network firewalls, private connectivity and encryption. The role will involve creating security standards, policies and technical documentation, as well as advising engineering teams on secure development and deployment practices.

The successful candidate will have hands-on experience securing AWS environments and a strong understanding of cloud security principles, identity and access management, networking, encryption, logging and regulatory controls. Experience with Terraform, CloudFormation or similar infrastructure-as-code tools, alongside scripting in Python, Bash or another relevant language, is highly desirable. Familiarity with CI/CD security, container and serverless workloads, vulnerability scanning and security information and event management platforms would be advantageous. You should be analytical, collaborative and able to communicate complex technical risks clearly to both technical and non-technical audiences. Relevant AWS or security certifications, such as AWS Certified Security – Specialty, CISSP or equivalent experience, are welcomed.

We are seeking a Senior Infrastructure, Cloud & Cyber Security Engineer to lead the design, implementation and continual improvement of secure, resilient and scalable technology environments. This role will provide technical leadership across infrastructure, cloud platforms, networking and cyber security, ensuring services remain reliable, compliant and aligned with business objectives. You will work closely with technology and operational teams to develop robust solutions, improve service performance and support the delivery of strategic transformation initiatives.

Key responsibilities will include designing and managing hybrid infrastructure across on-premises and cloud environments; administering and optimising cloud services, virtualisation platforms, networks, storage and backup systems; and implementing effective monitoring, capacity planning, disaster recovery and business continuity arrangements. You will identify and remediate vulnerabilities, strengthen security controls, manage identity and access, and contribute to incident response, threat detection and security investigations. The role will also involve developing automation and infrastructure-as-code practices, maintaining technical documentation, supporting audits, and ensuring adherence to relevant security standards, policies and regulatory requirements. You will mentor colleagues, provide guidance on complex technical issues and work with third-party suppliers where required.

The successful candidate will have substantial experience in infrastructure engineering, cloud technologies and cyber security, with a strong understanding of secure architecture and enterprise networking. Practical expertise with major cloud platforms, Windows and Linux environments, firewalls, endpoint protection, identity services, security monitoring and backup technologies is expected. Experience with scripting, automation, configuration management and infrastructure-as-code tools will be highly valued. You should be confident assessing risk, troubleshooting complex problems and communicating technical information clearly to both technical and non-technical audiences. Relevant professional certifications in cloud, networking, infrastructure or cyber security are desirable. A proactive approach, strong analytical skills and a commitment to continuous improvement are essential.