15 of 15 Security Posture Jobs in Scotland

Role Overview We have an exciting opportunity for a Data Security Engineer to join our Cyber Engineering team, providing technical consultancy and service innovation across Microsoft-aligned cyber security offerings. The role focuses on data, identity and application security, with strong expertise in Microsoft Purview and supporting … knowledge of Defender for Cloud Apps. Working with customers, teammates and service leads, you will assess security posture, identify risks and control gaps, and develop practical remediation plans aligned to business objectives. Responsibilities: Design and govern secure, practical controls that help organisations manage data risk, improve visibility ...

deep machine learning experience with a rigorous approach to product design and engineering. What you’ll do You will define and execute on the security roadmap for Malted. You’ll work closely with the engineering team to ensure our infrastructure is "secure by design" and with the leadership team … ensure we meet the rigorous security standards expected by our enterprise clients. Responsibilities Own the ISMS: Lead the maintenance of our ISO 27001 certification and spearhead the upcoming SOC 2 Type 2 audit processes. Endpoint & IT Security: Manage our fleet security via MDM (e.g. JumpCloud), ensuring robust ...

Security Consultant H&PS (Health & Public Sector) Location: Flexible, UK (with client travel) Career Level: Consultant Salary: Competitive, dependent on experience Important eligibility requirement: Due to the nature of this role, candidates must hold sole British nationality at the point of application. Any offer of employment is also subject … satisfactory security clearance, which requires 5 years' continuous UK address history (typically with no periods of 30+ consecutive days outside the UK). About the company Our client is one of the world's leading providers of data engineering and technology consulting services, working on innovative projects that span ...

pipelines, cloud infrastructure and tooling across ShipSure. Own cloud cost optimisation (FinOps), driving efficiency and value for money across cloud spend. Own the platform security posture, embedding security into the software development lifecycle (DevSecOps). Uphold ISO 27001 controls and the information security management system (ISMS … embedding security compliance into pipelines, cloud infrastructure and ways of working. Improve developer experience through paved-road tooling, self-service automation and reduced friction in the delivery pipeline. Coaching & Capability (~50%) Coach, mentor and upskill engineers across squads in DevOps, automation and cloud-native practices. Operate as a hands ...

Security and Compliance Specialist Edinburgh Head Resourcing are working with a software services company in Edinburgh to hire an experienced Information Security and Compliance Specialist. In this position you will play a critical role in managing our client's cyber security risk landscape and ensure robust … successful in this role, you will ideally have come from a hands on technical background and have moved into a Cyber/Information security focussed role. This is an opportunity to lead cyber security, risk, and compliance initiatives, ensuring the organisation maintains a strong security posture. ...

Role Overview We have an exciting opportunity for a Senior Security Consultant to join our growing Governance, Risk and Assurance (GRA) team. Within this role, you will utilise your GRAC and cybersecurity expertise to advise clients on information security, lead technical consulting engagements and support in the delivery … complex security programmes. Responsibilities Lead cyber governance, risk and compliance engagements, applying strong knowledge of cyber threats, risks, controls and mitigations to deliver effective security outcomes. Engage with clients to understand their threat landscape and business context, conducting risk and compliance assessments against recognised frameworks (e.g. ...

threat landscape evolves, so do we. That's why we're looking for a talented Governance, Risk & Compliance (GRC) Consultant to join our growing Security Consulting team. Whether you're already working in cyber consultancy or looking to take the next step in your GRC career, this … tackle meaningful challenges, and help shape the future of cyber resilience. What you'll do You'll work closely with clients to strengthen their security governance, manage risk, improve compliance, and build confidence in their cyber security programmes. Your work will include: ✅ Delivering cyber risk assessments and security ...

Principal Accountabilities Information Security Develop, implement, and maintain information and cyber security policies, standards, and procedures Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments Support incident response planning and continuous improvement of security … corporate and operational (OT) environments Measure effectiveness and drive continuous improvement in user behaviour Governance & Advisory Act as subject matter expert and advisor on security, governance, and compliance matters Administer and support third-party/vendor risk management programme Provide reporting and insights to leadership on security posture ...

looking for a **Senior Vulnerability Management Lead** based out of **Milton Keynes or Glasgow**.We are seeking an experienced Vulnerability Management and Security Hardening Manager to lead our efforts in safeguarding the organisation’s digital assets and infrastructure. In this role, you will be responsible for developing, implementing … overseeing a robust vulnerability management program, ensuring risks are identified, assessed, prioritized, and remediated effectively.You will work closely with Security, IT, and Business stakeholders to strengthen our security posture and meet compliance requirements, while proactively identifying threats that could impact the organisation.We’re **shaping ...

involves spending at least two days per week, or 40% of our time, at one of our office sites About this opportunity The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain … prosper and protecting the Group and our customers from security threats. we're responsible for defining and communicating Lloyds Banking Group's security strategy and providing critical Enterprise Security Services that not only operate the controls keeping the Group safe whilst also enabling the digital transformation agenda ...

bespoke tools used to defend Morgan Stanley Network. The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk and controls. The organization also includes Morgan Stanley's Firmwide Data Office, International Technology offices … capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect ...

team, ensuring customer infrastructure meets the project and customer objectives. Maintain and update infrastructure environments, both for externally and internally. Identify and advise on security threats. Monitor customer environments and implement agreed changes. Person Degree qualified, preferably in Computing Science or Software Engineering. A minimum of 1 years experience … creating environments on AWS, Microsoft Azure are essential. Experience of management of containers and infrastructure as code. Experience of cloud security posture management. Knowledge and experience of relational databases. Familiarity with source control systems. Have good communication skills, to work as part of a team and liaise with ...

problems before users do. FinOps: Embed cost estimation, anomaly detection and resource optimisation into the pipeline as a default rather than a monthly review. Security posture: Apply zero-trust networking, least-privilege access and secrets discipline to a platform handling sensitive data across multiple third-party model providers. … inference or MLOps pipelines in production is a strong plus. Familiarity with model APIs, vector databases, MCP or orchestration frameworks helps. Networking and security: VPC design, service mesh and zero‐trust patterns. Domain & Sector Experience Regulated industries: Experience running platforms under strict compliance and data privacy controls, in iGaming ...

Santander UK is seeking a Senior Vulnerability Management Lead to drive the enterprise-wide vulnerability program. You will partner with Security, IT and business stakeholders to prioritise and remediate risks, while shaping remediation strategies and governance across the organisation. Based in Milton Keynes or Glasgow, this role offers hybrid … working. You will lead a skilled team, monitor remediation trends, and report to senior leadership to strengthen our security posture and compliance. #J-18808-Ljbffr ...

Lloyds Banking Group in Edinburgh is seeking a Lead Infrastructure Engineer to lead an engineering team focused on modernizing infrastructure, security tooling, and automation. The role involves hands-on DevOps work, coding, and delivering secure, high-quality services across endpoint security and browser tooling. You will drive … adoption of Infrastructure as Code, policy as code, and automated testing, while maintaining strong security postures and collaboration with product teams and #J-18808-Ljbffr ...