Job Search

We are seeking an experienced Senior Data Protection Manager to lead and strengthen data protection and privacy practices across a complex organisation. This is a senior advisory role, responsible for ensuring that personal data is handled lawfully, transparently and securely throughout its lifecycle. You will provide authoritative guidance on the interpretation and application of UK data protection legislation, including the UK GDPR and Data Protection Act 2018, while remaining informed about relevant regulatory developments and emerging privacy risks.

Key responsibilities will include maintaining and improving the data protection framework, policies, standards and procedures; advising senior stakeholders and project teams on privacy requirements; and overseeing data protection impact assessments, legitimate interest assessments, data-sharing arrangements and international transfers. You will manage and investigate personal data breaches, coordinate appropriate reporting and remediation, and support the delivery of training and awareness programmes. The role will also involve monitoring compliance, conducting audits and reviews, maintaining records of processing activities, responding to data subject rights requests, and preparing clear reports and recommendations for governance committees and senior leadership.

You will bring substantial experience in a senior data protection, privacy or information governance position, with a strong working knowledge of UK GDPR, the Data Protection Act 2018, electronic marketing rules and related guidance from the Information Commissioner’s Office. A relevant professional qualification, such as CIPP/E, CIPM, BCS or equivalent, would be advantageous. You should be confident advising at board and executive level, influencing stakeholders across different functions and translating complex legal and regulatory requirements into practical business solutions. Excellent communication, organisational and analytical skills are essential, together with sound judgement, discretion and the ability to manage competing priorities in a fast-paced environment.

We are seeking a knowledgeable and proactive Schools Data Protection and Compliance Lead to provide expert advice and practical support across a group of educational settings. This role will lead the development, implementation and monitoring of data protection, information governance and compliance arrangements, ensuring that personal information relating to pupils, families, staff and other stakeholders is handled lawfully, securely and transparently.

Working closely with school leaders, administrative teams, IT colleagues and external advisers, you will maintain and review privacy notices, records of processing activities, data retention schedules, data sharing agreements and information security procedures. You will advise on data protection impact assessments, respond to subject access and other individual rights requests, investigate incidents and breaches, and coordinate appropriate reporting and remedial action. The role will also involve monitoring regulatory and legislative developments, assessing their impact on schools, maintaining compliance records and preparing clear reports and recommendations for senior stakeholders.

You will deliver engaging training and guidance to staff, helping to build a strong culture of confidentiality, accountability and responsible information handling. You will support audits, identify areas for improvement and promote consistent, proportionate processes across different school environments. The successful candidate will have substantial experience in data protection, compliance or information governance, ideally within education, public services or another regulated setting, together with a sound understanding of UK data protection law, including the UK GDPR and Data Protection Act 2018. You should be confident interpreting complex requirements, managing competing priorities and communicating effectively with people at all levels. Strong organisational skills, sound judgement, attention to detail and the ability to work independently are essential. Experience of handling information rights requests, data breaches, policy development, staff training and working with the Information Commissioner’s Office or similar regulatory bodies would be highly desirable.

We are seeking a Data Protection Support Officer to provide practical and administrative support in maintaining high standards of data protection, confidentiality and information governance. The successful candidate will help ensure that personal information is handled lawfully, securely and in accordance with relevant legislation, policies and procedures. This is an opportunity to develop your experience in data protection while contributing to a professional, collaborative and service-focused team.

Key responsibilities will include supporting the management of data protection enquiries, access requests, information sharing queries and personal data breaches. You will maintain accurate records, monitor deadlines, prepare correspondence and assist with the coordination of investigations and follow-up actions. The role will also involve helping to review privacy notices, data processing documentation, retention schedules and data protection impact assessments. You may be required to support audits, compile reports, update guidance and contribute to staff training and awareness activities.

You should have a good understanding of data protection principles, confidentiality requirements and information security practices, with knowledge of applicable privacy legislation and regulatory guidance. Experience of working with sensitive or confidential information, maintaining detailed records and handling enquiries in a professional manner is desirable. Strong organisational and communication skills are essential, along with the ability to prioritise competing demands, meet deadlines and work accurately with limited supervision. You will be expected to demonstrate sound judgement, discretion and attention to detail, and to explain data protection requirements clearly to colleagues with varying levels of knowledge. Proficiency with standard office software and the ability to analyse information and produce clear written documentation are also required.

We are seeking an experienced Information Security Officer to support the development, implementation and continuous improvement of an organisation-wide information security programme. This role will help protect information assets, systems and services by promoting effective security governance, managing risk and ensuring that appropriate controls are embedded across business operations. You will work closely with technology, compliance, risk and operational teams, providing clear and practical advice on security matters.

Key responsibilities will include maintaining information security policies, standards and procedures; carrying out risk assessments and supporting the treatment of identified risks; monitoring compliance with relevant legal, regulatory and industry requirements; and coordinating internal and external security audits. You will contribute to vulnerability management, incident response, business continuity and disaster recovery planning, while helping to investigate security events and ensure that corrective actions are completed. The role will also involve supporting access control reviews, security awareness initiatives, supplier assurance activities and the secure delivery of projects and technology changes. You will prepare reports, metrics and recommendations for senior stakeholders and promote a positive, organisation-wide security culture.

Applicants should have proven experience in information security, cyber risk, governance, assurance or a related discipline, together with a strong understanding of security frameworks and data protection principles. Familiarity with standards such as ISO 27001, NIST or CIS Controls is desirable, as is experience of audit, incident management and third-party risk assessment. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or equivalent, would be advantageous. You will be analytical, well organised and confident communicating with both technical and non-technical audiences. The successful candidate will demonstrate sound judgement, attention to detail and the ability to manage competing priorities while building effective working relationships at all levels.

We are seeking a Technical Cyber Security Manager to lead the development, implementation and continuous improvement of cyber security controls across a complex technology environment. This role will provide technical direction on security architecture, infrastructure protection, cloud security, identity and access management, vulnerability management, monitoring and incident response. You will work closely with technology, risk, compliance and operational teams to ensure that security is embedded into projects, services and day-to-day processes.

Key responsibilities will include managing and mentoring a team of cyber security specialists; defining and maintaining technical security standards, policies and procedures; overseeing vulnerability assessments, penetration testing and remediation programmes; and supporting the detection, investigation and resolution of security incidents. You will assess emerging threats, recommend appropriate mitigations and ensure that security risks are clearly documented, prioritised and reported. The role will also contribute to security assurance activities, third-party risk assessments, disaster recovery planning and the secure design of new systems and services.

The successful candidate will have significant experience in a technical cyber security leadership or management role, together with a strong understanding of enterprise security principles, threat management and security operations. You should be comfortable working across on-premises and cloud environments, with practical knowledge of technologies such as network security, endpoint protection, SIEM platforms, encryption, vulnerability scanners and identity solutions. Experience of relevant frameworks and standards, such as ISO 27001, NIST or CIS Controls, is desirable. Strong communication, stakeholder management, analytical and problem-solving skills are essential, along with the ability to translate complex technical risks into clear business recommendations. Professional qualifications such as CISSP, CISM, GIAC or equivalent would be advantageous.

We are seeking a Principal Security Architect to lead the strategic design and delivery of secure, scalable solutions across a complex technology environment. In this Group Manager II-level role, you will provide architectural direction for DevSecOps practices, embedding security throughout the software development lifecycle and enabling engineering teams to deliver resilient products at speed. You will partner with technology, product, infrastructure, risk, and compliance stakeholders to define security strategies, establish standards, and align delivery roadmaps with enterprise risk objectives.

Your responsibilities will include developing and maintaining security architecture principles, reference models, patterns, and technical standards; reviewing proposed solutions and identifying security risks; and guiding the implementation of controls across cloud, application, platform, data, and infrastructure environments. You will lead the integration of security tooling into CI/CD pipelines, promote automation and continuous assurance, and improve capabilities such as threat modelling, secure coding, vulnerability management, identity and access management, secrets protection, logging, and software supply-chain security. You will also contribute to security strategy, incident preparedness, technology assessments, and the evolution of governance processes.

The successful candidate will bring significant experience in security architecture, DevSecOps, and modern software engineering, together with a strong understanding of cloud technologies, containerisation, APIs, infrastructure as code, and automated testing. Professional certifications in security or architecture are advantageous. You will be an influential communicator who can explain complex risks clearly, challenge constructively, and build trusted relationships with senior leaders and technical teams. Experience managing or mentoring security professionals, leading cross-functional initiatives, and delivering practical security outcomes in a regulated or large-scale environment will be highly valued. A strategic mindset, sound judgement, and the ability to balance security, usability, resilience, and delivery objectives are essential.

We are seeking an experienced Senior Data Protection Adviser to provide authoritative advice on data protection, privacy, and information governance across a complex organisation. You will act as a trusted specialist, helping teams interpret and apply relevant legislation, regulatory guidance, and internal policies. The role will involve advising on the lawful and transparent use of personal data, privacy risks, data-sharing arrangements, international transfers, retention, and the design of new products, services, and processes.

You will lead and support Data Protection Impact Assessments, review privacy notices and contractual provisions, and provide practical guidance on data protection by design and default. You will monitor compliance with policies and legal requirements, identify areas for improvement, and contribute to risk assessments, audits, assurance activity, and management reporting. The postholder will also support the management of personal data breaches, including assessment, investigation, mitigation, documentation, and regulatory notification where required. You will maintain accurate records of processing activities and help ensure that information rights requests are handled effectively and within statutory timescales.

To succeed, you will have substantial experience in a data protection, privacy, compliance, or information governance role, together with a strong understanding of applicable data protection legislation and regulatory expectations. A relevant professional qualification or demonstrable equivalent experience is desirable. You will be confident providing clear, proportionate advice to senior stakeholders and operational teams, translating complex requirements into practical actions. Excellent analytical, communication, drafting, and relationship-building skills are essential, as is the ability to manage competing priorities and work independently. Experience of developing policies, delivering training, conducting audits, and embedding a positive culture of privacy and accountability will be highly valued.

We are seeking an experienced Managing Consultant – Cyber Security to lead the delivery of high-quality security advisory and transformation engagements for a diverse range of clients. In this role, you will work with senior stakeholders to understand business objectives, assess cyber risk and develop practical, sustainable strategies that strengthen security capabilities. You will take responsibility for shaping engagements from initial scoping through to successful delivery, ensuring that recommendations are commercially sound, technically robust and aligned with relevant regulatory and industry requirements.

Your responsibilities will include leading cyber security assessments, maturity reviews, risk and control evaluations, security strategy development, operating model design and transformation programmes. You will manage project plans, budgets, resources, risks and client communications while ensuring deliverables meet agreed standards and deadlines. The role will also involve producing clear reports and presentations for executive audiences, translating complex technical issues into actionable business insight, and supporting the development of proposals, statements of work and account relationships. You will coach and support consultants, contribute to internal capability development and help identify opportunities to improve methodologies, tools and service offerings.

Applicants should have substantial experience in cyber security consulting, advisory or a related professional services environment, with a strong understanding of security governance, risk management, regulatory compliance and recognised security frameworks. Experience across areas such as cyber operating models, identity and access management, incident response, security architecture, cloud security or resilience would be advantageous. You will need excellent communication, stakeholder management and influencing skills, alongside the ability to lead teams and manage competing priorities. Relevant professional qualifications, such as CISSP, CISM, CRISC, SABSA or equivalent, are desirable. A pragmatic, collaborative approach and a commitment to delivering measurable outcomes for clients are essential.

We are seeking an experienced Associate Director – Cyber Security to provide strategic leadership and operational oversight across a broad information security landscape. The successful candidate will shape and deliver a mature cyber security strategy, ensuring that security risks are identified, managed and aligned with organisational objectives. This role will work closely with senior stakeholders, technology teams and business leaders to promote secure practices, strengthen resilience and support the delivery of critical services.

Key responsibilities will include leading the development and implementation of cyber security policies, standards and governance frameworks; overseeing security operations, threat detection, incident response and vulnerability management; and directing programmes designed to improve infrastructure, application and data security. You will manage risk assessments, ensure appropriate regulatory and industry compliance, and provide clear reporting on the organisation’s security posture to senior leadership. The role will also involve managing budgets, suppliers and specialist security partners, as well as building strong relationships across technical and non-technical teams. You will lead, mentor and develop a high-performing security function while promoting a culture of continual improvement and security awareness.

Applicants should have significant experience in senior cyber security or information security leadership, with a strong understanding of security architecture, risk management, governance, cloud security, identity and access management, and incident response. Professional qualifications such as CISSP, CISM, CRISC or an equivalent are desirable. You will be an influential communicator with the ability to translate complex technical risks into clear business recommendations, make sound decisions under pressure and manage multiple priorities effectively. Experience leading transformation initiatives, working within regulated environments and engaging with executive stakeholders will be highly valued. This is an opportunity to make a substantial contribution to organisational resilience and the ongoing development of a progressive cyber security capability.

We are seeking an Information and AI Security Analyst to help protect data, systems and emerging artificial intelligence capabilities across a complex technology environment. This role will support the development, implementation and continuous improvement of information security controls, with a particular focus on the risks associated with AI models, automation, data usage and third-party platforms. You will work closely with technology, legal, risk, privacy and operational teams to promote secure and responsible adoption of AI.

Key responsibilities will include assessing security and privacy risks relating to AI solutions, machine learning models, applications and data flows; supporting threat modelling, vulnerability assessments and control reviews; and contributing to security policies, standards and governance frameworks. You will monitor emerging threats, investigate incidents and help coordinate appropriate responses, remediation and lessons learned. The role will also involve reviewing supplier and platform security, supporting audits, maintaining risk registers, preparing management reports and providing practical advice on secure system design, access management, data protection and regulatory compliance. You may also develop guidance, training and awareness materials for colleagues using AI-enabled tools.

Applicants should have experience in information security, cyber risk, technology assurance, privacy or a related discipline, together with an understanding of security principles, risk management and relevant regulatory requirements. Knowledge of AI security risks, including prompt injection, data leakage, model manipulation, insecure integrations and supply-chain vulnerabilities, would be highly beneficial. Familiarity with recognised frameworks such as ISO 27001, NIST Cybersecurity Framework or NIST AI Risk Management Framework is desirable. Strong analytical, communication and stakeholder-management skills are essential, as is the ability to explain technical risks clearly to both specialist and non-specialist audiences. Professional certifications in information security, privacy, audit or risk are welcomed, but demonstrable practical experience will also be valued.