Job Search

We are seeking an experienced OT Cyber Security Consultant to help organisations strengthen the security and resilience of their operational technology environments. You will work across industrial control systems, supervisory control and data acquisition (SCADA), distributed control systems and connected operational networks, supporting clients through complex cyber security challenges.

Your responsibilities will include assessing OT environments, identifying vulnerabilities and risks, and developing practical security improvements that balance operational continuity, safety and regulatory requirements. You will conduct security reviews, maturity assessments, risk assessments and gap analyses, while producing clear reports and prioritised remediation plans for both technical and non-technical stakeholders.

You will contribute to the design and implementation of OT security strategies, policies, procedures and architectures. This may include network segmentation, secure remote access, asset management, vulnerability management, monitoring and detection, incident response, access control and security governance. You will also support the development and testing of incident response and business continuity plans, as well as providing guidance during audits, assurance activities and security improvement programmes.

The successful candidate will have demonstrable experience in OT, ICS or industrial cyber security, with a sound understanding of relevant technologies, protocols and operating environments. Knowledge of recognised standards and frameworks such as IEC 62443, NIST Cybersecurity Framework, NIS Regulations or ISO 27001 would be advantageous. Professional certifications in cyber security, industrial control systems, risk management or related disciplines are desirable.

You will be confident engaging with engineering, operations, IT, risk and senior leadership teams, and able to translate technical risks into clear business considerations. Strong analytical, written and verbal communication skills are essential, together with a structured approach to problem-solving and the ability to manage multiple priorities. The role may involve occasional travel to client or operational sites and requires a proactive, collaborative and security-minded approach.

Security Architect – 12-month FTC

An exciting opportunity has arisen for an experienced Security Architect to join a high-performing technology and information security function on a 12-month fixed-term contract. You will be responsible for shaping secure, resilient and scalable technology solutions, ensuring that security is embedded throughout the design, delivery and operation of services.

Working closely with technology, infrastructure, development, risk and compliance teams, you will provide expert architectural guidance across a range of projects and initiatives. You will assess proposed solutions, identify security risks and recommend practical controls that support business objectives while maintaining appropriate levels of protection.

Your responsibilities will include developing and maintaining security architecture principles, standards, patterns and reference models; reviewing technical designs and solution proposals; conducting threat modelling and security risk assessments; and advising on identity and access management, cloud security, network security, application security, data protection and secure development practices. You will also contribute to security roadmaps, assurance activities, policies and governance forums, ensuring that decisions are clearly documented and aligned with regulatory and industry requirements.

The successful candidate will have proven experience in a Security Architect or similar role, with a strong understanding of enterprise security architecture and modern technology environments. You will be confident working across cloud and on-premises platforms and able to translate complex technical risks into clear, proportionate recommendations for both technical and non-technical stakeholders.

Relevant professional qualifications, such as CISSP, CISM, SABSA or a cloud security certification, would be advantageous. Experience of recognised frameworks and standards, including ISO 27001, NIST, CIS Controls or relevant data protection legislation, is also desirable.

You will be analytical, collaborative and commercially aware, with excellent communication and influencing skills. The role requires someone who can work independently, manage competing priorities and build effective relationships across a varied stakeholder group. This is an opportunity to make a tangible contribution to the security and resilience of critical technology services during an important period of change.

We are seeking a Data Protection Co-Ordinator to support the effective management of data protection and information governance activities across the organisation. This is an excellent opportunity for an organised and detail-focused professional to help ensure personal data is handled lawfully, securely and transparently.

Working closely with colleagues across a range of teams, you will co-ordinate responses to data subject requests, maintain accurate records of processing activities and assist with the completion of data protection impact assessments. You will also help monitor compliance with relevant policies, procedures and legislation, escalating potential risks or issues where appropriate.

Key responsibilities will include maintaining data protection registers and documentation, supporting the management of personal data breaches, assisting with audits and compliance reviews, and providing practical guidance on data protection requirements. You will contribute to the development and delivery of staff training and awareness activities, helping colleagues understand their responsibilities when collecting, using, storing or sharing personal information.

You will liaise with internal stakeholders and, where necessary, external advisers or regulatory bodies. The role will involve handling confidential information, tracking actions and deadlines, preparing reports, and ensuring that records are complete, accurate and readily accessible. You may also support the review of contracts, privacy notices and information-sharing arrangements.

Applicants should have experience in a data protection, compliance, information governance or similarly regulated environment, together with a sound understanding of UK data protection legislation, including the UK GDPR and Data Protection Act 2018. Experience of dealing with data subject rights, breach management or risk assessments would be advantageous.

You will need excellent organisational and communication skills, strong attention to detail and the ability to manage competing priorities. The successful candidate will be confident working independently, comfortable explaining complex requirements clearly, and committed to maintaining high standards of confidentiality, integrity and professional conduct.

We are seeking an experienced Chief Information Security Officer to provide strategic leadership across information and cyber security. This is a senior role responsible for protecting critical systems, data and services while enabling the organisation to achieve its operational and strategic objectives. You will define and implement a clear security vision, strengthen resilience and ensure that security considerations are embedded into decision-making, technology development and business change.

You will lead the development and continual improvement of the information security strategy, policies, standards and governance framework. Key responsibilities will include overseeing cyber risk management, security architecture, identity and access management, vulnerability management, threat monitoring, incident response, business continuity and disaster recovery. You will establish appropriate measures for identifying, assessing and treating risk, provide assurance to senior stakeholders and ensure that security controls remain effective and proportionate. You will also manage the response to significant incidents, coordinating investigation, recovery, communications and lessons learned, while maintaining awareness of emerging threats and regulatory requirements.

The successful candidate will have substantial senior-level experience in information or cyber security, with a strong understanding of governance, risk and compliance in complex environments. You will be able to demonstrate experience of leading security transformation, managing specialist teams and influencing executives, technical colleagues and wider stakeholders. A sound knowledge of relevant legislation, recognised security frameworks and industry standards is essential, alongside excellent communication, judgement and strategic planning skills. Professional qualifications such as CISSP, CISM, CRISC or an equivalent are desirable. You will be pragmatic, collaborative and confident operating in a changing environment, with the ability to balance robust protection with the need to deliver accessible, reliable and innovative services.

We are seeking an experienced Network Security Consultant to provide expert guidance on the design, implementation and continuous improvement of secure network environments. You will work with technical and business stakeholders to assess current infrastructure, identify vulnerabilities and develop practical security solutions that support operational resilience and regulatory requirements. The role will involve advising on network architecture, segmentation, secure remote access, firewalls, intrusion prevention, endpoint connectivity and cloud security controls.

Key responsibilities will include conducting security assessments, reviewing network configurations and traffic flows, and producing clear risk-based recommendations. You will design and implement security controls, support firewall and VPN changes, investigate network security incidents and contribute to remediation activities. You will also help develop security standards, technical documentation, operating procedures and architecture patterns. The successful candidate will participate in security improvement programmes, assist with audits and compliance reviews, and communicate complex technical matters clearly to both technical and non-technical audiences.

Applicants should have substantial experience in network security consulting or a closely related role, with strong knowledge of TCP/IP, routing and switching, firewalls, VPN technologies, IDS/IPS, secure network design and vulnerability management. Experience with cloud networking and security platforms, zero-trust principles, security monitoring tools and incident response would be highly valuable. Relevant professional certifications such as CISSP, CISM, CCNP Security, PCNSE or equivalent are desirable. You will be analytical, collaborative and confident working independently, with the ability to manage competing priorities and deliver high-quality advice in a changing technical environment.

We are seeking an experienced Security Architect to design, develop and maintain secure technology architectures across a complex and evolving IT environment. You will define security principles, standards and reference architectures that support business objectives while protecting systems, applications, data and infrastructure from current and emerging threats. Working closely with engineering, infrastructure, cloud, software development and risk teams, you will ensure that security is embedded throughout the technology lifecycle, from early design through implementation and ongoing operation.

Your responsibilities will include assessing proposed solutions, identifying security risks and recommending practical, proportionate controls. You will create and maintain security architecture documentation, patterns, models and roadmaps, and provide expert guidance on areas such as cloud security, network segmentation, identity and access management, endpoint protection, application security, encryption and data protection. You will contribute to threat modelling, security reviews, risk assessments and incident response planning, while helping to monitor compliance with relevant legislation, regulatory obligations, industry standards and internal policies. The role will also involve influencing stakeholders, challenging designs where appropriate and translating complex security requirements into clear, actionable advice.

Applicants should have substantial experience in security architecture or a closely related role, with a strong understanding of enterprise security principles and modern technology environments. Experience designing secure cloud and hybrid architectures, applying recognised frameworks such as NIST, ISO 27001, SABSA or CIS, and working with governance, risk and compliance processes is highly desirable. Professional certifications such as CISSP, CISM, CCSP or equivalent would be beneficial. You will be an analytical and collaborative professional who can communicate effectively with both technical and non-technical audiences, balance security with usability and delivery needs, and demonstrate sound judgement when managing competing priorities. A proactive approach to continuous improvement and a genuine interest in emerging security technologies are essential.

We are seeking a diligent and analytical SOC Examiner to support the monitoring, investigation and response to cybersecurity events. In this role, you will examine alerts generated by security monitoring tools, assess potential threats and determine the appropriate course of action. You will review logs, system activity and relevant evidence to identify suspicious behaviour, distinguish genuine incidents from false positives and help protect critical systems and information.

Key responsibilities include monitoring security dashboards and incident queues, carrying out first- and second-level analysis of alerts, documenting findings and escalating confirmed or high-risk incidents in line with established procedures. You will assist with incident investigations by correlating data from endpoints, networks, identity platforms and other sources. The role also involves preparing clear incident reports, maintaining accurate case records, supporting vulnerability and threat-hunting activities, and contributing to post-incident reviews. You will work closely with technical teams and other stakeholders to coordinate containment, remediation and recovery actions, while helping to improve monitoring rules, response playbooks and operational processes.

Applicants should have experience in a security operations, cyber defence, incident response or related technical environment, together with a sound understanding of common attack methods, security controls and network fundamentals. Familiarity with SIEM, EDR, ticketing and threat-intelligence platforms is desirable, as is experience analysing authentication events, email security alerts, malware indicators and network traffic. Relevant professional training or certifications in cybersecurity are advantageous. You should be methodical, curious and able to prioritise effectively in a fast-paced environment. Strong written and verbal communication skills are essential, along with the ability to explain technical findings clearly, maintain confidentiality and work collaboratively. A willingness to participate in shift patterns, on-call arrangements or continuous professional development may also be required.

We are seeking a Cybersecurity Engineer to help protect critical systems, applications, networks, and data against evolving cyber threats. In this role, you will contribute to the design, implementation, and continuous improvement of security controls across cloud and on-premises environments. You will work closely with infrastructure, software development, operations, and compliance teams to identify risks, strengthen security practices, and support the delivery of resilient technology services.

Your responsibilities will include monitoring security events, investigating alerts, supporting incident response activities, and assisting with vulnerability assessments and remediation planning. You will help manage endpoint, network, identity, and cloud security technologies, while developing and maintaining security policies, procedures, standards, and technical documentation. The role will also involve conducting threat modelling, reviewing system and application designs, contributing to penetration testing activities, and providing practical guidance on secure configuration and coding practices. You may participate in security audits, risk assessments, awareness initiatives, and the evaluation of new tools and technologies.

To be successful, you should have professional experience in cybersecurity engineering, security operations, infrastructure security, or a related discipline. Strong knowledge of common security principles, network protocols, operating systems, identity and access management, encryption, vulnerability management, and incident response is required. Experience with security information and event management platforms, endpoint detection and response, cloud security services, automation, and scripting using tools such as Python or PowerShell is highly desirable. Relevant certifications, such as CISSP, CISM, Security+, or cloud security credentials, would be advantageous. You should be analytical, collaborative, and able to communicate technical risks clearly to both technical and non-technical audiences.

We are seeking a Security, Culture, Education & Awareness Team Lead to develop and deliver a comprehensive security culture and awareness programme across a complex organisation. This role will help strengthen security behaviours, improve understanding of risk, and ensure that colleagues at all levels are equipped to protect information, systems, people and services. You will lead a small team and work closely with security, technology, people, communications, risk and business teams to embed security into everyday decision-making.

Your responsibilities will include creating and maintaining a strategic security education and awareness plan, informed by organisational priorities, emerging threats, regulatory expectations and behavioural insight. You will oversee engaging campaigns, learning content, briefings, events, simulations and targeted interventions for different audiences, including senior leaders, technical teams and colleagues in higher-risk roles. The role will also involve measuring participation, knowledge, behavioural change and programme effectiveness, using data and feedback to continuously improve delivery. You will act as a subject matter expert on security culture, provide clear advice to stakeholders, and represent the function at relevant working groups and governance forums.

We are looking for an experienced people leader with a strong background in security awareness, culture, learning, communications, risk or a related discipline. You will have proven experience designing and delivering organisation-wide programmes, translating complex security concepts into accessible and compelling messages, and influencing stakeholders at all levels. Excellent written and verbal communication skills are essential, together with the ability to manage competing priorities, build effective partnerships and use metrics to demonstrate impact. A practical understanding of information security, cyber threats, data protection and behavioural change principles is desirable. Relevant professional qualifications or certifications, such as those relating to information security, risk, learning or communications, would be advantageous.

We are seeking a Cyber Security and Information Assurance Lead to provide strategic and operational leadership across cyber security, information assurance, risk management and data protection. The successful candidate will help safeguard critical systems, information assets and services by developing robust security frameworks, policies and controls aligned with recognised standards and regulatory requirements. You will work closely with technology, operational and business stakeholders to ensure that security is embedded throughout the organisation’s services, projects and change programmes.

Key responsibilities will include leading the assessment and management of cyber and information risks; maintaining security policies, standards, procedures and assurance documentation; and overseeing compliance with relevant legislation, regulations and good-practice frameworks. You will coordinate security audits, risk assessments, control testing and remediation activity, providing clear reports and recommendations to senior leadership. The role will also contribute to incident response, business continuity, disaster recovery and third-party assurance, helping to ensure that risks are identified, escalated and managed effectively. You will promote security awareness and foster a culture of continuous improvement through guidance, training and effective stakeholder engagement.

Applicants should have substantial experience in cyber security, information assurance, governance, risk and compliance, ideally within a complex or regulated environment. You will have a strong understanding of security principles, risk assessment methodologies, data protection, incident management and relevant industry standards such as ISO 27001, NIST or equivalent frameworks. Professional qualifications in information security, risk management or auditing are desirable. Excellent communication, influencing and analytical skills are essential, along with the ability to translate technical risks into clear business advice. You should be organised, pragmatic and confident working independently while collaborating with colleagues, suppliers and senior decision-makers.