Job Search

We are seeking an experienced Cyber Operations Manager to lead and develop a high-performing team responsible for protecting critical systems, services and information from evolving cyber threats. This is a key role overseeing day-to-day security operations while driving continuous improvement across monitoring, detection, response and risk management activities.

You will manage the delivery of cyber operations capabilities, ensuring effective use of security monitoring, endpoint protection, vulnerability management, identity security and incident response technologies. You will establish clear operational processes, service standards and performance measures, ensuring that alerts and incidents are assessed, prioritised and resolved promptly. The role will also involve leading investigations, coordinating responses to significant events and supporting post-incident reviews to strengthen future resilience.

Working closely with technology, risk, compliance and business teams, you will provide expert advice on operational security risks and ensure that appropriate controls are implemented and maintained. You will contribute to security architecture and change initiatives, oversee third-party security services where required, and support regulatory, audit and assurance activities. Regular reporting to senior stakeholders will be an important part of the role, including updates on threat activity, incidents, vulnerabilities, operational performance and areas requiring investment.

You will bring substantial experience in cyber security operations, incident management or a related discipline, together with a strong understanding of security frameworks, threat intelligence and defensive technologies. Experience of managing technical teams, suppliers and operational budgets is essential. Relevant professional qualifications, such as CISSP, CISM, GIAC or equivalent experience, would be advantageous.

We are looking for an inclusive and decisive leader who can remain calm under pressure, communicate clearly with technical and non-technical audiences, and build effective relationships at all levels. You will be expected to promote a culture of continual learning, operational discipline and security awareness, while developing team capability and ensuring services remain aligned with organisational priorities.

We are seeking an experienced Security Engineer L3 to provide advanced technical expertise across the design, operation and continual improvement of security services. You will investigate and resolve complex security incidents, lead technical investigations, and support the protection of critical infrastructure, applications, endpoints and cloud environments. The role will involve working closely with infrastructure, development, operations and risk teams to identify vulnerabilities, reduce exposure and strengthen overall security posture.

Key responsibilities will include triaging and responding to high-severity incidents, performing root-cause analysis, developing detection and response use cases, and improving security monitoring across SIEM, EDR, vulnerability management and network security platforms. You will contribute to threat hunting, forensic investigations, incident reporting and post-incident reviews, ensuring that lessons learned are translated into effective preventative controls. You will also provide escalation support to junior engineers, review technical changes, maintain accurate documentation and help develop playbooks, standards and automation to improve the efficiency and consistency of security operations.

Applicants should have substantial experience in a senior security engineering, incident response or security operations role, with a strong understanding of security principles, attack techniques and defensive controls. You will need practical experience with SIEM and EDR technologies, vulnerability assessment, network and endpoint security, identity and access management, and cloud security. Familiarity with scripting or automation, such as Python or PowerShell, is desirable, as is experience working with frameworks including MITRE ATT&CK, NIST or ISO 27001. Relevant professional certifications, such as CISSP, GIAC, CREST or equivalent, would be advantageous. Strong analytical, communication and problem-solving skills are essential, together with the ability to manage competing priorities and remain calm during major incidents.

We are seeking a Senior Data Security Specialist to lead the protection of sensitive information across a complex and evolving technology environment. In this role, you will develop, implement and continuously improve data security strategies, controls and standards that support business objectives while meeting regulatory and industry requirements. You will work closely with information security, privacy, technology, legal and operational teams to ensure data is appropriately classified, protected, monitored and retained throughout its lifecycle.

Your responsibilities will include assessing data security risks, designing and reviewing controls, and providing expert guidance on encryption, access management, data loss prevention, tokenisation, masking and secure data handling. You will support the development of policies, procedures and technical requirements, contribute to security architecture and solution reviews, and oversee the remediation of identified weaknesses. The role will also involve investigating data security incidents, coordinating responses, documenting findings and recommending improvements to reduce the likelihood and impact of future events. You will help prepare for audits and assessments, maintain clear evidence of control effectiveness, and provide concise reports and risk updates to senior stakeholders.

The successful candidate will have substantial experience in data security, information security or a closely related discipline, with a strong understanding of security frameworks, privacy principles, risk management and relevant regulatory obligations. Practical knowledge of cloud security, identity and access management, database security, security monitoring and data governance is highly desirable. You should be comfortable translating complex technical risks into clear business recommendations and influencing stakeholders at all levels. Strong analytical, communication and problem-solving skills are essential, together with the ability to manage competing priorities and deliver high-quality work independently. Professional certifications such as CISSP, CISM, CRISC, CDPSE or equivalent experience would be advantageous.

We are seeking a Lead Cybersecurity GRC Consultant to provide strategic leadership across governance, risk, and compliance initiatives. This role will help strengthen the organisation’s cybersecurity posture by translating business objectives, regulatory obligations, and industry standards into practical security policies, controls, and improvement programmes. You will work closely with technology, risk, legal, audit, privacy, and business stakeholders to promote a consistent, risk-based approach to information security.

Key responsibilities include leading cybersecurity risk assessments, control reviews, maturity assessments, and remediation planning; maintaining and improving security governance frameworks; and supporting compliance with applicable regulations, contractual requirements, and recognised standards such as ISO 27001, NIST, CIS, or SOC 2. You will coordinate internal and external audits, manage evidence collection, track findings and corrective actions, and prepare clear reports for senior leadership and risk committees. The role will also contribute to third-party risk management, policy development, security exception processes, metrics and dashboards, business continuity activities, and the ongoing enhancement of the cybersecurity control environment.

The successful candidate will have substantial experience in cybersecurity governance, risk, and compliance, ideally gained in a complex or regulated environment. You will be confident interpreting regulatory and assurance requirements, assessing control effectiveness, and communicating risk clearly to both technical and non-technical audiences. Strong stakeholder management, consulting, analytical, and written communication skills are essential, along with the ability to lead initiatives, influence decision-making, and manage competing priorities. Relevant professional certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Auditor, or equivalent experience are desirable. A pragmatic, collaborative approach and a commitment to continuous improvement will be important for success in this position.