Job Search

We are seeking a Security Remediation Engineer to strengthen the organisation’s security posture by identifying, prioritising and resolving vulnerabilities across infrastructure, applications and cloud environments. You will work closely with security, engineering, operations and technology teams to ensure that security findings are translated into practical, measurable remediation plans and completed within agreed risk-based timeframes.

Your responsibilities will include reviewing vulnerability assessment results, penetration testing reports, configuration findings and security alerts; validating the accuracy and impact of identified issues; and coordinating remediation activities with technical owners. You will track findings through their full lifecycle, maintain clear records in vulnerability and service management platforms, and provide regular updates on progress, risks, exceptions and overdue actions. You will also support the development of remediation standards, improve vulnerability management processes, contribute to risk assessments, and help produce metrics and reporting for technical and senior stakeholders. Where appropriate, you will provide guidance on secure configuration, patching, hardening and compensating controls, while helping teams understand the underlying causes of recurring vulnerabilities.

The successful candidate will have experience in vulnerability management, security operations, infrastructure security or a related technical discipline. You should be comfortable working with vulnerability scanners, ticketing and reporting tools, and interpreting findings across operating systems, networks, databases, endpoints, applications and cloud platforms. Knowledge of common security frameworks, risk-rating methodologies, patch management and remediation verification is expected. Strong analytical, organisational and communication skills are essential, along with the ability to influence teams and manage competing priorities in a complex environment. Relevant certifications or equivalent practical experience are welcomed. This role offers the opportunity to make a direct impact by reducing security risk, improving control maturity and embedding sustainable remediation practices across technology services.

We are seeking an experienced Head of Cyber Security to lead the development and delivery of a robust, organisation-wide cyber security strategy. This is a senior leadership role responsible for protecting critical systems, data, people and services from evolving cyber threats while enabling business growth and operational resilience. You will provide clear direction on security priorities, risk management and regulatory compliance, working closely with executive stakeholders and senior technology and business leaders.

Key responsibilities will include establishing and maintaining the cyber security framework, policies, standards and operating procedures; overseeing security operations, threat monitoring, vulnerability management, incident response and identity and access management; and ensuring effective protection across cloud, infrastructure, applications and end-user environments. You will lead the identification, assessment and treatment of information security risks, coordinate responses to significant incidents, and ensure that lessons learned are embedded into future controls. The role will also involve managing security budgets, suppliers and specialist partners, as well as overseeing audits, assurance activities, penetration testing and compliance with relevant legislation and industry standards.

You will be an accomplished cyber security leader with substantial experience operating at a strategic level in complex environments. You should have a strong understanding of security architecture, governance, risk and compliance, alongside practical knowledge of current threats, defensive technologies and incident management. Relevant professional qualifications such as CISSP, CISM, CRISC or equivalent experience are desirable. Excellent communication and influencing skills are essential, as is the ability to explain technical risk clearly to non-technical audiences and build a strong security culture throughout the organisation. The successful candidate will be proactive, commercially aware and capable of balancing effective risk reduction with the delivery of accessible, reliable services.