Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Reed Technology
architectures Perform vulnerability assessments , penetration testing , and remediation strategy delivery Lead and coordinate incident response , forensic analysis, and post-incident reporting Use and optimise security tooling (e.g. firewalls, IDS / IPS , endpoint protection) Collaborate with developers and IT teams to embed secure coding and operational practices Maintain clear documentation of risk, incidents, and security configurations Contribute to evolving internal … controls and support continuous improvement in InfoSec Required Skills & Experience: Strong knowledge and hands-on experience with cloud security (AWS and / or Azure) Proven ability to perform detailed risk assessments and identify meaningful control improvements … Experience using and managing firewalls, intrusion detection systems, and SIEM solutions Familiarity with secure networking protocols (VPNs, TCP / IP, etc.) and malware analysis Understanding of industry frameworks: ISO27001, Cyber Essentials, NIST800-53 Experience working on security operations, threat management, and incident resolution Excellent communication skills, with ability to translate technical risk to non-technical stakeholders Relevant certifications are More ❯
South West London, London, United Kingdom Hybrid / WFH Options
Anson Mccade
industries and client environments What You'll Bring Strong experience in cyber strategy, risk management, governance, architecture, and regulatory compliance Familiarity with frameworks and standards such as NIST CSF, ISO27001, NCSC CAF, GDPR, and NIS2 Industry-recognised certifications (e.g. CISSP, CISM, CISA, M.Inst.ISP, or equivalent) Practical experience in GRC, threat and vulnerability management, or operational resilience Proven delivery across complex … programmes using Agile and / or Waterfall methodologies Team leadership experience across on-site and distributed teams Skilled in client relationship management and stakeholder engagement at all levels The package: £65,000 - £80,000 Company Bonus Flex Fund Pension Medical care To hear more about the Cyber Security Transformation Manager, get in touch with Connor Smyth at Anson McCade … on 020 7780 6706 Reference: AMC / CSM / CM Postcode: SW1P 3LA #cosm More ❯
Senior Consultant / Manager – Cyber Strategy & Transformation Location: London (hybrid) Salary: Up to £80,000 + Bonus Are you passionate about cyber security and transformation? Do you want to help organisations navigate the complex, fast-evolving world of cyber risk while enabling digital growth and resilience? We’re looking for a dynamic and driven professional to join a high … Design and deliver cyber transformation programmes that align with business goals. Define governance frameworks, target operating models, and maturity roadmaps. Support clients in achieving regulatory compliance (e.g., NIS2, GDPR, ISO27001). Lead or support project delivery across multiple sectors and stakeholder levels. What We’re Looking For You are a cyber professional with strong consulting experience and the ability to … strategic, operational, and technical domains. You should have: Cyber Expertise: 4+ years experience in cyber strategy, risk, maturity assessments, and operating models. Knowledge of frameworks such as NIST CSF, ISO27001, NCSC CAF, CRI 2.0. Exposure to regulatory environments including NIS2 and GDPR. Relevant certifications (e.g., CISSP, CISM, CISA, MSc in Cyber Security). Consulting Skills: Strong client-facing communication and More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Anson McCade
Senior Consultant / Manager – Cyber Strategy & Transformation Location: London (hybrid) Salary: Up to £80,000 + Bonus Are you passionate about cyber security and transformation? Do you want to help organisations navigate the complex, fast-evolving world of cyber risk while enabling digital growth and resilience? We’re looking for a dynamic and driven professional to join a high … Design and deliver cyber transformation programmes that align with business goals. Define governance frameworks, target operating models, and maturity roadmaps. Support clients in achieving regulatory compliance (e.g., NIS2, GDPR, ISO27001). Lead or support project delivery across multiple sectors and stakeholder levels. What We’re Looking For You are a cyber professional with strong consulting experience and the ability to … strategic, operational, and technical domains. You should have: Cyber Expertise: 4+ years experience in cyber strategy, risk, maturity assessments, and operating models. Knowledge of frameworks such as NIST CSF, ISO27001, NCSC CAF, CRI 2.0. Exposure to regulatory environments including NIS2 and GDPR. Relevant certifications (e.g., CISSP, CISM, CISA, MSc in Cyber Security). Consulting Skills: Strong client-facing communication and More ❯
East London, London, United Kingdom Hybrid / WFH Options
A&O Shearman
services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearmans strategy to lead where global complexity creates opportunity. In addition, you … implemented in our environment and align with NIST and CIS benchmarks. Validate effectiveness of implemented IAM security controls through technical analysis. Perform residual IAM risk assessments and document acceptance / rejection rationale. Scope and manage IAM security testing including penetration tests and Red Teaming as well as remediation activities. Work closely with wider Information Security team to ensure compliance … security, with a significant focuson identity and access management. Current Azure certifications (e.g., Azure Security Engineer Associate). Strong knowledge of security and compliance standards and frameworks, such as ISO27001, MS CAF, and WAF. Excellent communication, leadership, and interpersonal skills, with the ability to collaborate across teams and with external parties such as MSSP. Ability to work effectively in a More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Reed Technology
practice. Reporting to the Head of Security & Governance , the successful candidate will play a central role in delivering risk reduction across the business. You'll be responsible for maintaining ISO27001 compliance, overseeing risk assessment and mitigation, and supporting incident management across multi-entity operations. Key Accountabilities: Lead and manage a team of three security professionals , supporting their development and day … to-day delivery. Ensure ongoing ISO27001 accreditation and alignment with broader assurance frameworks (e.g. NIST CSF, Cyber Essentials). Shape and implement the company's information security strategy , including policy, tooling, and training. Conduct risk assessments, oversee remediation plans, and guide secure-by-design approaches across projects. Provide technical leadership in areas including threat intelligence, compliance reporting, and incident response … including service providers and the organisation's parent company. Required Skills & Qualifications: Demonstrable experience in information security leadership , including line management or team leadership . In-depth knowledge of ISO27001, GDPR, FCA SYSC, PCI DSS and other regulatory / compliance frameworks. Hands-on experience with security technologies: SIEM, IAM, vulnerability assessment, endpoint protection, cloud services (AWS, SaaS, IaaS) . More ❯
able to work in our Dublin or London office 3 days a week (Tuesday, Wednesday and Thursday) Strong ability to prospect and build pipeline without assistance from BDR and / or inbound support Exceptional communication skills (written, verbal, visual), both for internal audiences and customer-facing messaging Be highly motivated with a sense of urgency and willingness to adjust … restore trust in internet businesses by enabling companies to improve and prove their security.From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
Dublin, County Dublin, Ireland Hybrid / WFH Options
CODEVERSE LIMITED
experience in quality assurance of digital software and services (manual, functional, regression, user acceptance testing, etc.). Experience in testing at scale. Desirable: Familiarity with security practices and ISO27001 compliance. Experience working in public sector projects. What’s on Offer Competitive day rate. Hybrid working model. Opportunity to work on a high-profile public sector More ❯
trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Anson McCade
programmes, from maturity assessments through to implementation Developing governance frameworks, roadmaps, and operating models that drive sustainable improvement Advising on key regulatory and standards-based compliance across NIS2, CAF, ISO27001, GDPR, and more Supporting the development of junior colleagues while building your own leadership brand What we’re looking for: Proven experience in cyber strategy, cyber risk, transformation, or security … governance Strong understanding of industry frameworks such as NIST CSF, ISO27001, CAF or CRI2.0 Ability to communicate clearly with stakeholders at all levels — from technical teams through to board-level A blend of consulting and hands-on delivery experience (internal or external) Ideally, a relevant certification such as CISSP, CISM, CISA, or MSc in Cyber Security Strong analytical and problem More ❯
programmes, from maturity assessments through to implementation Developing governance frameworks, roadmaps, and operating models that drive sustainable improvement Advising on key regulatory and standards-based compliance across NIS2, CAF, ISO27001, GDPR, and more Supporting the development of junior colleagues while building your own leadership brand What we’re looking for: Proven experience in cyber strategy, cyber risk, transformation, or security … governance Strong understanding of industry frameworks such as NIST CSF, ISO27001, CAF or CRI2.0 Ability to communicate clearly with stakeholders at all levels — from technical teams through to board-level A blend of consulting and hands-on delivery experience (internal or external) Ideally, a relevant certification such as CISSP, CISM, CISA, or MSc in Cyber Security Strong analytical and problem More ❯
security across multiple projects and programmes Design and implement Sentinel playbooks to automate detection and response Lead on PSN audit readiness and ensure compliance with key frameworks (Cyber Essentials, ISO27001, NIST, GDPR) Conduct cyber risk assessments, maintain the risk register, and drive remediation activity Provide regular reports and updates to senior stakeholders on cyber posture, risks, and progress Support and … cyber security leadership within a Local Government environment (this is essential) Direct experience supporting or leading PSN audits and wider compliance activities Strong working knowledge of core security frameworks: ISO27001, Cyber Essentials, NIST, GDPR Excellent stakeholder management and reporting skills, with the ability to operate independently in a complex environment CISSP certification is required Please only apply if you have … and client requirements Job Information Job Reference: JO-55 Salary: £650 - £650.00 per day + Inside IR35 Salary per: day Job Duration: 3 month rolling Job Start Date: 28 / 07 / 2025 Job Industries: Cyber Security Jobs Job Locations: Greater London Job Types: Contract Apply for this Job Name Please enter your full name. Email Enter a More ❯
significant impact to our business Set direction for critical technical surface areas, enabling us to stay ahead of continued rapid growth Design, develop, and own new product functionality and / or infrastructure leveraging modern frameworks and tooling (TypeScript, React, Node.js) Work with talented and kind engineers to make a significant impact on our customer base, enabling them to improve … restore trust in internet businesses by enabling companies to improve and prove their security.From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Director of Sales Development (NA EAST / EMEA) to drive pipeline generation and new business acquisition across Velocity (20-200 employees) - Upmarket East (2,000+) segments in New York & all of EMEA. This leader will be … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Director of Sales Development (NA EAST / EMEA) to drive pipeline generation and new business acquisition across Velocity (20-200 employees) - Upmarket East (2,000+) segments in New York & all of EMEA. This leader will be … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
Leeds, West Yorkshire, England, United Kingdom Hybrid / WFH Options
HW FINANCE LIMITED
Proven experience in an IT Audit or IT Risk Advisory role within internal audit, consultancy, or regulated environments. Solid understanding of IT risks, controls, and frameworks (e.g. COBIT, ISO27001). Experience working within SOX-compliant environments would be advantageous but not essential Strong communication and stakeholder management capabilities Hybrid working pattern - ideally 2 days in More ❯
trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous-not just a point-in-time More ❯
Crewe, Cheshire, England, United Kingdom Hybrid / WFH Options
DCS Recruitment
extensive cyber security expertise Deep knowledge of application security and working within dev teams Hands-on experience with EDR / NDR technologies Familiar with standards like Cyber Essentials, ISO27001 Working knowledge of Linux, Ubuntu, Apache, MySQL, PHP, Git, PostgreSQL Cloud security skills, ideally in AWS Understanding of open-source risk management and enterprise tooling Exposure to ITIL service management More ❯
IT Audit & Risk Analyst (Hybrid -Cheltenham / London) About Finova Finova is the UK's largest mortgage and savings technology provider, powering one in every five mortgages across the country. Our agile, cloud-native solutions help over 60 banks, building societies, specialist lenders and equity release providers - plus a network of 2,400+ brokers - stay ahead of the market. … system Hyperproof Completion of client and annual Due diligence framework in Risk Ledger, confirming accuracy and documentation Work in line with the overall control framework, which is aligned to ISO27001, ISO27017, ISO9001, FSQS audit and NIST Manage the admin around the Policy framework, ensuring accuracy and timeliness of updates Manage the timely collection of documentation around ICO registrations and insurances … experience, your attitude is everything, but we'd particularly love to see your: Bachelor's degree in computer science, Information Security, Business Management, or a related field. Some tech / IT risk experience, or theoretical knowledge Highly analytical, self-learning and amazing attention to detail Some knowledge of Cloud Azure / AWS is advantageous Generic understanding of regulatory More ❯
Cheltenham, Gloucestershire, United Kingdom Hybrid / WFH Options
finova
IT Audit & Risk Analyst (Hybrid -Cheltenham / London) About Finova Finova is the UK's largest mortgage and savings technology provider, powering one in every five mortgages across the country. Our agile, cloud-native solutions help over 60 banks, building societies, specialist lenders and equity release providers - plus a network of 2,400+ brokers - stay ahead of the market. … system Hyperproof Completion of client and annual Due diligence framework in Risk Ledger, confirming accuracy and documentation Work in line with the overall control framework, which is aligned to ISO27001, ISO27017, ISO9001, FSQS audit and NIST Manage the admin around the Policy framework, ensuring accuracy and timeliness of updates Manage the timely collection of documentation around ICO registrations and insurances … experience, your attitude is everything, but we'd particularly love to see your: Bachelor's degree in computer science, Information Security, Business Management, or a related field. Some tech / IT risk experience, or theoretical knowledge Highly analytical, self-learning and amazing attention to detail Some knowledge of Cloud Azure / AWS is advantageous Generic understanding of regulatory More ❯
cannot be considered Defence experience needed - at least 2 years recent defence experience working with MOD or Civil Service Strong knowledge of UK government security standards (e.g. NCSC guidance, ISO27001, JSP 440) Proven experience designing and implementing secure systems in enterprise or government settings Familiarity with cloud platforms (AWS / Azure), identity management, secure networking, encryption, and SIEM Strong More ❯
executives and stakeholders. Collaborate with client teams for effective delivery of security architecture as a service. You will need to have experience in: Delivering and maintaining enterprise security solutions / architecture in areas such as Identity and Access Management, Cloud Security (Azure, AWS, GCP), Network Security, DevSecOps, Security Monitoring & Remediation, and Zero Trust … Security Architecture. Knowledge of Secure Software Development Life Cycle and frameworks like TOGAF or SABSA. Understanding of Information Security risk management tools and techniques. Familiarity with cybersecurity frameworks like ISO27001, PCI-DSS, CIS Benchmarks, and Cloud Platform Well Architected Frameworks. Designing and implementing enterprise security controls following industry best practices. Security governance and compliance across public, private, and government sectors. More ❯
variety of client teams for the effective delivery of security architecture as a service. You will need to have experience in: Delivering and maintaining of technical enterprise security solutions / architecture for (but not limited to) the following areas: Identity and Access Management, Cloud Security - Azure, AWS or GCP, Network Security, DevSecOps, Security Monitoring & Remediation, Defense in Depth Security … frameworks such as TOGAF or SABSA Strong understanding and knowledge of Information Security risk management tools and techniques Demonstrable knowledge of cyber security frameworks, including but not limited to: ISO27001, PCI-DSS, CIS Benchmarks, Cloud Platform Well Architected Frameworks. Demonstrable experience of designing and implementing enterprise security technology controls and platforms, following industry best practices. Experience of security governance and … of society and each person feels respected and able to give their best. View benefits To apply for this role, please complete the form below and upload your resume / CV. You'll shortly receive a confirmation email that we've received your application and one of Bridewell's Talent Acquisition team will be in touch to confirm next More ❯