Comtecs Ltd

IT Cyber Security Specialist / Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team, supporting and continually improving cybersecurity across a global IT environment. Reporting to the Infrastructure Engineering Manager, you'll take ownership of cybersecurity controls and security architecture while working closely with Infrastructure Operations and other technology teams to identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment, identifying and mitigating security risks, supporting major cyber incidents and contributing to strategic security and infrastructure projects. You'll also help develop security awareness, business continuity capabilities and ongoing improvements to the firm's security controls. Key Responsibilities: Continuously review and improve the firm's cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention technologies. Identify security risks and exposures and develop measures to prevent future incidents. Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective. Participate in and lead infrastructure lifecycle, security and technology projects. Provide 3rd Line / Major Incident support as a cybersecurity subject matter expert. Work with third-party suppliers and advise internal technical teams on security measures to resolve security and infrastructure issues. We're looking for experienced Cyber Security engineer with strong technical infrastructure knowledge and proven experience across incident response, threat monitoring and vulnerability management. You will possess: Extensive experience in a similar role blending Cyber Security with core Wintel Infrastructure and Azure cloud engineering. Strong knowledge of modern security architecture, threat prevention techniques and incident response. Strong Windows Server 2016/2019/2022 knowledge including Active Directory, DNS, DHCP, Intune, Group Policy, PKI, Entra and Azure SSO. Demonstrable experience across Cyber Security, Incident Response, Threat Monitoring and Vulnerability Management using tools such as MS Sentinel, MS Defender etc for threat hunting, vulnerability monitoring and security posture improvement. CISSP, CEH, CCNA Security, SC-100, SC200 or equivalent security certification. Experience designing, integrating and managing complex infrastructure and cloud solutions from a cyber security standpoint and advising technical infrastructure teams on security focussed designs and operations Strong communication skills with the ability to explain complex security issues to technical and non-technical audiences. Experience working with third-party providers across on-premise and cloud services. Strong planning skills and knowledge of ITIL processes and best practice. This is an excellent opportunity to join a highly regarded global organisation where you'll play a key role in strengthening cybersecurity across a complex international IT environment, combining hands-on security engineering, incident response and strategic infrastructure projects.

Technical Product Owner - Document Management - iManage, HighQ, SharePoint, SQL, Business Analysis, Application Integration, REST APIs. Permanent. London Hybrid. £80k-£90k + Bonus + Benefits Global Law Firm seeks an experienced Technical Product Owner to take ownership of a portfolio of business-critical Document and Knowledge Management applications including iManage, HighQ and Microsoft SharePoint. You'll combine product ownership, business analysis and application management with sufficient technical expertise to understand integrations, data flows and application architecture across a complex enterprise environment. This is a technically focused Product Owner role where you'll be responsible for application strategy, roadmap development, backlog management, upgrades, enhancements and operational performance. You'll work closely with lawyers, business stakeholders, internal technology teams and third-party vendors to gather and mature requirements and translate them into practical technical solutions. A Business Analyst / Product Ownership background would be particularly relevant, while good hands-on SQL knowledge is essential for investigating data, troubleshooting applications and understanding integrations. Key Responsibilities: Act as Technical Product Owner for a portfolio of Document and Knowledge Management applications including iManage, HighQ and SharePoint. Own and develop application roadmaps in line with business requirements and Technology strategy. Maintain and prioritise product backlogs covering enhancements, upgrades, defects, maintenance and security updates. Work with stakeholders to gather, analyse, define and mature business and technical requirements. Translate requirements into user stories, specifications and practical application enhancements. Manage application configuration, deployment, upgrades, patching and ongoing operational health. Use SQL to investigate data, troubleshoot issues, validate integrations and support application changes. Work with technical teams and vendors to design and support application integrations using APIs and related integration technologies. Identify opportunities to improve document, knowledge and information-management processes through technology and automation. Troubleshoot complex application and integration issues, coordinating internal teams and third-party suppliers where required. Manage vendor relationships, service levels, licensing, security controls and application documentation. We're looking for experienced Technical Product Owners, Business Analysts, Application Specialists or Application Managers with experience of Document Management or other business-critical enterprise applications. You will possess: Proven experience of Technical Product Ownership, Business Analysis, Application Management or Application Engineering. Experience working with iManage, HighQ, SharePoint or comparable Document / Knowledge Management platforms. Strong experience of requirements gathering, analysis, stakeholder workshops and translating business needs into technical solutions. Experience of roadmap development, backlog management and application lifecycle ownership. Good SQL skills, with the ability to query data, investigate problems and understand underlying database structures. Strong understanding of application integrations, data flows, APIs and enterprise application architecture. Experience working with configurable third-party enterprise applications and managing vendor relationships. Ability to troubleshoot complex application, integration and data-related issues. Excellent stakeholder engagement and communication skills, including the ability to work with both technical and non-technical audiences. Experience with SharePoint, Microsoft 365, Power Platform or Azure-based integration technologies would be advantageous. Experience within Legal Services, Banking, Financial Services or another complex Professional Services environment would be desirable. This is an excellent opportunity to take genuine ownership of a strategically important Document Management application portfolio, combining Technical Product Ownership, Business Analysis and hands-on SQL expertise with responsibility for applications including iManage, HighQ and SharePoint. Experience gained within Law Firms, Legal Application Vendors, Systems Integrators, Banking, Financial Services or major Professional Services organisations is welcomed. Candidates with backgrounds in Business Analysis who have progressed into Application Ownership or Technical Product Ownership would be particularly relevant.

Network Systems Administrator / IT Infrastructure Support Engineer - Windows Server, Active Directory, Group Policy, Microsoft 365, Hyper-V, LAN/WAN, Wi-Fi, VPN, SQL Server, Sage. Permanent. South East London/Hybrid 3/2. c£40k +Benefits Established SME operating within the music publishing sector seeks an experienced Network Systems Administrator / IT Infrastructure Support Engineer ("IT Manager") to take hands-on responsibility for the technology environment supporting its London and New York offices. This is a broad individual contributor role covering Desktop Support, Windows Server, Networks, Microsoft 365, Virtualisation and Business Applications, providing an excellent opportunity for someone who enjoys owning and supporting the full IT environment within a smaller organisation. You'll provide day-to-day technical support while maintaining the company's servers, networks, cloud services, security, databases and key business applications. The environment includes Windows Server, Active Directory, Group Policy, Microsoft 365, Hyper-V, LAN/WAN, Wi-Fi, Firewalls, VPN, Sage, SQL Server and Microsoft Access, with additional opportunities to work with Azure, Entra ID, Intune and automation technologies. Key Responsibilities: Provide hands-on desktop and infrastructure support to users across London and New York of both Win11 and Mac OSX laptops and PCs. Administer Windows Server, Active Directory, Group Policy, file storage and user permissions. Manage Microsoft 365 users, licences, email and associated cloud services. Maintain Hyper-V virtual servers, remote desktop services and associated infrastructure. Support LAN/WAN, Wi-Fi, Firewalls, VPN connectivity and office telephony. Manage backups, restore testing, disaster recovery and business continuity procedures. Maintain endpoint security, system updates, access controls and IT security processes. Support Sage and the associated Microsoft SQL Server environment. Maintain and troubleshoot bespoke Microsoft Access databases and other business applications. Support Excel reporting, database connections, data imports and operational data requirements. Manage user onboarding/offboarding, hardware deployment, asset management and supplier relationships. Deliver infrastructure upgrades, cloud migrations and practical IT automation initiatives. We're looking for experienced Network Administrators, Systems Administrators or Infrastructure Support Engineers who enjoy working across a broad technology environment rather than specialising in a single area. You will possess: Strong hands-on experience supporting Windows desktop, server and network environments. Good knowledge of Windows Server, Active Directory, Group Policy and Microsoft 365. Strong troubleshooting skills across desktops, servers, networks and business applications. Good networking knowledge including TCP/IP, DNS, DHCP, Wi-Fi, VPN and Firewalls. Experience administering virtual environments, ideally Microsoft Hyper-V. Knowledge of backups, Disaster Recovery, endpoint security and access management. Experience supporting database-backed business applications and troubleshooting application issues. Experience with Microsoft SQL Server, Sage or Microsoft Access would be advantageous. Azure, Entra ID, Intune and PowerShell experience would be useful. Strong communication and customer service skills with the ability to support users at all levels. A practical, organised approach with the ability to prioritise issues according to business impact. Experience working in similar SME environments able to work independently with minimal supervision. This is an excellent opportunity for a hands-on Network Administrator / Network Systems Administrator / Infrastructure Support Engineer who enjoys variety and wants genuine ownership of a company's IT environment. You'll work across everything from user support and Microsoft 365 through to servers, networking, virtualisation, databases, applications, security and infrastructure projects. Experience gained in similar small-to-medium sized enterprises within publishing, manufacturing, professional services, marketing or media would be of interest.

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, 4/1 Hybrid. c.£100k +Benefits Head of Information Security / CISO / Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation. The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you. Key Responsibilities: Define and deliver the Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee third-party security, supplier assurance and client audits. Recruit, mentor, lead and develop the Information Security team. As such we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess: CISSP, CISM or equivalent security certification. Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance. Experience developing security strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing. This is an outstanding opportunity to join a forward-thinking medium sized global organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies. Location is commutable from West London, Middlesex, East Berkshire, North Surrey, South West London and parts of South London (Croydon etc). Accessible via District Line (West) and some mainline services.