Job Search

We are seeking an experienced Data Protection Officer to lead and strengthen the organisation’s data protection and privacy framework. In this role, you will provide independent advice on compliance with applicable data protection legislation, including the UK GDPR, the Data Protection Act 2018, and other relevant regulatory requirements. You will act as a trusted point of contact for colleagues, customers, suppliers, regulators, and other stakeholders on privacy matters, promoting a culture of responsible information handling across the organisation.

Your responsibilities will include monitoring compliance with data protection policies and procedures, advising on data processing activities, and maintaining accurate records of processing. You will oversee data protection impact assessments, legitimate interest assessments, data sharing arrangements, retention schedules, and responses to individual rights requests. You will also support the management of personal data breaches, coordinating investigations, reporting where necessary, and recommending appropriate remedial action. The role will involve reviewing contracts, procurement activity, new systems, and business initiatives to identify and address privacy risks at an early stage.

The successful candidate will have substantial experience in a data protection, privacy, compliance, legal, or information governance role, with a strong understanding of relevant legislation and regulatory guidance. A recognised data protection qualification, such as CIPP/E, CIPM, or an equivalent professional accreditation, is desirable. You will be confident interpreting complex requirements and translating them into practical advice for both technical and non-technical audiences. Strong communication, influencing, organisational, and analytical skills are essential, along with sound judgement, discretion, and the ability to manage competing priorities. Experience delivering training, preparing management reports, and working with information security or governance teams would be an advantage.

We are seeking a Senior Security Engineer – Operations to strengthen the day-to-day protection, monitoring, and resilience of critical technology environments. In this role, you will help operate and continuously improve security controls across infrastructure, cloud services, networks, endpoints, and applications. You will investigate security events, assess potential threats, coordinate incident response activities, and ensure that identified risks are tracked through to resolution. The position requires a practical, service-focused engineer who can balance urgent operational demands with longer-term improvements to security maturity.

Your responsibilities will include monitoring and analysing alerts from security information and event management, endpoint detection and response, vulnerability management, identity, and network security platforms. You will lead or support investigations, perform root-cause analysis, document findings, and recommend effective remediation. You will also develop and maintain operational procedures, detection rules, dashboards, playbooks, and technical standards. Working closely with infrastructure, engineering, compliance, and service teams, you will assist with security assessments, vulnerability remediation, access reviews, patching initiatives, audit evidence, and the secure implementation of new technologies. You may also contribute to automation that improves response times, reduces manual effort, and enhances the quality of security monitoring.

Applicants should have substantial experience in security operations, incident response, threat detection, or infrastructure security, together with strong knowledge of common attack techniques, defensive controls, and security best practices. Experience with cloud platforms, SIEM and EDR technologies, vulnerability scanners, identity and access management, networking, scripting, and security automation is highly desirable. You should be comfortable interpreting logs and technical data, prioritising competing risks, and communicating clearly with both technical and non-technical stakeholders. Relevant professional certifications or equivalent practical experience are welcome. Success in this role will require sound judgement, curiosity, attention to detail, and a proactive approach to improving the organisation’s overall security posture.

We are seeking a Senior Security Engineer – IT & OT to strengthen the protection, resilience and monitoring of enterprise information technology and operational technology environments. This role will be responsible for developing and implementing security controls across corporate networks, industrial systems, cloud services, endpoints and critical infrastructure. You will work closely with technology, engineering, operations and risk teams to identify vulnerabilities, reduce exposure and ensure security is embedded throughout the design, delivery and operational lifecycle.

Key responsibilities include leading security assessments, threat modelling and risk reviews; designing and maintaining network segmentation, identity and access controls, endpoint protection, vulnerability management and secure remote-access solutions; and supporting the detection, investigation and response to security incidents. You will help define and maintain IT and OT security standards, policies, procedures and technical architecture, while ensuring alignment with relevant regulatory obligations and recognised frameworks. The role will also involve coordinating penetration testing, managing remediation plans, contributing to disaster recovery and resilience activities, and providing clear security reporting to technical and senior stakeholders. You may also support security awareness initiatives and mentor less experienced engineers.

Applicants should have substantial experience in cybersecurity engineering, with practical knowledge of both IT and OT environments, industrial control systems, network protocols and the security challenges associated with operational technology. Strong experience with firewalls, SIEM platforms, vulnerability scanners, endpoint security, identity technologies and cloud security is expected. An understanding of standards and frameworks such as IEC 62443, NIST Cybersecurity Framework, ISO 27001 or related controls would be advantageous. You will be an analytical and confident communicator, capable of translating complex risks into practical actions and working effectively across multiple teams. Relevant professional certifications, such as CISSP, CISM, GIAC, ISA/IEC 62443 or equivalent experience, are desirable.