Job Search

We are seeking a Lead Security Architect – AI & Data to define and deliver secure, scalable architecture across artificial intelligence, data and cloud environments. You will provide technical leadership on security strategy, ensuring that emerging technologies are adopted responsibly and that information, models, platforms and services are protected throughout their lifecycle. Working closely with engineering, data, risk, privacy and product teams, you will translate business objectives and regulatory expectations into practical, resilient security solutions.

Your responsibilities will include developing security architectures and reference patterns for AI, machine learning, analytics and data platforms; assessing threats, vulnerabilities and privacy risks; and establishing appropriate controls for identity, access, encryption, data classification, model security, supply-chain assurance and monitoring. You will lead architecture reviews, threat modelling and risk assessments, support secure-by-design delivery, and contribute to incident response and remediation planning where required. You will also help shape standards, policies and governance frameworks for the safe use of generative AI and other emerging technologies, while communicating complex technical matters clearly to senior stakeholders.

You will bring substantial experience in security architecture, cyber security engineering or a closely related discipline, with a strong understanding of cloud platforms, enterprise data estates and AI or machine learning environments. Knowledge of security frameworks, privacy principles, regulatory requirements and assurance practices is essential, together with experience of applying concepts such as zero trust, secure software development and defence in depth. Relevant professional certifications, such as CISSP, CISM, SABSA or cloud security qualifications, are desirable. We are looking for an influential and pragmatic leader who can balance innovation with risk management, challenge constructively, build trusted relationships and guide multidisciplinary teams towards secure, measurable outcomes.

We are seeking an experienced Network & Security Architecture (NSA) professional to design, develop and oversee secure, resilient and scalable network infrastructure across a complex technology environment. The successful candidate will translate business and technical requirements into practical architecture, ensuring that connectivity, cloud adoption, identity, access control and security capabilities are aligned with organisational objectives and industry best practice.

Key responsibilities will include defining target-state network and security architectures; developing reference designs, standards and technology roadmaps; and providing architectural guidance for data centre, cloud, campus, remote-access and wide-area networking solutions. You will assess emerging technologies, evaluate proposed designs, identify security and operational risks, and ensure that solutions meet requirements for availability, performance, resilience, compliance and cost effectiveness. The role will also involve supporting major transformation and infrastructure projects, reviewing technical documentation, contributing to governance forums, and advising engineering and delivery teams throughout the solution lifecycle.

Applicants should have strong experience in network and security architecture, with a solid understanding of routing and switching, firewalls, VPNs, secure access service edge, network segmentation, intrusion prevention, DNS, load balancing and monitoring. Knowledge of public cloud networking, zero-trust principles, identity and access management, vulnerability management and relevant security frameworks is highly desirable. Professional certifications in networking, cybersecurity or architecture would be advantageous. You will be an effective communicator who can influence stakeholders, explain complex technical concepts clearly and make sound decisions in a changing environment. A structured approach to problem-solving, strong documentation skills and the ability to balance strategic thinking with practical delivery are essential.

We are seeking an Application Security Engineer to help strengthen the security of software applications throughout their development lifecycle. In this role, you will work closely with software engineers, architects, DevOps specialists and product teams to embed secure development practices into design, implementation, testing and deployment. You will contribute to a proactive security culture by identifying risks early, providing practical guidance and helping teams deliver resilient, high-quality applications.

Your responsibilities will include conducting application security reviews, threat modelling, code reviews and penetration testing across web, mobile, API and cloud-based services. You will manage and improve security testing tools, including static and dynamic application security testing, software composition analysis and secrets detection. You will analyse findings, assess their business impact, recommend effective remediation and track issues through to resolution. You will also help develop secure coding standards, security requirements, playbooks and training materials, while supporting incident investigations and vulnerability management activities when required.

The successful candidate will have professional experience in application or product security, secure software development or a closely related discipline. You should have a strong understanding of common vulnerabilities and attack techniques, including those described by OWASP, as well as practical knowledge of authentication, authorisation, cryptography, APIs, cloud platforms, containers and CI/CD pipelines. Experience with security automation, scripting and tools such as Burp Suite, Semgrep, SonarQube or comparable technologies is desirable. Relevant certifications are welcome but not essential. You will be curious, collaborative and able to communicate technical risks clearly to both technical and non-technical audiences. The role offers the opportunity to influence security strategy, solve complex challenges and make a measurable difference to the safety of modern digital products.

We are seeking a SecOps Engineering Lead to provide technical leadership across security operations, engineering, and incident response. This role will help shape and deliver a resilient security capability, ensuring that monitoring, detection, response, and preventative controls evolve alongside a changing threat landscape. You will lead a team of security engineers and analysts, promote strong engineering practices, and work closely with infrastructure, software development, platform, and risk teams to embed security throughout the technology environment.

Your responsibilities will include defining and delivering the security operations engineering roadmap; improving SIEM, SOAR, endpoint detection, vulnerability management, and cloud security capabilities; developing reliable detection rules, automated response workflows, and operational playbooks; and overseeing the investigation and resolution of complex security incidents. You will establish appropriate service measures, identify opportunities for automation, support threat hunting, and ensure that security tooling is well governed, documented, tested, and aligned with business and regulatory requirements. The role will also involve mentoring team members, managing priorities and delivery, contributing to security architecture decisions, and communicating technical risks and recommendations to senior stakeholders.

We are looking for an experienced security engineering professional with a strong background in security operations, incident response, detection engineering, or a related discipline. You should have practical experience with SIEM and SOAR platforms, endpoint and network security technologies, cloud environments, scripting or automation, and security monitoring across complex infrastructure. A solid understanding of threat intelligence, attack techniques, vulnerability management, identity security, and relevant security frameworks is expected. Strong leadership, problem-solving, communication, and stakeholder management skills are essential, along with the ability to balance strategic planning with hands-on technical delivery. Relevant professional certifications or equivalent practical experience would be advantageous.

We are seeking an experienced Head of Information Security, Risk and Compliance to lead the development and delivery of a robust security, risk and compliance programme. This is a senior leadership role responsible for protecting information assets, strengthening organisational resilience and ensuring that security practices support business objectives. You will establish a clear strategic roadmap, provide trusted advice to senior stakeholders and promote a culture in which security and responsible risk management are embedded across the organisation.

Your responsibilities will include owning information security governance, policies, standards and control frameworks; overseeing risk identification, assessment, treatment and reporting; and ensuring compliance with relevant legislation, regulatory requirements and industry standards. You will lead security assurance activities, internal and external audits, third-party risk management, vulnerability management and incident response preparedness. Working closely with technology, legal, privacy, procurement and operational teams, you will assess emerging threats, manage security improvement initiatives and provide clear reporting on risk exposure, control effectiveness and remediation progress. You will also support business continuity and disaster recovery planning, maintain effective escalation processes and ensure that security incidents are investigated, managed and learned from appropriately.

The successful candidate will bring substantial experience in information security, governance, risk and compliance, ideally gained in a complex or highly regulated environment. You will have strong knowledge of recognised security and risk frameworks, data protection principles, audit practices and regulatory expectations, together with experience leading teams, programmes and cross-functional change. Relevant professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor, or equivalent experience, would be advantageous. A pragmatic, collaborative and commercially aware approach is essential, alongside the ability to communicate complex issues clearly to both technical and non-technical audiences, influence senior decision-makers and balance effective risk management with operational delivery.

We are seeking a Senior Director, Identity & Access Management to lead the strategy, governance, and delivery of a comprehensive identity security programme across a complex, global environment. This senior leadership role will define the vision for identity and access management (IAM), strengthen controls, and ensure that secure, reliable access to systems and data supports business priorities. You will lead a multidisciplinary team spanning identity governance, privileged access management, authentication, directory services, access operations, and related security capabilities.

You will establish and maintain the IAM roadmap, operating model, policies, standards, and performance measures, ensuring alignment with enterprise security objectives and regulatory requirements. Responsibilities include overseeing identity lifecycle management, role-based and attribute-based access controls, access certifications, segregation of duties, privileged access, single sign-on, and modern authentication solutions. You will guide the adoption of zero-trust principles, improve automation and integration with cloud and on-premises platforms, and ensure effective monitoring, reporting, and response to identity-related risks. The role will also oversee service delivery, vendor relationships, budgets, audit readiness, and continuous improvement initiatives.

The successful candidate will be an experienced IAM and cybersecurity leader with a strong record of developing teams, influencing senior stakeholders, and delivering transformation at scale. You will bring deep knowledge of identity governance, access technologies, cloud security, directory platforms, authentication protocols, and relevant risk and compliance frameworks. Excellent communication, strategic thinking, commercial judgement, and the ability to translate technical risks into clear business decisions are essential. Relevant professional certifications in cybersecurity, audit, risk, or identity management are advantageous, as is experience operating in highly regulated or geographically distributed environments.

We are seeking a Cyber Security Analyst to support the protection of critical systems, applications, networks and data against evolving cyber threats. In this role, you will monitor security events, investigate alerts and suspicious activity, and help maintain effective controls across the organisation’s technology environment. You will work closely with infrastructure, development, service delivery and risk teams to identify vulnerabilities, respond to incidents and promote secure working practices.

Your responsibilities will include analysing logs and alerts from security monitoring platforms, triaging and escalating incidents, supporting investigations, and documenting findings, actions and lessons learned. You will contribute to vulnerability management by reviewing scan results, assessing risk, tracking remediation activity and validating that corrective measures have been completed. The role will also involve assisting with security assessments, access reviews, threat intelligence analysis, audit requests, policy updates and the development of clear security reports for technical and non-technical audiences. You may also support incident response exercises and contribute to continuous improvements in monitoring, detection and response processes.

Applicants should have practical experience in a cyber security, security operations or IT risk environment, together with a sound understanding of security principles, incident management, vulnerability assessment and common attack techniques. Familiarity with SIEM tools, endpoint protection, network security technologies, cloud environments and security frameworks such as NIST or ISO 27001 would be advantageous. Relevant professional qualifications or certifications are welcomed, but equivalent experience will be considered. You should be analytical, inquisitive and methodical, with strong attention to detail and the ability to prioritise effectively in a fast-moving environment. Clear written and verbal communication skills are essential, along with a commitment to confidentiality, continual learning and collaborative problem-solving.

We are seeking a Principal Platform Engineer to lead the design, evolution, and operation of a secure, scalable identity platform covering authentication and authorisation (AuthN/AuthZ). You will shape the technical strategy for identity services used across a diverse portfolio of products, platforms, and internal systems. Working at principal level, you will provide architectural leadership, establish engineering standards, and guide teams towards reliable, consistent, and secure approaches to identity management.

Your responsibilities will include designing and delivering platform capabilities such as single sign-on, multi-factor authentication, identity federation, role- and attribute-based access control, service-to-service authentication, secrets management, and lifecycle automation. You will define patterns for integrating applications with identity services, improve developer experience through clear APIs and self-service tooling, and ensure solutions are observable, resilient, and compliant with relevant security and privacy requirements. You will also lead technical discovery, evaluate emerging technologies, contribute to roadmap planning, and support incident response and continuous improvement across the platform.

You will bring substantial experience engineering and operating identity platforms in complex, distributed environments, together with strong knowledge of modern authentication and authorisation standards such as OAuth 2.0, OpenID Connect, SAML, and SCIM. Experience with cloud platforms, Kubernetes, infrastructure as code, API security, cryptography fundamentals, and automated testing is highly desirable. You should be comfortable working across organisational boundaries, influencing senior stakeholders, mentoring engineers, and communicating complex technical topics clearly. We are looking for a pragmatic, collaborative leader who can balance long-term architecture with delivery, champion secure-by-design practices, and build platforms that are dependable, scalable, and easy for engineering teams to adopt.