Job Search

We are seeking a Security and Compliance Engineer to help protect critical systems, data and services while supporting a strong culture of risk management and regulatory compliance. This role will work across technology, engineering and operational teams to identify security risks, implement effective controls and promote secure-by-design practices throughout the organisation.

You will be responsible for monitoring and improving security controls across cloud and on-premises environments, reviewing system configurations and supporting vulnerability management activities. You will investigate security alerts and incidents, coordinate remediation, and contribute to post-incident reviews. The role will also involve maintaining security documentation, policies, standards and procedures, ensuring they remain practical, current and aligned with business requirements.

A key part of the position will be supporting compliance with relevant legislation, industry standards and internal governance requirements. You will assist with risk assessments, audit preparation, evidence gathering and the tracking of corrective actions. You will work with stakeholders to assess new technologies and suppliers, provide clear security guidance, and help ensure that projects meet applicable security and compliance expectations.

The successful candidate will have experience in information security, cyber security, compliance engineering or a closely related discipline. You should have a sound understanding of security frameworks and controls, such as ISO 27001, NIST or CIS, together with practical knowledge of vulnerability management, identity and access management, incident response and cloud security. Experience using security monitoring, ticketing and governance tools would be advantageous.

We are looking for someone analytical, organised and confident communicating with both technical and non-technical audiences. You will be able to manage competing priorities, explain complex risks clearly and build constructive working relationships. Relevant professional qualifications or certifications, such as CISSP, CISM, Security+, ISO 27001 or equivalent experience, are desirable. A commitment to continuous learning and a proactive approach to improving security practices are essential.