Cambridge, England, United Kingdom Hybrid / WFH Options
Techwaka
will have ample opportunities to enhance Costello Medical’s security by proposing and delivering security projects of your own. Key responsibilities will include: Incident detection and response using EDR / XDR and SIEM technologies, including Microsoft Defender and Sentinel. Contributing to the development and maintenance of security procedures, including vulnerability scanning, remediation, and crafting playbooks for responding to alerts. … interpersonal skills and the ability to influence senior stakeholders to make important decisions that drive security improvements across the company. Desired requirements for the role are: Experience proposing and / or delivering innovative IT projects independently. Experience in managing highly sensitive and confidential data, including commercially confidential, intellectual property, and special category personal data. Knowledge of data privacy regulations More ❯
London, England, United Kingdom Hybrid / WFH Options
NextEnergy Group
on-premises, and SaaS environments. Key Responsibilities Develop and evolve enterprise security architecture standards covering IT, OT, and hybrid-cloud environments Incorporate security & privacy requirements into solution designs, CI / CD pipelines, and infrastructure as code Conduct threat modeling, risk assessments, and security analyses for new projects and platforms Lead architecture on secure network topologies, including segmentation and zero … trust models Define standards for IAM, encryption, secrets management, and key management aligned with ISO27001/ 27019 and NIS2 Evaluate and select third-party security solutions and conduct vendor due diligence Serve as SME for compliance frameworks such as ISO27001, NIST CSF, GDPR, IEC 62443, and CIS … SCADA architectures Proven stakeholder engagement skills Certifications such as CISSP, CISM, SABSA, TOGAF, or Azure Security (desirable) Cybersecurity specialization certifications (desirable) Experience with ISO27001/ 27019, NIS2, or energy sector cybersecurity standards (desirable) Right to work in the UK What We Offer A dynamic role within a supportive team, with growth opportunities International operations More ❯
Northampton, Northamptonshire, United Kingdom Hybrid / WFH Options
Schools Choice
working closely with the Technology, Digital and Data management team. Ensuring the organisation is focused with adequate levels of patching, firewall configuration reviews and SIEM alerting. Hold our partners / suppliers to account for spend, performance and behaviour, including diversity within their teams. Maintain and input to the risk register in the technology service, documenting details of any or … all risks and their progress to remediation or mitigation. Manage staff performance appropriately by providing constructive feedback and take action where performance falls below the expected standard. Participate / work with external groups and stakeholders for the organisation such as NCSC, EMGWARP, auditors and accreditors as required. Person Specification Technical knowledge and experience Expert knowledge and understanding of security … practice; industry trends and risks Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certified. A good working knowledge of information security including ISO/IEC27001 Information Security Management Standard and Cyber essentials. A deep applied knowledge of agile ways of working Experience of working across multiple channels (some More ❯
Bury St, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Social network you want to login / join with: Cyber Security Consultant, bury st edmunds col-narrow-left Client: Location: bury st edmunds, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Views: 2 Posted: 06.06.2025 Expiry Date: 21.07.2025 col-wide Job Description: Job Title: Cyber Security Consultant Role: We are looking for a … trends and tools, and continuously build your expertise. Collaborate across delivery, project management, and sales teams to deliver outcomes. Mentor junior consultants and contribute to internal improvement initiatives. Skills / Must Have: 2+ years of hands-on Information Security or IT Administration experience. Strong communication skills (written and verbal), with stakeholder management ability. Working knowledge of both offensive and … for your birthday Cycle to Work and IT Purchase Schemes (subject to T&Cs) Competitive – dependent on experience and certifications. Additional Information: Employment Type: Permanent, Full-Time (36.25 hours / week) Location: Hybrid – Bury St Edmunds Office #J-18808-Ljbffr More ❯
Bury St Edmunds, England, United Kingdom Hybrid / WFH Options
Hamilton Barnes 🌳
findings into clear business language for various stakeholders. Produce and present high-quality technical and non-technical reports. Support clients in achieving and maintaining certifications (e.g., Cyber Essentials, ISO27001). Stay informed on cybersecurity … trends and tools, and continuously build your expertise. Collaborate across delivery, project management, and sales teams to deliver outcomes. Mentor junior consultants and contribute to internal improvement initiatives. Skills / Must Have: 2+ years of hands-on Information Security or IT Administration experience. Strong communication skills (written and verbal), with stakeholder management ability. Working knowledge of both offensive and … working model Cycle to Work and IT Purchase Schemes (subject to T&Cs) Salary: Competitive – dependent on experience and certifications. Additional Information: Employment Type: Permanent, Full-Time (36.25 hours / week) Location: Hybrid – Bury St Edmunds Office More ❯
Information Security & Risk Specialist (ISO27001:2022) - Energy Location: Brussels Hybrid: 2 days a week My client is looking for an Information Security Specialist to join the team in Brussels. The successful candidate will have the opportunity to work in a hybrid model, allowing for a blend of remote and in-office work to support a … or equivalent are considered a strong asset. Proven experience in implementing and monitoring Information Security Management Systems (ISMS) is essential. Strong knowledge of information security standards such as ISO27001:2022, ISO 27002. Technical … expertise in security technologies such as cryptography, network security, intrusion detection, access control models, authentication mechanisms, and security policies (GPOs). Experience with security monitoring tools (e.g., SIEM, IDS / IPS). Strong analytical and risk management skills, with the ability to assess and mitigate security risks. Strong experience in security governance, risk assessments, and project coordination. Familiarity with More ❯
North Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Net Talent
and Security Operations—is key to aligning local and global security standards. You'll also drive cyber awareness and training initiatives for commercial teams, support regulatory compliance (e.g., ISO27001, NIST SP 800-53, GDPR), and handle incident response, triage, and escalations per internal policies. You'll contribute to investigations, the annual NIST CSF 2.0 maturity … You're a proactive, analytical security professional with a strong technical background and excellent communication skills. You bring: Proven experience with ISO27001, NIST CSF / SP 800-53, GDPR compliance, and risk management Strong technical expertise in implementing security controls aligned with ISMS Ability to create clear, audience-tailored documentation and reports Effective problem More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Allianz Popular SL
highly desirable. Experience of security transformation and delivery of security projects, particularly within a federated organisation. Desirable Skills Knowledge of Information Security and compliance frameworks, including NIST CSF, ISO27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards. Good awareness of risk methodologies and ability to analyse … and fantastic career development and training. That's on top of enjoying all the benefits you'd expect from the world's number one insurance brand, including: Flexible buy / sell holiday options Hybrid working Annual performance related bonus Contributory pension scheme Development days A discount up to 50% on a range of insurance products including car, home and … risk candidate facing potential redeployment, please include this information in your CV. We reserve the right to close the ad early if we reach enough applications. Closing date 04 / 7 / 2025 Join us - Let's Care for Tomorrow. More ❯
City of London, London, United Kingdom Hybrid / WFH Options
CLS Group
strategy development Lead efforts to assess and mature security practices across the enterprise Stay abreast of industry trends, frameworks, and regulations (e.g., GDPR, ISO27001/ 2, SANS Top 20 Critical Security Controls, NIST CSF, SP 800-53, PFMI, CPMI ISOCO and FFIEC handbook, SABSA) to ensure the organization is proactive in addressing emerging security … their day,’ we run a range of initiatives that support employees’ sense of belonging and physical, emotional and mental well-being. Our extensive benefits for employees typically include: Vacation / annual leave: 25 days in UK / Asia + 3 life days, 23 in US + 3 life days Private medical and dental cover and life insurance Generous … volunteer days ‘Locate for your day’ hybrid working – 2 days a week in office. Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning. Paid parental leave / Coaching and support services Career development / LinkedIn Learning ‘Heads down days’ with no meetings on the last Friday of every month Wellbeing / Mental health support More ❯
strategy development Lead efforts to assess and mature security practices across the enterprise Stay abreast of industry trends, frameworks, and regulations (e.g., GDPR, ISO27001/ 2, SANS Top 20 Critical Security Controls, NIST CSF, SP 800-53, PFMI, CPMI ISOCO and FFIEC handbook, SABSA) to ensure the organization is proactive in addressing emerging security … their day,’ we run a range of initiatives that support employees’ sense of belonging and physical, emotional and mental well-being. Our extensive benefits for employees typically include: Vacation / annual leave: 25 days in UK / Asia + 3 life days, 23 in US + 3 life days Private medical and dental cover and life insurance Generous … volunteer days ‘Locate for your day’ hybrid working – 2 days a week in office. Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning. Paid parental leave / Coaching and support services Career development / LinkedIn Learning ‘Heads down days’ with no meetings on the last Friday of every month Wellbeing / Mental health support More ❯
London, England, United Kingdom Hybrid / WFH Options
Nest pensions
communicating technical concepts to non-technical people. Please note the minimum criteria for this role is: Practical experience of operating certified ISMS using ISO27001/ 2, NIST CSF and other security standards in the design and management of information security controls. Practical experience working with third party suppliers to audit and evidence compliance with … or more, as required) reduce or vary working hours reduce or vary the days worked work compressed hours job share For more information about our recruitment processclick here Directorate / Department Overview The Risk and Compliance vision is to become a trusted partner for the business. To enable this, the directorate teams’ shared objective is to enable the first … determined to ensure that no applicant or employee receives less favourable treatment because of their age, disability, gender identity, marital status, national origin, pregnancy or caring responsibilities, race, religion / belief, sex, sexual orientation or socio economic background. We also recognise the importance of diversity of thought and other forms of neurocognitive variation. Nest is a Disability Confident Leader More ❯
London, England, United Kingdom Hybrid / WFH Options
Crown Agents Bank
the response to security incidents, including investigation, containment, root cause analysis, and reporting. Work with internal teams to continuously improve incident response processes. Support compliance and alignment with ISO27001, Cyber Essentials, SWIFT, NIST and other relevant frameworks. Communicate effectively with various stakeholders including engineers, product managers, operations team, senior management, and auditors about the information … Guest Experience Front Office Supervisor Grosvenor Square London, England, United Kingdom 1 week ago London, England, United Kingdom 2 weeks ago London, England, United Kingdom 1 week ago Associate / Vice President, Relationship Manager - Commodity Finance (Metals & Agri Team) London, England, United Kingdom 5 days ago London, England, United Kingdom 3 weeks ago Business Information Security Officer, Europe London … London, England, United Kingdom 1 week ago London, England, United Kingdom 6 days ago Information Security Manager - Corporation London, England, United Kingdom 6 days ago Cyber Security Assistant Manager / Manager London, England, United Kingdom 2 weeks ago Defence Digital - Cyber Security Lead Advisor London, England, United Kingdom 3 days ago We’re unlocking community knowledge in a new More ❯
Runcorn, England, United Kingdom Hybrid / WFH Options
HCRG Care Group
vulnerability management. Practical experience supporting compliance with regulatory and best practice frameworks, including: Data Security and Protection Toolkit (DSPT) Cyber Essentials Plus (CE+) Cyber Assessment Framework (CAF) or ISO27001 Ability to assess security risks, develop mitigation plans, and communicate recommendations to technical and non-technical audiences. Familiarity with NHS and public sector data protection responsibilities … Data Security Standards, GDPR, DSP roles). Experience participating in security incident response, post-incident reviews, and technical root cause analysis. Knowledge of identity and access management, security logging / monitoring, and asset / information classification. Strong documentation skills – able to produce policies, procedures, risk registers, and audit evidence clearly and accurately. Experience collaborating with Infrastructure, Digital Transformation … auditors, suppliers, and governance bodies to represent the organisation’s security posture. Desirable: Exposure to private cloud environments and related security tooling. Experience in security toolsets such as antivirus / EDR, vulnerability scanners, SIEM, or MDM solutions. Relevant industry qualifications (e.g. CompTIA Security+, SSCP, CISSP Associate, ISO27001 Lead Implementer). Knowledge of backup and More ❯
London, England, United Kingdom Hybrid / WFH Options
CLS-Group
security remediation oversight, and conduct reviews across all CLS environments, services, and assets, ensuring compliance with industry standards (e.g., CIS, NIST, ISO27001, SOC 1 / 2) and internal security policies across all platforms and environments. Lead the security governance mechanism for capturing and managing security baseline adherence to rectify any policy exceptions and dispensations … to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including: Holiday - UK / Asia: 25 holiday days and 3 'life days' (in addition to bank holidays). US: 23 holiday days. 2 paid volunteer days so that you can actively support causes … Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about DE&I. Hybrid working to promote a healthy work / life balance, enabling employees to work collaboratively in the office when needed and work from home when they don't. Active support of flexible working for all employees where More ❯
security remediation oversight, and conduct reviews across all CLS environments, services, and assets, ensuring compliance with industry standards (e.g., CIS, NIST, ISO27001, SOC 1 / 2) and internal security policies across all platforms and environments. Lead the security governance mechanism for capturing and managing security baseline adherence to rectify any policy exceptions and dispensations … to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including: Holiday - UK / Asia: 25 holiday days and 3 'life days' (in addition to bank holidays). US: 23 holiday days. 2 paid volunteer days so that you can actively support causes … Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about DE&I. Hybrid working to promote a healthy work / life balance, enabling employees to work collaboratively in the office when needed and work from home when they don't. Active support of flexible working for all employees where More ❯
PO15, Whiteley, Hampshire, United Kingdom Hybrid / WFH Options
Stratospherec Ltd
Server environments, and networking components. Develop and manage automation solutions to streamline infrastructure deployment, management, and monitoring. Implement and optimize automation tools such as Azure DevOps (or other CI / CD pipelines), Terraform, Node-Red, and Packer. Automate configuration management, infrastructure provisioning, and application deployment. Ensure system reliability, scalability, and performance through proactive monitoring and automation. Deploy and manage … monitoring tools (Zabbix, SolarWinds SentryOne, and other network / database monitoring solutions). Maintain and improve local network environments, including Dell servers and Dell switch configurations. Strong technical expertise in Microsoft Active Directory (AD), Windows Server environments, and authentication solutions. Plan for scalability, redundancy, and high availability to support future growth. Cloud & DevOps Integration (these tools and skills will … compliance in regulated environments. Proven ability to secure high-value data (PCI cardholder data, PII) and implement security best practices. Strong networking knowledge (LAN, WAN, DNS, DHCP, VPN, TCP / IP). Proficiency in firewall and load balancer technologies for secure environments. Hands-on experience with virtualization platforms (VMware, Citrix Xen) and backup solutions (Veeam or similar). Experience More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Spencer Rose
level across security functions. Including Policy exceptions and dispensations. Run lessons learned forums and recommend improvements to security controls. Provide assurance to stakeholders through detailed reporting and metrics. Skills / Experience required: Minimum of 5 years' experience in Information and Cyber Security with demonstrable hands-on testing of security controls You will ideally hold experience in a Cyber Security … capacity within a Financial and / or Banking environment Highly organised with experience of planning and reporting data, information and updates. Ability to collaborate effectively with others to drive forward key security objectives. Good level of technical writing reports and documenting risk assessment findings and mitigation plans clearly and accurately. Attention to detail, Meticulous attention to detail to ensure … management practices. Ability to learn GRC tools and best practices. RSA Archer is preferred (alternatives considered). Professional Certifications: Ideally qualified in MSc Information Security, CICA, CRISC, CISM and / or Data analysis beneficial but not essential if experience validates skills. Knowledge of security frameworks (eg, NIST CSF, ISO27001, SOC1,2). More ❯
level across security functions. Including Policy exceptions and dispensations. Run lessons learned forums and recommend improvements to security controls. Provide assurance to stakeholders through detailed reporting and metrics. Skills / Experience required: Minimum of 5 years' experience in Information and Cyber Security with demonstrable hands-on testing of security controls You will ideally hold experience in a Cyber Security … capacity within a Financial and / or Banking environment Highly organised with experience of planning and reporting data, information and updates. Ability to collaborate effectively with others to drive forward key security objectives. Good level of technical writing reports and documenting risk assessment findings and mitigation plans clearly and accurately. Attention to detail, Meticulous attention to detail to ensure … management practices. Ability to learn GRC tools and best practices. RSA Archer is preferred (alternatives considered). Professional Certifications: Ideally qualified in MSc Information Security, CICA, CRISC, CISM and / or Data analysis beneficial but not essential if experience validates skills. Knowledge of security frameworks (eg, NIST CSF, ISO27001, SOC1,2). More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Social network you want to login / join with: Nothreat is seeking a seasoned and technically proficient Director of Cybersecurity to lead the design, implementation, and continuous evolution of our cybersecurity capabilities. This is a senior leadership role for an individual with deep technical expertise, strategic vision, and hands-on experience in building secure, AI-driven systems. As Director … Nothreat in key client conversations, audits, and industry forums. Requirements 10+ years of experience in cybersecurity, including leadership roles in fast-paced technology environments. 3+ years working with AI / ML systems, securing data pipelines, models, and associated infrastructure. Strong technical background in areas such as application security, cloud security (AWS / Azure), identity and access management, and … SOAR, EDR, vulnerability management, and DevSecOps practices. Deep understanding of modern attack vectors, threat intelligence, and incident response processes. Experience with security frameworks and compliance standards (e.g., NIST, ISO27001, SOC 2, GDPR). Proven ability to align security priorities with business and product strategy. Demonstrated experience delivering large-scale, cross-functional security projects. Excellent leadership More ❯
Nothreat in key client conversations, audits, and industry forums. Requirements 10+ years of experience in cybersecurity, including leadership roles in fast-paced technology environments. 3+ years working with AI / ML systems, securing data pipelines, models, and associated infrastructure. Strong technical background in areas such as application security, cloud security (AWS / Azure), identity and access management, and … SOAR, EDR, vulnerability management, and DevSecOps practices. Deep understanding of modern attack vectors, threat intelligence, and incident response processes. Experience with security frameworks and compliance standards (e.g., NIST, ISO27001, SOC 2, GDPR). Proven ability to align security priorities with business and product strategy. Demonstrated experience delivering large-scale, cross-functional security projects. Excellent leadership More ❯
City of London, London, United Kingdom Hybrid / WFH Options
NOTHREAT
Nothreat in key client conversations, audits, and industry forums. Requirements 10+ years of experience in cybersecurity, including leadership roles in fast-paced technology environments. 3+ years working with AI / ML systems, securing data pipelines, models, and associated infrastructure. Strong technical background in areas such as application security, cloud security (AWS / Azure), identity and access management, and … SOAR, EDR, vulnerability management, and DevSecOps practices. Deep understanding of modern attack vectors, threat intelligence, and incident response processes. Experience with security frameworks and compliance standards (e.g., NIST, ISO27001, SOC 2, GDPR). Proven ability to align security priorities with business and product strategy. Demonstrated experience delivering large-scale, cross-functional security projects. Excellent leadership More ❯
in delivering the IT business plan. Our firm invests in industry-leading technologies to facilitate our innovative business solutions. We adopt integrated working methods such as DevOps and Agile / Scrum methodologies. Key responsibilities include: Manage, mentor, and develop the cyber security team. Use Azure DevOps to set and manage project-related tasks. Oversee service request tickets related to … and procedures, including external audits. Key Technologies: Strong knowledge of M365 security tools (Defender, Azure) Vulnerability Management, Web Filtering, DLP, Cloudflare, Firewalls, VPN, PKI, DNS, Email Gateways, Security Audits, ISO27001, Azure DevOps, Mitre Attack Framework, ITIL, Microsoft OS, Exchange Online To succeed, you should have a passion for IT Security, current experience at an architect level, and experience managing a … small team. You should have a track record of implementing complex security projects, excellent communication skills, and ideally experience with Agile / Scrum and technology vendor partnerships. Qualifications: Degree in IT or relevant experience. The following certifications are advantageous: Microsoft Certified Cybersecurity Architect Expert, MCSE, MCSA, MCITP, Security +, Network +, Checkpoint CCSA / CCSE Additional Benefits: Flexible More ❯
London, England, United Kingdom Hybrid / WFH Options
Sumsub
Social network you want to login / join with: Infrastructure Security Engineer, London col-narrow-left Client: Sumsub Location: London, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Reference: 5b1ee4e1d0ea Job Views: 6 Posted: 18.06.2025 Expiry Date: 02.08.2025 col-wide Job Description: Sumsub is the one verification platform to secure the whole user … based intrusion detection systems (HIDS), endpoint detection and response (EDR), AWS Security Hub, vulnerability scanning tools, and intrusion detection systems (IDS) Proactively research, evaluate, and integrate emerging security tools / technologies to strengthen infrastructure defences, ensuring alignment with industry best practices and evolving threat landscapes Develop, analyze, and fine-tune SIEM alert configurations to maximize detection accuracy, reduce false … positives, and streamline incident response workflows Design, implement, and maintain security automation workflows utilizing Ansible for configuration management, Terraform for infrastructure-as-code, and GitLab CI / CD pipelines to enforce consistent security policies Implement and maintain Kubernetes (K8s) security protocols Execute comprehensive security assessments and audits to identify risks, perform penetration testing, and lead incident response activities including More ❯
London, England, United Kingdom Hybrid / WFH Options
CLS-Group
principles, to reduce risk to an acceptable level. Knowledge of vulnerability management and incident management practices. Experience with GRC tools and best practices. RSA Archer is preferred. Financial and / or Banking industry experience preferred. Professional qualifications / certifications Ideally qualified in MSc Information Security, CICA, CRISC, CISM and / or Data analysis beneficial but not essential … to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including: Holiday - UK / Asia: 25 holiday days and 3 'life days' (in addition to bank holidays). US: 23 holiday days. 2 paid volunteer days so that you can actively support causes … Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about DE&I. Hybrid working to promote a healthy work / life balance, enabling employees to work collaboratively in the office when needed and work from home when they don't. Active support of flexible working for all employees where More ❯
Highgate, England, United Kingdom Hybrid / WFH Options
CLS-Group
principles, to reduce risk to an acceptable level. Knowledge of vulnerability management and incident management practices. Experience with GRC tools and best practices. RSA Archer is preferred. Financial and / or Banking industry experience preferred. Professional qualifications / certifications Ideally qualified in MSc Information Security, CICA, CRISC, CISM and / or Data analysis beneficial but not essential … to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued. All employees have access to our inclusive benefits, including: Holiday - UK / Asia: 25 holiday days and 3 'life days' (in addition to bank holidays). US: 23 holiday days. 2 paid volunteer days so that you can actively support causes … Black Employee Network and Pride Network) in support of our organisational commitment to embrace and always be learning more about DE&I. Hybrid working to promote a healthy work / life balance, enabling employees to work collaboratively in the office when needed and work from home when they don't. Active support of flexible working for all employees where More ❯