Who we are looking for State Street seeks to recruit a Software Development Lifecycle Management (SDLCM) and Cloud SecurityManagement (CSM) Governance program lead able to oversee and perform both SDLCM Governance and CSM Governance functions to provide deliverables within the Fusion & Security Operations (F&SO) Governance Program. This includes gathering, analyzing, and enriching data for … functions What we value These skills will help you succeed in this role A deep understanding of SDLCM and CSM in regards to the software development lifecycle and cloud securitymanagement in a corporate environment Strong problem solving and analytical skills Ability to effectively drive results, provide feedback/direction, and build relationships with leaders and team members … governance, AI and machine learning governance related to encryption and data loss prevention, or related functions demonstrated through work, military, or education Experience using ticket tracking tools for change management, tracking, and reporting demonstrated through work, military, or education Strong background in cybersecurity, Software Development Lifecycle Management, and Cloud SecurityManagement Why this role is important More ❯
organization committed to innovation, resilience, and trust. As we continue to grow and evolve in a digital-first world, we are seeking a strategic and business-savvy Business Information Security Officer (BISO) to bridge the gap between cybersecurity and business operations. The BISO is expected to be adaptable and have the ability to implement the integration of cybersecurity into … our IT and operational technology (OT) ecosystems. As the BISO, you will serve as the primary liaison between the BA Customers & Solutions Security & Resilience team and business units, ensuring that information and cybersecurity strategies align with business goals. You will be responsible for embedding security into business processes, managing risk, and driving a culture of security awareness … across the organization. The BISO will report directly to the Head of Business Excellence, with additional reporting to the Director of Asset Management on the OT topics. Main tasks Act as the trusted information and cybersecurity advisor to management and stakeholders Establishing, developing and implementing the SecurityManagement System in the BU Heat UK through translation More ❯
Easter Howgate, Midlothian, United Kingdom Hybrid / WFH Options
Leonardo UK Ltd
Job Description: Job Description Leonardo UK is seeking a proven, experienced Principal Consultant to join the Cyber & Security Solutions Division team. This role is focused on supporting the delivery of security aspects to the company's core products and to external stakeholders. This requires co-ordination with engineering teams and delivery of all facets of cyber and information … security related to the delivery across the engineering lifecycle - from requirements all the way through to in-service support and maintenance. This is an exciting opportunity to be part of significant programmes, during which you will ensure that products meet the highest standards, in accordance with customer's requirements and risk appetite. You will be supported in this role … and with our customers. Talk to us to find out more. Key Responsibility Areas Leading a team or operating independently to meet all aspects of the cyber and information security delivery across an engineering lifecycle. Interpreting customer requirements into actionable securitymanagement plans, statements of work, and activities to be delivered across the lifecycle. Become the lead More ❯
Easter Howgate, Midlothian, United Kingdom Hybrid / WFH Options
Leonardo UK Ltd
Job Description: Job Description Leonardo UK is seeking a Senior Consultant to join the Cyber & Security Solutions Division team. This role is focused on supporting the delivery of security aspects to the company's core products and to external stakeholders. This requires engaging with engineering teams and delivery of all facets of cyber and information security related … us to find out more. Key Responsibility Areas Work as part of a larger team, delivering streams of work independently, to meet all aspects of the cyber and information security delivery across an engineering lifecycle. Interpreting customer requirements into actionable securitymanagement plans, statements of work, and activities to be delivered across the lifecycle. Oversight and delivery … of associated statements of work and artefacts to time, cost and quality constraints. Identification, management and escalation of technical and delivery risks and issues. Maintain customer relationships for the cyber and information security workstream, both internal and external. Mentoring of consultants within your team as required. Skills, Qualifications, Knowledge & Experience Required In addition to a passion for cyber More ❯
business continuity and disaster recovery planning and testing Manage internal audits, compliance reporting, and remediation activities Coordinate GDPR compliance and data protection processes across the organisation Drive improvements in security culture through awareness and training Collaborate with stakeholders to identify and address control deficiencies Qualifications & Experience Substantial relevant experience in control management for governance, compliance, IT audits, IS … assurance and risk management programmes Understanding of regulatory requirements, including cross-industry regulations (e.g., GDPR, Data Protection Act) and industry-specific regulations Knowledge of common information securitymanagement frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework Knowledge of OneTrust risk management toolset or More ❯
of company policies. The role involves ensuring adherence to evolving regulations, general Health & Safety tasks, managing risk assessments, and supporting incident response processes. Key responsibilities include: Compliance Accreditations Overall management of Compliance areas of responsibility within our Information SecurityManagement System (ISMS) including leading the ISO Committee, management and scheduling of internal audits and ensuring existing … auditing bodies Creation of additional policies and procedures in line with evolving legislation or accreditation requirements; Staying abreast of the regulations applicable to the business, ensuring compliance through the management of internal teams and stakeholders Ensure staff awareness of our Policies and Procedures, including creation of effective communications and training plans to our internal staff, monitoring the reporting of … completion rates Management of new and existing accreditations including, for example TISAX General Compliance Supporting with adhoc Health & Safety responsibilities as required including for example, liaising with the Health and Safety appointed third party, auditors and working group representatives Raising, documentation and mitigation of applicable Compliance related risks including the Health and Safety Risk Register, completion of risk assessments More ❯
of company policies. The role involves ensuring adherence to evolving regulations, general Health & Safety tasks, managing risk assessments, and supporting incident response processes. Key responsibilities include: Compliance Accreditations Overall management of Compliance areas of responsibility within our Information SecurityManagement System (ISMS) including leading the ISO Committee, management and scheduling of internal audits and ensuring existing … auditing bodies Creation of additional policies and procedures in line with evolving legislation or accreditation requirements; Staying abreast of the regulations applicable to the business, ensuring compliance through the management of internal teams and stakeholders Ensure staff awareness of our Policies and Procedures, including creation of effective communications and training plans to our internal staff, monitoring the reporting of … completion rates Management of new and existing accreditations including, for example TISAX General Compliance Supporting with adhoc Health & Safety responsibilities as required including for example, liaising with the Health and Safety appointed third party, auditors and working group representatives Raising, documentation and mitigation of applicable Compliance related risks including the Health and Safety Risk Register, completion of risk assessments More ❯
Edinburgh, City of Edinburgh, United Kingdom Hybrid / WFH Options
Gold Group
build relationships within the service desk team and the wider organisation. Understand the business Objectives, Vision, Mission and Values. Support the organisation's commitment to good quality and information securitymanagement (ISO 27001 and ISO 9001 certifications) by adhering consistently to policies and procedures. 2nd Line/3rd Line Service Desk Analyst Knowledge/Skills Required: To perform … an ITIL Foundation 3+ years' experience in an IT Service Desk/Helpdesk Function Experience with Microsoft 365 administration, Intune/Endpoint Manager and Azure fundamentals. Knowledge of Service Management Platforms such as Halo PSA and N-Able N-Central. Knowledge of Microsoft's 365 Cloud Administration and Configuration. Soft Skills, Customer Service (Interpersonal skills: such as telephony skills … communication skills, active listening and customer-care) Experience with Server hardware raid rebuilds and restores. Understanding of WAN and LAN connectivity, routers, firewalls, and security Remote access solution implementation and support: VPN, RDP, and Remote Desktop Control. Hands-on experience with scripting or automation (desirable) Driving Licence Team player, you will thrive in a collaborative environment and will contribute More ❯
Edinburgh, Midlothian, Scotland, United Kingdom Hybrid / WFH Options
Gold Group Ltd
build relationships within the service desk team and the wider organisation. Understand the business Objectives, Vision, Mission and Values. Support the organisation's commitment to good quality and information securitymanagement (ISO 27001 and ISO 9001 certifications) by adhering consistently to policies and procedures. 2nd Line/3rd Line Service Desk Analyst Knowledge/Skills Required: To perform … an ITIL Foundation 3+ years' experience in an IT Service Desk/Helpdesk Function Experience with Microsoft 365 administration, Intune/Endpoint Manager and Azure fundamentals. Knowledge of Service Management Platforms such as Halo PSA and N-Able N-Central. Knowledge of Microsoft's 365 Cloud Administration and Configuration. Soft Skills, Customer Service (Interpersonal skills: such as telephony skills … communication skills, active listening and customer-care) Experience with Server hardware raid rebuilds and restores. Understanding of WAN and LAN connectivity, routers, firewalls, and security Remote access solution implementation and support: VPN, RDP, and Remote Desktop Control. Hands-on experience with scripting or automation (desirable) Driving Licence Team player, you will thrive in a collaborative environment and will contribute More ❯
Senior Cyber Security Engineer - 12 months Contract Hybrid 2 days Tuesday & Wednesday, other 3 remote OUTSIDE OF IR35 Preferred Locations: Aberdeen, Staines, Glasgow, or Reading Applicants must be able to pass the HMG Baseline Personnel Security Standard (BPSS) check. The Senior Cyber Engineer will support project implementation aligned with company objectives, including continuous improvement of margin, customer satisfaction … environments to support business, production, and operational goals. Key Objectives: Assess the cybersecurity robustness of architectures, technologies, & procedures in client facilities. Design solutions that meet client requirements and implement security measures (e.g., antivirus, patch management, insider threat protection, incident response, compliance). Conduct vulnerability assessments & audits on client systems & network devices, considering OT sensitivities. Provide expertise in network … data communication, servers, VMs, switches, firewalls) and testing procedures (FAT). Prepare material requisitions & contribute to technical bid evaluations. Review vendor drawings & consolidate feedback from other disciplines. Undertake Cyber Security Risk Assessments and advise on mitigation actions. Support evaluation of clients' security posture, identifying vulnerabilities & areas for improvement. Stay updated on security trends, threats, & best practices. Apply More ❯