Security Architect - Security Architecture, AI Governance, AI Security, Zero Trust, SASE, SSE London Hybrid - 40% office attendance We are recruiting an experienced Security Architect for a leading professional services firm. This is a pivotal position offering genuine ownership of the firm's technology security strategy across on-premises, cloud and hybrid environments. You will act as the organisation's go-to technical authority for cybersecurity, working closely with the CTO, CISO, Information Security, Legal, Risk and Compliance teams. The role also offers the opportunity to shape the firm's approach to AI security, establishing the governance, standards and architectural controls required for the safe adoption of AI and machine-learning technologies. Key responsibilities: Own the enterprise security architecture strategy, vision and roadmap. Lead security architecture across Azure, on-premises and hybrid environments. Develop security standards, principles, patterns and high-level designs. Own security designs from strategy and roadmap through to implementation. Define the firm's AI-security architecture and governance framework. Lead the architectural approach to Zero Trust and SASE. Advise on identity, network segmentation, encryption, data residency and cloud security. Evaluate security technologies and support vendor selection. Embed security into new products, platforms and technology projects. Translate ISO 27001, NIST, CIS and GDPR requirements into practical technical controls. Present security recommendations to senior technology and business stakeholders. Required experience: At least 5-10 years' experience in Security Architecture or a closely comparable role. Previous responsibility for security strategy, roadmaps and architectural governance. Strong experience across cloud, on-premises and hybrid environments. Azure security architecture experience. Knowledge of Zero Trust, SASE, ZTNA, CASB, IAM, firewalls and network segmentation. Experience producing architectural standards, security patterns and design documentation. Proven ownership of security designs throughout the product or technology lifecycle. Strong communication skills and the ability to work across technical, legal, risk and compliance functions. Experience operating as a senior cybersecurity SME rather than stepping into architecture for the first time. Desirable experience: AI-security architecture or governance, including risks such as prompt injection, data leakage and model integrity. Zscaler, Palo Alto Prisma, Netskope or an equivalent SASE platform. CISSP, CISM, CCSP, TOGAF or SABSA certification. ISO 27001, NIST, NIS2 and data-residency requirements. Legal or professional-services experience. BYOK or hardware security module solutions. This position requires an established Security Architect who can take ownership, provide confident technical direction and operate effectively across a complex international organisation. Apply now if you would like to discuss the opportunity in more detail.
Oct 17, 2026
Full time
Security Architect - Security Architecture, AI Governance, AI Security, Zero Trust, SASE, SSE London Hybrid - 40% office attendance We are recruiting an experienced Security Architect for a leading professional services firm. This is a pivotal position offering genuine ownership of the firm's technology security strategy across on-premises, cloud and hybrid environments. You will act as the organisation's go-to technical authority for cybersecurity, working closely with the CTO, CISO, Information Security, Legal, Risk and Compliance teams. The role also offers the opportunity to shape the firm's approach to AI security, establishing the governance, standards and architectural controls required for the safe adoption of AI and machine-learning technologies. Key responsibilities: Own the enterprise security architecture strategy, vision and roadmap. Lead security architecture across Azure, on-premises and hybrid environments. Develop security standards, principles, patterns and high-level designs. Own security designs from strategy and roadmap through to implementation. Define the firm's AI-security architecture and governance framework. Lead the architectural approach to Zero Trust and SASE. Advise on identity, network segmentation, encryption, data residency and cloud security. Evaluate security technologies and support vendor selection. Embed security into new products, platforms and technology projects. Translate ISO 27001, NIST, CIS and GDPR requirements into practical technical controls. Present security recommendations to senior technology and business stakeholders. Required experience: At least 5-10 years' experience in Security Architecture or a closely comparable role. Previous responsibility for security strategy, roadmaps and architectural governance. Strong experience across cloud, on-premises and hybrid environments. Azure security architecture experience. Knowledge of Zero Trust, SASE, ZTNA, CASB, IAM, firewalls and network segmentation. Experience producing architectural standards, security patterns and design documentation. Proven ownership of security designs throughout the product or technology lifecycle. Strong communication skills and the ability to work across technical, legal, risk and compliance functions. Experience operating as a senior cybersecurity SME rather than stepping into architecture for the first time. Desirable experience: AI-security architecture or governance, including risks such as prompt injection, data leakage and model integrity. Zscaler, Palo Alto Prisma, Netskope or an equivalent SASE platform. CISSP, CISM, CCSP, TOGAF or SABSA certification. ISO 27001, NIST, NIS2 and data-residency requirements. Legal or professional-services experience. BYOK or hardware security module solutions. This position requires an established Security Architect who can take ownership, provide confident technical direction and operate effectively across a complex international organisation. Apply now if you would like to discuss the opportunity in more detail.
GRC Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) on a permanent basis, this person will be responsible for the management of ISMS globally across the firm which covers a broad range of security activities such as Policy Development, Risk Management, Internal & External audits & compliance etc. To be considered for this GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) role, it's ideal that you have: Proven experience in a similar role Preferable but not required law firm experience Strong knowledge on ISO frameworks Duties, Responsibilities & Person Specification ISMS Management Communicate to senior management on risks and requirements Understand business objectives and support development of budget for information security objectives Develop and maintain security compliance program Provide support where necessary to local offices to update and maintain country specific IS documentation Establish security metrics to assess effectiveness Coordinate and maintain the management review process Make written and oral reports to ISSC Security Audits Manage internal and external audits and certifications Manage third party providers including security consultants and assessors Security Awareness Ownership of the Security Awareness Program and the Security Awareness Centre and support of Security Culture Change including owning and managing the quarterly phishing simulation campaigns and the third party relationship. Improvement management Manage identified improvements through to completion Policy Develop, maintain and publish security strategies, policies and procedures Manage security policy and implementation Support global IT departments on implementation of security policy and products
Oct 17, 2026
Full time
GRC Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) on a permanent basis, this person will be responsible for the management of ISMS globally across the firm which covers a broad range of security activities such as Policy Development, Risk Management, Internal & External audits & compliance etc. To be considered for this GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) role, it's ideal that you have: Proven experience in a similar role Preferable but not required law firm experience Strong knowledge on ISO frameworks Duties, Responsibilities & Person Specification ISMS Management Communicate to senior management on risks and requirements Understand business objectives and support development of budget for information security objectives Develop and maintain security compliance program Provide support where necessary to local offices to update and maintain country specific IS documentation Establish security metrics to assess effectiveness Coordinate and maintain the management review process Make written and oral reports to ISSC Security Audits Manage internal and external audits and certifications Manage third party providers including security consultants and assessors Security Awareness Ownership of the Security Awareness Program and the Security Awareness Centre and support of Security Culture Change including owning and managing the quarterly phishing simulation campaigns and the third party relationship. Improvement management Manage identified improvements through to completion Policy Develop, maintain and publish security strategies, policies and procedures Manage security policy and implementation Support global IT departments on implementation of security policy and products
Technical Systems Data Analyst - Legacy Application Reverse Engineering £420 per day - Outside IR35 Initial six-month contract London - two days per week onsite We are recruiting a Technical Systems Data Analyst to investigate and formally document a complex, tightly integrated Legacy application and its underlying databases. This is not a BI, reporting, dashboarding or commercial analytics position. We require someone who has personally reverse-engineered poorly documented applications and databases and produced detailed technical data manuals for use by architects, developers and migration teams. The assignment You will analyse the current application and data environment to establish exactly how it operates, how its data is structured and how its different components interact. Your principal deliverable will be a comprehensive current-state documentation pack covering: Database schemas, tables, columns and data types. Primary and foreign keys, relationships and constraints. Indexes, views, stored procedures, functions and triggers. Business rules Embedded within databases, applications and established processes. Application-to-database interactions and access patterns. APIs, interfaces, integrations and external dependencies. End-to-end data flows and data lineage. Source-to-target mappings. Transformation, cleansing and validation requirements. Data-quality issues, risks, assumptions and unresolved gaps. Data dictionaries, entity-relationship diagrams and supporting technical documentation. You will work with technical teams, system owners and business subject-matter experts to validate your findings and ensure the documentation is sufficiently accurate and detailed to support application modernisation, migration and target-solution design. Essential experience Applicants must be able to demonstrate recent, hands-on experience of: Reverse-engineering a complex or poorly documented Legacy application and its underlying databases. Using advanced SQL to interrogate schemas, data structures, relationships and Embedded logic. Producing formal current-state data manuals, data dictionaries, ERDs or equivalent documentation packs. Documenting tables, columns, keys, indexes, constraints, relationships and dependencies. Discovering and documenting business rules rather than simply receiving completed requirements. Tracing data across applications, databases, APIs, interfaces and integrations. Creating source-to-target mappings and documenting transformation rules. Working with relational databases such as SQL Server, Oracle or PostgreSQL. Supporting application-modernisation or data-migration programmes. Presenting technical findings clearly to architects, developers and non-technical stakeholders. Working within structured enterprise governance, traceability and sign-off processes. Highly desirable Migration from a relational database to a document-based or NoSQL platform. MongoDB, Azure Cosmos DB, Couchbase or equivalent NoSQL experience. Azure data services. ETL/ELT and data-transformation experience. Data lineage, metadata management and data-governance experience. Experience analysing custom-built enterprise applications. Please note before applying This role is unlikely to suit candidates whose experience is primarily focused on: Power BI, Tableau or dashboard development. Reporting and management information. Statistical, customer or commercial analysis. Data science or machine learning. Building cloud data pipelines without Legacy-system investigation. Database administration without systems-analysis and documentation ownership. Migration delivery where mappings and business rules were supplied by another team. To be considered, your CV must include a clear example of an application or database that you personally reverse-engineered and the technical documentation or data manuals you produced from that investigation.
Oct 08, 2026
Full time
Technical Systems Data Analyst - Legacy Application Reverse Engineering £420 per day - Outside IR35 Initial six-month contract London - two days per week onsite We are recruiting a Technical Systems Data Analyst to investigate and formally document a complex, tightly integrated Legacy application and its underlying databases. This is not a BI, reporting, dashboarding or commercial analytics position. We require someone who has personally reverse-engineered poorly documented applications and databases and produced detailed technical data manuals for use by architects, developers and migration teams. The assignment You will analyse the current application and data environment to establish exactly how it operates, how its data is structured and how its different components interact. Your principal deliverable will be a comprehensive current-state documentation pack covering: Database schemas, tables, columns and data types. Primary and foreign keys, relationships and constraints. Indexes, views, stored procedures, functions and triggers. Business rules Embedded within databases, applications and established processes. Application-to-database interactions and access patterns. APIs, interfaces, integrations and external dependencies. End-to-end data flows and data lineage. Source-to-target mappings. Transformation, cleansing and validation requirements. Data-quality issues, risks, assumptions and unresolved gaps. Data dictionaries, entity-relationship diagrams and supporting technical documentation. You will work with technical teams, system owners and business subject-matter experts to validate your findings and ensure the documentation is sufficiently accurate and detailed to support application modernisation, migration and target-solution design. Essential experience Applicants must be able to demonstrate recent, hands-on experience of: Reverse-engineering a complex or poorly documented Legacy application and its underlying databases. Using advanced SQL to interrogate schemas, data structures, relationships and Embedded logic. Producing formal current-state data manuals, data dictionaries, ERDs or equivalent documentation packs. Documenting tables, columns, keys, indexes, constraints, relationships and dependencies. Discovering and documenting business rules rather than simply receiving completed requirements. Tracing data across applications, databases, APIs, interfaces and integrations. Creating source-to-target mappings and documenting transformation rules. Working with relational databases such as SQL Server, Oracle or PostgreSQL. Supporting application-modernisation or data-migration programmes. Presenting technical findings clearly to architects, developers and non-technical stakeholders. Working within structured enterprise governance, traceability and sign-off processes. Highly desirable Migration from a relational database to a document-based or NoSQL platform. MongoDB, Azure Cosmos DB, Couchbase or equivalent NoSQL experience. Azure data services. ETL/ELT and data-transformation experience. Data lineage, metadata management and data-governance experience. Experience analysing custom-built enterprise applications. Please note before applying This role is unlikely to suit candidates whose experience is primarily focused on: Power BI, Tableau or dashboard development. Reporting and management information. Statistical, customer or commercial analysis. Data science or machine learning. Building cloud data pipelines without Legacy-system investigation. Database administration without systems-analysis and documentation ownership. Migration delivery where mappings and business rules were supplied by another team. To be considered, your CV must include a clear example of an application or database that you personally reverse-engineered and the technical documentation or data manuals you produced from that investigation.
Senior Security Engineer - 6 Month Fixed-Term Contract We are a leading international professional services organisation with a strong global presence a. We provide specialist advisory services to multinational organisations, financial institutions and investment firms, operating within highly regulated environments. We are seeking an experienced Senior Security Engineer to join our Information Security Operations team on a 6-month fixed-term contract. This role will play a key part in enhancing and maturing our security monitoring and detection capabilities. The Role The Senior Security Engineer will report to the Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and enterprise security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas. The successful candidate will be able to understand complex environments quickly, take ownership of technical delivery (often leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Key Responsibilities Must Have Extensive hands-on cyber security engineering experience across IT security, network security, systems engineering or comparable enterprise environments. Strong Microsoft, Azure, Microsoft 365, cloud security, network architecture and hybrid environment security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate effectively with IT, Development and wider business teams. Clear communication, documentation and presentation skills, with the ability to explain technical risks and recommendations to technical and non-technical stakeholders. Proficiency with Windows, Linux, command-line tools and scripting languages such as PowerShell or Python. Desirable Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management or HSM infrastructure. Bachelor's degree in Computer Science, Information Security or a related field, equivalent practical experience, or relevant security certification such as SANS, CISSP, ISACA, CEH or OSCP.
Oct 08, 2026
Full time
Senior Security Engineer - 6 Month Fixed-Term Contract We are a leading international professional services organisation with a strong global presence a. We provide specialist advisory services to multinational organisations, financial institutions and investment firms, operating within highly regulated environments. We are seeking an experienced Senior Security Engineer to join our Information Security Operations team on a 6-month fixed-term contract. This role will play a key part in enhancing and maturing our security monitoring and detection capabilities. The Role The Senior Security Engineer will report to the Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and enterprise security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas. The successful candidate will be able to understand complex environments quickly, take ownership of technical delivery (often leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response. Key Responsibilities Must Have Extensive hands-on cyber security engineering experience across IT security, network security, systems engineering or comparable enterprise environments. Strong Microsoft, Azure, Microsoft 365, cloud security, network architecture and hybrid environment security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate effectively with IT, Development and wider business teams. Clear communication, documentation and presentation skills, with the ability to explain technical risks and recommendations to technical and non-technical stakeholders. Proficiency with Windows, Linux, command-line tools and scripting languages such as PowerShell or Python. Desirable Experience gained within a legal, financial services or similarly regulated organisation. Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR. Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management or HSM infrastructure. Bachelor's degree in Computer Science, Information Security or a related field, equivalent practical experience, or relevant security certification such as SANS, CISSP, ISACA, CEH or OSCP.
