Join a fast-growing, inclusive, and collaborative cybersecurity consulting firm where your expertise is valued and your career can thrive! Our client, a specialised Cyber Security Consulting firm, is expanding rapidly. They’re looking for an ambitious and driven Senior Cyber Security Consultant to join their Cyber GRC Risk Advisory team. About the role: As a Senior Cyber Security Consultant , you’ll play a key role in Governance, Risk, and Compliance (GRC) , helping clients across a number of sectors strengthen their security posture. You’ll work with industry-leading frameworks like CyberEssentials (CE), CyberEssentials Plus (CE+), NIST 2, ISO 27001/223001, DORA , and more. This is the perfect opportunity if you’re looking for more autonomy, rapid career growth, and a dynamic environment —far from the rigid structures of large corporate consultancies. As a Senior CyberMore ❯
london, south east england, united kingdom Hybrid / WFH Options
55 Exec Search
Join a fast-growing, inclusive, and collaborative cybersecurity consulting firm where your expertise is valued and your career can thrive! Our client, a specialised Cyber Security Consulting firm, is expanding rapidly. They’re looking for an ambitious and driven Senior Cyber Security Consultant to join their Cyber GRC Risk Advisory team. About the role: As a Senior Cyber Security Consultant , you’ll play a key role in Governance, Risk, and Compliance (GRC) , helping clients across a number of sectors strengthen their security posture. You’ll work with industry-leading frameworks like CyberEssentials (CE), CyberEssentials Plus (CE+), NIST 2, ISO 27001/223001, DORA , and more. This is the perfect opportunity if you’re looking for more autonomy, rapid career growth, and a dynamic environment —far from the rigid structures of large corporate consultancies. As a Senior CyberMore ❯
you'll be instrumental in ensuring they are compliant with their information security accreditations and our data, systems, and networks are protected from evolving cyber threats. Nesta are a Charity and an innovation agency for social good. They design, test and scale new solutions to society's biggest problems … days a week on site in London. As the Group Information Security Analyst/Officer, you will: Lead and maintain security accreditations: Successfully manage CyberEssentials, CyberEssentials Plus, and ISO 27001 certifications. Deliver comprehensive training: Develop and deliver engaging training on ISO 27001, cybersecurity awareness … a strong security posture. ISMS management: Coordinate the improvement and maintenance of the Information Security Management System (ISMS) in line with ISO 27001 and Cyber Essentials. Experience Required: Information Security Management: Extensive experience in implementing and maintaining ISMS and achieving ISO 27001 certification. Proven track record managing security accreditations More ❯
Senior Cyber Security (GRC) Analyst This Senior Cyber Security (GRC) Analyst will report to the Cyber Security Governance, Risk & Compliance Manager and will work within the Information Systems directorate based in either our London or Crawley office. You will be a permanent employee. You will attract a … on hundreds of retailers' products. Discounted gym membership. Employee Assistance Programme. Job Purpose The Senior Governance Risk and Compliance (GRC) Analyst will support the Cyber Security GRC Manager in developing IT governance, risk management, and compliance strategies across UK Power Networks information applications and users to safeguard essential business … services and operations from cyber threats. Dimensions People: Work collaboratively in a team of circa 8-10 permanent and temporary GRC resources and specialist 3rd Party GRC service providers. Mentor less experienced GRC analysts, providing guidance and training. Industry and Regulatory: Deputise for the GRC manager to represent UKPN More ❯
West London, London, United Kingdom Hybrid / WFH Options
Profectus
CyberEssentials Assessor/Auditor Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find a motivated and experienced CyberEssentials Assessor/Auditor to join their growing team. They have a number of great benefits to offer as More ❯
london, south east england, united kingdom Hybrid / WFH Options
Profectus
CyberEssentials Assessor/Auditor Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find a motivated and experienced CyberEssentials Assessor/Auditor to join their growing team. They have a number of great benefits to offer as More ❯
west london, south east england, united kingdom Hybrid / WFH Options
Profectus
CyberEssentials Assessor/Auditor Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find a motivated and experienced CyberEssentials Assessor/Auditor to join their growing team. They have a number of great benefits to offer as More ❯
London, England, United Kingdom Hybrid / WFH Options
Profectus
CyberEssentials Assessor/Auditor Location: Remote (UK Only) The Role: Profectus are working closely with a well-established consultancy to find a motivated and experienced CyberEssentials Assessor/Auditor to join their growing team. They have a number of great benefits to offer as More ❯
robust governance, and enjoying the freedom to design impactful processes across our global operations. As the sole expert in this position, you'll spearhead Cyber projects with plans to build your own team in 2025 The role combines two dynamic elements: Core IT Security: Leverage your deep technical expertise … to maintain the security of our infrastructure, servers, and systems. From leading our Managed Security Service Providers (MSSPs), building a best-in-class Cyber training and awareness programme, and performing security audits on critical systems. Cybersecurity Governance: Implement governance and frameworks to embed security across the business, across IT … Mission As our Cybersecurity Lead, you will: Build and implement a DevSecOps framework to ensure our digital products are secure and meet the highest Cyber assurance standards. Lead the Cybersecurity function, managing people, processes, and tools while ensuring the business is "Secure by Design." Identify and remediate CyberMore ❯
on-premise, and hybrid environments. This role also involves working with SIEM solutions, automating security workflows, and contributing to the company's compliance with CyberEssentials Plus and ISO 27001 standards. Key Responsibilities: Design, implement, and manage network security architectures, including firewalls, VPNs, and other perimeter security technologies. … workflows to improve incident response times. Lead threat hunting activities across on-premises and cloud environments to proactively identify potential security threats. Assist with CyberEssentials Plus and ISO 27001 audits and certifications to ensure company-wide compliance with industry best practices and regulations. Collaborate with development teams … dashboards, and correlating data for threat detection. Familiarity with security event log analysis, alerts management, and incident response workflows. Cybersecurity Frameworks & Compliance: Knowledge of CyberEssentials Plus and ISO 27001 compliance requirements. Ability to help maintain and audit compliance for ongoing security certifications. Threat Hunting & Incident Response: Demonstrated More ❯
london, south east england, united kingdom Hybrid / WFH Options
Halian
on-premise, and hybrid environments. This role also involves working with SIEM solutions, automating security workflows, and contributing to the company's compliance with CyberEssentials Plus and ISO 27001 standards. Key Responsibilities: Design, implement, and manage network security architectures, including firewalls, VPNs, and other perimeter security technologies. … workflows to improve incident response times. Lead threat hunting activities across on-premises and cloud environments to proactively identify potential security threats. Assist with CyberEssentials Plus and ISO 27001 audits and certifications to ensure company-wide compliance with industry best practices and regulations. Collaborate with development teams … dashboards, and correlating data for threat detection. Familiarity with security event log analysis, alerts management, and incident response workflows. Cybersecurity Frameworks & Compliance: Knowledge of CyberEssentials Plus and ISO 27001 compliance requirements. Ability to help maintain and audit compliance for ongoing security certifications. Threat Hunting & Incident Response: Demonstrated More ❯
work with central government agencies and adhere to the Government Digital Service standard. We take security seriously, and are certified to ISO 27001 and CyberEssentials Plus, demonstrating our commitment to robust information security practices. To support our continued growth, we are seeking an experienced Information Security Manager. … In this role, you will be responsible for ensuring our ongoing compliance with ISO27001 and CyberEssentials Plus, including the management of quarterly external audits and the facilitation of Integrated Management System (IMS) meetings. You will also oversee our adherence to ISO 9001 and ISO 14001, ensuring that … support. Compliance and Security Management: Develop, implement, and maintain comprehensive compliance programs, including integrated management systems for ISO 27001, ISO 9001, ISO 14001, and CyberEssentials Plus. Oversee security operations, managing internal security tools and processes to ensure optimal protection of company assets. Lead IT Support management, including More ❯
their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups. As Director of Cyber Security, you will be at the forefront of safeguarding the Financial Times' digital landscape, leading critical functions in Cyber Consultancy & Engineering and Cyber Governance . Reporting directly to the Vice President of Cyber Security, you will help drive the strategic vision and operational excellence needed to fortify the FT's cyber defences. This role is pivotal in enabling the organisation to innovate fearlessly and operate with confidence, ensuring resilience against … bug bounty programs, and vulnerability reporting to mitigate risks and align with regulations. Vendor Relationships: Manage partnerships with security vendors, ensuring value and support. Cyber Governance Compliance and Risk: Ensure adherence to standards like CyberEssentials, ISO 27001, and GDPR. Manage third-party risks, audits, and a More ❯
the planning, implementation and management of technical and procedural controls across endpoint security, data access, and cloud infrastructure (including AWS). Maintain Prevail's CyberEssentials and CyberEssentials Plus accreditations, including preparation, audit liaison, and continuous improvement of control measures. Lead structured risk assessments across … continuously improve the company's incident response framework, including conducting tabletop exercises and reviewing lessons learned. Ensure the business is prepared to respond to cyber security incidents, breaches or service disruptions through robust business impact assessment, business continuity and recovery planning. Internal Engagement & Security Culture Deliver internal briefings and … identify emerging vulnerabilities and strengthen preventative measures. Governance & Oversight Chair internal security governance forums to track risks, define priorities, and drive improvement across physical, cyber and personnel domains. Contribute to security input for new markets, overseas deployments, and sensitive project work. Support leadership in meeting regulatory, contractual, and reputational More ❯
engagement rounds. Skills & Experience: Proven experience managing and implementing ISO 27001-compliant systems Strong background in information security governance and risk management Experience with CyberEssentials/CyberEssentials Plus accreditation processes Knowledge of UK GDPR (though this will be managed by somebody else) and broader More ❯
engagement rounds. Skills & Experience: Proven experience managing and implementing ISO 27001-compliant systems Strong background in information security governance and risk management Experience with CyberEssentials/CyberEssentials Plus accreditation processes Knowledge of UK GDPR (though this will be managed by somebody else) and broader More ❯
contextual cybersecurity risks. Developing and operating our ISMS, and all that this entails: You will also be responsible for maintaining our ISO 27001 and CyberEssentials certifications-and other security-related compliance accreditations as may be required. We are a scaling business, staying lean wherever possible, which means … see fit, in line with business need. We are an ambitious bunch at Risk Ledger, always learning and pushing boundaries to change the way cyber security is managed in the supply chain. Our own internal security is pivotal to this. We won't compromise and don't expect you … qualified Head (or Deputy Head) of Information Security role, seasoned with scale-up organisation challenges. CISSP, CISM Has solid experience of assuring compliance with cyber security and data protection regulations within the UK and globally (e.g. GDPR, NIS Directive, EBA Guidelines). Has a comprehensive understanding of what it More ❯
such as RBAC (Role-Based Access Control), MFA (Multi-Factor Authentication), and API security mechanisms . Ensure compliance with GDPR, ISO 27001, and NCSC CyberEssentials security standards. 3. Vulnerability Management & Defect Tracking Identify, document, and track security defects, working closely with development teams to resolve vulnerabilities . … JWT authentication, and OAuth 2.0 security mechanisms . Strong risk assessment, problem-solving, and communication skills . Awareness of UK government security frameworks , including CyberEssentials and NCSC guidelines . Nice to Have Skills Experience working in UK public sector engagements (MoJ, HMCTS, DWP, Home Office, NHS, etc. More ❯
Oversee timely troubleshooting, maintenance, and repair of hardware and software, either in-house or through service providers. Manage information security protocols in line with CyberEssentials Plus, ISO 27001, and ISO 19650 – with regular audits and user education. Set, manage, and monitor the IT budget for the organisation … maintain industry insight and innovation. Skills & Qualifications Proven experience in IT leadership roles, not necessarily in the AEC space. Strong understanding of network management, cyber security frameworks, cloud services, and infrastructure. Familiarity with standards such as ISO 27001, ISO 19650, and CyberEssentials Plus. Experience managing budgets More ❯
Oversee timely troubleshooting, maintenance, and repair of hardware and software, either in-house or through service providers. Manage information security protocols in line with CyberEssentials Plus, ISO 27001, and ISO 19650 – with regular audits and user education. Set, manage, and monitor the IT budget for the organisation … maintain industry insight and innovation. Skills & Qualifications Proven experience in IT leadership roles, not necessarily in the AEC space. Strong understanding of network management, cyber security frameworks, cloud services, and infrastructure. Familiarity with standards such as ISO 27001, ISO 19650, and CyberEssentials Plus. Experience managing budgets More ❯
role is based in our East Finchley office working 3 days in the office and 2 days remotely. Job Description: The Opportunity As a Cyber Security Officer you will be responsible for implementing and upholding a framework that spans people, process and technology to ensure that McDonald's information … systems and data remains secure. The role holder will work extensively across a variety of computer systems, network devices and cyber security toolsets, as well as enforcing and improving key processes such as cyber security education, awareness and training. What will my accountabilities be? Responsibility for operating and … maintaining existing cyber security processes and toolsets will be a fundamental part of this role, as well as research, design and implementation of future cyber security processes and toolsets that are most suited to McDonald's environment. This could vary from being responsible for the maintenance and development More ❯
Central London, London, United Kingdom Hybrid / WFH Options
Halian Technology Limited
Lead investigations into security incidents and conduct proactive threat hunting. Manage endpoint security, patching, vulnerability scanning, and system hardening. Support audits and compliance with CyberEssentials Plus , ISO 27001 , and other frameworks. Partner with DevOps, InfoSec, and platform teams to drive secure coding and infrastructure practices. Participate in … on-call rota after completing probation. Key Requirements: Hands-on knowledge of SIEM platforms (preferably Sentinel), EDR, and vulnerability management. Familiarity with frameworks like CyberEssentials Plus and ISO 27001. Experience in securing hybrid cloud environments (Microsoft Azure desirable). Experience in DevOps environments with secure automation and More ❯
london (city of london), south east england, united kingdom Hybrid / WFH Options
DGH Recruitment
Head of Cyber Security Hybrid working policy: 3 days per week required in the office. An exciting opportunity for a Head of Cyber Security to join a leading professional services firm as part of their global IT leadership team. The role will take responsibility for all aspects of … the Cyber Security and IT Infrastructure environments. Responsibilities: Lead, manage, develop, coach and mentor the Cyber Security and Infrastructure teams. Ownership of the strategies and roadmaps for cyber security capabilities. This includes email security/DLP, SASE/SWG/CASB, SIEM, etc. Ownership of the strategies … and roadmaps for infrastructure, including LANs, WANs, PAAS/SAAS and other cloud services, etc. Management of the cyber security and infrastructure budgets. Maintain strategic relationships with all relevant technology service providers and ensure the timely and effective delivery of IT services. Lead security operations, including threat monitoring, incident More ❯
City of London, London, United Kingdom Hybrid / WFH Options
DGH Recruitment
Head of Cyber Security Hybrid working policy: 3 days per week required in the office. An exciting opportunity for a Head of Cyber Security to join a leading professional services firm as part of their global IT leadership team. The role will take responsibility for all aspects of … the Cyber Security and IT Infrastructure environments. Responsibilities: - Lead, manage, develop, coach and mentor the Cyber Security and Infrastructure teams. Ownership of the strategies and roadmaps for cyber security capabilities. This includes email security/DLP, SASE/SWG/CASB, SIEM, etc. - Ownership of the strategies … and roadmaps for infrastructure, including LANs, WANs, PAAS/SAAS and other cloud services, etc. - Management of the cyber security and infrastructure budgets. - Maintain strategic relationships with all relevant technology service providers and ensure the timely and effective delivery of IT services. - Lead security operations, including threat monitoring, incident More ❯
environments through the use of desktop/laptop devices for most of the working day. Desirable Official certification (or at least thorough knowledge) of CyberEssentials, Cyber Essential+, Data Security and Protection Toolkit, ISO/IEC17799:2005 and ISO/IEC 27001:2005 Knowledge Essential Highly developed More ❯