Analyst, you will be instrumental in executing the company's Information Security strategies and initiatives, focusing on supporting the Governance, Risk, and Compliance (GRC) function and implementing the NIST Cyber Security Framework (CSF) throughout the organization. You will lead day-to-day GRC activities, including designing security controls, enforcing requirements from the Group Information Security Framework, and proactively managing … non-compliance issues and mitigating Information Security risks. About You : You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF). Conducting assessments to identify material gaps, analyzing potential risks, and monitoring progress on maturity uplifting across security functions. Supporting compliance activities with the Group Information Security … Framework, CyberEssentials, and PCI DSS attestation. Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework. Assisting cross-functional teams and business units in integrating security measures into business operations. Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats More ❯
Reading, Berkshire, England, United Kingdom Hybrid / WFH Options
Nextech
Role: Senior Cyber Security Engineer (Cyber SME) Salary: Up to £70,000 Location: Reading/Birmingham - Hybrid (1 day/week in office) Be the Cyber Security Subject Matter Expert protecting the backbone of our business.Are you a highly skilled cyber security professional ready to take ownership of security engineering and infrastructure hardening? We're looking … for a Senior Cyber Security Engineer to join our team and act as the go-to expert for all things security.Reporting to the head of security, you'll play a critical role in protecting our infrastructure, networks, and data, while guiding teams across the business with your deep technical expertise. What You'll Do Serve as the Cyber … assurance Stay ahead of evolving threats, and help shape our strategy using frameworks such as OWASP, SASE, and Zero Trust. What We're Looking For Essential: Proven experience in cyber security engineering, including vulnerability management, SIEM, WAFs, and secure infrastructure design. Strong knowledge of TCP/IP, firewalls, routing, access controls, and threat-based security approaches. Excellent communication skills More ❯
Reading, Berkshire, England, United Kingdom Hybrid / WFH Options
Proactive Appointments
Senior Cyber Security Engineer – Reading - Perm £60,000 - £70,000 Hybrid working As our client’s Cyber Security business continues to grow, they are now looking for an experienced and dynamic Senior Cyber Security Engineer to join our vibrant office with hybrid working. Senior Cyber Security Engineer - Responsibility: Carry out daily security engineering/operation tasks … application/web hosting security. Assist in the management of patching, vulnerability analysis and penetration testing to ensure recommendations are risk assessed and implemented in a timely manner Senior Cyber Security Engineer - Skills: Experience in Security Engineering, Network Security, and/or working in a Security Operations Centre (SOC). Hands-on knowledge of security tools and technologies, including … protocols such as networks, domain management, and virtualized environments. Holds or is working towards certifications like CISSP, SANS GCIA, CompTIA Security+, CCNA/CCNP, or similar. Knowledge of ISO27001, CyberEssentials, and AAF frameworks is a plus. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only More ❯
professionally, whether that’s through security qualifications or broader leadership skills. What you will be doing As Information Security Officer , you’ll lead the implementation of the organisation’s cyber security plans. Act as subject matter expert on information security across the organisation Ensure compliance with standards like CyberEssentials Plus and CIS . Oversee third-party … challenges and your ability to see both the technical and human side of data protection. You should have: Proven experience in ICT security management and incident response (CIS and Cyber Essential Plus). Strong technical knowledge of Microsoft 365, Azure, and cloud security. Familiarity with frameworks like ISO 27001, NIST, and CIS. Excellent communication skills and a pragmatic, risk More ❯
Oxford, Oxfordshire, South East, United Kingdom Hybrid / WFH Options
Unipart
please apply if you think youd be able to perform well in this role! Excellent written and verbal communication skills Previous experience within a GRC function, IT Security/Cyber team, Internal Audit or an IT environment Hands on practical experience of ensuring full compliance with legal & regulatory frameworks including ISO 27001 Risk management Strong leadership and communication skills … Cybersecurity), Cybersecurity Risk and Compliance Lead, Information Security Compliance Manager, Head of InfoSec Governance, ISO 27001 Compliance Lead, ISO 27001 Lead Implementer/Auditor, NIST Cybersecurity Framework, Risk management (cyber/information security), Information Security Management System (ISMS), Control assurance/control testing, Regulatory compliance (GDPR, UK CyberEssentials), Security governance frameworks REF More ❯
Milton Keynes, Buckinghamshire, South East, United Kingdom
Nextech Group Limited
Looking For: Proven experience in a 2nd/3rd line support role Strong knowledge of Windows and Mac operating systems. Experience with networking technologies (LAN, WAN, VPN, firewalls). CyberEssentials Plus exposure Proficiency in Active Directory, Office 365, and Exchange. Experience in supporting 1st and 2nd Line teams/acting as an escalation point Excellent problem-solving More ❯
Key Accountabilities: • Proactively assess device and application logs for security vulnerabilities, as well as investigate causes and ultimately resolve or mitigate those vulnerabilities • Lead and investigate security breaches and cyber incidents, providing timely resolution to agreed service level agreements/expectations • Install Security updates/measures in line with best practices to ensure that the client is protected against … the latest cyber security threats • Work with third parties and internal teams to schedule proactive penetration tests, ensuring that vulnerabilities are resolved or mitigated • Support the delivery of security training to all end users • Regular monitoring of potential security risks externally and internally, provide clear expert advice and reliable guidance • Manage regular security assessments of various key services • Regularly … of mail filtering technologies • Strong understanding of Cloud infrastructure technologies, including encryption • Demonstrable experience of working with Microsoft Sentinel, Defender and Purview • Excellent understanding of security frameworks (NIST and CyberEssentials) • Ability to lead and manage third party providers • Strong understanding of incident response processes and methodologies including leading and managing incidents • Lead on root cause analysis, providing More ❯
and leading audits. Familiarity with Software as a Medical Device (SaMD) is essential. Strong knowledge of UKCA, MHRA, FDA regulations, and cybersecurity standards such as DTAC, DSPT, DCB, and Cyber Essentials. For more information, please contact Toby Shelton . If you are interested in applying to this exciting opportunity, then please click 'Apply' or to speak to one of More ❯
Cyber Security Consultant Salary > £65k - 80k Hybrid UK office 1-2 days/wk and Client Site as Required A multi-award-winning service provider is building out a Cyber practice and you can be a central figure reporting into and working with the CISO. This growing Cyber Practice will add to and complement their existing portfolio … direction of the business, and feel the pride that comes from playing a part in building something successful, then we should talk. Some of the Skills Required by the Cyber Security Consultant: Experience delivering engagements, identifying and prioritising risk relevant to your clients, and proposing risk mitigating controls. A current knowledge of the cyber threat landscape. Experience auditing … against security frameworks such as the ISO 27001/Cyber Essential, identifying gaps and recommending controls. If you have certs such as, CISM, CISSP. Great verbal and written communication skills with the ability to communicate tech issues to non-tech audiences in jargon-free language. For more information on the Cyber Security Consultant role apply online now or More ❯