Job summary We are seeking a highly skilled and motivated InformationSecurity Analyst to join our Digital Data & Technology (DDaT) team. This is a pivotal role supporting the Chief InformationSecurity Officer (CISO) in delivering cyber security services across the Trust and wider health and care system. The role will support the CISO in delivering … digital safety, security and overall improvement, adhering to the Target Operating Model. The InformationSecurity Analyst will manage the delivery of all cyber security related services. This will include cyber risk management, Data Security Protection Toolkit (DSPT) compliance against cyber relatedassertions, policy and procedure lifecycle management, and ensuring theTrust's information compliance adheres to … the Cyber Assurance Framework (CAF) and ISO27001. Main duties of the job Provide expert guidance on the selection, design, justification,implementation and operation of Cyber Security strategies, technologies,processes, procedures and standards. Support the development of controlsand management approaches to maintain the safety, confidentiality,integrity, availability and security of the Trust's digital infrastructure andsystems; including the protection More ❯
Job summary We are seeking an experienced and visionary Head of Security to lead the Trust's cyber, informationsecurity, resilience, and governance strategy. This senior leadership role sits within the Digital Data & Technology (DDaT) team and plays a critical part in safeguarding patient and organisational data, enabling secure digital transformation, and aligning local strategies with ICS … and national initiatives. The postholder will act as the Deputy Senior Information Risk Owner (SIRO) and provide strategic and operational leadership across architecture, infrastructure, live services, cyber security, and information governance. Main duties of the job Develop and implement a comprehensive cyber and informationsecurity strategy across the Trust and ICS. Lead risk management, resilience … cyber threats are integrated into resilience planning. Manage budgets, business cases, and funding proposals for cyber initiatives. Promote a culture of continuous improvement, training, and professional development across the security function. Deputise for the Associate Director of Digital Operations when required. About us Diversity makes us interesting... Inclusion is what will make us outstanding. Inequality exists and the journey More ❯
New Opportunity: InformationSecurity Manager (Permanent) Sector: Telecoms Infrastructure Location: Reading area - 3 days per week in office Are you ready to take the lead in shaping the future of cyber security within one of the UK's most dynamic digital infrastructure organisations? We're looking for an InformationSecurity Manager to own and evolve … our InformationSecurity Management System (ISMS) and drive alignment with ISO 27001:2022 . This is your chance to combine strategic influence with hands on impact - protecting critical assets, leading transformation, and championing a security first culture across the business. You'll collaborate closely with teams across IT, Legal, Procurement, and Operations , acting as the go to … expert for information assurance, incident management, and regulatory compliance . What You'll Be Doing Lead and continuously improve our ISMS Manage ISO 27001 certification, surveillance audits, and compliance activities Oversee cyber risk management and report key metrics to senior leadership Coordinate incident response, forensic investigations, and remediation efforts Drive supplier assurance and manage third party risk Maintain securityMore ❯
Reading, England, United Kingdom Hybrid / WFH Options
Project People
We’re seeking an experienced InformationSecurity Manager to lead, develop, and continuously improve our InformationSecurity Management System (ISMS) , ensuring compliance with ISO 27001:2022 and protecting the digital infrastructure. In this strategic yet hands-on role, you’ll manage cyber risk , drive security governance , and embed a security-first culture across the … organisation. You’ll also act as the key contact for information assurance, incident response, supplier security , and regulatory compliance . What you’ll do: Own and maintain the ISMS in line with ISO 27001 standards. Lead audits, risk assessments, and incident response. Oversee supplier assurance and security governance. Promote cyber awareness and staff training. Support ongoing compliance … with GDPR and regulatory frameworks. What we’re looking for: Proven experience managing an enterprise ISMS and ISO 27001 audits. Strong knowledge of cyber threats, cloud security (Azure, M365), and GDPR. Hands-on experience in vulnerability management, supplier assurance, and incident response. Excellent communication and stakeholder management skills. Benefits: Competitive salary with bonus scheme Very generous holiday allowance Hybrid More ❯
Security Consultant (Governance, Risk, Compliance) Reading, UK (Hybrid with some travel) £30.00–£40.00 per hour (Inside IR35) 6-month contract. Potential to extend up to 2 years We are seeking an experienced Cyber Security Consultant (GRC) to join a leading global technology organization as part of their expanding Cyber Security practice. The successful candidate will deliver a … full project lifecycle from scoping to delivery and reporting. You’ll work closely with senior stakeholders, from technical teams through to directors, providing expert advisory support to strengthen cyber security frameworks and ensure compliance with global standards. Key Responsibilities Deliver end-to-end Cyber GRC consulting projects for enterprise clients. Conduct risk assessments, develop compliance frameworks, and provide actionable … recommendations. Apply industry standards such as ISO27001, NIST CSF, CIS Top 18, and COBIT. Support clients with Cloud Security, Business Continuity, Disaster Recovery, and emerging technology risk management. Collaborate with internal and client teams to enhance cyber resilience and compliance maturity. About You Minimum of 4+ years’ experience in IT Security, InformationSecurity Governance, Technology Risk More ❯
Reading, Berkshire, England, United Kingdom Hybrid / WFH Options
Certain Advantage
Security Consultant – GRC (Governance, Risk & Compliance) Location: Reading (Remote role with once or twice per month on-site) Rate: Negotiable (DOE) Contract: Until May 2026An excellent opportunity has arisen for an experienced Security Consultant (GRC) to join a global technology organisation that’s expanding its EMEA cyber security consulting practice and investing heavily in a new Centre … of Excellence.This is a hands-on consulting position delivering Governance, Risk and Compliance (GRC) projects for major enterprise clients — including risk management, cloud security governance, and compliance frameworks such as ISO27001, NIST CSF, CIS Top 18 and COBIT .You’ll play a key role in engaging with senior stakeholders, assessing cyber maturity, and driving best-practice improvements across a … of industries. Key Responsibilities Deliver Cyber GRC consulting engagements end-to-end — from scoping and planning through to delivery and close-out. Provide advisory services covering areas such as InformationSecurity Governance, Risk Management, Compliance, Business Continuity, and Cloud Security. Translate complex security and compliance requirements into actionable business solutions. Build trusted relationships with clients at both More ❯
larger companies (e.g. FTSE 100) Exposure to infrastructure and multi-platform environments; preferably within the energy or utility sector. Ability to demonstrate stakeholder management at most levels, including management, Information Technology colleagues and business representatives. Explaining to and communicating with both non-technical and very technical audiences You should have awareness of common InformationSecurity management frameworks … such as ISO 27001, COBIT, InformationSecurity Forum and NIST. If you are available and interested, please apply today More ❯
larger companies (eg FTSE 100) Exposure to infrastructure and multi-platform environments; preferably within the energy or utility sector. Ability to demonstrate stakeholder management at most levels, including management, Information Technology colleagues and business representatives. Explaining to and communicating with both non-technical and very technical audiences You should have awareness of common InformationSecurity management frameworks … such as ISO 27001, COBIT, InformationSecurity Forum and NIST. The successful applicant should be able to commit to starting ASAP. The role will hybrid, with up to two days per week in the nearest office (Reading or Havant) The role will be umbrella based working. Direct applicants only please. More ❯
role within afast-paced and dynamic environment, focused on the support, troubleshooting, and continuous improvement. Due to the customer requirements successful applicants must be eligible for high level UK Security clearance and DV. Location: Reading The successful candidate will join a highly skilled team of support engineers providing technical infrastructure support. The role will require a flexible working ethic … the development of technical solutions. Participates as part of a team and maintains good relationships with team members, internal DXC Teams and customers. Uses knowledge tools and re- uses information for the benefit of projects, and of professional development. Education and Experience required: Bachelors degree in Computer Science, Engineering, or related field or equivalent work experience. professional-level certification … Identity and Access Management service support Active Directory Active Directory Federation Services (ADFS) Lightweight Directory Access Protocol (LDAP) Privileged Access Management principles knowledge and experience Multi Factor Authentication principles InformationSecurity principles Windows Server 2003 to 2022 Group Policy Windows PKI DFS Microsoft Clustering Great customer service Good understanding of networks and Domain Structure What We Will Do More ❯
and facilitate monthly reviews with stakeholders. Oversee and govern IT project submissions across platforms such as Agresso, Remedy, SharePoint , and others. Promote compliance with health & safety, business continuity , and informationsecurity standards. Prepare and deliver project reports for management and business review meetings . About You: You'll be a confident and capable PMO professional who brings: Proven More ❯
and facilitate monthly reviews with stakeholders. Oversee and govern IT project submissions across platforms such as Agresso, Remedy, SharePoint , and others. Promote compliance with health & safety, business continuity , and informationsecurity standards. Prepare and deliver project reports for management and business review meetings . About You: You'll be a confident and capable PMO professional who brings: Proven More ❯