Job Search

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities.

Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology risks. You will assist with control testing, issue and remediation tracking, risk reporting and the preparation of clear management information for governance forums. The role will also involve reviewing policies, standards and procedures; supporting audit and regulatory requests; monitoring key risk indicators; and contributing to the development of risk assessments for technology change, third-party services, cloud environments and operational processes. You will investigate control exceptions, challenge evidence where appropriate and ensure actions are recorded, monitored and closed in line with agreed expectations.

The successful candidate will have experience in technology risk, information security, cyber assurance, IT controls, audit or a related discipline, ideally within a regulated or complex organisation. You will have a sound understanding of control frameworks, risk assessment methodologies, governance processes and common cyber and technology risks. Familiarity with standards such as ISO 27001, NIST, COBIT or ITIL would be beneficial, as would experience using risk management or governance, risk and compliance tools. Strong analytical, organisational and communication skills are essential, along with the confidence to work with both technical and non-technical stakeholders. You should be comfortable interpreting detailed information, producing concise reports and managing multiple priorities while maintaining a constructive, pragmatic and risk-aware approach.

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and operational risks across a complex organisation. This role will provide independent challenge, practical guidance and assurance over the design and effectiveness of controls, helping to maintain a robust risk management framework and support informed decision-making at all levels.

You will partner with technology, cyber security, risk, compliance, audit and business stakeholders to identify, assess and monitor risks across areas including cyber security, infrastructure, cloud services, third-party providers, data protection, resilience and technology change. Key responsibilities will include maintaining risk and control registers; facilitating risk and control assessments; reviewing control design and operating effectiveness; tracking remediation activity; preparing clear management information and reporting; and escalating material issues where appropriate. You will also contribute to the development of policies, standards, risk appetites, control libraries and governance processes, while supporting regulatory, internal and external assurance activity.

The successful candidate will have proven experience in technology risk, cyber risk, IT controls, information security governance or a related discipline, ideally within a regulated or highly controlled environment. You will be confident interpreting risk and control frameworks and applying them pragmatically, with knowledge of recognised standards such as ISO 27001, NIST, COBIT, ITIL or related regulatory requirements. Strong analytical, communication and stakeholder-management skills are essential, together with the ability to explain complex technical and risk matters clearly to both specialist and non-specialist audiences. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or equivalent experience, would be advantageous. You should be organised, collaborative and capable of managing competing priorities while maintaining a high standard of accuracy and professional judgement.

We are seeking a Cyber Compliance Specialist to support the development, implementation and continuous improvement of cybersecurity governance and compliance activities. This role will help ensure that technology services, business processes and information assets meet applicable regulatory obligations, industry standards and internal security requirements. You will work closely with technology, risk, audit, legal and operational teams to promote effective security practices and provide clear, practical guidance across the organisation.

Key responsibilities will include maintaining cybersecurity policies, standards, procedures and control frameworks; coordinating compliance assessments, audits and evidence collection; monitoring remediation plans and tracking risks, exceptions and control weaknesses through to resolution. You will conduct control reviews, support security risk assessments and assist with mapping requirements to recognised frameworks such as ISO 27001, NIST, CIS Controls or relevant data protection legislation. The role will also involve preparing management reports, maintaining compliance registers, contributing to third-party risk reviews and supporting incident, business continuity and disaster recovery assurance activities.

The successful candidate will have experience in cybersecurity governance, risk or compliance, with a sound understanding of security controls, audit principles and regulatory requirements. Familiarity with security and compliance frameworks, risk management methodologies, vulnerability management and cloud or information security practices is highly desirable. Strong analytical, documentation and stakeholder-management skills are essential, along with the ability to interpret technical information and communicate it clearly to both technical and non-technical audiences. Relevant qualifications such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor or equivalent experience would be advantageous. You should be organised, proactive and confident working independently while contributing effectively to cross-functional initiatives.

We are seeking an OT Security Engineer to help protect industrial control systems, operational technology environments, and connected infrastructure from evolving cyber threats. In this role, you will support the design, implementation, and continuous improvement of security controls across critical operational environments, working closely with engineering, infrastructure, safety, and operations teams. You will assess risks, identify vulnerabilities, and help ensure that security measures are effective without compromising system availability, reliability, or safety.

Your responsibilities will include conducting security assessments of OT networks, control systems, remote access solutions, and industrial assets; maintaining asset inventories and network diagrams; supporting segmentation and secure architecture initiatives; and assisting with vulnerability management, patching, and configuration reviews. You will contribute to incident response planning and investigations, monitor security events, and help develop practical procedures for detecting, containing, and recovering from cyber incidents. The role will also involve supporting compliance with relevant industrial cybersecurity standards and regulations, preparing technical documentation, and delivering security guidance and awareness training to operational stakeholders.

The successful candidate will have experience in OT, ICS, SCADA, industrial automation, or a closely related cybersecurity environment. You should understand common industrial protocols, network security principles, identity and access management, logging and monitoring, and secure remote connectivity. Familiarity with recognised frameworks and standards such as IEC 62443, NIST, or ISO 27001 is desirable. Experience with security assessment tools, vulnerability management platforms, and incident response processes would be advantageous. Strong analytical, communication, and problem-solving skills are essential, along with the ability to work collaboratively in environments where safety and operational continuity are priorities. Relevant qualifications in cybersecurity, engineering, computer science, or equivalent practical experience are welcome.

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security governance, risk and compliance activities. The successful candidate will help ensure that technology, information and business processes meet relevant regulatory, contractual and industry requirements, while supporting a strong culture of security and accountability across the organisation.

Key responsibilities will include maintaining cyber security policies, standards, control frameworks and assurance plans; coordinating internal and external audits; and assessing the effectiveness of technical and procedural controls. You will manage risk assessments, track remediation activity and provide clear reporting on compliance status, control performance, emerging risks and areas requiring investment. The role will also involve supporting third-party and supplier assurance, reviewing security requirements within contracts and projects, and advising stakeholders on practical approaches to risk treatment and regulatory compliance.

You will work closely with cyber security, technology, legal, privacy, risk and operational teams to embed security requirements throughout the organisation. The ideal candidate will have proven experience in cyber security governance, risk, compliance or assurance, with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, CIS Controls or relevant data protection and regulatory requirements. Experience planning audits, managing control testing, interpreting legislation and presenting assurance findings to senior stakeholders is desirable. You should be analytical, organised and confident communicating complex issues to both technical and non-technical audiences. Professional certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor would be advantageous. A proactive mindset, sound judgement and the ability to influence without direct authority are essential for success in this role.

We are seeking an experienced Cybersecurity Project Manager to lead the planning and delivery of security-focused initiatives across a complex technology environment. The successful candidate will manage projects from initiation through to completion, ensuring that objectives, timelines, budgets, risks and quality standards are clearly defined and controlled. You will work closely with cybersecurity, infrastructure, software development, compliance and business stakeholders to deliver practical solutions that strengthen organisational resilience and protect critical information assets.

Key responsibilities will include developing project plans, defining scope and milestones, coordinating internal teams and external suppliers, monitoring progress and preparing clear status reports for senior stakeholders. You will identify dependencies, manage risks and issues, maintain accurate project documentation and ensure that decisions and actions are recorded and followed through. Projects may include security transformation, vulnerability management, identity and access management, cloud security, incident response improvements, regulatory compliance and the implementation of security tools and controls. You will also support change management, stakeholder engagement, testing, transition into operational support and post-project reviews.

Applicants should have proven experience managing cybersecurity, information security, IT or technology projects, with a strong understanding of project delivery methodologies such as Agile, Waterfall or hybrid approaches. A relevant project management qualification is desirable, as is experience working with governance, risk and compliance frameworks. You will need excellent communication, organisation and problem-solving skills, along with the ability to translate technical issues into clear business language. The ideal candidate is confident managing competing priorities, influencing stakeholders at all levels and delivering outcomes in a fast-moving environment. Professional certifications in project management, cybersecurity or information security would be advantageous.

We are seeking an OT Security Officer to help protect operational technology environments that support critical industrial and business processes. In this role, you will develop, implement and maintain security measures across industrial control systems, supervisory control and data acquisition platforms, network infrastructure and connected operational assets. You will work closely with engineering, infrastructure, operations, risk and compliance teams to ensure that security is embedded throughout the lifecycle of OT systems, from design and deployment through maintenance and decommissioning.

Your responsibilities will include identifying and assessing cyber risks, maintaining OT asset inventories, reviewing network architecture and access controls, and supporting the implementation of secure segmentation and monitoring capabilities. You will contribute to vulnerability management, security assessments, incident response planning and investigations, while recognising the operational and safety requirements of industrial environments. The role will also involve developing and maintaining security policies, procedures, standards and technical documentation; coordinating patching and remediation activities; supporting audits; and providing clear reports and recommendations to technical and senior stakeholders. You may also help deliver security awareness and specialist guidance to personnel working with OT systems.

The successful candidate will have experience in OT, ICS, SCADA, industrial networking or a closely related cybersecurity environment, together with a sound understanding of cybersecurity principles, threat management and secure system design. Familiarity with recognised OT security frameworks and standards, such as IEC 62443, NIST or ISO 27001, is desirable. You should be analytical, organised and able to communicate effectively with both technical and non-technical audiences. Experience of incident response, risk assessment, vulnerability management, network monitoring or security tooling will be advantageous. Relevant professional qualifications or certifications are welcomed, as is a practical understanding of safety-critical operations, change control and the challenges of securing legacy technology.

We are seeking a Cyber Security Supply Chain Specialist to strengthen the security and resilience of third-party relationships, suppliers, and technology partners. In this role, you will assess cyber security risks across the supply chain, support the implementation of appropriate controls, and help ensure that suppliers meet contractual, regulatory, and internal security requirements. You will work closely with procurement, legal, technology, risk, and operational teams to embed security throughout the supplier lifecycle, from initial due diligence and onboarding through to ongoing monitoring, renewal, and offboarding.

Your responsibilities will include conducting supplier security assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps, and agreeing practical remediation plans. You will maintain accurate records of supplier risks, exceptions, security requirements, and remediation activity, escalating significant issues where necessary. You will also contribute to the development and maintenance of supply chain security policies, standards, procedures, and guidance, while supporting risk-based segmentation of suppliers and the classification of critical services and information. The role will involve monitoring emerging threats, vulnerabilities, regulatory developments, and industry good practice that may affect third-party risk.

The successful candidate will have experience in cyber security, third-party risk management, supplier assurance, information security governance, or a related discipline. You should understand recognised security frameworks and principles, such as ISO 27001, NIST, CIS Controls, or equivalent, and be confident interpreting technical and non-technical assurance information. Strong analytical, communication, and stakeholder management skills are essential, with the ability to challenge constructively and explain complex risks clearly to varied audiences. Experience with governance, risk, and compliance tools, contract security clauses, cloud services, or critical technology suppliers would be advantageous. Relevant professional qualifications or certifications in cyber security, risk, audit, or information governance are desirable.