Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Aug 23, 2026
Contractor
Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Senior SecOps Engineer - Microsoft Security UK Predominantly Remote Occasional presence in London Permanent We are partnering with a specialist Microsoft Security organisation looking to appoint two highly experienced Senior SecOps Engineers to its growing Microsoft Cyber Engineering team. This is not a traditional SOC Analyst position. We are looking for technically strong Microsoft Security Engineers with genuine hands-on experience designing, implementing, engineering and optimising Microsoft Sentinel and Defender solutions within enterprise customer environments. The organisation works extensively across the Microsoft Security portfolio and is looking for individuals who can bring significant technical depth while remaining hands-on with complex customer environments. The Role Working alongside Security Engineers, SOC Analysts and wider delivery teams, you will take responsibility for the implementation, optimisation and ongoing improvement of Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender / Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and scripting Improving security event detection and response capabilities Conducting Microsoft tenant health checks, security audits and architecture reviews Analysing cloud security risks and recommending appropriate security controls Supporting complex incident triage and resolution Designing and documenting security engineering standards and processes Researching and implementing new Microsoft security capabilities Producing high-quality technical and customer-facing documentation Working directly with customers and technical stakeholders Supporting and mentoring more junior members of the engineering team Essential Experience To be considered, you should have strong commercial experience across the following: Microsoft Sentinel / Azure Sentinel Microsoft Defender / Defender XDR Strong KQL / Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, scripting, SOAR or Sentinel playbooks Cloud security assessments, controls and risk analysis Designing and documenting security processes Customer-facing technical delivery Candidates whose experience is predominantly L1/L2 SOC monitoring without hands-on Sentinel and Defender engineering are unlikely to be suitable for this position. Highly Desirable Experience across any of the following would be particularly valuable: Microsoft Purview Microsoft Defender for Endpoint Defender for Cloud Defender for Identity Defender for Office 365 Microsoft Entra ID Intune Azure security architecture Logic Apps / Sentinel playbooks PowerShell or Python MITRE ATT&CK Microsoft Security architecture and tenant assessments Previous experience working directly for Microsoft , or within a leading Microsoft Security Partner, MSSP or specialist Microsoft consultancy, would be highly advantageous. Microsoft Certifications Relevant Microsoft certifications are strongly preferred, particularly: SC-200 - Microsoft Security Operations Analyst AZ-500 - Azure Security Engineer Associate AZ-104 - Azure Administrator Associate AZ-305 - Azure Solutions Architect Expert Equivalent or additional Microsoft Security certifications will also be considered. The Opportunity This is an opportunity to join a highly specialised Microsoft Security environment rather than a broad IT or generalist cybersecurity function. You'll work alongside experienced security professionals on complex customer engagements, with significant exposure to the wider Microsoft Security ecosystem and continued investment in technical training and development. The position would particularly suit an established Microsoft Security Engineer who wants to remain technically hands-on while taking greater ownership of solution design, engineering standards, customer environments and the development of security operations capabilities. If your core expertise sits across Microsoft Sentinel, Defender and Security Operations Engineering , email your CV If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Aug 23, 2026
Full time
Senior SecOps Engineer - Microsoft Security UK Predominantly Remote Occasional presence in London Permanent We are partnering with a specialist Microsoft Security organisation looking to appoint two highly experienced Senior SecOps Engineers to its growing Microsoft Cyber Engineering team. This is not a traditional SOC Analyst position. We are looking for technically strong Microsoft Security Engineers with genuine hands-on experience designing, implementing, engineering and optimising Microsoft Sentinel and Defender solutions within enterprise customer environments. The organisation works extensively across the Microsoft Security portfolio and is looking for individuals who can bring significant technical depth while remaining hands-on with complex customer environments. The Role Working alongside Security Engineers, SOC Analysts and wider delivery teams, you will take responsibility for the implementation, optimisation and ongoing improvement of Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender / Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and scripting Improving security event detection and response capabilities Conducting Microsoft tenant health checks, security audits and architecture reviews Analysing cloud security risks and recommending appropriate security controls Supporting complex incident triage and resolution Designing and documenting security engineering standards and processes Researching and implementing new Microsoft security capabilities Producing high-quality technical and customer-facing documentation Working directly with customers and technical stakeholders Supporting and mentoring more junior members of the engineering team Essential Experience To be considered, you should have strong commercial experience across the following: Microsoft Sentinel / Azure Sentinel Microsoft Defender / Defender XDR Strong KQL / Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, scripting, SOAR or Sentinel playbooks Cloud security assessments, controls and risk analysis Designing and documenting security processes Customer-facing technical delivery Candidates whose experience is predominantly L1/L2 SOC monitoring without hands-on Sentinel and Defender engineering are unlikely to be suitable for this position. Highly Desirable Experience across any of the following would be particularly valuable: Microsoft Purview Microsoft Defender for Endpoint Defender for Cloud Defender for Identity Defender for Office 365 Microsoft Entra ID Intune Azure security architecture Logic Apps / Sentinel playbooks PowerShell or Python MITRE ATT&CK Microsoft Security architecture and tenant assessments Previous experience working directly for Microsoft , or within a leading Microsoft Security Partner, MSSP or specialist Microsoft consultancy, would be highly advantageous. Microsoft Certifications Relevant Microsoft certifications are strongly preferred, particularly: SC-200 - Microsoft Security Operations Analyst AZ-500 - Azure Security Engineer Associate AZ-104 - Azure Administrator Associate AZ-305 - Azure Solutions Architect Expert Equivalent or additional Microsoft Security certifications will also be considered. The Opportunity This is an opportunity to join a highly specialised Microsoft Security environment rather than a broad IT or generalist cybersecurity function. You'll work alongside experienced security professionals on complex customer engagements, with significant exposure to the wider Microsoft Security ecosystem and continued investment in technical training and development. The position would particularly suit an established Microsoft Security Engineer who wants to remain technically hands-on while taking greater ownership of solution design, engineering standards, customer environments and the development of security operations capabilities. If your core expertise sits across Microsoft Sentinel, Defender and Security Operations Engineering , email your CV If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Cyber Assurance & Risk Analyst Location: IWM London Salary : £42,500 to £45,000 per annum Vacancy Type: Permanent, Full Time (36hours per week) Closing Date: 8th of September 2026 At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World War through to the present day. Our collections contain millions of items, stories and digital assets that preserve some of the most important moments in modern history. You'll join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict. Why This Role Matters Cyber security plays a vital role in protecting IWM's systems, services and information assets from an evolving threat landscape. As Cyber Assurance & Risk Analyst, you'll help strengthen the organisation's cyber resilience by ensuring compliance with government and industry security standards, embedding secure-by-design principles into projects and managing cyber risks across our supplier landscape. By delivering key assurance activities, you'll help improve organisational cyber capability and ensure IWM continues to safeguard the services relied upon by colleagues, visitors, researchers and stakeholders. What You'll Be Doing Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking. Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement. Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards. Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks. Embed secure-by-design principles into technology and digital projects from initiation through to delivery. Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live. Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring. Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required. Produce assurance, compliance and cyber risk reports for governance boards and senior stakeholders. Support cyber governance activities, risk management processes and the maintenance of accurate cyber risk records. Contribute to the development of cyber security policies, standards, controls and continuous improvement initiatives. Provide guidance on cyber compliance matters and work collaboratively with colleagues, suppliers and external partners to support assurance objectives. Support financial administration activities, including purchase orders, invoice processing and departmental administration where required. What We're Looking For We'd love to hear from you if you have: Experience of cyber security governance, assurance, compliance or risk management activities. Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent. Experience managing compliance evidence, audit activities or regulatory submissions. Experience of supplier or third-party cyber risk assessment and management processes. Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders. Experience producing reports, dashboards or management information for governance forums and senior audiences. Benefits The benefits listed below are discretionary and IWM reserves the right, with due notice, to vary or withdraw them at any time. Annual Leave: You'll have 25 days of annual leave, with public holidays on top. After 3 years, this increases to 27 days and after 5 years, you ll get 30 days Company Group Pension Plan: Includes competitive employer contributions to your pension starting at 7% to a maximum of 12%. Enhanced Maternity and Paternity Benefits: Celebrate life s milestones with confidence, knowing that our policies support growing families. IWM4me: Tailor your benefits to your unique needs through IWM4me. Access health, protection, and lifestyle benefits at corporate rates, ensuring your holistic well-being. Free Sanitary Products: We prioritise your comfort by providing free sanitary products across all our sites. Retail Discounts: 25% off IWM Cafes, 20% discount in on-site shops, Benefits hub offering retail discounts to several high street shops and MyActive discounts for health and wellbeing based retail discounts Free Entry to IWM Air Shows: Witness the thrill of vintage aircraft at our air shows. To Apply If you feel you are a suitable candidate and would like to work for Imperial War Museum, please click apply to be redirected to our website to complete your application.
Aug 22, 2026
Full time
Cyber Assurance & Risk Analyst Location: IWM London Salary : £42,500 to £45,000 per annum Vacancy Type: Permanent, Full Time (36hours per week) Closing Date: 8th of September 2026 At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World War through to the present day. Our collections contain millions of items, stories and digital assets that preserve some of the most important moments in modern history. You'll join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict. Why This Role Matters Cyber security plays a vital role in protecting IWM's systems, services and information assets from an evolving threat landscape. As Cyber Assurance & Risk Analyst, you'll help strengthen the organisation's cyber resilience by ensuring compliance with government and industry security standards, embedding secure-by-design principles into projects and managing cyber risks across our supplier landscape. By delivering key assurance activities, you'll help improve organisational cyber capability and ensure IWM continues to safeguard the services relied upon by colleagues, visitors, researchers and stakeholders. What You'll Be Doing Coordinate and manage IWM's Cyber Essentials certification, including evidence gathering, submission management and remediation tracking. Lead GovAssure submissions through control mapping, evidence collation and stakeholder engagement. Manage compliance against Civil Aviation Authority (CAA) cyber security requirements and other relevant standards. Maintain assurance documentation and support continuous compliance against recognised cyber security frameworks. Embed secure-by-design principles into technology and digital projects from initiation through to delivery. Review proposed solutions and provide assurance that appropriate security controls are implemented before go-live. Own and operate IWM's third-party cyber risk management platform, supporting supplier onboarding, assessments and ongoing monitoring. Identify, assess, manage and escalate cyber risks across the supply chain, tracking remediation activities where required. Produce assurance, compliance and cyber risk reports for governance boards and senior stakeholders. Support cyber governance activities, risk management processes and the maintenance of accurate cyber risk records. Contribute to the development of cyber security policies, standards, controls and continuous improvement initiatives. Provide guidance on cyber compliance matters and work collaboratively with colleagues, suppliers and external partners to support assurance objectives. Support financial administration activities, including purchase orders, invoice processing and departmental administration where required. What We're Looking For We'd love to hear from you if you have: Experience of cyber security governance, assurance, compliance or risk management activities. Knowledge of recognised cyber security frameworks and standards such as Cyber Essentials, NCSC guidance, ISO 27001 or equivalent. Experience managing compliance evidence, audit activities or regulatory submissions. Experience of supplier or third-party cyber risk assessment and management processes. Strong analytical skills with the ability to identify risks and communicate findings clearly to a range of stakeholders. Experience producing reports, dashboards or management information for governance forums and senior audiences. Benefits The benefits listed below are discretionary and IWM reserves the right, with due notice, to vary or withdraw them at any time. Annual Leave: You'll have 25 days of annual leave, with public holidays on top. After 3 years, this increases to 27 days and after 5 years, you ll get 30 days Company Group Pension Plan: Includes competitive employer contributions to your pension starting at 7% to a maximum of 12%. Enhanced Maternity and Paternity Benefits: Celebrate life s milestones with confidence, knowing that our policies support growing families. IWM4me: Tailor your benefits to your unique needs through IWM4me. Access health, protection, and lifestyle benefits at corporate rates, ensuring your holistic well-being. Free Sanitary Products: We prioritise your comfort by providing free sanitary products across all our sites. Retail Discounts: 25% off IWM Cafes, 20% discount in on-site shops, Benefits hub offering retail discounts to several high street shops and MyActive discounts for health and wellbeing based retail discounts Free Entry to IWM Air Shows: Witness the thrill of vintage aircraft at our air shows. To Apply If you feel you are a suitable candidate and would like to work for Imperial War Museum, please click apply to be redirected to our website to complete your application.
Hiscox Underwriting Group Services Ltd (HUGS)
City, York
Job Type: Permanent. Build a brilliant future with Hiscox. Role: Global Category Manager. Reporting to: Head of Business Services Sourcing. Position Overview Following a period of rapid growth, Hiscox has around 3,000 employees across a number of business units and countries and is deploying a new platform Hiscox Marketplace for procurement, vendor management and payments across all regions. It is an exciting time to be joining Hiscox. With sponsorship from the Board, Procurement has a key role in supporting the delivery of the Fit for 10X program, a plan to ensure Hiscox is best placed for significant expansion over the next 5 years. The Global Category Manager (Legal Services and Insurance) will lead the end to end category strategy, sourcing and commercial governance for legal services spend as well as the Insurance policies for the Hiscox Group (notably Cyber, Professional Indemnity and Directors and Officers). The role delivers measurable value through cost optimisation, demand management, service quality and innovation, while ensuring compliance with internal policies and applicable regulations. The role will be supported with Category Analysts based in Lisbon. The role will establish relationships with stakeholders across the UK and Europe/US to ensure that procurement is aligned to deliver the benefits of Hiscox Marketplace and the Fit For 10X business objectives. Where sourcing activity is material, high profile or high risk then the Global Category Manager will lead the procurement activity from market analysis through to contract signature. They will also provide advice and support to the business when managing vendors on a day to day basis. The role will be accountable for improving spend management in the Legal Services and Group Insurance categories as well as contributing to Group procurement strategy, supporting the use of Hiscox Marketplace the global procurement platform used across the business in all regions and to provide consistent and professional procurement practice. As well as maintaining and developing the Global Category Plans for Legal Services. Responsibilities Category Strategy: Develop and maintain a multi year category strategy and pipeline aligned to business priorities, demand management, and financial plans. Team Contribution: Coach junior colleagues, share best practice, and contribute to procurement standards, playbooks and training. Stakeholders: Maintain good working relationships with key stakeholders in Finance, London Market, UK Retail, US and Europe by providing expertise on contracts and Statements of Work. Influence demand, shape requirements, and drive adherence to sourcing and spend control processes via the use of the Legal Services panel and other supplier panels as appropriate. Sourcing & Tendering: Plan and execute end to end sourcing activities (RFI/RFP/RFQ/Spot Bid), evaluation, negotiation and contract award in line with governance requirements. Commercial Leadership: Negotiate commercials (rates, discounts, value adds, KPIs, gainshare), define statements of work (SoWs), and ensure clear deliverables and acceptance criteria. Hiscox Marketplace: embed the use of Hiscox Marketplace and policies as required to deploy best practice based processes. Contracting & Compliance: Use of A.I. and partner with Legal and Risk to implement appropriate contractual terms (IP, confidentiality, data protection, liability, conflicts of interest, anti bribery) and ensure policy compliance. Governance: Implement appropriate controls for legal services engagements (SoW approvals, rate cards, time & materials governance, change control, and invoice validation). Supplier Management: Own strategic supplier relationships, QBRs, performance scorecards, continuous improvement plans, and issue resolution/escalations. Reporting: Use of A.I. to undertake and input into the creation of procurement MI as required and reporting such as savings and volumes of requests. Carry out any other tasks or requirements as required by Hiscox from time to time. Required Skills Commercial acumen: Strong negotiation skills; able to structure deals, manage risk/reward, and agree measurable outcomes. Analytical capability: Rate benchmarking, total cost of ownership thinking, financial modelling, and data driven decision making. Stakeholder influence: Credible at senior levels; able to challenge constructively and build alignment across competing priorities. Supplier relationship management: Balances partnership and performance; manages escalations with pace and professionalism. Contract literacy: Strong understanding of key legal services contract terms (IP, confidentiality, data protection, conflicts, liability, audit rights). Project management: Plans and executes sourcing projects to deadlines; manages evaluation, governance and approvals. Communication: Clear, concise written and verbal communication; able to present recommendations and business cases. Integrity and judgement: Applies strong ethical standards; manages confidential information appropriately. Necessary: Strong leadership skills across matrix structures. Team player at executive level: collaborate with Business Units and functional partners in Finance, and Operations across the Hiscox Business Units. Solid operational management and general business skills to project manage business teams to support delivery of procurement activity as required. Excellent communication skills in order to get the 'voice of the internal customer' and to understand the company culture and how to best communicate procurement's value to it. Qualifications and Training Degree (or equivalent experience) in business, procurement, finance, law or a related discipline. Professional procurement qualification preferred (e.g., CIPS Level 5/6 or equivalent). Desirable Contract management qualification and/or relevant compliance training (e.g., anti bribery, modern slavery, data protection). Negotiation Training. Diversity and flexible working We are committed to diversity and creating a truly inclusive culture, which we believe drives success. Hybrid working is encouraged to support a healthy work life balance; it is set by the team rather than the business to enable you to manage your own personal work life balance. This best of both worlds; structure and sociability on one hand, and independence and flexibility on the other.
Aug 22, 2026
Full time
Job Type: Permanent. Build a brilliant future with Hiscox. Role: Global Category Manager. Reporting to: Head of Business Services Sourcing. Position Overview Following a period of rapid growth, Hiscox has around 3,000 employees across a number of business units and countries and is deploying a new platform Hiscox Marketplace for procurement, vendor management and payments across all regions. It is an exciting time to be joining Hiscox. With sponsorship from the Board, Procurement has a key role in supporting the delivery of the Fit for 10X program, a plan to ensure Hiscox is best placed for significant expansion over the next 5 years. The Global Category Manager (Legal Services and Insurance) will lead the end to end category strategy, sourcing and commercial governance for legal services spend as well as the Insurance policies for the Hiscox Group (notably Cyber, Professional Indemnity and Directors and Officers). The role delivers measurable value through cost optimisation, demand management, service quality and innovation, while ensuring compliance with internal policies and applicable regulations. The role will be supported with Category Analysts based in Lisbon. The role will establish relationships with stakeholders across the UK and Europe/US to ensure that procurement is aligned to deliver the benefits of Hiscox Marketplace and the Fit For 10X business objectives. Where sourcing activity is material, high profile or high risk then the Global Category Manager will lead the procurement activity from market analysis through to contract signature. They will also provide advice and support to the business when managing vendors on a day to day basis. The role will be accountable for improving spend management in the Legal Services and Group Insurance categories as well as contributing to Group procurement strategy, supporting the use of Hiscox Marketplace the global procurement platform used across the business in all regions and to provide consistent and professional procurement practice. As well as maintaining and developing the Global Category Plans for Legal Services. Responsibilities Category Strategy: Develop and maintain a multi year category strategy and pipeline aligned to business priorities, demand management, and financial plans. Team Contribution: Coach junior colleagues, share best practice, and contribute to procurement standards, playbooks and training. Stakeholders: Maintain good working relationships with key stakeholders in Finance, London Market, UK Retail, US and Europe by providing expertise on contracts and Statements of Work. Influence demand, shape requirements, and drive adherence to sourcing and spend control processes via the use of the Legal Services panel and other supplier panels as appropriate. Sourcing & Tendering: Plan and execute end to end sourcing activities (RFI/RFP/RFQ/Spot Bid), evaluation, negotiation and contract award in line with governance requirements. Commercial Leadership: Negotiate commercials (rates, discounts, value adds, KPIs, gainshare), define statements of work (SoWs), and ensure clear deliverables and acceptance criteria. Hiscox Marketplace: embed the use of Hiscox Marketplace and policies as required to deploy best practice based processes. Contracting & Compliance: Use of A.I. and partner with Legal and Risk to implement appropriate contractual terms (IP, confidentiality, data protection, liability, conflicts of interest, anti bribery) and ensure policy compliance. Governance: Implement appropriate controls for legal services engagements (SoW approvals, rate cards, time & materials governance, change control, and invoice validation). Supplier Management: Own strategic supplier relationships, QBRs, performance scorecards, continuous improvement plans, and issue resolution/escalations. Reporting: Use of A.I. to undertake and input into the creation of procurement MI as required and reporting such as savings and volumes of requests. Carry out any other tasks or requirements as required by Hiscox from time to time. Required Skills Commercial acumen: Strong negotiation skills; able to structure deals, manage risk/reward, and agree measurable outcomes. Analytical capability: Rate benchmarking, total cost of ownership thinking, financial modelling, and data driven decision making. Stakeholder influence: Credible at senior levels; able to challenge constructively and build alignment across competing priorities. Supplier relationship management: Balances partnership and performance; manages escalations with pace and professionalism. Contract literacy: Strong understanding of key legal services contract terms (IP, confidentiality, data protection, conflicts, liability, audit rights). Project management: Plans and executes sourcing projects to deadlines; manages evaluation, governance and approvals. Communication: Clear, concise written and verbal communication; able to present recommendations and business cases. Integrity and judgement: Applies strong ethical standards; manages confidential information appropriately. Necessary: Strong leadership skills across matrix structures. Team player at executive level: collaborate with Business Units and functional partners in Finance, and Operations across the Hiscox Business Units. Solid operational management and general business skills to project manage business teams to support delivery of procurement activity as required. Excellent communication skills in order to get the 'voice of the internal customer' and to understand the company culture and how to best communicate procurement's value to it. Qualifications and Training Degree (or equivalent experience) in business, procurement, finance, law or a related discipline. Professional procurement qualification preferred (e.g., CIPS Level 5/6 or equivalent). Desirable Contract management qualification and/or relevant compliance training (e.g., anti bribery, modern slavery, data protection). Negotiation Training. Diversity and flexible working We are committed to diversity and creating a truly inclusive culture, which we believe drives success. Hybrid working is encouraged to support a healthy work life balance; it is set by the team rather than the business to enable you to manage your own personal work life balance. This best of both worlds; structure and sociability on one hand, and independence and flexibility on the other.
Our Mission At Omnea, we're reinventing how enterprise businesses operate, starting with the most painful parts: procurement - where a single purchase can drag on for months, trigger 50+ emails, and pull in Finance, Legal, Security, and IT just to get something approved. We've raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native platform connects every person, step, and system so buying is fast, safe, and efficient - one place to request, automated approvals and renewals, real-time supplier risk, and complete spend visibility. The opportunity is massive. Every enterprise on the planet has this problem and nobody has solved it. We've 10x'd ARR to double-digit millions in 18 months and are trusted by global enterprises like Spotify, MongoDB, Monzo, and Albertsons. We're now the 4th fastest growing startup in Europe & the Sunday Times' Best Medium Sized Tech Company To Work for. Our team previously scaled Tessian (cybersecurity tech, backed by Sequoia, Balderton, Accel, acquired post-Series C), and our team includes ex-founders operators who've grown unicorns, shipped world-class products, and executed at the highest levels. You'll work alongside leaders like Ben, Abs, Sabrina, and Rebe. Find out more about the team and life at Omnea here. The Role AI is changing what it means to deploy enterprise software. Configuring a customer's procurement workflows used to mean weeks of manual setup, integration by integration, edge case by edge case. Increasingly, that first-draft build work can be directed rather than done by hand: AI agents can generate workflow configurations, draft integration mappings, and produce the initial pass on a customer's setup. The job shifts with it. Instead of building every workflow yourself, you specify exactly what needs to exist, direct AI to build it, and apply the judgment AI can't: is this the right configuration for this customer's approval policy, will Legal and Finance actually sign off on it, does it hold up once real spend starts flowing through it. In practice, that might mean catching that the approval chain AI just drafted works perfectly for HQ, but misses a regional delegation-of-authority rule that would fail an audit in the customer's APAC entity. As Omnea's AI Solutions Lead, you own deployment of the Omnea platform end to end - typically running 3-5 enterprise deployments concurrently - for some of Europe's most recognisable companies. You advise customers on the best-fit configuration, direct AI-assisted build work to get there fast, and validate every output against what the customer actually needs. You'll also deal with the politics that come with every enterprise rollout: the Legal team wanting one more sign-off, the Finance stakeholder who doesn't trust the new approval flow, the exec sponsor who's gone quiet. You become the internal voice of the customer, and you're judged on outcomes you can point to: time to launch, post-go-live CSAT, and whether that customer becomes a case study or reference. This is an early hire on Omnea's customer team, working directly with our sales, customer, product, and engineering leadership. The future shape of the role is yours to define! What You'll Do Discover and design Run discovery with customer stakeholders across Procurement, Finance, Legal, and IT, and translate their process into an Omnea configuration Design the target workflow: approval chains, routing logic, integrations, and the edge cases that make procurement hard On a deployment with a dozen-plus integrations, you own the sequencing - what has to land first, what blocks what - and the harder calls underneath it: which system is the source of truth for a given entity, and how records reconcile when two systems key that entity differently Define success criteria and a realistic path to go-live with the customer's project sponsor Build with AI, not instead of it You're not just directing AI to draft your own deliverables faster - you're configuring the specialized agents Omnea's customers rely on every day: an intake agent that knows how to ask a procurement analyst the right follow-up question, a risk agent that flags what actually matters to this customer's Legal team The real leverage comes from chaining agents together - an intake agent that hands clean, structured requests to a risk agent, which in turn routes into approvals with the right context already attached. You design how those agents work as a system, not just individually Writing a spec for one agent is a skill. Writing one that holds up across a chain of agents - where one agent's output becomes another's input - is the actual bar here Validate every AI-generated output against the customer's actual process, policy, and edge cases before anything ships Handle what AI can't: judgment calls on ambiguous requirements, custom logic, and anything that needs a human read on internal politics Deploy and prove value Present configured workflows to stakeholders, from procurement analysts to CFOs, working through the pushback and internal politics that come with any enterprise rollout, and win their buy-in Run multi-day onsite workshops with customers, coordinating dozens of stakeholders across multiple workstreams at once - a different muscle than a single stakeholder meeting Project-manage the deployment: timelines, blockers, stakeholder alignment, and a clear path to launch, acting as an extension of the customer's team Track adoption after go-live and keep the configuration working as the customer's process evolves Work with Product and Engineering during the design phase, not just after something breaks in the field - you're often the earliest signal on whether a new module will hold up for an enterprise customer, and that shapes what gets built next What's Different About This Role You'll spend more time specifying and validating than building from scratch. AI produces the first draft; you make sure it's right for this customer Writing instructions AI can act on precisely is a skill you'll build fast here. Vague requests produce vague configurations Judgment matters more, not less. AI speeds up the build, but you decide whether the output is right for this contract, this Board, this customer You'll keep experimenting as our AI tooling evolves, and share what works with the rest of the team About You We don't expect you to know how to do all of this on day one. TL;DR: you're ambitious and hard-working, as comfortable directing an AI agent through a tricky configuration as you are presenting a project plan to an exec. You make up for any gap in experience with hunger and a genuine growth mindset. You derive energy from building relationships, shipping projects, and making customers succeed. 4-8 years in a fast-paced, high-bar environment: a startup, scale-up, consulting, banking, or something you built yourself Less experience? Check out our Solutions Associate role Comfortable directing AI tools to produce first-draft work, and confident enough in your own judgment to catch what's wrong. Prior use of tools like ChatGPT, Claude, or Cursor is a strong plus. What matters most is your ability to write clear, specific instructions and evaluate what comes back Client-facing experience, or the natural gravitas to be excellent at it. You can point to a time you went well beyond what a client expected A track record of doing something exceptionally well, whether that's work, academia, sport, or anything else you've put your mind to Comfortable reasoning about system architecture - how data models, primary keys, and integration sequencing interact across a dozen enterprise systems. You don't need to write the integration code, but you need to know why it breaks and be able to reason with the people who do, and you'll need to become an Omnea product expert You build real relationships with people at any level, from a junior procurement analyst to a CFO, and know how to handle pushback and stakeholder politics, not just build rapport Comfortable running rooms of stakeholders across a genuinely cross-functional tool - on a single project you'll interface with the CPO, Legal, Finance, AP, InfoSec, and Compliance, plus each of their technical resources, often all with competing priorities on the same decision Comfortable moving between the detail and the big picture: configuring a workflow in the morning, presenting a project plan to an exec in the afternoon Entrepreneurial, have high ownership, and want to be part of building something. We've signed up to the Future Founder Promise An excellent communicator: clear and concise, verbal and written, even when the subject is complicated Highly organised: comfortable running 3-5 enterprise deployments concurrently, each at a different stage, without dropping any of them At Omnea, we embrace diversity. To build a product that's loved by everyone, we're best served by a team with all sorts of backgrounds, experiences, and perspectives. We encourage you to apply even if your experience doesn't quite match the full job spec! And regardless of your race, religion, colour, gender, or anything else! If you think you could be a good fit for Omnea, please reach out. A few things to note: We offer competitive geo-localised benefits, and you can check out our UK Benefits Package here and our US Benefits Package here. We work Tuesdays . click apply for full job details
Aug 22, 2026
Full time
Our Mission At Omnea, we're reinventing how enterprise businesses operate, starting with the most painful parts: procurement - where a single purchase can drag on for months, trigger 50+ emails, and pull in Finance, Legal, Security, and IT just to get something approved. We've raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native platform connects every person, step, and system so buying is fast, safe, and efficient - one place to request, automated approvals and renewals, real-time supplier risk, and complete spend visibility. The opportunity is massive. Every enterprise on the planet has this problem and nobody has solved it. We've 10x'd ARR to double-digit millions in 18 months and are trusted by global enterprises like Spotify, MongoDB, Monzo, and Albertsons. We're now the 4th fastest growing startup in Europe & the Sunday Times' Best Medium Sized Tech Company To Work for. Our team previously scaled Tessian (cybersecurity tech, backed by Sequoia, Balderton, Accel, acquired post-Series C), and our team includes ex-founders operators who've grown unicorns, shipped world-class products, and executed at the highest levels. You'll work alongside leaders like Ben, Abs, Sabrina, and Rebe. Find out more about the team and life at Omnea here. The Role AI is changing what it means to deploy enterprise software. Configuring a customer's procurement workflows used to mean weeks of manual setup, integration by integration, edge case by edge case. Increasingly, that first-draft build work can be directed rather than done by hand: AI agents can generate workflow configurations, draft integration mappings, and produce the initial pass on a customer's setup. The job shifts with it. Instead of building every workflow yourself, you specify exactly what needs to exist, direct AI to build it, and apply the judgment AI can't: is this the right configuration for this customer's approval policy, will Legal and Finance actually sign off on it, does it hold up once real spend starts flowing through it. In practice, that might mean catching that the approval chain AI just drafted works perfectly for HQ, but misses a regional delegation-of-authority rule that would fail an audit in the customer's APAC entity. As Omnea's AI Solutions Lead, you own deployment of the Omnea platform end to end - typically running 3-5 enterprise deployments concurrently - for some of Europe's most recognisable companies. You advise customers on the best-fit configuration, direct AI-assisted build work to get there fast, and validate every output against what the customer actually needs. You'll also deal with the politics that come with every enterprise rollout: the Legal team wanting one more sign-off, the Finance stakeholder who doesn't trust the new approval flow, the exec sponsor who's gone quiet. You become the internal voice of the customer, and you're judged on outcomes you can point to: time to launch, post-go-live CSAT, and whether that customer becomes a case study or reference. This is an early hire on Omnea's customer team, working directly with our sales, customer, product, and engineering leadership. The future shape of the role is yours to define! What You'll Do Discover and design Run discovery with customer stakeholders across Procurement, Finance, Legal, and IT, and translate their process into an Omnea configuration Design the target workflow: approval chains, routing logic, integrations, and the edge cases that make procurement hard On a deployment with a dozen-plus integrations, you own the sequencing - what has to land first, what blocks what - and the harder calls underneath it: which system is the source of truth for a given entity, and how records reconcile when two systems key that entity differently Define success criteria and a realistic path to go-live with the customer's project sponsor Build with AI, not instead of it You're not just directing AI to draft your own deliverables faster - you're configuring the specialized agents Omnea's customers rely on every day: an intake agent that knows how to ask a procurement analyst the right follow-up question, a risk agent that flags what actually matters to this customer's Legal team The real leverage comes from chaining agents together - an intake agent that hands clean, structured requests to a risk agent, which in turn routes into approvals with the right context already attached. You design how those agents work as a system, not just individually Writing a spec for one agent is a skill. Writing one that holds up across a chain of agents - where one agent's output becomes another's input - is the actual bar here Validate every AI-generated output against the customer's actual process, policy, and edge cases before anything ships Handle what AI can't: judgment calls on ambiguous requirements, custom logic, and anything that needs a human read on internal politics Deploy and prove value Present configured workflows to stakeholders, from procurement analysts to CFOs, working through the pushback and internal politics that come with any enterprise rollout, and win their buy-in Run multi-day onsite workshops with customers, coordinating dozens of stakeholders across multiple workstreams at once - a different muscle than a single stakeholder meeting Project-manage the deployment: timelines, blockers, stakeholder alignment, and a clear path to launch, acting as an extension of the customer's team Track adoption after go-live and keep the configuration working as the customer's process evolves Work with Product and Engineering during the design phase, not just after something breaks in the field - you're often the earliest signal on whether a new module will hold up for an enterprise customer, and that shapes what gets built next What's Different About This Role You'll spend more time specifying and validating than building from scratch. AI produces the first draft; you make sure it's right for this customer Writing instructions AI can act on precisely is a skill you'll build fast here. Vague requests produce vague configurations Judgment matters more, not less. AI speeds up the build, but you decide whether the output is right for this contract, this Board, this customer You'll keep experimenting as our AI tooling evolves, and share what works with the rest of the team About You We don't expect you to know how to do all of this on day one. TL;DR: you're ambitious and hard-working, as comfortable directing an AI agent through a tricky configuration as you are presenting a project plan to an exec. You make up for any gap in experience with hunger and a genuine growth mindset. You derive energy from building relationships, shipping projects, and making customers succeed. 4-8 years in a fast-paced, high-bar environment: a startup, scale-up, consulting, banking, or something you built yourself Less experience? Check out our Solutions Associate role Comfortable directing AI tools to produce first-draft work, and confident enough in your own judgment to catch what's wrong. Prior use of tools like ChatGPT, Claude, or Cursor is a strong plus. What matters most is your ability to write clear, specific instructions and evaluate what comes back Client-facing experience, or the natural gravitas to be excellent at it. You can point to a time you went well beyond what a client expected A track record of doing something exceptionally well, whether that's work, academia, sport, or anything else you've put your mind to Comfortable reasoning about system architecture - how data models, primary keys, and integration sequencing interact across a dozen enterprise systems. You don't need to write the integration code, but you need to know why it breaks and be able to reason with the people who do, and you'll need to become an Omnea product expert You build real relationships with people at any level, from a junior procurement analyst to a CFO, and know how to handle pushback and stakeholder politics, not just build rapport Comfortable running rooms of stakeholders across a genuinely cross-functional tool - on a single project you'll interface with the CPO, Legal, Finance, AP, InfoSec, and Compliance, plus each of their technical resources, often all with competing priorities on the same decision Comfortable moving between the detail and the big picture: configuring a workflow in the morning, presenting a project plan to an exec in the afternoon Entrepreneurial, have high ownership, and want to be part of building something. We've signed up to the Future Founder Promise An excellent communicator: clear and concise, verbal and written, even when the subject is complicated Highly organised: comfortable running 3-5 enterprise deployments concurrently, each at a different stage, without dropping any of them At Omnea, we embrace diversity. To build a product that's loved by everyone, we're best served by a team with all sorts of backgrounds, experiences, and perspectives. We encourage you to apply even if your experience doesn't quite match the full job spec! And regardless of your race, religion, colour, gender, or anything else! If you think you could be a good fit for Omnea, please reach out. A few things to note: We offer competitive geo-localised benefits, and you can check out our UK Benefits Package here and our US Benefits Package here. We work Tuesdays . click apply for full job details
Join Barclays as a DFIR Lead Cyber Operations Analyst, a VP-level role at the centre of the bank's cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This is a highly technical, hands on position suited to an experienced cyber or digital forensics professional, with passion for deep investigation, and the ability to produce clear, high quality reporting in a fast paced, high pressure environment. Please note that this role includes an on call support rotation. Occasional additional support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with the ability to clearly articulate complex technical findings to senior stakeholders and non technical business teams. Proven leadership under pressure, including coordinating investigations, managing cross functional stakeholders, and operating effectively within a regulated banking environment. Some other highly valued skills may include: Cloud investigation experience across platforms such as AWS, Azure, or Google Cloud. Scripting and automation capabilities, using languages such as Python, PowerShell, Bash, or JavaScript. Relevant industry certifications, such as GCFA, GNFA, GCFE, or GREM. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job specific technical skills. The successful candidate will be based in Knutsford (Radbroke Hall). Purpose of the role To monitor the performance of operational controls, implement and manage security controls and consider lessons learned in order to protect the bank from potential cyber attacks and respond to threats. Accountabilities Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage. Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network. Management of cyber security incidents including remediation & driving to closure. Vice President Expectations To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements and escalate breaches of policies/procedures. If managing a team, they define jobs and responsibilities, planning for the department's future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions. Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment. Manage and mitigate risks through assessment, in support of the control and governance agenda. Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does. Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business. Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies. Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In depth analysis with interpretative thinking will be required to define problems and develop innovative solutions. Adopt and include the outcomes of extensive research in problem solving processes. Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
Aug 19, 2026
Full time
Join Barclays as a DFIR Lead Cyber Operations Analyst, a VP-level role at the centre of the bank's cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This is a highly technical, hands on position suited to an experienced cyber or digital forensics professional, with passion for deep investigation, and the ability to produce clear, high quality reporting in a fast paced, high pressure environment. Please note that this role includes an on call support rotation. Occasional additional support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with the ability to clearly articulate complex technical findings to senior stakeholders and non technical business teams. Proven leadership under pressure, including coordinating investigations, managing cross functional stakeholders, and operating effectively within a regulated banking environment. Some other highly valued skills may include: Cloud investigation experience across platforms such as AWS, Azure, or Google Cloud. Scripting and automation capabilities, using languages such as Python, PowerShell, Bash, or JavaScript. Relevant industry certifications, such as GCFA, GNFA, GCFE, or GREM. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job specific technical skills. The successful candidate will be based in Knutsford (Radbroke Hall). Purpose of the role To monitor the performance of operational controls, implement and manage security controls and consider lessons learned in order to protect the bank from potential cyber attacks and respond to threats. Accountabilities Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage. Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network. Management of cyber security incidents including remediation & driving to closure. Vice President Expectations To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements and escalate breaches of policies/procedures. If managing a team, they define jobs and responsibilities, planning for the department's future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions. Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment. Manage and mitigate risks through assessment, in support of the control and governance agenda. Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does. Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business. Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies. Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In depth analysis with interpretative thinking will be required to define problems and develop innovative solutions. Adopt and include the outcomes of extensive research in problem solving processes. Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
Forensic Technology/ Digital Forensics Manager London (hybrid) Opportunity to work for an outstanding company in the field. You will have a strong commercial background and client facing communication skills. Your experience is likely from a service provider or advisory firm. You will have an ability to collect data from various devices (Desktop, laptop, phones) but also from the cloud and more commercial enterprise wide systems e.g. global email etc. You will have experience with leading Digital Forensic tools e.g. EnCase, FTK, Cellebrite etc. You will have a strong academic background and likely a degree in a related subject. You will be able to attend the office and when required visit client sites. There are initially no direct reportees. You will collect data in a compliant manner so be familiar with ACPO and chain of custody. About Brimstone Consulting: We specialise in finding highly qualified staff in the following areas:Forensic Accounting & Fraud - (AML/CTF, Investigation, CFE s etc.); Legal and LegalTech (E-Discovery, Digital Forensics, EDRM); Big Data and Data Analytics- (MI/BI/CI);InfoSec and Cyber Crime; Audit; Accountancy and Finance; FinTech (Payments etc.);Risk - (Credit, Regulatory, Liquidity, Market, Analysts-SAS, SPSS etc.);Compliance/Corporate Governance ;IT- (full SDLC- BA s PM s , Architects, Developers etc.); Brimstone Consulting acts as an employment agency (permanent) and as an employment business (temporary) - a free and confidential service to candidates. Brimstone Consulting is an equal opportunities employer. Due to time constraints we can only reply to applicants that match our clients specifications. We may store applications in our cloud storage facilities that may include dropbox.
Aug 17, 2026
Full time
Forensic Technology/ Digital Forensics Manager London (hybrid) Opportunity to work for an outstanding company in the field. You will have a strong commercial background and client facing communication skills. Your experience is likely from a service provider or advisory firm. You will have an ability to collect data from various devices (Desktop, laptop, phones) but also from the cloud and more commercial enterprise wide systems e.g. global email etc. You will have experience with leading Digital Forensic tools e.g. EnCase, FTK, Cellebrite etc. You will have a strong academic background and likely a degree in a related subject. You will be able to attend the office and when required visit client sites. There are initially no direct reportees. You will collect data in a compliant manner so be familiar with ACPO and chain of custody. About Brimstone Consulting: We specialise in finding highly qualified staff in the following areas:Forensic Accounting & Fraud - (AML/CTF, Investigation, CFE s etc.); Legal and LegalTech (E-Discovery, Digital Forensics, EDRM); Big Data and Data Analytics- (MI/BI/CI);InfoSec and Cyber Crime; Audit; Accountancy and Finance; FinTech (Payments etc.);Risk - (Credit, Regulatory, Liquidity, Market, Analysts-SAS, SPSS etc.);Compliance/Corporate Governance ;IT- (full SDLC- BA s PM s , Architects, Developers etc.); Brimstone Consulting acts as an employment agency (permanent) and as an employment business (temporary) - a free and confidential service to candidates. Brimstone Consulting is an equal opportunities employer. Due to time constraints we can only reply to applicants that match our clients specifications. We may store applications in our cloud storage facilities that may include dropbox.
Senior ActuaryApplylocations: Londontime type: Full timeposted on: Posted Yesterdayjob requisition id: JR233Seeking strong Reinsurance Pricing Actuaries across all specialties - including Marine & Energy, Property, Retro, Specialty, Casualty, Cyber, and Credit & Political Risk . The Role We are seeking a commercially minded and technically rigorous Qualified Actuary to join our UK Analytics team within a leading reinsurance brokerage. This is a critical client-facing position that merges actuarial insight with real-world commercial experience, supporting the design, structuring, and execution of sophisticated reinsurance solutions across multiple lines of business.Operating at the heart of our broking analytics offering, this role provides an outstanding platform for an actuary to apply their technical expertise while directly influencing client strategy, capital efficiency, and risk transfer outcomes. The ideal candidate will bring a strong foundation in actuarial pricing, an ability to communicate complex ideas with clarity, and a passion for applying analytics in high-impact advisory settings.The initial phases of work will focus on the hands-on setup and specification of a market-leading analytics and CAT environment. Experience and interest in working with technology teams as an actuarial subject matter expert (SME) are also a key requirement. Key responsibilities include: Designing and building market-leading analytical tools and methodologies that improve pricing accuracy, workflow efficiency, and client-facing outputs. Serving as a strategic advisor to clients, providing deep actuarial insight into portfolio performance, risk dynamics, and optimal reinsurance structures. Supporting the development of bespoke reinsurance programs that meet client-specific objectives across risk mitigation, capital relief, and volatility management. Applying actuarial methods to price treaty reinsurance across a range of perils and lines, leveraging exposure data, loss experience, and catastrophe model outputs. Producing and presenting benchmark analyses that inform negotiations and enhance the credibility of placement strategies with reinsurers. Partnering closely with brokers to craft analytical placement narratives and supporting reinsurer engagement during the marketing and negotiation process. Adapting modeling outputs and performance indicators to strengthen our value proposition and differentiate our offering in a competitive market. Mentoring junior analysts and actuarial trainees, supporting their technical development and ensuring delivery excellence across the team. Conducting peer reviews and supporting the broader capability-building agenda of the analytics function. Developing trusted relationships with brokers, clients, reinsurers, and internal stakeholders, serving as a critical link between technical insight and commercial strategy. Contributing actuarial leadership to RFP responses, new business pursuits, and long-term client engagement strategies. About You Essential Qualifications & Experience: Fully qualified actuary (ACAS, FCAS) with significant experience post-qualification in reinsurance, insurance, or advisory. Bachelor's degree in Actuarial Science, Economics, Mathematics, Statistics, or related field. Experience post-qualification in the re/insurance industry. Deep understanding of treaty reinsurance pricing approaches and portfolio analytics, including experience and exposure rating across multiple lines of business. Experience and familiarisation working across multiple lines of business including Property, Casualty, Marine & Energy, Cyber, Credit & Political Risk, or similar classes. Familiarity with catastrophe model interpretation and integrating technical outputs into reinsurance structuring. Strong grasp of market dynamics and client decision-making processes within the reinsurance value chain. Demonstrated ability to communicate complex actuarial concepts with clarity to senior stakeholders and non-technical audiences. Ability to manage multiple ongoing complex projects and contact with the people involved in those, internal or external. Collaborative team player who thrives in a multi-disciplinary environment. Adaptable, solutions-focused, and energised by variety and pace. Committed to continuous learning, innovation, and client impact. Proficient in Excel and actuarial modeling tools; working knowledge of coding languages (Python) or data visualisation platforms (PowerBI, Tableau) is an advantage. Working knowledge of stochastic RI pricing tools; working knowledge of Igloo is an advantage. Good understanding of emerging technologies, including AI, Data Science, Generative AI, and data ingestion, to identify development opportunities. About Willis Re We combine specialist broking with analytics, modeling and research to help insurers optimize risk transfer, strengthen balance sheets and achieve sustainable growth. Our approach is relationship-driven, transparent and outcome-focused. At the heart of Willis Re is a focus on delivering the most cutting-edge analytical solutions to enable more informed, better decision-making for risk selection, portfolio optimization, and capital management. The launch of Willis Re brings a strategic advantage of being unhindered by legacy, an ability to leverage data, statistical models and advanced technologies with the best knowledge and expertise to deliver more efficient and effective reinsurance outcomes. This places Willis Re in a unique position to build a truly analytically driven business, focused on creating solutions for the reinsurance industry that are future led and forward thinking. Willis Re will also leverage recognized technical expertise from WTW's Insurance Consulting & Technology business including their advanced modeling and analytical capabilities. Alongside this will be WTW's Research Network, an award-winning business supporting and influencing science to improve the understanding and quantification of risk.Willis Re is committed to embracing a diverse, inclusive, and flexible work environment. We provide equal opportunity to all qualified individuals regardless of race, colour, religion, age, gender, gender expression, national origin, veteran status, disability, orientation, or any other legally protected categories. If you have a need that requires accommodation, please email us at
Jul 31, 2026
Full time
Senior ActuaryApplylocations: Londontime type: Full timeposted on: Posted Yesterdayjob requisition id: JR233Seeking strong Reinsurance Pricing Actuaries across all specialties - including Marine & Energy, Property, Retro, Specialty, Casualty, Cyber, and Credit & Political Risk . The Role We are seeking a commercially minded and technically rigorous Qualified Actuary to join our UK Analytics team within a leading reinsurance brokerage. This is a critical client-facing position that merges actuarial insight with real-world commercial experience, supporting the design, structuring, and execution of sophisticated reinsurance solutions across multiple lines of business.Operating at the heart of our broking analytics offering, this role provides an outstanding platform for an actuary to apply their technical expertise while directly influencing client strategy, capital efficiency, and risk transfer outcomes. The ideal candidate will bring a strong foundation in actuarial pricing, an ability to communicate complex ideas with clarity, and a passion for applying analytics in high-impact advisory settings.The initial phases of work will focus on the hands-on setup and specification of a market-leading analytics and CAT environment. Experience and interest in working with technology teams as an actuarial subject matter expert (SME) are also a key requirement. Key responsibilities include: Designing and building market-leading analytical tools and methodologies that improve pricing accuracy, workflow efficiency, and client-facing outputs. Serving as a strategic advisor to clients, providing deep actuarial insight into portfolio performance, risk dynamics, and optimal reinsurance structures. Supporting the development of bespoke reinsurance programs that meet client-specific objectives across risk mitigation, capital relief, and volatility management. Applying actuarial methods to price treaty reinsurance across a range of perils and lines, leveraging exposure data, loss experience, and catastrophe model outputs. Producing and presenting benchmark analyses that inform negotiations and enhance the credibility of placement strategies with reinsurers. Partnering closely with brokers to craft analytical placement narratives and supporting reinsurer engagement during the marketing and negotiation process. Adapting modeling outputs and performance indicators to strengthen our value proposition and differentiate our offering in a competitive market. Mentoring junior analysts and actuarial trainees, supporting their technical development and ensuring delivery excellence across the team. Conducting peer reviews and supporting the broader capability-building agenda of the analytics function. Developing trusted relationships with brokers, clients, reinsurers, and internal stakeholders, serving as a critical link between technical insight and commercial strategy. Contributing actuarial leadership to RFP responses, new business pursuits, and long-term client engagement strategies. About You Essential Qualifications & Experience: Fully qualified actuary (ACAS, FCAS) with significant experience post-qualification in reinsurance, insurance, or advisory. Bachelor's degree in Actuarial Science, Economics, Mathematics, Statistics, or related field. Experience post-qualification in the re/insurance industry. Deep understanding of treaty reinsurance pricing approaches and portfolio analytics, including experience and exposure rating across multiple lines of business. Experience and familiarisation working across multiple lines of business including Property, Casualty, Marine & Energy, Cyber, Credit & Political Risk, or similar classes. Familiarity with catastrophe model interpretation and integrating technical outputs into reinsurance structuring. Strong grasp of market dynamics and client decision-making processes within the reinsurance value chain. Demonstrated ability to communicate complex actuarial concepts with clarity to senior stakeholders and non-technical audiences. Ability to manage multiple ongoing complex projects and contact with the people involved in those, internal or external. Collaborative team player who thrives in a multi-disciplinary environment. Adaptable, solutions-focused, and energised by variety and pace. Committed to continuous learning, innovation, and client impact. Proficient in Excel and actuarial modeling tools; working knowledge of coding languages (Python) or data visualisation platforms (PowerBI, Tableau) is an advantage. Working knowledge of stochastic RI pricing tools; working knowledge of Igloo is an advantage. Good understanding of emerging technologies, including AI, Data Science, Generative AI, and data ingestion, to identify development opportunities. About Willis Re We combine specialist broking with analytics, modeling and research to help insurers optimize risk transfer, strengthen balance sheets and achieve sustainable growth. Our approach is relationship-driven, transparent and outcome-focused. At the heart of Willis Re is a focus on delivering the most cutting-edge analytical solutions to enable more informed, better decision-making for risk selection, portfolio optimization, and capital management. The launch of Willis Re brings a strategic advantage of being unhindered by legacy, an ability to leverage data, statistical models and advanced technologies with the best knowledge and expertise to deliver more efficient and effective reinsurance outcomes. This places Willis Re in a unique position to build a truly analytically driven business, focused on creating solutions for the reinsurance industry that are future led and forward thinking. Willis Re will also leverage recognized technical expertise from WTW's Insurance Consulting & Technology business including their advanced modeling and analytical capabilities. Alongside this will be WTW's Research Network, an award-winning business supporting and influencing science to improve the understanding and quantification of risk.Willis Re is committed to embracing a diverse, inclusive, and flexible work environment. We provide equal opportunity to all qualified individuals regardless of race, colour, religion, age, gender, gender expression, national origin, veteran status, disability, orientation, or any other legally protected categories. If you have a need that requires accommodation, please email us at
Cyber Security Compliance Analyst Southampton Outside of IR35 A Client is looking for an experienced Cyber Security Compliance Analyst to join their team and play a hands-on role in driving their NIS compliance programme forward. With the overall NIS strategy already in place, the successful candidate will be responsible for driving its execution, managing compliance activities, coordinating stakeholders, and ensuring operational controls are embedded across the business. Skills & Experience from the Cyber Security Compliance Analyst: Experience delivering or supporting NIS compliance programmes within regulated environments. Hands-on implementation of governance, risk and compliance (GRC) controls. Strong stakeholder engagement and cross-functional coordination skills. Experience producing and maintaining compliance policies, procedures and audit evidence. Able to manage multiple compliance activities and priorities effectively. Knowledge of the Cyber Assessment Framework (CAF) is desirable. Experience with ISO 27001 implementation or compliance, with an understanding of its alignment to NIS. Responsibilities of the Cyber Security Compliance Analyst: Drive the implementation of NIS compliance activities across the organisation. Engage with technical teams, business units and key stakeholders to gather evidence and ensure actions are delivered. Implement and maintain administrative, governance and security controls required for NIS compliance. Coordinate activities across multiple departments to ensure compliance requirements are met. Ensure documentation, policies, procedures and evidence are maintained to support compliance. Work closely with the existing NIS lead, translating strategic objectives into practical deliverables. The Successful Cyber Security Compliance Analyst will be expected to be commutable to site in Southampton. Apply now to speak with VIQU IT in confidence. Or reach out to Matt Farrell via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
Jul 31, 2026
Contractor
Cyber Security Compliance Analyst Southampton Outside of IR35 A Client is looking for an experienced Cyber Security Compliance Analyst to join their team and play a hands-on role in driving their NIS compliance programme forward. With the overall NIS strategy already in place, the successful candidate will be responsible for driving its execution, managing compliance activities, coordinating stakeholders, and ensuring operational controls are embedded across the business. Skills & Experience from the Cyber Security Compliance Analyst: Experience delivering or supporting NIS compliance programmes within regulated environments. Hands-on implementation of governance, risk and compliance (GRC) controls. Strong stakeholder engagement and cross-functional coordination skills. Experience producing and maintaining compliance policies, procedures and audit evidence. Able to manage multiple compliance activities and priorities effectively. Knowledge of the Cyber Assessment Framework (CAF) is desirable. Experience with ISO 27001 implementation or compliance, with an understanding of its alignment to NIS. Responsibilities of the Cyber Security Compliance Analyst: Drive the implementation of NIS compliance activities across the organisation. Engage with technical teams, business units and key stakeholders to gather evidence and ensure actions are delivered. Implement and maintain administrative, governance and security controls required for NIS compliance. Coordinate activities across multiple departments to ensure compliance requirements are met. Ensure documentation, policies, procedures and evidence are maintained to support compliance. Work closely with the existing NIS lead, translating strategic objectives into practical deliverables. The Successful Cyber Security Compliance Analyst will be expected to be commutable to site in Southampton. Apply now to speak with VIQU IT in confidence. Or reach out to Matt Farrell via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.
Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365 / Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls. Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure, cloud, application, identity and business teams to deliver security improvements. Used scripting, queries, automation or data analysis to improve security outcomes. Strong hands-on experience administering, tuning and operationalising CrowdStrike Falcon , including endpoint protection, EDR investigations, detection analysis and response workflows. Strong hands-on experience administering and supporting Zscaler ZIA and ZPA , including policy design, access control, traffic analysis and security troubleshooting. Practical experience leading or supporting vulnerability and exposure management programmes , including vulnerability analysis, risk-based prioritisation, remediation tracking and validation of control effectiveness. Strong knowledge of real-world attacker tactics, techniques and procedures (TTPs) and the ability to translate threat intelligence, attack paths and exploitation trends into actionable security improvements. Experience conducting security investigations and incident response activities, including alert triage, root cause analysis, containment, remediation and lessons learned. This is a hybrid role working 3 days a week in the London office and 2 days remotely.
Jul 31, 2026
Full time
Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365 / Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls. Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure, cloud, application, identity and business teams to deliver security improvements. Used scripting, queries, automation or data analysis to improve security outcomes. Strong hands-on experience administering, tuning and operationalising CrowdStrike Falcon , including endpoint protection, EDR investigations, detection analysis and response workflows. Strong hands-on experience administering and supporting Zscaler ZIA and ZPA , including policy design, access control, traffic analysis and security troubleshooting. Practical experience leading or supporting vulnerability and exposure management programmes , including vulnerability analysis, risk-based prioritisation, remediation tracking and validation of control effectiveness. Strong knowledge of real-world attacker tactics, techniques and procedures (TTPs) and the ability to translate threat intelligence, attack paths and exploitation trends into actionable security improvements. Experience conducting security investigations and incident response activities, including alert triage, root cause analysis, containment, remediation and lessons learned. This is a hybrid role working 3 days a week in the London office and 2 days remotely.
Principal Identity & Access Lead London or Milton Keynes (2 days on site) 75 - 85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.
Jul 31, 2026
Full time
Principal Identity & Access Lead London or Milton Keynes (2 days on site) 75 - 85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.
About The Role You will own a defined portfolio of top-tier global MSSPs (excluding GSI/Big 4 relationships). These are security specialist firms operating at scale - running 24 7 SOCs, delivering managed threat intelligence, and integrating platform grade tooling into their service stack. This is not a transactional sales role. It is a strategic ecosystem play - and you will build it from first principles. Also, this is an Individual Contributor role. What You'll Do At Cyble MSSP Ecosystem Strategy Map and prioritise the top 100 global MSSPs by region, security maturity, and GTM fit - identifying those actively building or scaling CTI, DRPS, ASM, and CSPM led managed services. Define a structured, tiered MSSP engagement playbook covering acquisition, activation, ramp, and expansion - with clear milestones for each stage. Maintain deep competitive intelligence on MSSP buying behaviour, vendor preferences, and integration strategies across US, Europe, and beyond. Identify white space across the MSSP landscape where Cyble can displace incumbents or expand adjacent to existing relationships. Partnership Development & Structuring Own the full MSSP partner lifecycle - executive introduction, solution scoping, commercial structuring, legal execution, technical onboarding, and co sell activation. Design scalable partnership models: co sell, white label/OEM, embedded API integration, resell, and managed services enablement frameworks. Work directly with MSSP SOC leads, security practice heads, and CTO level stakeholders to architect integrations that embed Cyble capabilities into live delivery workflows. Drive co branded joint offerings, shared GTM materials, and partner specific use case packaging for CTI as a Service, DRPS, EASM, CSPM, and MDR augmentation. Revenue Ownership & Pipeline Own MSSP sourced ARR targets - accountable for pipeline creation, deal progression, and revenue conversion across your portfolio. Develop multi year strategic account plans for named MSSP partners with expansion paths tied to customer seat growth, additional modules, and geographic scale. Drive Cyble's footprint within MSSP customer bases through joint GTM initiatives, shared pipeline, and influenced revenue programmes. Build commercial structures that work for both Cyble and MSSP economics - including tiered pricing, consumption based licensing, and usage aligned models. Executive Engagement & Market Presence Build and sustain C level relationships with MSSP alliance leaders, CEOs, CISOs, SOC heads, and service delivery executives. Represent Cyble at Tier 1 global cybersecurity events, MSSP focused forums, RSA, GSX, Black Hat, and regional partner summits. Act as the authoritative Cyble voice in MSSP conversations - articulating platform value across threat intelligence, dark web, digital risk, and surface management domains. Cross Functional Alignment Work closely with Product, Threat Intelligence, Engineering, and Marketing to feed MSSP requirements into roadmap and enablement priorities. Collaborate with internal sales teams to ensure clean handoffs, account coverage clarity, and alignment on named MSSP accounts. Provide structured quarterly reporting on MSSP ecosystem health, partner performance, and market intelligence to senior leadership. What You'll Need Ideal Candidate Profile: You have spent your career at the intersection of cybersecurity and strategic partnerships - building programmes, not just managing accounts. You understand how MSSPs buy, what makes integrations stick, and how to construct commercial relationships that drive durable revenue. Experience 12-18+ years in cybersecurity enterprise sales, MSSP alliances, or strategic partnerships - with at least 5 years in a partner led or channel leadership capacity. Demonstrable track record of building and scaling MSSP co sell or managed security platform partnerships across US and/or European markets. Deep familiarity with MSSP commercial models - resell, OEM, white label, co delivery - and the internal economics that drive partner decisions. Hands on experience negotiating and structuring complex, multi year partnership agreements with security focused service providers. Proven success operating as a senior IC: high autonomy, high accountability, minimal reliance on organisational infrastructure. Why This Role? Build it your way - You inherit no playbook. The global MSSP ecosystem is yours to map, prioritise, and activate. Real revenue ownership - Full ARR accountability, not influenced attribution. Your number, your call. Executive visibility - Direct line to Cyble senior leadership. Your MSSP strategy shapes global GTM decisions. Product that wins - AI native, analyst grade intelligence platform that MSSPs actively seek. Your job is to structure the relationship and scale the revenue. Why Cyble? Competitive base salary, OTE, and equity participation Work alongside a globally recognised threat intelligence platform with proven enterprise and government traction Collaborate with a leadership team that has deep cybersecurity operator experience and a genuine partner first conviction About Cyble Cyble is an AI native cybersecurity company delivering best in class threat intelligence, dark web monitoring, and attack surface management to enterprises and governments worldwide. Backed by leading investors and recognised by Gartner (Challenger -Gartner MQ), Forrester, and Frost, Cyble operates across North America, EMEA, and APAC through a partner first go to market motion. Cyble is an equal opportunity employer. We welcome applicants of all backgrounds, identities, and experiences. To learn more visit:
Jul 29, 2026
Full time
About The Role You will own a defined portfolio of top-tier global MSSPs (excluding GSI/Big 4 relationships). These are security specialist firms operating at scale - running 24 7 SOCs, delivering managed threat intelligence, and integrating platform grade tooling into their service stack. This is not a transactional sales role. It is a strategic ecosystem play - and you will build it from first principles. Also, this is an Individual Contributor role. What You'll Do At Cyble MSSP Ecosystem Strategy Map and prioritise the top 100 global MSSPs by region, security maturity, and GTM fit - identifying those actively building or scaling CTI, DRPS, ASM, and CSPM led managed services. Define a structured, tiered MSSP engagement playbook covering acquisition, activation, ramp, and expansion - with clear milestones for each stage. Maintain deep competitive intelligence on MSSP buying behaviour, vendor preferences, and integration strategies across US, Europe, and beyond. Identify white space across the MSSP landscape where Cyble can displace incumbents or expand adjacent to existing relationships. Partnership Development & Structuring Own the full MSSP partner lifecycle - executive introduction, solution scoping, commercial structuring, legal execution, technical onboarding, and co sell activation. Design scalable partnership models: co sell, white label/OEM, embedded API integration, resell, and managed services enablement frameworks. Work directly with MSSP SOC leads, security practice heads, and CTO level stakeholders to architect integrations that embed Cyble capabilities into live delivery workflows. Drive co branded joint offerings, shared GTM materials, and partner specific use case packaging for CTI as a Service, DRPS, EASM, CSPM, and MDR augmentation. Revenue Ownership & Pipeline Own MSSP sourced ARR targets - accountable for pipeline creation, deal progression, and revenue conversion across your portfolio. Develop multi year strategic account plans for named MSSP partners with expansion paths tied to customer seat growth, additional modules, and geographic scale. Drive Cyble's footprint within MSSP customer bases through joint GTM initiatives, shared pipeline, and influenced revenue programmes. Build commercial structures that work for both Cyble and MSSP economics - including tiered pricing, consumption based licensing, and usage aligned models. Executive Engagement & Market Presence Build and sustain C level relationships with MSSP alliance leaders, CEOs, CISOs, SOC heads, and service delivery executives. Represent Cyble at Tier 1 global cybersecurity events, MSSP focused forums, RSA, GSX, Black Hat, and regional partner summits. Act as the authoritative Cyble voice in MSSP conversations - articulating platform value across threat intelligence, dark web, digital risk, and surface management domains. Cross Functional Alignment Work closely with Product, Threat Intelligence, Engineering, and Marketing to feed MSSP requirements into roadmap and enablement priorities. Collaborate with internal sales teams to ensure clean handoffs, account coverage clarity, and alignment on named MSSP accounts. Provide structured quarterly reporting on MSSP ecosystem health, partner performance, and market intelligence to senior leadership. What You'll Need Ideal Candidate Profile: You have spent your career at the intersection of cybersecurity and strategic partnerships - building programmes, not just managing accounts. You understand how MSSPs buy, what makes integrations stick, and how to construct commercial relationships that drive durable revenue. Experience 12-18+ years in cybersecurity enterprise sales, MSSP alliances, or strategic partnerships - with at least 5 years in a partner led or channel leadership capacity. Demonstrable track record of building and scaling MSSP co sell or managed security platform partnerships across US and/or European markets. Deep familiarity with MSSP commercial models - resell, OEM, white label, co delivery - and the internal economics that drive partner decisions. Hands on experience negotiating and structuring complex, multi year partnership agreements with security focused service providers. Proven success operating as a senior IC: high autonomy, high accountability, minimal reliance on organisational infrastructure. Why This Role? Build it your way - You inherit no playbook. The global MSSP ecosystem is yours to map, prioritise, and activate. Real revenue ownership - Full ARR accountability, not influenced attribution. Your number, your call. Executive visibility - Direct line to Cyble senior leadership. Your MSSP strategy shapes global GTM decisions. Product that wins - AI native, analyst grade intelligence platform that MSSPs actively seek. Your job is to structure the relationship and scale the revenue. Why Cyble? Competitive base salary, OTE, and equity participation Work alongside a globally recognised threat intelligence platform with proven enterprise and government traction Collaborate with a leadership team that has deep cybersecurity operator experience and a genuine partner first conviction About Cyble Cyble is an AI native cybersecurity company delivering best in class threat intelligence, dark web monitoring, and attack surface management to enterprises and governments worldwide. Backed by leading investors and recognised by Gartner (Challenger -Gartner MQ), Forrester, and Frost, Cyble operates across North America, EMEA, and APAC through a partner first go to market motion. Cyble is an equal opportunity employer. We welcome applicants of all backgrounds, identities, and experiences. To learn more visit:
Security Clearance: To be successfully appointed to this role, must be eligible to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time. If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back three continuous years, and unspent criminal record check (known as Disclosure and Barring Service) What we will offer you You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard Manage Mentor, Cybersecurity qualifications and much more. Why we are different At Capgemini, we help organisations across the world become more agile, more competitive, and more successful. Smart, tailored, often ground-breaking technical solutions to complex problems are the norm. But so, too, is a culture that is as collaborative as it is forward thinking. Working closely with each other, and with our clients, we get under the skin of businesses and to the heart of their goals. You will too. Capgemini is proud to represent nearly 130 nationalities and its cultural diversity. Our holistic definition of diversity extends beyond gender, gender identity, sexual orientation, disability, ethnicity, race, age, and religion. Capgemini views diversity as everything that makes us who we are as an organization, including our social background, our experiences in life and work, our communication styles and even our personality. These dimensions contribute to the type of diversity we value the most: diversity of thought. Who you will be working with You will join the Data Trust Capability in Capgemini's Insights and Data (I&D) business unit. Insights and Data is a global business unit covering Enterprise Data Management, Cloud Platforms, Enterprise Content Management and AI & Analytics. Our team is one of the largest and most successful Data Management teams in the UK delivering innovative Data Management and Governance thought leadership to our clients. The Enterprise Data Management provides services on Information Strategy, Data Governance, Master Data Management, Data Architecture, Data Migration and Lifecycle Management. We help our clients build an enterprise-class data platform that allows them to move ahead in their journey of data and insights. Primarily working with leading software vendors like SAP, Informatica, IBM, Oracle et al, the team are primarily Consultants, putting client requirements and industry best practices at the heart of delivery. The focus of your role Configure and maintain Microsoft Purview features, including: Information Protection (sensitivity labels, auto-labelling), Data Loss Prevention (M365, Endpoint, Cloud Apps), Data Governance (catalogue, scanning, classification), Records Management (retention labels & policies), Insider Risk Management, eDiscovery (Standard & Premium) Manage scanning rules, data connectors, metadata sources, and catalog assets. Support integration with M365, Azure, Power Platform, and on premises data sources Monitor Purview alerts, DLP incidents, policy matches, and governance activity logs Perform investigation of policy violations, insider risk alerts, and data protection events Track and escape issues to engineering or architecture teams as required Maintain audit trails, compliance dashboards, and monthly reporting Assist with maintaining data classification schemas, taxonomy, and metadata models Support data owners and stewards in cataloguing and tagging data assets Run data scans, quality checks, and lineage validation tasks Produce and maintain operational runbooks, configuration documentation, and governance processes Create user guides for end users, compliance officers, and IT support teams Document incident response processes related to Purview alerts Work closely with Compliance, Security, Data Governance, and IT teams to implement policies into Purview Support end users by troubleshooting classification, labelling, and access issues Provide training sessions and knowledge transfer on Purview features Identify gaps in data governance and compliance processes; recommend improvements You may also offer insights to the wider community through blogs, articles, and social media. At Capgemini, we believe in bringing your whole self to work. Equity, diversity, and inclusion are woven into our everyday culture, creating a welcoming and supportive environment for everyone. What You Will Bring As a Technical Purview Analyst, you will have 7 years plus experience in data governance, security, compliance, or Microsoft 365 administration. You will have hands on experience with Microsoft Purview or related compliance/security platforms, with exposure to operational support, incident management, or compliance monitoring. Experience Microsoft Purview Information Protection - labels, policies, auto labelling, encryption Data Loss Prevention - endpoint, SharePoint/OneDrive/Teams, Exchange, cloud apps Purview Data Governance - cataloguing, scanning, metadata management Records Management & Retention Labelling eDiscovery workflows and case management Defender for Cloud Apps Wider integration with SharePoint, OneDrive, Exchange, Azure Storage, SQL, Synapse, Data Factory, and Power BI Understanding of classification, metadata, and governance principles Knowledge of Microsoft 365 security & compliance capabilities Basic understanding of Azure Active Directory / Entra ID identity and access concepts Familiarity with ITSM/incident management processes Understanding of regulatory compliance basics How compliance and data protection teams use Purview outputs Data sensitivity models and how they map to business processes Governance best practices, including cataloguing and lineage use cases Ability to configure and manage Purview policies and scanning tools Strong analytical and troubleshooting skills Familiarity with KQL, PowerShell, or Microsoft Graph Ability to interpret logs, alerts, and governance reporting Strong documentation and verbal communication skills Ability to work collaboratively with cross functional teams Good organisational and time management abilities Certifications (Desirable)
Jun 03, 2026
Full time
Security Clearance: To be successfully appointed to this role, must be eligible to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time. If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back three continuous years, and unspent criminal record check (known as Disclosure and Barring Service) What we will offer you You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard Manage Mentor, Cybersecurity qualifications and much more. Why we are different At Capgemini, we help organisations across the world become more agile, more competitive, and more successful. Smart, tailored, often ground-breaking technical solutions to complex problems are the norm. But so, too, is a culture that is as collaborative as it is forward thinking. Working closely with each other, and with our clients, we get under the skin of businesses and to the heart of their goals. You will too. Capgemini is proud to represent nearly 130 nationalities and its cultural diversity. Our holistic definition of diversity extends beyond gender, gender identity, sexual orientation, disability, ethnicity, race, age, and religion. Capgemini views diversity as everything that makes us who we are as an organization, including our social background, our experiences in life and work, our communication styles and even our personality. These dimensions contribute to the type of diversity we value the most: diversity of thought. Who you will be working with You will join the Data Trust Capability in Capgemini's Insights and Data (I&D) business unit. Insights and Data is a global business unit covering Enterprise Data Management, Cloud Platforms, Enterprise Content Management and AI & Analytics. Our team is one of the largest and most successful Data Management teams in the UK delivering innovative Data Management and Governance thought leadership to our clients. The Enterprise Data Management provides services on Information Strategy, Data Governance, Master Data Management, Data Architecture, Data Migration and Lifecycle Management. We help our clients build an enterprise-class data platform that allows them to move ahead in their journey of data and insights. Primarily working with leading software vendors like SAP, Informatica, IBM, Oracle et al, the team are primarily Consultants, putting client requirements and industry best practices at the heart of delivery. The focus of your role Configure and maintain Microsoft Purview features, including: Information Protection (sensitivity labels, auto-labelling), Data Loss Prevention (M365, Endpoint, Cloud Apps), Data Governance (catalogue, scanning, classification), Records Management (retention labels & policies), Insider Risk Management, eDiscovery (Standard & Premium) Manage scanning rules, data connectors, metadata sources, and catalog assets. Support integration with M365, Azure, Power Platform, and on premises data sources Monitor Purview alerts, DLP incidents, policy matches, and governance activity logs Perform investigation of policy violations, insider risk alerts, and data protection events Track and escape issues to engineering or architecture teams as required Maintain audit trails, compliance dashboards, and monthly reporting Assist with maintaining data classification schemas, taxonomy, and metadata models Support data owners and stewards in cataloguing and tagging data assets Run data scans, quality checks, and lineage validation tasks Produce and maintain operational runbooks, configuration documentation, and governance processes Create user guides for end users, compliance officers, and IT support teams Document incident response processes related to Purview alerts Work closely with Compliance, Security, Data Governance, and IT teams to implement policies into Purview Support end users by troubleshooting classification, labelling, and access issues Provide training sessions and knowledge transfer on Purview features Identify gaps in data governance and compliance processes; recommend improvements You may also offer insights to the wider community through blogs, articles, and social media. At Capgemini, we believe in bringing your whole self to work. Equity, diversity, and inclusion are woven into our everyday culture, creating a welcoming and supportive environment for everyone. What You Will Bring As a Technical Purview Analyst, you will have 7 years plus experience in data governance, security, compliance, or Microsoft 365 administration. You will have hands on experience with Microsoft Purview or related compliance/security platforms, with exposure to operational support, incident management, or compliance monitoring. Experience Microsoft Purview Information Protection - labels, policies, auto labelling, encryption Data Loss Prevention - endpoint, SharePoint/OneDrive/Teams, Exchange, cloud apps Purview Data Governance - cataloguing, scanning, metadata management Records Management & Retention Labelling eDiscovery workflows and case management Defender for Cloud Apps Wider integration with SharePoint, OneDrive, Exchange, Azure Storage, SQL, Synapse, Data Factory, and Power BI Understanding of classification, metadata, and governance principles Knowledge of Microsoft 365 security & compliance capabilities Basic understanding of Azure Active Directory / Entra ID identity and access concepts Familiarity with ITSM/incident management processes Understanding of regulatory compliance basics How compliance and data protection teams use Purview outputs Data sensitivity models and how they map to business processes Governance best practices, including cataloguing and lineage use cases Ability to configure and manage Purview policies and scanning tools Strong analytical and troubleshooting skills Familiarity with KQL, PowerShell, or Microsoft Graph Ability to interpret logs, alerts, and governance reporting Strong documentation and verbal communication skills Ability to work collaboratively with cross functional teams Good organisational and time management abilities Certifications (Desirable)
Solus Accident Repair Centres
Birchanger, Hertfordshire
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk-based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and escalate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award-winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
May 31, 2026
Full time
Overview At Solus, we are strengthening our technology governance and cyber resilience as we continue to grow. We are looking for an IT Governance, Risk and Compliance (GRC) Analyst to help us maintain a secure, well governed and compliant technology environment across the business. This is a great role for someone who enjoys analysing detail, challenging constructively, influencing stakeholders and helping teams make confident, risk-based decisions. About the role As our IT GRC Analyst, you will support the Cyber Security, Risk and Assurance function with a mixture of governance activity, assurance reviews, supplier assessments and compliance oversight. You will help us meet Aviva Group requirements, regulatory expectations and industry standards while ensuring our technology risks are understood and well managed. Location: Hybrid (Stansted - 3 days per week, 2 days remote) Responsibilities Maintain and improve our IT risk register, ensuring risks are clear, evidenced and tracked Support risk owners with guidance on controls, remediation and governance requirements Complete compliance reviews, control testing and assurance activities Produce risk and compliance reporting for leadership forums Carry out supplier assurance assessments, recommend improvements and escalate risk where needed Keep IT policies and standards up to date and aligned with Aviva and recognised frameworks Provide clear insight to non technical colleagues on risk, controls and potential impacts Support Group assurance activity and represent Solus in relevant forums This is an individual contributor role with a high level of ownership and plenty of opportunity to influence how we operate. Qualifications You will thrive in this role if you have: Knowledge of GRC frameworks such as ISO 27001, NIST CSF, Cyber Essentials or DPA Experience in risk management, governance or cyber/security assurance The ability to analyse complex information and turn it into clear, meaningful insight Confidence challenging and advising colleagues at all levels Strong communication and stakeholder management skills Certifications such as CISM, CRISC or CGRC are desirable but not essential. Who are Solus? Solus, who are owned by Aviva, are one of the UK leaders in vehicle repairs, returning cars to the road in just 11 days on average and a 4.6/5 star customer rating. With an award-winning apprenticeship programme and winners of other recognised industry awards Solus are proud to be shaping the future of vehicle repair. Why Join Solus? We have so much to offer when it comes to being a Solus colleague: Competitive salary based on location, skills, experience, and qualifications. Bonus opportunity tied to your performance and the overall success of Solus. Company pension scheme with employer contributions. 33 days' holiday (including bank holidays), with the option to buy or sell up to 5 days. Save money with up to 40% discount on Aviva products and other retailer discounts. Share in Aviva's success through the Aviva Save As You Earn scheme. Supportive policies including parental and carer's leave. Wellbeing focus with tools like Group Income Protection and 24/7 GP access. At Solus, we value inclusivity and welcome all applicants. If you're excited but don't tick every box, we encourage you to apply-your unique skills might be just what we need. We guarantee an interview for disabled applicants meeting the minimum criteria-just email us after applying to let us know. Ready to join us? Apply online today, and our team will be in touch within 14 days.
Senior Cyber Security Analyst DGH Recruitment are currently recruiting on behalf of a leading client in the Professional Services industry who require a Senior Cyber Security Analyst to join the firm in London. Responsibilities: Undertake efficient, effective and proactive day-to-day cybersecurity operations to minimise the risk of a security incident, enabling the firm to do business click apply for full job details
May 29, 2026
Full time
Senior Cyber Security Analyst DGH Recruitment are currently recruiting on behalf of a leading client in the Professional Services industry who require a Senior Cyber Security Analyst to join the firm in London. Responsibilities: Undertake efficient, effective and proactive day-to-day cybersecurity operations to minimise the risk of a security incident, enabling the firm to do business click apply for full job details
Senior Technology Risk AnalystApplylocations: London, UKtime type: Full timeposted on: Posted Todayjob requisition id: R17061 Job Title Senior Technology Risk Analyst Job Description We collaborate with clients across Europe, Asia, Australia and North America, specialising in risks associated with Life, Critical Illness, Income Protection, Hospital Cash and Longevity products. Our clients are insurance or reinsurance companies looking for a new and innovative approach to taking risks.With the security and financial strength of a parent company that has been around for over 145 years and a mutual holding company as our ultimate parent, we are not constrained by short-term thinking; therefore, allowing us to be free to pursue the right course for our clients and our business.Underlying our philosophy is an intelligent approach to taking risks. By recruiting top quality staff and investing in the latest analytical technologies, we believe we are well placed to make those decisions. The Role We have an exciting permanent opportunity available within the Division Centre Technology Risk team, based out of our London office.This role is suited to an experienced professional seeking to deepen their expertise in Technology Risk within a global organisation. You will play a key role in delivering risk management activities, providing subject matter expertise, and driving improvements across technology, risk frameworks, and emerging areas such as AI.Primary responsibilities will include providing technology risk subject matter expertise, support and guidance to the global Technology team, specifically:• Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Analyse and manage incidents and operational events, identify root causes and systemic control weaknesses using data analytics, and drive action plans to completion with effective monitoring, escalation, and senior management reporting, focusing on optimisation and efficiency. • Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Helping to define and maintain key risk indicators, including exploring automated data feeds and AI-driven insights, assisting in the preparation of reporting to divisional senior Technology management, Operational Risk & Resilience, and the Operational Risk Management Committee. • Participating in working groups on specific technology risk topics (e.g. cyber, IT asset management, data management and governance), including the safe adoption of emerging technologies such as AI. • Providing SME input and support to the Technology team with regards to risks, issues and operational events logged in our GRC platform, including opportunities to enhance data quality and workflow automation. • Supporting Technology by acting as a point of contact and "bridge" between them and other lines of defence, such as Operational Risk, Internal Audit, and External Audit. • Driving the modernisation of technology risk processes through the use of automation, data analytics and AI-enabled solutions (e.g. process automation, intelligent risk assessments, enhanced reporting). • Identifying opportunities to improve efficiency, scalability and consistency of risk processes, and supporting the design and implementation of solutions where appropriate. • Supporting client engagement teams through responding to technical due diligence requests from current and potential clients. • Performing risk assessments of new technologies entering the environment, including AI/ML solutions, ensuring that risks are identified and appropriate controls are in place. Skills, Knowledge & Experience Required- Minimum 4 years' experience of working within a risk / audit function - A solid understanding of current technology capabilities, including AI/ML concepts and their associated risks, and a keen interest in staying abreast of emerging technology trends (e.g. AI, automation, quantum computing). - Knowledge of and experience of implementing leading Technology risk framework and practices e.g. ISO27001, COBIT, NIST and supporting methodologies. - Experience or demonstrable interest in applying data analytics, automation, or AI tools to improve risk management processes and reporting. - Ability to manage own time and to work to strict deadlines - Strong organisational, analytical and stakeholder management skills - Detail oriented and well-organised with ability to work independently - Experienced in collaborating at all levels of an enterprise - Effective written and verbal communication from technical team direction to senior management presentations - Experience with undertaking RCSA or similar risk and controls assessments / audits - Creativity and initiative in work product, positive and helpful attitude proposing solutions to resolve problems - Ability to work flexibly to support colleagues that operate out of multiple locations / time-zones - Proficiency in using standard work environment software, such as Microsoft Office Suite Desired - Risk/IT professional certification such as CISA, CRISC, CPA, CISM, Six Sigma - Experience of working within the Insurance / Reinsurance industries - Degree within an IT related or similar discipline - Understanding of GRC platforms (e.g. Archer) - Comfortable operating in a dynamic, evolving environment with competing priorities - Confidence working with incomplete information and forming reasoned risk based conclusions - Experience applying judgement over checklist driven compliance, with an ability to prioritise risk proportionately - Exposure to AI governance, model risk management, or emerging regulatory expectations relating to AI Working For Pacific Life Re Every person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities. Benefits (Only for Permanent and Fixed Term Employees) Leave 25 days of annual leave with option to buy/sell more days Adoption and fertility leave Generous enhanced parental leaveHealthcare Comprehensive private insurance coverage for employee and dependents Group Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salary Optical benefitsSavings & Retirement 15% combined employee/employer contributionsWellness Subsidized gym membership Access to Employee Assistance Program Cycle to Work and Electric Car Salary Sacrifice Scheme Time off for volunteering Charitable matching of employee donations You Can Be Who You Are We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible. Pacific Life Re Values Please click here to view our company values
May 29, 2026
Full time
Senior Technology Risk AnalystApplylocations: London, UKtime type: Full timeposted on: Posted Todayjob requisition id: R17061 Job Title Senior Technology Risk Analyst Job Description We collaborate with clients across Europe, Asia, Australia and North America, specialising in risks associated with Life, Critical Illness, Income Protection, Hospital Cash and Longevity products. Our clients are insurance or reinsurance companies looking for a new and innovative approach to taking risks.With the security and financial strength of a parent company that has been around for over 145 years and a mutual holding company as our ultimate parent, we are not constrained by short-term thinking; therefore, allowing us to be free to pursue the right course for our clients and our business.Underlying our philosophy is an intelligent approach to taking risks. By recruiting top quality staff and investing in the latest analytical technologies, we believe we are well placed to make those decisions. The Role We have an exciting permanent opportunity available within the Division Centre Technology Risk team, based out of our London office.This role is suited to an experienced professional seeking to deepen their expertise in Technology Risk within a global organisation. You will play a key role in delivering risk management activities, providing subject matter expertise, and driving improvements across technology, risk frameworks, and emerging areas such as AI.Primary responsibilities will include providing technology risk subject matter expertise, support and guidance to the global Technology team, specifically:• Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Analyse and manage incidents and operational events, identify root causes and systemic control weaknesses using data analytics, and drive action plans to completion with effective monitoring, escalation, and senior management reporting, focusing on optimisation and efficiency. • Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Helping to define and maintain key risk indicators, including exploring automated data feeds and AI-driven insights, assisting in the preparation of reporting to divisional senior Technology management, Operational Risk & Resilience, and the Operational Risk Management Committee. • Participating in working groups on specific technology risk topics (e.g. cyber, IT asset management, data management and governance), including the safe adoption of emerging technologies such as AI. • Providing SME input and support to the Technology team with regards to risks, issues and operational events logged in our GRC platform, including opportunities to enhance data quality and workflow automation. • Supporting Technology by acting as a point of contact and "bridge" between them and other lines of defence, such as Operational Risk, Internal Audit, and External Audit. • Driving the modernisation of technology risk processes through the use of automation, data analytics and AI-enabled solutions (e.g. process automation, intelligent risk assessments, enhanced reporting). • Identifying opportunities to improve efficiency, scalability and consistency of risk processes, and supporting the design and implementation of solutions where appropriate. • Supporting client engagement teams through responding to technical due diligence requests from current and potential clients. • Performing risk assessments of new technologies entering the environment, including AI/ML solutions, ensuring that risks are identified and appropriate controls are in place. Skills, Knowledge & Experience Required- Minimum 4 years' experience of working within a risk / audit function - A solid understanding of current technology capabilities, including AI/ML concepts and their associated risks, and a keen interest in staying abreast of emerging technology trends (e.g. AI, automation, quantum computing). - Knowledge of and experience of implementing leading Technology risk framework and practices e.g. ISO27001, COBIT, NIST and supporting methodologies. - Experience or demonstrable interest in applying data analytics, automation, or AI tools to improve risk management processes and reporting. - Ability to manage own time and to work to strict deadlines - Strong organisational, analytical and stakeholder management skills - Detail oriented and well-organised with ability to work independently - Experienced in collaborating at all levels of an enterprise - Effective written and verbal communication from technical team direction to senior management presentations - Experience with undertaking RCSA or similar risk and controls assessments / audits - Creativity and initiative in work product, positive and helpful attitude proposing solutions to resolve problems - Ability to work flexibly to support colleagues that operate out of multiple locations / time-zones - Proficiency in using standard work environment software, such as Microsoft Office Suite Desired - Risk/IT professional certification such as CISA, CRISC, CPA, CISM, Six Sigma - Experience of working within the Insurance / Reinsurance industries - Degree within an IT related or similar discipline - Understanding of GRC platforms (e.g. Archer) - Comfortable operating in a dynamic, evolving environment with competing priorities - Confidence working with incomplete information and forming reasoned risk based conclusions - Experience applying judgement over checklist driven compliance, with an ability to prioritise risk proportionately - Exposure to AI governance, model risk management, or emerging regulatory expectations relating to AI Working For Pacific Life Re Every person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities. Benefits (Only for Permanent and Fixed Term Employees) Leave 25 days of annual leave with option to buy/sell more days Adoption and fertility leave Generous enhanced parental leaveHealthcare Comprehensive private insurance coverage for employee and dependents Group Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salary Optical benefitsSavings & Retirement 15% combined employee/employer contributionsWellness Subsidized gym membership Access to Employee Assistance Program Cycle to Work and Electric Car Salary Sacrifice Scheme Time off for volunteering Charitable matching of employee donations You Can Be Who You Are We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible. Pacific Life Re Values Please click here to view our company values
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
May 29, 2026
Full time
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
Senior Technology Risk AnalystApplylocations: London, UKtime type: Full timeposted on: Posted Todayjob requisition id: R17061 Job Title Senior Technology Risk Analyst Job Description We collaborate with clients across Europe, Asia, Australia and North America, specialising in risks associated with Life, Critical Illness, Income Protection, Hospital Cash and Longevity products. Our clients are insurance or reinsurance companies looking for a new and innovative approach to taking risks.With the security and financial strength of a parent company that has been around for over 145 years and a mutual holding company as our ultimate parent, we are not constrained by short-term thinking; therefore, allowing us to be free to pursue the right course for our clients and our business.Underlying our philosophy is an intelligent approach to taking risks. By recruiting top quality staff and investing in the latest analytical technologies, we believe we are well placed to make those decisions. The Role We have an exciting permanent opportunity available within the Division Centre Technology Risk team, based out of our London office.This role is suited to an experienced professional seeking to deepen their expertise in Technology Risk within a global organisation. You will play a key role in delivering risk management activities, providing subject matter expertise, and driving improvements across technology, risk frameworks, and emerging areas such as AI.Primary responsibilities will include providing technology risk subject matter expertise, support and guidance to the global Technology team, specifically:• Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Analyse and manage incidents and operational events, identify root causes and systemic control weaknesses using data analytics, and drive action plans to completion with effective monitoring, escalation, and senior management reporting, focusing on optimisation and efficiency. • Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Helping to define and maintain key risk indicators, including exploring automated data feeds and AI-driven insights, assisting in the preparation of reporting to divisional senior Technology management, Operational Risk & Resilience, and the Operational Risk Management Committee. • Participating in working groups on specific technology risk topics (e.g. cyber, IT asset management, data management and governance), including the safe adoption of emerging technologies such as AI. • Providing SME input and support to the Technology team with regards to risks, issues and operational events logged in our GRC platform, including opportunities to enhance data quality and workflow automation. • Supporting Technology by acting as a point of contact and "bridge" between them and other lines of defence, such as Operational Risk, Internal Audit, and External Audit. • Driving the modernisation of technology risk processes through the use of automation, data analytics and AI-enabled solutions (e.g. process automation, intelligent risk assessments, enhanced reporting). • Identifying opportunities to improve efficiency, scalability and consistency of risk processes, and supporting the design and implementation of solutions where appropriate. • Supporting client engagement teams through responding to technical due diligence requests from current and potential clients. • Performing risk assessments of new technologies entering the environment, including AI/ML solutions, ensuring that risks are identified and appropriate controls are in place. Skills, Knowledge & Experience Required- Minimum 4 years' experience of working within a risk / audit function - A solid understanding of current technology capabilities, including AI/ML concepts and their associated risks, and a keen interest in staying abreast of emerging technology trends (e.g. AI, automation, quantum computing). - Knowledge of and experience of implementing leading Technology risk framework and practices e.g. ISO27001, COBIT, NIST and supporting methodologies. - Experience or demonstrable interest in applying data analytics, automation, or AI tools to improve risk management processes and reporting. - Ability to manage own time and to work to strict deadlines - Strong organisational, analytical and stakeholder management skills - Detail oriented and well-organised with ability to work independently - Experienced in collaborating at all levels of an enterprise - Effective written and verbal communication from technical team direction to senior management presentations - Experience with undertaking RCSA or similar risk and controls assessments / audits - Creativity and initiative in work product, positive and helpful attitude proposing solutions to resolve problems - Ability to work flexibly to support colleagues that operate out of multiple locations / time-zones - Proficiency in using standard work environment software, such as Microsoft Office Suite Desired - Risk/IT professional certification such as CISA, CRISC, CPA, CISM, Six Sigma - Experience of working within the Insurance / Reinsurance industries - Degree within an IT related or similar discipline - Understanding of GRC platforms (e.g. Archer) - Comfortable operating in a dynamic, evolving environment with competing priorities - Confidence working with incomplete information and forming reasoned risk based conclusions - Experience applying judgement over checklist driven compliance, with an ability to prioritise risk proportionately - Exposure to AI governance, model risk management, or emerging regulatory expectations relating to AI Working For Pacific Life Re Every person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities. Benefits (Only for Permanent and Fixed Term Employees) Leave 25 days of annual leave with option to buy/sell more days Adoption and fertility leave Generous enhanced parental leaveHealthcare Comprehensive private insurance coverage for employee and dependents Group Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salary Optical benefitsSavings & Retirement 15% combined employee/employer contributionsWellness Subsidized gym membership Access to Employee Assistance Program Cycle to Work and Electric Car Salary Sacrifice Scheme Time off for volunteering Charitable matching of employee donations You Can Be Who You Are We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible. Pacific Life Re Values Please click here to view our company values
May 29, 2026
Full time
Senior Technology Risk AnalystApplylocations: London, UKtime type: Full timeposted on: Posted Todayjob requisition id: R17061 Job Title Senior Technology Risk Analyst Job Description We collaborate with clients across Europe, Asia, Australia and North America, specialising in risks associated with Life, Critical Illness, Income Protection, Hospital Cash and Longevity products. Our clients are insurance or reinsurance companies looking for a new and innovative approach to taking risks.With the security and financial strength of a parent company that has been around for over 145 years and a mutual holding company as our ultimate parent, we are not constrained by short-term thinking; therefore, allowing us to be free to pursue the right course for our clients and our business.Underlying our philosophy is an intelligent approach to taking risks. By recruiting top quality staff and investing in the latest analytical technologies, we believe we are well placed to make those decisions. The Role We have an exciting permanent opportunity available within the Division Centre Technology Risk team, based out of our London office.This role is suited to an experienced professional seeking to deepen their expertise in Technology Risk within a global organisation. You will play a key role in delivering risk management activities, providing subject matter expertise, and driving improvements across technology, risk frameworks, and emerging areas such as AI.Primary responsibilities will include providing technology risk subject matter expertise, support and guidance to the global Technology team, specifically:• Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Analyse and manage incidents and operational events, identify root causes and systemic control weaknesses using data analytics, and drive action plans to completion with effective monitoring, escalation, and senior management reporting, focusing on optimisation and efficiency. • Coordinating with global professional colleagues to identify risks and assess potential financial, reputational, and operational impacts. • Helping to define and maintain key risk indicators, including exploring automated data feeds and AI-driven insights, assisting in the preparation of reporting to divisional senior Technology management, Operational Risk & Resilience, and the Operational Risk Management Committee. • Participating in working groups on specific technology risk topics (e.g. cyber, IT asset management, data management and governance), including the safe adoption of emerging technologies such as AI. • Providing SME input and support to the Technology team with regards to risks, issues and operational events logged in our GRC platform, including opportunities to enhance data quality and workflow automation. • Supporting Technology by acting as a point of contact and "bridge" between them and other lines of defence, such as Operational Risk, Internal Audit, and External Audit. • Driving the modernisation of technology risk processes through the use of automation, data analytics and AI-enabled solutions (e.g. process automation, intelligent risk assessments, enhanced reporting). • Identifying opportunities to improve efficiency, scalability and consistency of risk processes, and supporting the design and implementation of solutions where appropriate. • Supporting client engagement teams through responding to technical due diligence requests from current and potential clients. • Performing risk assessments of new technologies entering the environment, including AI/ML solutions, ensuring that risks are identified and appropriate controls are in place. Skills, Knowledge & Experience Required- Minimum 4 years' experience of working within a risk / audit function - A solid understanding of current technology capabilities, including AI/ML concepts and their associated risks, and a keen interest in staying abreast of emerging technology trends (e.g. AI, automation, quantum computing). - Knowledge of and experience of implementing leading Technology risk framework and practices e.g. ISO27001, COBIT, NIST and supporting methodologies. - Experience or demonstrable interest in applying data analytics, automation, or AI tools to improve risk management processes and reporting. - Ability to manage own time and to work to strict deadlines - Strong organisational, analytical and stakeholder management skills - Detail oriented and well-organised with ability to work independently - Experienced in collaborating at all levels of an enterprise - Effective written and verbal communication from technical team direction to senior management presentations - Experience with undertaking RCSA or similar risk and controls assessments / audits - Creativity and initiative in work product, positive and helpful attitude proposing solutions to resolve problems - Ability to work flexibly to support colleagues that operate out of multiple locations / time-zones - Proficiency in using standard work environment software, such as Microsoft Office Suite Desired - Risk/IT professional certification such as CISA, CRISC, CPA, CISM, Six Sigma - Experience of working within the Insurance / Reinsurance industries - Degree within an IT related or similar discipline - Understanding of GRC platforms (e.g. Archer) - Comfortable operating in a dynamic, evolving environment with competing priorities - Confidence working with incomplete information and forming reasoned risk based conclusions - Experience applying judgement over checklist driven compliance, with an ability to prioritise risk proportionately - Exposure to AI governance, model risk management, or emerging regulatory expectations relating to AI Working For Pacific Life Re Every person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities. Benefits (Only for Permanent and Fixed Term Employees) Leave 25 days of annual leave with option to buy/sell more days Adoption and fertility leave Generous enhanced parental leaveHealthcare Comprehensive private insurance coverage for employee and dependents Group Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salary Optical benefitsSavings & Retirement 15% combined employee/employer contributionsWellness Subsidized gym membership Access to Employee Assistance Program Cycle to Work and Electric Car Salary Sacrifice Scheme Time off for volunteering Charitable matching of employee donations You Can Be Who You Are We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible. Pacific Life Re Values Please click here to view our company values
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
May 29, 2026
Full time
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
Customer Success ManagerApplylocations: London Office, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: JR101768Darktrace is a global leader in AI for cybersecurity that keeps organizations ahead of the changing threat landscape every day. Founded in 2013, Darktrace provides the essential cybersecurity platform protecting nearly 10,000 organizations from unknown threats using its proprietary AI.The Darktrace Active AI Security PlatformTM delivers a proactive approach to cyber resilience to secure the business across the entire digital estate - from network to cloud to email. Breakthrough innovations from our R&D teams have resulted in over 200 patent applications filed. Darktrace's platform and services are supported by over 2,400 employees around the world. To learn more, visit . Job D escription : In the Customer Success role, you will be managing a variety of named accounts across our global customer base. You will be responsible for driving adoption and outcomes leading to renewals, expansion, and advocacy across your portfolio. Commission will be awarded for increasing Net Revenue Retention (NRR) within your portfolio, by identifying and driving upsells and renewals, based on a quarterly quota. You should have a passion to learn about cybersecurity and AI, while always wanting to deliver the best service to our customers.This role is hybrid with minimum 3 days a week in our London office. What will I be doing: As a Customer Success Manager, you will manage a portfolio of 30-40 existing Darktrace customers to maximize their utility from Darktrace deployments and grow their Annual Recurring Revenue (ARR). You will report to the Director of Customer Success and collaborate with Sales, Technical Resources, and Cyber Threat Analysts. Conduct business reviews with client executive leadership and health checks on the deployment to drive satisfaction and desired business outcomes. Present, discuss, and demonstrate Darktrace cyber threat defense solutions to CISOs and information security experts as required. Identify, nurture, and negotiate upsell and cross-sell opportunities by aligning our suite of products to our customers' evolving use cases and needs. Ensure customers are set up for success and facilitate the renewal at the end of the subscription term. Analyze customer engagement levels to assess risk and execute action plans to progress account health. Manage customer escalations to resolution, leveraging cross-functional teams within the business. Mentor developing Customer Success Managers on the team by sharing best practices and helping ramp up new team members. Build strategic partnerships with Renewal Directors, Sales, Cyber Technology Specialists, and other internal teams to drive alignment and develop tailored solutions for complex accounts. What experience do I need: A minimum of 5 years of experience in a role that encompasses Customer Success, Project Management, Business Development, Technical Account Management, Client Service, or Consulting. Strong communication and presentation skills, with the ability to effectively communicate with senior business professionals across every industry vertical. Familiarity with enterprise networking technology (preferred, not required) and a foundational understanding of cybersecurity concepts. Strong time management skills, self-motivation, and the ability to work effectively as part of a team. Benefits: 23 days' holiday + all public holidays, rising to 25 days after 2 years of service, Additional day off for your birthday, Private medical insurance which covers you, your cohabiting partner and children, Life insurance of 4 times your base salary, Salary sacrifice pension scheme, Enhanced family leave, Confidential Employee Assistance Program, Cycle to work scheme.Our Growth is Creating Great Opportunities! Our team is expanding, and we want to hire the most talented people we can. Continued success depends on it! Once you've had a chance to explore our current open positions, apply to the ones you feel suit you best and keep track of both your progress in the selection process, and new postings that might interest you! Thanks for your interest in working on our team!
May 29, 2026
Full time
Customer Success ManagerApplylocations: London Office, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: JR101768Darktrace is a global leader in AI for cybersecurity that keeps organizations ahead of the changing threat landscape every day. Founded in 2013, Darktrace provides the essential cybersecurity platform protecting nearly 10,000 organizations from unknown threats using its proprietary AI.The Darktrace Active AI Security PlatformTM delivers a proactive approach to cyber resilience to secure the business across the entire digital estate - from network to cloud to email. Breakthrough innovations from our R&D teams have resulted in over 200 patent applications filed. Darktrace's platform and services are supported by over 2,400 employees around the world. To learn more, visit . Job D escription : In the Customer Success role, you will be managing a variety of named accounts across our global customer base. You will be responsible for driving adoption and outcomes leading to renewals, expansion, and advocacy across your portfolio. Commission will be awarded for increasing Net Revenue Retention (NRR) within your portfolio, by identifying and driving upsells and renewals, based on a quarterly quota. You should have a passion to learn about cybersecurity and AI, while always wanting to deliver the best service to our customers.This role is hybrid with minimum 3 days a week in our London office. What will I be doing: As a Customer Success Manager, you will manage a portfolio of 30-40 existing Darktrace customers to maximize their utility from Darktrace deployments and grow their Annual Recurring Revenue (ARR). You will report to the Director of Customer Success and collaborate with Sales, Technical Resources, and Cyber Threat Analysts. Conduct business reviews with client executive leadership and health checks on the deployment to drive satisfaction and desired business outcomes. Present, discuss, and demonstrate Darktrace cyber threat defense solutions to CISOs and information security experts as required. Identify, nurture, and negotiate upsell and cross-sell opportunities by aligning our suite of products to our customers' evolving use cases and needs. Ensure customers are set up for success and facilitate the renewal at the end of the subscription term. Analyze customer engagement levels to assess risk and execute action plans to progress account health. Manage customer escalations to resolution, leveraging cross-functional teams within the business. Mentor developing Customer Success Managers on the team by sharing best practices and helping ramp up new team members. Build strategic partnerships with Renewal Directors, Sales, Cyber Technology Specialists, and other internal teams to drive alignment and develop tailored solutions for complex accounts. What experience do I need: A minimum of 5 years of experience in a role that encompasses Customer Success, Project Management, Business Development, Technical Account Management, Client Service, or Consulting. Strong communication and presentation skills, with the ability to effectively communicate with senior business professionals across every industry vertical. Familiarity with enterprise networking technology (preferred, not required) and a foundational understanding of cybersecurity concepts. Strong time management skills, self-motivation, and the ability to work effectively as part of a team. Benefits: 23 days' holiday + all public holidays, rising to 25 days after 2 years of service, Additional day off for your birthday, Private medical insurance which covers you, your cohabiting partner and children, Life insurance of 4 times your base salary, Salary sacrifice pension scheme, Enhanced family leave, Confidential Employee Assistance Program, Cycle to work scheme.Our Growth is Creating Great Opportunities! Our team is expanding, and we want to hire the most talented people we can. Continued success depends on it! Once you've had a chance to explore our current open positions, apply to the ones you feel suit you best and keep track of both your progress in the selection process, and new postings that might interest you! Thanks for your interest in working on our team!
