Job Search

We are seeking an experienced Information Security Consultant to provide expert advice and practical guidance across a range of security, risk and assurance activities. You will work with stakeholders at all levels to understand business requirements, identify potential weaknesses and develop proportionate solutions that protect information assets, systems and services.

Your responsibilities will include conducting information security risk assessments, supporting the design and implementation of security controls, and providing advice on policies, standards and secure operating practices. You will contribute to security reviews, third-party assessments, audit preparation and compliance activity, ensuring that risks are clearly documented, prioritised and managed through to resolution.

You will also help assess the security implications of new projects, technologies and changes to existing services. This will involve producing clear reports, presenting recommendations to technical and non-technical audiences, and working collaboratively with colleagues across technology, governance, risk and business functions. You may also support incident investigations, lessons-learned exercises and the ongoing improvement of security processes and awareness.

Applicants should have demonstrable experience in information or cyber security consultancy, risk management, governance, security architecture or a related discipline. A sound understanding of recognised security frameworks, data protection principles, access management, vulnerability management and secure development practices is required. Experience of working with industry standards such as ISO 27001, NIST or CIS Controls would be advantageous.

You will need excellent communication and stakeholder-management skills, together with the ability to explain complex security matters in clear, practical language. Strong analytical and report-writing abilities, sound judgement and a methodical approach are essential. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, would be welcomed, although equivalent practical experience will be considered.

This role offers the opportunity to influence security strategy, support meaningful improvements and work on varied initiatives within a collaborative environment. A proactive attitude, commitment to continuous learning and a strong understanding of confidentiality and professional ethics are essential.

We are seeking a Lead Security Architect – AI & Data to define and deliver secure, scalable architecture across artificial intelligence, data and cloud environments. You will provide technical leadership on security strategy, ensuring that emerging technologies are adopted responsibly and that information, models, platforms and services are protected throughout their lifecycle. Working closely with engineering, data, risk, privacy and product teams, you will translate business objectives and regulatory expectations into practical, resilient security solutions.

Your responsibilities will include developing security architectures and reference patterns for AI, machine learning, analytics and data platforms; assessing threats, vulnerabilities and privacy risks; and establishing appropriate controls for identity, access, encryption, data classification, model security, supply-chain assurance and monitoring. You will lead architecture reviews, threat modelling and risk assessments, support secure-by-design delivery, and contribute to incident response and remediation planning where required. You will also help shape standards, policies and governance frameworks for the safe use of generative AI and other emerging technologies, while communicating complex technical matters clearly to senior stakeholders.

You will bring substantial experience in security architecture, cyber security engineering or a closely related discipline, with a strong understanding of cloud platforms, enterprise data estates and AI or machine learning environments. Knowledge of security frameworks, privacy principles, regulatory requirements and assurance practices is essential, together with experience of applying concepts such as zero trust, secure software development and defence in depth. Relevant professional certifications, such as CISSP, CISM, SABSA or cloud security qualifications, are desirable. We are looking for an influential and pragmatic leader who can balance innovation with risk management, challenge constructively, build trusted relationships and guide multidisciplinary teams towards secure, measurable outcomes.

We are seeking an Application Security Engineer to help strengthen the security of software applications throughout their development lifecycle. In this role, you will work closely with software engineers, architects, DevOps specialists and product teams to embed secure development practices into design, implementation, testing and deployment. You will contribute to a proactive security culture by identifying risks early, providing practical guidance and helping teams deliver resilient, high-quality applications.

Your responsibilities will include conducting application security reviews, threat modelling, code reviews and penetration testing across web, mobile, API and cloud-based services. You will manage and improve security testing tools, including static and dynamic application security testing, software composition analysis and secrets detection. You will analyse findings, assess their business impact, recommend effective remediation and track issues through to resolution. You will also help develop secure coding standards, security requirements, playbooks and training materials, while supporting incident investigations and vulnerability management activities when required.

The successful candidate will have professional experience in application or product security, secure software development or a closely related discipline. You should have a strong understanding of common vulnerabilities and attack techniques, including those described by OWASP, as well as practical knowledge of authentication, authorisation, cryptography, APIs, cloud platforms, containers and CI/CD pipelines. Experience with security automation, scripting and tools such as Burp Suite, Semgrep, SonarQube or comparable technologies is desirable. Relevant certifications are welcome but not essential. You will be curious, collaborative and able to communicate technical risks clearly to both technical and non-technical audiences. The role offers the opportunity to influence security strategy, solve complex challenges and make a measurable difference to the safety of modern digital products.

We are seeking a Senior Director, Identity & Access Management to lead the strategy, governance, and delivery of a comprehensive identity security programme across a complex, global environment. This senior leadership role will define the vision for identity and access management (IAM), strengthen controls, and ensure that secure, reliable access to systems and data supports business priorities. You will lead a multidisciplinary team spanning identity governance, privileged access management, authentication, directory services, access operations, and related security capabilities.

You will establish and maintain the IAM roadmap, operating model, policies, standards, and performance measures, ensuring alignment with enterprise security objectives and regulatory requirements. Responsibilities include overseeing identity lifecycle management, role-based and attribute-based access controls, access certifications, segregation of duties, privileged access, single sign-on, and modern authentication solutions. You will guide the adoption of zero-trust principles, improve automation and integration with cloud and on-premises platforms, and ensure effective monitoring, reporting, and response to identity-related risks. The role will also oversee service delivery, vendor relationships, budgets, audit readiness, and continuous improvement initiatives.

The successful candidate will be an experienced IAM and cybersecurity leader with a strong record of developing teams, influencing senior stakeholders, and delivering transformation at scale. You will bring deep knowledge of identity governance, access technologies, cloud security, directory platforms, authentication protocols, and relevant risk and compliance frameworks. Excellent communication, strategic thinking, commercial judgement, and the ability to translate technical risks into clear business decisions are essential. Relevant professional certifications in cybersecurity, audit, risk, or identity management are advantageous, as is experience operating in highly regulated or geographically distributed environments.

We are seeking a Principal Platform Engineer to lead the design, evolution, and operation of a secure, scalable identity platform covering authentication and authorisation (AuthN/AuthZ). You will shape the technical strategy for identity services used across a diverse portfolio of products, platforms, and internal systems. Working at principal level, you will provide architectural leadership, establish engineering standards, and guide teams towards reliable, consistent, and secure approaches to identity management.

Your responsibilities will include designing and delivering platform capabilities such as single sign-on, multi-factor authentication, identity federation, role- and attribute-based access control, service-to-service authentication, secrets management, and lifecycle automation. You will define patterns for integrating applications with identity services, improve developer experience through clear APIs and self-service tooling, and ensure solutions are observable, resilient, and compliant with relevant security and privacy requirements. You will also lead technical discovery, evaluate emerging technologies, contribute to roadmap planning, and support incident response and continuous improvement across the platform.

You will bring substantial experience engineering and operating identity platforms in complex, distributed environments, together with strong knowledge of modern authentication and authorisation standards such as OAuth 2.0, OpenID Connect, SAML, and SCIM. Experience with cloud platforms, Kubernetes, infrastructure as code, API security, cryptography fundamentals, and automated testing is highly desirable. You should be comfortable working across organisational boundaries, influencing senior stakeholders, mentoring engineers, and communicating complex technical topics clearly. We are looking for a pragmatic, collaborative leader who can balance long-term architecture with delivery, champion secure-by-design practices, and build platforms that are dependable, scalable, and easy for engineering teams to adopt.