1 to 25 of 53 Permanent Security Posture Jobs with Hybrid or WFH Options

We are currently recruiting for a Chief Information Security Officer (CISO) , reporting to the Chief Technology Officer, to be responsible for ensuring the security, privacy, and compliance of Tunstall's operations on a global scale. But there's more to this than just the 'day job'. As … business, to achieve measurable and sustainable improvements. You'll play a vital part in contributing to this transformation, helping to shape information and cyber security at Tunstall globally. This role could work on a hybrid basis from any of our main hubs - Manchester city centre, Malmo, or Madrid. What … you be doing in this role? As our CISO , you will safeguard the company's internal infrastructure, but also influence and contribute to the security and resilience of our operations, assets, and reputation. This role is not just the shaping of strategy but the execution and hands-on delivery more »

Job Description Senior Information Security Analyst Our Client is a leading global company specialising in pharma products. They are looking to recruit a Senior Information Security Analyst with at least 5 to 7 years expertise in Technology Security. The Senior Information Security Analyst is responsible for maintaining … information security policies, architecture, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain security posture. Responsible for assessing information risk and facilitating remediation of identified vulnerabilities & risks across the organization. Accountable for coordinating the execution of security measures to protect our … computer infrastructure, information systems and to ensure the organization maintains an acceptable risk posture. The Senior Information Security Analyst is highly engaged in risk management and mitigation, including evaluating vendor risk, examining vendor contracts for terms of service, understanding third-party risk, and data privacy issues. The analyst serves more »

Job Post: Principal Security Platform Engineer - Infrastructure Location: London, Hybrid (1 day per week) Type: Full-Time Salary: Up to £90,000 Our client, a highly respected and well-established household name, is seeking a talented Principal Security Platform Engineer - Infrastructure to join their dynamic team. This is … an excellent opportunity to make a significant impact on the security posture of a leading organization. Key Responsibilities: Manage and improve the security posture of our client's on-premise estate, including endpoints and mobile devices Ensure compliance with security standards and drive remediation processes … Optimize security controls and configurations within infrastructure technologies Contribute to the development and implementation of security policies and procedures Define security standards and guardrails, supporting their implementation and ongoing support Essential Qualifications: Minimum 5 years of relevant experience in infrastructure security related to endpoints and mobile more »

Security Operations Engineer, AWS Environment (SecOps), Idox Cloud Home based, with occasional travel. About the role This is an opportunity for a talented and experienced Security Operations Engineer with a broad understanding of security fundamentals in a cloud solution, AWS environment. We would like to hire a … SecOps professional to have a strong focus on ensuring the security posture of our AWS environment. The role involves designing, implementing, and maintaining security measures in collaboration with the corporate security team to protect our infrastructure, applications, and data hosted on AWS. The ideal candidate will … projects – all applying appropriate best practice, quality assurance and governance, as appropriate for each project. The SecOps Engineer will take a proactive approach to security matters and risk management, leading investigations, root cause analysis and vulnerabilities under the guidance of the cloud architecture team. There may be an opportunity more »

Job Post: Principal Security Platform Engineer - Cloud Location: London, Hybrid (1 day per week) Type: Full-Time Salary: Up to £90,000 Our client, a highly respected and well-established household name, is seeking a talented Principal Security Platform Engineer - Cloud to join their dynamic team. This is … an excellent opportunity to make a significant impact on the security posture of a leading organization. Key Responsibilities: Manage and improve the security posture of our client's cloud environments hosted by strategic providers Ensure compliance with security standards and drive remediation processes Optimize security controls and configurations within cloud technologies Contribute to the development and implementation of security policies and procedures Define security standards and guardrails, supporting their implementation and ongoing support Essential Qualifications: Minimum 5 years of relevant experience in security engineering Extensive hands-on experience implementing and configuring more »

go ahead and apply. We'd love to hear from you! About the role Hargreaves Lansdown (HL) are now recruiting for a Senior Cloud Security Analyst to join the team. The Senior Cloud Security Analyst is a specialist role with the primary focus on Cloud Security Governance … Risk & Compliance. You will be supporting the Information Security function to ensure HL remains effective in protecting critical information assets within risk appetite. What you'll be doing Leading the technical aspects of cloud security risk and controls by overseeing and conducting, as necessary, Cloud Compliance assessments for … AWS and Azure risk assessments. Assisting the Senior Information Security Team in ensuring HL's Information Security Management System remains effective in protecting HL critical information assets within risk appetite. Conducting analysis of cloud-based assets pertaining to information security incidents, audits, and testing while adhering to more »

Senior Cyber Security Analyst Permanent - £50,000 - £70,000 Location: Hybrid – Brighton Your new company: A leading Financial Services organisation in Brighton are currently looking for a Senior Cyber Security Analyst to come in and support the existing Cyber team with the day to day running of the … Cyber Security infrastructure for the organisation. The role responsibilities: You will be supporting the Head of IT and Cyber Security with the day-to-day operational management of the cyber security function. You will work with the Senior Cyber Security Manager to define and evolve the … cyber strategy across the organisation. Lead and/or mentor a team of cyber security professionals, providing guidance, support, and mentorship to ensure optimal performance and productivity. Develop, Implement, and maintain information security strategies and objectives to enhance the overall security posture of the business. Monitor more »

Description Leidos has an opportunity for a Security Engineer at Lackland AFB, in San Antonio, TX supporting the Department of the Air Force CLOUDworks . For this position, candidates must already possess a TS/SCI security clearance in order to be considered. Primary Responsibilities The Security … Intelligence Community (IC) customers migrating to Commercial Cloud Services (C2S)/Commercial Cloud Enterprise (C2E). Play a key role in e stablishing system security designs and integrating all cloud solutions and strategies into the Risk Management Framework and overall business practices supporting Infrastructure as a Service (IaaS), Platform … customers at all classification levels. Clearly communicate with Air and Space Force C2S/C2E members and teams, delegated authorizing officials and other government security representatives. Adherence to all aspects of the Information Assurance (IA) program, Preparation of Assessment and Authorization (A&A) documents, procedures, and policies to ensure more »

distinct IT units within European Technology, each has its own individual set of technology platforms. Reporting to, and working with the Senior Cloud Security Manager, within the Central Technology Services (CTS) function, this role will give you the opportunity to deliver the cloud security strategy and enhance the … cloud security of our European Organisation. We are at an exciting and important stage in our evolution. There is a need to bring market leading speed, agility, cost efficiency and risk mitigation to enable the delivery of strategies across the European businesses. To meet this challenge, a new strategy … created, which you'll be part of. What you will help us achieve You will be a technical lead for the delivery of Cloud Security services to the European organisation. For you this means being part of our Cloud Product team. Our mission is to create an agile, secure more »

OT Cyber Security Consultant Remote working Main Activities deploy, and oversee Cyber Security Management Systems (CSMS) aligned with the ISA 62443-2-1 standard customised for client-specific industrial automation and control system requirements. clients through compliance with regulatory standards such as the NIS Regulations, ensuring all activities … adhere to relevant laws, regulations, and industry guidelines. comprehensive security assessments, including health checks and gap analysis against standards like the Cyber Assessment Framework (CAF) and NIST CSF 2.0, to gauge and enhance clients' security posture. and implement OT Security Policies, Procedures, Guidelines, and Work Instructions as … ensuring robust governance and operational security. and participate in risk assessments in line with ISA-62443-3-2 standards, focusing on identifying and mitigating security risks in system design. or lead in the creation and refinement of OT Security Charters and OT Security Target Operating Models, supporting more »

Senior Application Security Engineer We are looking for an information security professional to lead my clients application security program. As a Senior Application Security Engineer, you’ll partner with product teams to help improve the security posture and design of both our enterprise and … consumer-facing products. You'll be part of a team developing a modern AppSec program with a highly automated approach to security coupled with a collaborative approach to working with Engineering partners. You’ll be operating in a fast paced, agile environment, with a goal of making security … will have a huge impact on the product roadmap, and in building a trusting relationship with the engineering community. What you'll do Provide security guidance to engineering teams on new products and technologies Taking ownership and driving the application security and privacy initiatives Perform threat modeling and more »

solutions and applications and will be pivotal in crafting, testing, and implementing advanced WAF solutions. This role involves a strong focus on developing robust security measures against web-based attacks, contributing significantly to the security posture of organization. Experience : 8+ years Key Responsibilities: Develop and refine complex … custom WAF rules and features, ensuring mitigation of Minimum Viable Product (MVP) and security posture gaps. Coding expertise to create effective testing mechanisms for baseline and custom WAF rules, integrating these tests seamlessly into automation pipelines. Offer subject matter expert (SME) support in various security testing areas … WAF-focused advice on web and API attack methodologies, evasions, and mitigation techniques, leveraging your ethical hacking background. Contribute to DevSecOps/DevOps with security testing expertise to enhance the automation aspects of the project Key Accountabilities: Utilize ethical hacking skills to safeguard the organization from web-based attacks more »

Job Post: Principal Security Architect Location: London, Hybrid (1 day per week) Type: Full-Time Salary: Up to £110,000 Our client, a highly respected and well-established household name, is seeking an experienced Principal Security Architect to join their dynamic team. This is an excellent opportunity to … make a significant impact on the security posture of a leading organization by identifying capabilities needed for InfoSec success and driving secure-by-design principles into business and technology change activities. Key Responsibilities: Clearly articulate needed capabilities, identify gaps, and assess improvement opportunities Map required InfoSec capabilities using … personal, organizational, and industry knowledge Communicate with stakeholders and sponsors to understand ambitions, issues, limitations, and constraints related to Security Architecture Create and maintain architecture artifacts and collateral Support InfoSec leadership in developing and implementing the InfoSec strategy Actively participate in Enterprise Architecture & Design community and governance processes Ensure more »

wellness journeys for all those across the UK! They now need an experienced Lead InfoSec Engineer , to create and manage the company-wide information security programme to ensure that information assets are properly protected. You will be tasked with the design and execution of policies, procedures and technology, to … s information assets are properly protected against cyber threats. Reporting to the Head of Engineering, you will: Develop and implement the company's information security strategy, policies, and procedures. Design and execute security controls to protect the confidentiality, integrity, and availability of the company's systems and data. … Lead security assessments and audits to identify vulnerabilities and develop remediation plans. Monitor and respond to security incidents and breaches, ensuring timely resolution and escalation as needed. Conduct regular security awareness training for employees to promote a culture of security awareness. Collaborate with cross-functional teams more »

Cyber Security Consultant/Architect - £600/day Inside IR35 – 9-month Contract – Leeds (Home Based) – SCC FLEX CONTRACT We are on the lookout for a seasoned Cyber Security Consultant/Architect to redefine security requirements, implement new processes and policies, and drive Cyber Security improvements. … In this role, you will be at the forefront of an infrastructure migration, ensuring seamless integration while enhancing our cyber security framework. As the Cyber Security Consultant/Architect, your responsibilities will include: Security Requirements: Assess current security measures and develop requirements tailored to the parent … company’s infrastructure. New Processes and Policies: Design and enforce security processes and policies to safeguard our assets. on Cyber Security Improvements: Guide best practices and innovative solutions to bolster our security posture. & Collaboration: Work closely with the CISO, IT Director, and Architecture team to steer the more »

creating and implementing secure solutions to ensure the safety of our platforms? Do you enjoy responding to real-time threats? About our Team The Security Assurance team is dedicated to safeguarding Elsevier's customer-facing products, supporting infrastructure, and enterprise technology stack from security threats. We achieve this … by proactively integrating security best practices throughout the entire engineering and development lifecycle. Its functions encompass a range of activities such as conducting design and implementation assessments, performing application security reviews, penetration testing, researching security issues, developing security tools and automation, and engaging in offensive security tactics. About the Role The core responsibility entails safeguarding the Elsevier brand through proactive security application testing, validating security controls, and simulating tactics employed by malicious actors seeking to compromise or breach security measures deployed across our entire technology infrastructure Responsibilities Performing comprehensive security testing more »

that enable our growth. That’s why our IT team works closely with stakeholders to develop and implement technology solutions. As the Senior Information Security Manager here you will be responsible for maintaining and executing WHSmith’s cyber security strategy, ensuring compliance with regulations, managing incident response efforts … and implementing effective security controls to protect the organisation's digital assets. You will lead cross-functional teams and our third-party providers and foster a culture of security awareness to mitigate cyber risks and safeguard critical information. What you will be doing Overseeing day-to-day security operations, including monitoring, incident response, vulnerability management, and threat intelligence, to maintain a strong security posture and promptly address any security incidents or vulnerabilities Establishing and maintaining cyber security policies, standards, and procedures, ensuring compliance with industry regulations and best practices, and creating a framework more »

Your new role You will be overseeing the development and enforcement of cyber security protocols. You will have the opportunity to lead a Cyber Security team in safeguarding systems by managing threat protection infrastructure and ensuring compliance. Analyse and report on cyber threats, advising on risk mitigation and … legal adherence to enhance security measures. Your responsibilities will include (but not be limited to): Perform comprehensive security control reviews and collaborate with external experts. Analyse IT security posture, manage OS patches, and conduct vulnerability scans; advise on risk mitigation. Investigate security breaches, preserve evidence … and maintain a Cybersecurity Incident Response Plan. Develop IT security training for users and promote security awareness. Support IT leadership in technical planning and prioritise system developments. Manage daily IT security operations, liaise with stakeholders, and ensure technology alignment. Oversee server and software maintenance, including upgrades and more »

Your new role You will be overseeing the development and enforcement of cyber security protocols. You will have the opportunity to lead a Cyber Security team in safeguarding systems by managing threat protection infrastructure and ensuring compliance. Analyse and report on cyber threats, advising on risk mitigation and … legal adherence to enhance security measures. Your responsibilities will include (but not be limited to): Perform comprehensive security control reviews and collaborate with external experts. Analyse IT security posture, manage OS patches, and conduct vulnerability scans; advise on risk mitigation. Investigate security breaches, preserve evidence … and maintain a Cybersecurity Incident Response Plan. Develop IT security training for users and promote security awareness. Support IT leadership in technical planning and prioritise system developments. Manage daily IT security operations, liaise with stakeholders, and ensure technology alignment. Oversee server and software maintenance, including upgrades and more »

Role: Senior Security Operations Engineer Location: Central London - Hybrid (2-3 days in office per week) Salary: c.£150,000 Base, £200k+ Total Comp Our client is a pioneering quantitative investment manager, who are building an elite global security team. We're looking for an exceptional Senior Security Operations Engineer to play a vital role in shaping their future security posture and operations. In this pivotal position, you'll have the opportunity to design and implement cutting-edge security capabilities across a complex technology ecosystem. With teams distributed worldwide, you'll collaborate with experts … and ultra-low latency trading. Technologies span AWS, Azure, Linux, Windows, Docker, Kubernetes and more. What You'll Do Architect and automate sophisticated, scalable security systems, processes and controls Oversee and evolve comprehensive security monitoring, threat detection and intrusion prevention/response Proactively assess risks and threats to more »

Help strengthen our team as our Level 2 SOC/Security Analyst - Compliance, Assurance & Continual Improvement. Home based role. A great opportunity to join our operational security team to support our initial and ongoing assessment of Operational Security controls against Cyber Security best practice, Organizational Policies … and recognized Security Frameworks, working with relevant stakeholders to identify areas for improvement, and support development, enhancement and implementation of robust security controls. In addition, this role will identify areas of improvement within the Operational Security function, proactively identifying opportunities to enhance and optimize internal processes, ensuring … that they are both efficient and effective. This role is crucial in ensuring that even the most sophisticated cyber security controls are robustly implemented and enhanced. What You’ll Be Doing: Verification and Compliance: Verify that systems and processes meet specified security requirements. Assess the correctness of cyber more »

tax planning, offering home finance and annuities propositions, and providing collective fund solutions to third party customers. Job Summary We are seeking a Lead Security Cloud Engineer with strong DevSecOps skills to join our team. The successful candidate will be a part of the product team responsible for ensuring … will be involved in every stage of product lifecycle of the platform from conception, design, implementation, testing and through to operational support - applying a security focus at all points. Moreover, you will be looking at security across all products in our cloud estate. With automation at the heart … everything we are doing, you should have a strong hands-on understanding of CI/CD tools, IaC, and the best ways to integrate Security into the product lifecycle. We are looking for Azure experience, though strong experience in any cloud is welcome. CLUK are looking to move to more »

Information Security Risk Analyst Location: Hybrid - London Package: Negotiable + Benefits The Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and effectively communicate these findings to the business stakeholders. This role requires a thorough understanding of information security principles and practices, as well as the ability to evaluate complex systems and processes. The Information Security Risk Analyst III plays a crucial role in safeguarding our organisation … s information assets and maintaining a strong security posture. The day to day: research and analysis to handle inbound cybersecurity inquiries from company’s third parties. research and analysis related to vetting new or potentially new third parties. recommendations for communicating identified security risks of new or potentially more »

Cloud Security Architect - Remote - £140K We have partnered up with one of the leading challenger banks who are looking for a Cloud Security Architect to join their expanding Security function. They are offering remote working in the UK You'll have the opportunity to monitor and assess … the security posture of their cloud infrastructure, including AWS, Azure, or other relevant platforms, as well as collaborate with cross-functional teams to develop and implement cloud security best practices and standards acting as a second line assurance function. Currently working as a Cloud Security Architect … or similar Great experience in cloud security, either AWS, Azure or GCP Proficiency in cloud platforms such as AWS, Azure, or GCP. Strong understanding of security frameworks, compliance standards, and regulations (e.g., NIST, ISO 27001, PCI DSS). Experience with security assessment tools and techniques. Cloud Security more »

Home based role Help strengthen our team as our Level 2 SOC/Security Analyst - Compliance, Assurance & Continual Improvement . Home based role. A great opportunity to join our operational security team to support our initial and ongoing assessment of Operational Security controls against Cyber Security best practice, Organizational Policies, and recognized Security Frameworks, working with relevant stakeholders to identify areas for improvement, and support development, enhancement and implementation of robust security controls. In addition, this role will identify areas of improvement within the Operational Security function, proactively identifying opportunities to enhance … and optimize internal processes, ensuring that they are both efficient and effective. This role is crucial in ensuring that even the most sophisticated cyber security controls are robustly implemented and enhanced. What You'll Be Doing: Verification and Compliance: '€¢Verify that systems and processes meet specified security requirements. more »