Operational Cyber Software Engineer Locations: Gloucester, Manchester or London (Onsite) Employment Type: Full-time or Part-time About the Role We're looking for experienced Software Engineers to join a specialist cyber team delivering high-assurance software for complex security challenges click apply for full job details
Aug 24, 2026
Full time
Operational Cyber Software Engineer Locations: Gloucester, Manchester or London (Onsite) Employment Type: Full-time or Part-time About the Role We're looking for experienced Software Engineers to join a specialist cyber team delivering high-assurance software for complex security challenges click apply for full job details
Position Summary As a SOC Shift Lead, you build on your solid experience as a SOC Analyst by supervising and guiding a team of SOC Analysts during your assigned shift. You ensure quality and consistency across all alerts and incidents handled by the team while serving as the primary point of escalation. In this role, you support team development, drive process improvements, and maintain clear, customer-centric communication with all stakeholders. You also lead quality assurance efforts and ensure that service-level agreements (SLAs) are met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination - You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams (including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation - You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards Quality Assurance and Documentation - You conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency Collaboration and Mentorship - You mentor SOC Analysts in your team by offering regular, constructive feedback on triage processes and best practices. You encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement - You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive improvements that reflect our commitment to transparent and reliable performance Required Qualifications & Experience You may be required to hold or obtain UK Non-Police Personnel Vetting (NPPV) and/or a Security Check (SC) clearance as part of this role Willingness to work towards or obtain intermediate cybersecurity certifications (e.g. SBT BTL2, CREST Registered Intrusion Analyst) Proficiency with SIEM platforms, endpoint security tools, and ticketing systems, with an ability to make clear, data-driven decisions under pressure Critical Competencies - Technical Fit Operating Systems - Possess detailed knowledge of Windows and Linux system architectures, with a clear understanding of how event logs (e.g., Windows Event Viewer, Syslog) reflect system security posture Networking and Protocols - Have a comprehensive understanding of TCP/IP, DNS, DCHP, VPNs, SSL/TLS, and network forensics concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including alert correlation, the design of automated detection rules, and the interpretation of aggregated security data Incident Triage - Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence - how feeds are sourced, what constitutes actionable information, and how malware indicators are defined Scripting and Automation - Understand the concepts behind using scripting for automating regular data extraction and log analysis, and the benefits such tools being to maintaining consistency in alert handling Benefits At Claranet, we go the extra mile with our people-because we believe in building a workplace where everyone feels valued and supported. What makes us unique is Team Claranet , our internal community that supports causes close to our employees' hearts. We offer paid charity leave, support local charities across our offices, and host annual fundraising events, all backed by a dedicated committee. We're proud founding members of TC4RE (Technology Community for Racial Equality) working collectively to build a more diverse and inclusive tech industry. About Claranet Founded at the beginning of the dot com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries. Equal Opportunities Statement Diversity, equity and inclusion are at the heart of what we value as an organisation. Claranet is an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, age, disability or any other status protected by law. Our recruitment team are happy to support any reasonable adjustments that are needed within the recruitment process. Ready to take the next step in your career with Claranet? Click 'apply' - we can't wait to meet you! To view full job description please visit our careers page
Aug 24, 2026
Full time
Position Summary As a SOC Shift Lead, you build on your solid experience as a SOC Analyst by supervising and guiding a team of SOC Analysts during your assigned shift. You ensure quality and consistency across all alerts and incidents handled by the team while serving as the primary point of escalation. In this role, you support team development, drive process improvements, and maintain clear, customer-centric communication with all stakeholders. You also lead quality assurance efforts and ensure that service-level agreements (SLAs) are met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination - You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams (including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation - You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards Quality Assurance and Documentation - You conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency Collaboration and Mentorship - You mentor SOC Analysts in your team by offering regular, constructive feedback on triage processes and best practices. You encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement - You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive improvements that reflect our commitment to transparent and reliable performance Required Qualifications & Experience You may be required to hold or obtain UK Non-Police Personnel Vetting (NPPV) and/or a Security Check (SC) clearance as part of this role Willingness to work towards or obtain intermediate cybersecurity certifications (e.g. SBT BTL2, CREST Registered Intrusion Analyst) Proficiency with SIEM platforms, endpoint security tools, and ticketing systems, with an ability to make clear, data-driven decisions under pressure Critical Competencies - Technical Fit Operating Systems - Possess detailed knowledge of Windows and Linux system architectures, with a clear understanding of how event logs (e.g., Windows Event Viewer, Syslog) reflect system security posture Networking and Protocols - Have a comprehensive understanding of TCP/IP, DNS, DCHP, VPNs, SSL/TLS, and network forensics concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including alert correlation, the design of automated detection rules, and the interpretation of aggregated security data Incident Triage - Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence - how feeds are sourced, what constitutes actionable information, and how malware indicators are defined Scripting and Automation - Understand the concepts behind using scripting for automating regular data extraction and log analysis, and the benefits such tools being to maintaining consistency in alert handling Benefits At Claranet, we go the extra mile with our people-because we believe in building a workplace where everyone feels valued and supported. What makes us unique is Team Claranet , our internal community that supports causes close to our employees' hearts. We offer paid charity leave, support local charities across our offices, and host annual fundraising events, all backed by a dedicated committee. We're proud founding members of TC4RE (Technology Community for Racial Equality) working collectively to build a more diverse and inclusive tech industry. About Claranet Founded at the beginning of the dot com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries. Equal Opportunities Statement Diversity, equity and inclusion are at the heart of what we value as an organisation. Claranet is an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, age, disability or any other status protected by law. Our recruitment team are happy to support any reasonable adjustments that are needed within the recruitment process. Ready to take the next step in your career with Claranet? Click 'apply' - we can't wait to meet you! To view full job description please visit our careers page
About the job Job summary Discover what it's like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here. HMRC's Fraud Investigation Service (FIS) is responsible for the department's civil and criminal investigations. Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. Job description As a Digital Portfolio Manager in the Capability Development, Infrastructure and Innovation team within CODE, you will play a crucial role in supporting His Majesty's Government in the fight against serious and organised crime. Your work will directly contribute to high-profile investigations, helping to recover and protect hundreds of millions of pounds annually through innovative technical solutions. The team manages a diverse and rapidly expanding portfolio of projects, ranging from the development of bespoke forensic tools tailored to highly specific investigative needs, to the design and implementation of scalable data visualisation platforms that enhance analytical capabilities. You will collaborate closely with law enforcement agencies, intelligence teams, and external partners to ensure that cutting-edge technology is leveraged effectively in tackling financial crime, cyber threats, and fraud. This role offers an exciting opportunity to work at the forefront of data engineering within a mission-driven environment, where your expertise will help shape the future of digital investigations and forensic analysis. Person specification The CODE Tech Portfolio Office (PO) is a critical enabler of both project delivery and business as usual across CODE's responsibilities. The Portfolio Office acts as the fulcrum between business needs, project delivery, suppliers, commercial processes, and external partners, ensuring that complex, sensitive, and high risk technology initiatives are aligned, governed, and delivered effectively. This role supports the Portfolio Lead by taking delegated responsibility for defined elements of portfolio coordination, commercial and supplier engagement, project stewardship, and stakeholder management. The post holder will operate across all CODE's environments and work closely with internal delivery teams, commercial colleagues, external suppliers, and UK and international partners. This role aligns to the Digital Portfolio Manager profession and capability framework, with a focus on supporting and enabling portfolio level outcomes more than direct project management. Key Responsibilities Portfolio Coordination and Planning Support the coordination of the CODE Tech portfolio, ensuring alignment between business requirements, delivery activity, supplier capability, and strategic outcomes. Contribute to portfolio planning, prioritisation, and analysis, supporting the development and maintenance of a coherent, deliverable pipeline of work. Provide subject matter expertise on the interaction between requirements, supplier solutions, and delivery outcomes, supporting informed decision making across the portfolio. Commercial and Supplier Engagement Undertake delegated commercial and supplier management activity, including smaller and less complex commercial engagements arising from projects and BAU activity. Work closely with CODE Commercial and Departmental Commercial teams to coordinate activity and ensure effective hand offs and shared visibility of upcoming demands. Maintain portfolio level oversight of supplier engagement where activity is constrained by classification, ensuring that requirements are articulated and translated appropriately for wider commercial use. Engage directly with suppliers and partners under the direction of the Portfolio Lead. Project and Delivery Stewardship Provide portfolio level stewardship of projects, supporting effective engagement between project managers, suppliers, and business stakeholders. Undertake delegated responsibility for regulatory engagement related to the portfolio, including coordinating inspections and associated portfolio level responses. Support problem management post implementation, acting as a subject matter expert to assist service and support functions where required. Deputise for the Portfolio Lead at selected internal and external meetings, representing HMRC interests where appropriate. Stakeholder Management and Collaboration Engage with a wide range of internal and external stakeholders, including delivery teams, business management, commercial colleagues, regulators, and UK or international. Support cross functional collaboration to ensure that portfolio activity is joined up, well understood, and effectively governed. Contribute to clear communication of portfolio priorities, risks, and constraints to stakeholders. Continuous Improvement and Portfolio Maturity Contribute to the development and maturity of the CODE Tech Portfolio Office, supporting rebalancing of workload and improved resilience. Identify opportunities to improve portfolio processes, governance, and ways of working, particularly in sensitive environments. Essential Criteria: Experience working in or supporting a portfolio, programme, or complex delivery environment, ideally from a digital or civils background, rather than single project delivery. Experience of stakeholder management across multiple functions, including delivery, commercial, and external partners. Experience of using the relationship between business requirements, supplier capability, and delivery outcomes. Experience supporting or coordinating commercial or supplier engagement within a structured governance framework Experience of working confidently with sensitive and classified information, exercising sound judgement and discretion. Strong organisational and analytical skills, with the ability to manage competing priorities. Familiarity with Government or large organisation commercial processes and working alongside commercial teams. Additional Security Information The successful candidate will be required to apply for Developed Vetting (DV) clearance level once in post but must already hold or be willing to obtain Security Check (SC) clearance level before starting the role. In addition to the standard pre-employment checks for appointment into the Civil Service, all candidates must also obtain National Security Vetting at Security Check (SC) clearance level for this vacancy. You will normally need to meet the minimum UK residency period as determined by the level of vetting being undertaken, which for SC is 5 years UK residency prior to your vetting application. Once in post you will be required to apply for Developed Vetting ( DV ) clearance which has a requirement for 10 years UK residency. If you have any questions about this residency requirement, please speak to the vacancy holder for this post. This post is open to 'UK Nationals Only' Technical skills We'll assess you against these technical skills during the selection process: Stakeholder relationship management Agile working Governance and assurance. Benefits Alongside your salary of £50,686, HM Revenue and Customs contributes £14,683 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window). HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs. We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days. Pension - We make contributions to our colleagues' Alpha pension equal to at least 28.97% of their salary. Family friendly policies. Personal support. Coaching and development. To find out more about HMRC benefits and find out what it's really like to work for HMRC hear from our insiders or visit Thinking of joining the Civil Service Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use. Selection process details . click apply for full job details
Aug 24, 2026
Full time
About the job Job summary Discover what it's like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here. HMRC's Fraud Investigation Service (FIS) is responsible for the department's civil and criminal investigations. Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. Job description As a Digital Portfolio Manager in the Capability Development, Infrastructure and Innovation team within CODE, you will play a crucial role in supporting His Majesty's Government in the fight against serious and organised crime. Your work will directly contribute to high-profile investigations, helping to recover and protect hundreds of millions of pounds annually through innovative technical solutions. The team manages a diverse and rapidly expanding portfolio of projects, ranging from the development of bespoke forensic tools tailored to highly specific investigative needs, to the design and implementation of scalable data visualisation platforms that enhance analytical capabilities. You will collaborate closely with law enforcement agencies, intelligence teams, and external partners to ensure that cutting-edge technology is leveraged effectively in tackling financial crime, cyber threats, and fraud. This role offers an exciting opportunity to work at the forefront of data engineering within a mission-driven environment, where your expertise will help shape the future of digital investigations and forensic analysis. Person specification The CODE Tech Portfolio Office (PO) is a critical enabler of both project delivery and business as usual across CODE's responsibilities. The Portfolio Office acts as the fulcrum between business needs, project delivery, suppliers, commercial processes, and external partners, ensuring that complex, sensitive, and high risk technology initiatives are aligned, governed, and delivered effectively. This role supports the Portfolio Lead by taking delegated responsibility for defined elements of portfolio coordination, commercial and supplier engagement, project stewardship, and stakeholder management. The post holder will operate across all CODE's environments and work closely with internal delivery teams, commercial colleagues, external suppliers, and UK and international partners. This role aligns to the Digital Portfolio Manager profession and capability framework, with a focus on supporting and enabling portfolio level outcomes more than direct project management. Key Responsibilities Portfolio Coordination and Planning Support the coordination of the CODE Tech portfolio, ensuring alignment between business requirements, delivery activity, supplier capability, and strategic outcomes. Contribute to portfolio planning, prioritisation, and analysis, supporting the development and maintenance of a coherent, deliverable pipeline of work. Provide subject matter expertise on the interaction between requirements, supplier solutions, and delivery outcomes, supporting informed decision making across the portfolio. Commercial and Supplier Engagement Undertake delegated commercial and supplier management activity, including smaller and less complex commercial engagements arising from projects and BAU activity. Work closely with CODE Commercial and Departmental Commercial teams to coordinate activity and ensure effective hand offs and shared visibility of upcoming demands. Maintain portfolio level oversight of supplier engagement where activity is constrained by classification, ensuring that requirements are articulated and translated appropriately for wider commercial use. Engage directly with suppliers and partners under the direction of the Portfolio Lead. Project and Delivery Stewardship Provide portfolio level stewardship of projects, supporting effective engagement between project managers, suppliers, and business stakeholders. Undertake delegated responsibility for regulatory engagement related to the portfolio, including coordinating inspections and associated portfolio level responses. Support problem management post implementation, acting as a subject matter expert to assist service and support functions where required. Deputise for the Portfolio Lead at selected internal and external meetings, representing HMRC interests where appropriate. Stakeholder Management and Collaboration Engage with a wide range of internal and external stakeholders, including delivery teams, business management, commercial colleagues, regulators, and UK or international. Support cross functional collaboration to ensure that portfolio activity is joined up, well understood, and effectively governed. Contribute to clear communication of portfolio priorities, risks, and constraints to stakeholders. Continuous Improvement and Portfolio Maturity Contribute to the development and maturity of the CODE Tech Portfolio Office, supporting rebalancing of workload and improved resilience. Identify opportunities to improve portfolio processes, governance, and ways of working, particularly in sensitive environments. Essential Criteria: Experience working in or supporting a portfolio, programme, or complex delivery environment, ideally from a digital or civils background, rather than single project delivery. Experience of stakeholder management across multiple functions, including delivery, commercial, and external partners. Experience of using the relationship between business requirements, supplier capability, and delivery outcomes. Experience supporting or coordinating commercial or supplier engagement within a structured governance framework Experience of working confidently with sensitive and classified information, exercising sound judgement and discretion. Strong organisational and analytical skills, with the ability to manage competing priorities. Familiarity with Government or large organisation commercial processes and working alongside commercial teams. Additional Security Information The successful candidate will be required to apply for Developed Vetting (DV) clearance level once in post but must already hold or be willing to obtain Security Check (SC) clearance level before starting the role. In addition to the standard pre-employment checks for appointment into the Civil Service, all candidates must also obtain National Security Vetting at Security Check (SC) clearance level for this vacancy. You will normally need to meet the minimum UK residency period as determined by the level of vetting being undertaken, which for SC is 5 years UK residency prior to your vetting application. Once in post you will be required to apply for Developed Vetting ( DV ) clearance which has a requirement for 10 years UK residency. If you have any questions about this residency requirement, please speak to the vacancy holder for this post. This post is open to 'UK Nationals Only' Technical skills We'll assess you against these technical skills during the selection process: Stakeholder relationship management Agile working Governance and assurance. Benefits Alongside your salary of £50,686, HM Revenue and Customs contributes £14,683 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window). HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs. We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days. Pension - We make contributions to our colleagues' Alpha pension equal to at least 28.97% of their salary. Family friendly policies. Personal support. Coaching and development. To find out more about HMRC benefits and find out what it's really like to work for HMRC hear from our insiders or visit Thinking of joining the Civil Service Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use. Selection process details . click apply for full job details
The Company Lab 1 is a fast-growing cybersecurity startup, which identifies and interprets exposed data on behalf of our clients. Lab 1's AI SaaS platform analyses the full corpus of exposed corporate data in near real time, providing customers with the assurance that they'll know the unknown and reducing the risk, cost and anxiety associated with exposed data across complex supply chains. Salary is industry competitive (dependent on skills and experience), after a qualifying period you may be eligible for a share in the company through an options grant. The Role Using the power of AI and Machine Learning, we deliver compromised data intelligence on any company within any supply chain. The data that powers those insights, a vast, messy, constantly changing corpus of exposed and compromised information, is the heart of our product. We are hiring a Senior Data Engineer to own and evolve the pipelines and data platform that turn raw exposed data into reliable, queryable intelligence. You will design, build and operate the batch and streaming systems that ingest, transform, model and serve data at scale, feeding our analytics, our ML models and our customer-facing platform. You will be the go-to expert for how data moves through Lab 1, working closely with founders, platform and software engineers in a small, friendly, international team. We are looking for a versatile and proactive engineer who cares deeply about data quality, correctness and scale. Your primary focus will be owning our data pipelines end to end, while also working alongside our ML efforts on the early stages of the training pipeline (data cleaning and feature engineering) to make sure our models are built on trustworthy, well-structured data As a core member of the engineering team, your mission will be to make our data trustworthy, timely and easy to build on.You will spend your time understanding how the team and our models consume data, architecting robust pipelines, and delivering clean, well-modelled datasets that let us ship high-quality intelligence faster and more safely. Your work will be the foundation that enables us to solve some of our most interesting, urgent, and taxing problems. You will report to the Chief Data Officer. Required demonstrable experience in: Designing, building and operating production data pipelines end to end, across both batch and streaming Strong Python for data engineering, including hands-on PySpark at scale (AWS EMR) Strong SQL modelling, transforming and querying large datasets Streaming data with Kafka Ingesting large, heterogeneous, unclean data from many sources and making it reliable Lakehouse and data warehousing patterns: Apache Iceberg, Athena, S3, columnar formats (ORC) Workflow orchestration with Airflow Search and indexing with OpenSearch Infrastructure as Code, specifically Terraform Managing core AWS services Building and maintaining CI/CD pipelines, ideally with GitHub Actions Data quality, observability, lineage and cost awareness through effective monitoring Supporting ML/AI workflows through data cleaning and feature engineering for training pipelines We primarily work with: Python (Poetry, migrating to uv) PySpark on AWS EMR SQL Kafka Athena + S3 / Apache Iceberg (ORC) OpenSearch Airflow AWS Terraform GitHub Actions Docker We are interested in candidates who value: Team working Delivering measurable high quality software Keeping sight of the big picture Friendly technical discussions and whiteboarding This is a great opportunity to join a fast growing company at an early stage and make a significant contribution. The role will be remunerated through a salary and, after a qualifying period, you will be granted a meaningful share in the company through an options grant. Candidates must have the right to work in the United Kingdom. The role is remote first with occasional in-person meetings in London (or Norwich). Benefits 1. Company pension 2. Company options scheme
Aug 24, 2026
Full time
The Company Lab 1 is a fast-growing cybersecurity startup, which identifies and interprets exposed data on behalf of our clients. Lab 1's AI SaaS platform analyses the full corpus of exposed corporate data in near real time, providing customers with the assurance that they'll know the unknown and reducing the risk, cost and anxiety associated with exposed data across complex supply chains. Salary is industry competitive (dependent on skills and experience), after a qualifying period you may be eligible for a share in the company through an options grant. The Role Using the power of AI and Machine Learning, we deliver compromised data intelligence on any company within any supply chain. The data that powers those insights, a vast, messy, constantly changing corpus of exposed and compromised information, is the heart of our product. We are hiring a Senior Data Engineer to own and evolve the pipelines and data platform that turn raw exposed data into reliable, queryable intelligence. You will design, build and operate the batch and streaming systems that ingest, transform, model and serve data at scale, feeding our analytics, our ML models and our customer-facing platform. You will be the go-to expert for how data moves through Lab 1, working closely with founders, platform and software engineers in a small, friendly, international team. We are looking for a versatile and proactive engineer who cares deeply about data quality, correctness and scale. Your primary focus will be owning our data pipelines end to end, while also working alongside our ML efforts on the early stages of the training pipeline (data cleaning and feature engineering) to make sure our models are built on trustworthy, well-structured data As a core member of the engineering team, your mission will be to make our data trustworthy, timely and easy to build on.You will spend your time understanding how the team and our models consume data, architecting robust pipelines, and delivering clean, well-modelled datasets that let us ship high-quality intelligence faster and more safely. Your work will be the foundation that enables us to solve some of our most interesting, urgent, and taxing problems. You will report to the Chief Data Officer. Required demonstrable experience in: Designing, building and operating production data pipelines end to end, across both batch and streaming Strong Python for data engineering, including hands-on PySpark at scale (AWS EMR) Strong SQL modelling, transforming and querying large datasets Streaming data with Kafka Ingesting large, heterogeneous, unclean data from many sources and making it reliable Lakehouse and data warehousing patterns: Apache Iceberg, Athena, S3, columnar formats (ORC) Workflow orchestration with Airflow Search and indexing with OpenSearch Infrastructure as Code, specifically Terraform Managing core AWS services Building and maintaining CI/CD pipelines, ideally with GitHub Actions Data quality, observability, lineage and cost awareness through effective monitoring Supporting ML/AI workflows through data cleaning and feature engineering for training pipelines We primarily work with: Python (Poetry, migrating to uv) PySpark on AWS EMR SQL Kafka Athena + S3 / Apache Iceberg (ORC) OpenSearch Airflow AWS Terraform GitHub Actions Docker We are interested in candidates who value: Team working Delivering measurable high quality software Keeping sight of the big picture Friendly technical discussions and whiteboarding This is a great opportunity to join a fast growing company at an early stage and make a significant contribution. The role will be remunerated through a salary and, after a qualifying period, you will be granted a meaningful share in the company through an options grant. Candidates must have the right to work in the United Kingdom. The role is remote first with occasional in-person meetings in London (or Norwich). Benefits 1. Company pension 2. Company options scheme
Different Technologies Pty Ltd.
Cheltenham, Gloucestershire
Daintta are a rapidly growing, values-driven team of specialists who work with government clients across Cyber, Telecommunications and Data. We are seeking a talented and motivated Cyber Security Technical Security Consultant to join our team and contribute to our mission of protecting the UK through data-driven insights and solutions. As a technical Consultant, you will be expected to demonstrate versatility as you work closely with our public sector clients, governmental departments and project teams. You will be expected to help design, document, and build secure networks or systems: solving some of the UK's most exciting cyber security challenges. What's in it for you? You will be joining the company at Daintta "Consultant" grade. In addition to being rewarded fairly for your contribution to the business, you get to work in a dynamic organisation that is agile and responsive. A business that is growing fast and where you get to drive and shape the future. A place where you are respected by everyone and your voice is important. Somewhere where you can be innovative and creative. A place where you have the opportunity to learn about all aspects of business from marketing to sales, to delivery and business operations. Key Responsibilities Developing, justifying and implementing organisational and system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment and operations to reduce risk and ensure compliance, including: Developing or supporting the development of secure solution designs to mitigate the risks posed by new technologies and business practices Supporting third-party and supply chain security assessments, including vendor due diligence, secure procurement, software supply chain risk and ongoing assurance of externally sourced technology Applying identity-led and zero trust security principles, including strong authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks Assessing your client's' needs, understanding how their needs may differ from their wants, and appropriately managing stakeholder relationships Delivering high-quality work to agreed milestones, and adapting quickly to unfamiliar client environments. Supporting the technical aspects of client engagements, including pitches and presentations Helping to support & grow Daintta by actively inputting into the company strategy and helping to shape our future Representing us and our core values: Transparency, fairness and being daring. Skills/Knowledge You have relevant and recent practical experience in cyber security engineering, architecture, design or technical assurance, and can apply that knowledge credibly in client-facing consulting engagements You have worked in technical client deliveries across a range of cyber security related projects You understand technical controls and business risk You can demonstrate working-level experience in one or more of the following domains: Security Architecture; Security Operations; Identity & Access Management; Cloud, Infrastructure and Platform Security; Network and Connectivity Security; Application Security and DevSecOps; Data Security and Privacy; Governance, Risk & Compliance; You have experience embedding security into agile, DevSecOps and iterative delivery models, including design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills at both the business and technical level You have UK security clearance at SC or above or are eligible and willing to go through clearance You have experience working with security controls within cloud-based infrastructure (e.g Azure, AWS, GCP). This may include design, configuration, or protective monitoring. Knowledge of digital identity and authentication systems Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where sensitive, regulated or operationally critical data is involved Understanding of security risks and controls for AI-enabled systems, including data governance, access control, prompt injection, model misuse, third-party AI services and monitoring of sensitive data exposure Application and governance of fine grained access control and permissions Experience in UK Gov't public sector or defence Location? Hybrid, with 2-3 days working from Daintta office or on client site as required. We believe in supporting our people both professionally and personally. Here's what you can expect when you join us: Time Off: 25 days annual leave, plus bank holidays Up to 5 days annual training leave with a dedicated training budget Up to 3 days annual volunteering leave - give back to the community Competitive maternity, paternity, shared parental leave & compassionate leave Employee Assistance Programme - 24/7 support services £2,000 Flex Cash Allowance, paid pro-rata over the year Discretionary company awards and bonuses, based on performance and company targets Professional Development Up to £1,000 annual training budget (access to additional training and development budget via business case) Up to 5 days annual training leave 1 professional membership paid annually Up to £200 of additional IT budget for new joiners Free breakfast every Tuesday in the London office Fortnightly drinks - in London Regular social events, quizzes, and guest workshops Huckletree perks - including gym and restaurant discounts Employee referral programme Monthly breakfast club in our Cheltenham office Security Information Due to clients' requirements, all applications are strictly subject to security clearance requirements relevant to the role.
Aug 24, 2026
Full time
Daintta are a rapidly growing, values-driven team of specialists who work with government clients across Cyber, Telecommunications and Data. We are seeking a talented and motivated Cyber Security Technical Security Consultant to join our team and contribute to our mission of protecting the UK through data-driven insights and solutions. As a technical Consultant, you will be expected to demonstrate versatility as you work closely with our public sector clients, governmental departments and project teams. You will be expected to help design, document, and build secure networks or systems: solving some of the UK's most exciting cyber security challenges. What's in it for you? You will be joining the company at Daintta "Consultant" grade. In addition to being rewarded fairly for your contribution to the business, you get to work in a dynamic organisation that is agile and responsive. A business that is growing fast and where you get to drive and shape the future. A place where you are respected by everyone and your voice is important. Somewhere where you can be innovative and creative. A place where you have the opportunity to learn about all aspects of business from marketing to sales, to delivery and business operations. Key Responsibilities Developing, justifying and implementing organisational and system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting/adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment and operations to reduce risk and ensure compliance, including: Developing or supporting the development of secure solution designs to mitigate the risks posed by new technologies and business practices Supporting third-party and supply chain security assessments, including vendor due diligence, secure procurement, software supply chain risk and ongoing assurance of externally sourced technology Applying identity-led and zero trust security principles, including strong authentication, least privilege, contextual access control and segmentation of services, users and devices Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks Assessing your client's' needs, understanding how their needs may differ from their wants, and appropriately managing stakeholder relationships Delivering high-quality work to agreed milestones, and adapting quickly to unfamiliar client environments. Supporting the technical aspects of client engagements, including pitches and presentations Helping to support & grow Daintta by actively inputting into the company strategy and helping to shape our future Representing us and our core values: Transparency, fairness and being daring. Skills/Knowledge You have relevant and recent practical experience in cyber security engineering, architecture, design or technical assurance, and can apply that knowledge credibly in client-facing consulting engagements You have worked in technical client deliveries across a range of cyber security related projects You understand technical controls and business risk You can demonstrate working-level experience in one or more of the following domains: Security Architecture; Security Operations; Identity & Access Management; Cloud, Infrastructure and Platform Security; Network and Connectivity Security; Application Security and DevSecOps; Data Security and Privacy; Governance, Risk & Compliance; You have experience embedding security into agile, DevSecOps and iterative delivery models, including design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills at both the business and technical level You have UK security clearance at SC or above or are eligible and willing to go through clearance You have experience working with security controls within cloud-based infrastructure (e.g Azure, AWS, GCP). This may include design, configuration, or protective monitoring. Knowledge of digital identity and authentication systems Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where sensitive, regulated or operationally critical data is involved Understanding of security risks and controls for AI-enabled systems, including data governance, access control, prompt injection, model misuse, third-party AI services and monitoring of sensitive data exposure Application and governance of fine grained access control and permissions Experience in UK Gov't public sector or defence Location? Hybrid, with 2-3 days working from Daintta office or on client site as required. We believe in supporting our people both professionally and personally. Here's what you can expect when you join us: Time Off: 25 days annual leave, plus bank holidays Up to 5 days annual training leave with a dedicated training budget Up to 3 days annual volunteering leave - give back to the community Competitive maternity, paternity, shared parental leave & compassionate leave Employee Assistance Programme - 24/7 support services £2,000 Flex Cash Allowance, paid pro-rata over the year Discretionary company awards and bonuses, based on performance and company targets Professional Development Up to £1,000 annual training budget (access to additional training and development budget via business case) Up to 5 days annual training leave 1 professional membership paid annually Up to £200 of additional IT budget for new joiners Free breakfast every Tuesday in the London office Fortnightly drinks - in London Regular social events, quizzes, and guest workshops Huckletree perks - including gym and restaurant discounts Employee referral programme Monthly breakfast club in our Cheltenham office Security Information Due to clients' requirements, all applications are strictly subject to security clearance requirements relevant to the role.
Ready to Own More Than the Ticket Queue? You've built solid 3rd Line infrastructure experience. You know how to get to the bottom of complex technical problems, understand the importance of security and you're ready for more ownership. This could be that step. Join Bulk , one of Europe's leading active nutrition brands, and take ownership across the infrastructure and cyber security environment supporting our fast-moving digital business. You'll work across cloud, networks, endpoints and security, strengthen our email security, help lead our upcoming Cyber Essentials project and tackle the security challenges that come with our rapidly evolving use of AI. We're ahead of the curve when it comes to building with AI, so you'll get extensive exposure to new tools, integrations and systems - with the freedom to get involved in other technical projects as the business evolves. If you're a strong 3rd Line Engineer with cyber security credentials who's ready to broaden your remit and take genuine ownership, we'd love to hear from you. The Role at a Glance IT Infrastructure & Cyber Security Engineer Colchester, Essex Hybrid - 3 Days Office / 2 Days Home Occasional out-of-hours working and travel to London will be required. Competitive Salary + Excellent Benefits Full Time Permanent Focus: Infrastructure Cyber Security Cloud AI Enablement Your Background / Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are Bulk is on an incredible journey, with a mission to evolve from a manufacturing-led retailer into a destination brand for active nutrition. We're shaking up the sports nutrition industry through innovative products, disruptive marketing and bold digital thinking that encourages people to see our brand differently. We want passionate risk-takers. People who challenge our thinking, live and breathe digital and aren't afraid to find a better way of doing things. And as our technology continues to evolve - particularly through AI - we need the infrastructure and security behind it to evolve just as quickly. The Opportunity As our IT Infrastructure & Cyber Security Engineer, you'll take ownership of Bulk's infrastructure and cyber security environment, supported by our IT Service Desk Team Lead and wider team. This is a broad, hands-on technical role with some clear priorities. You'll help upgrade our email security, manage the security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. And we're not expecting you to walk through the door knowing every technology on our list. We're looking for someone with strong infrastructure foundations and genuine cyber security capability who can demonstrate experience across roughly 80% of our technical environment, with the curiosity and ability to pick up the rest. What You'll Be Doing Infrastructure • Manage and maintain Bulk s on-premise and cloud infrastructure, including Azure, Google Workspace, networks, firewalls and VPNs. • Ensure systems are secure, reliable, resilient and up to date. • Lead infrastructure projects from planning through to deployment, including budgets and contracts. • Provide Tier 3 support for complex issues and maintain clear technical documentation and handovers. • Support wider technical projects as business requirements evolve. Cyber Security • Develop and improve Bulk s security environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work with stakeholders to implement secure technology solutions. AI Tooling & Security • Support the secure adoption and scaling of AI tools across Bulk. • Manage AI platforms including Claude Code, GitHub Copilot, Codex-style tools, MCP servers, integrations and connectors. • Own user access, permissions and governance, applying least-privilege principles. • Support teams onboarding new AI technologies, balancing innovation and productivity with security and compliance. • Develop appropriate controls as agentic AI, MCP and connector-based technologies evolve. About You You're probably already operating at strong 3rd Line Engineer level and looking for the opportunity to take broader ownership across infrastructure and cyber security. You enjoy getting hands-on with technology, but you're also interested in the bigger picture - resilience, security, risk, projects and how technology can enable the business to move faster. You don't need to tick every technology box. Breadth, strong foundations and the ability to learn matter here. You'll likely bring: • Around 2-3 years' experience in a similar role, operating at 3rd Line Engineer level or equivalent. • At least one cyber security certification. • Hands-on experience across approximately 80% of the technologies and environments outlined within this advert. • Strong infrastructure experience spanning cloud and on-premise environments. • Good working knowledge of Azure, Google Workspace, networking, endpoint management and security. • Experience across technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs. • Strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation. • Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001. • The confidence and technical capability to handle complex Tier 3 escalations. • Strong problem-solving skills and a proactive approach to improving infrastructure and security. • Excellent communication skills and the confidence to work with colleagues, suppliers and senior leadership. • Willingness to undertake occasional out-of-hours work and travel to London. Even Better If You Bring • Hands-on experience administering AI coding or agent tools, including Claude Code, GitHub Copilot or Codex. • Experience configuring MCP servers, connectors, permissions and access controls. • Familiarity with emerging agentic AI infrastructure and its associated security considerations. • Experience working with Netskope. • Hands-on Netskope CASB/SSE experience covering areas such as SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design and SCIM-based provisioning. • ITIL or project management certification such as PRINCE2. • Additional cyber security certifications such as CISSP, CISM or CompTIA. Why Join Bulk ? This is a great opportunity if you're ready to move beyond traditional 3rd Line support and build broader experience across infrastructure, cyber security and AI. You'll have genuine ownership, support from the wider IT team and exposure to a broad technology landscape within a business that's actively embracing new ways of working. Because Bulk is already pushing ahead with AI, you'll also be solving security and infrastructure challenges that many businesses haven't encountered yet. You'll also enjoy: • Monthly Bulk Bank Benefits Allowance, including subsidised gym membership. • 60% discount on Bulk products. • Birthday day off. • PerkBox subscription. • Flexi Start. • Optional additional annual leave. • Teammate pension scheme. • Life Assurance. • Medicash. • Volunteering day. • Cycle to Work Scheme. • Enhanced maternity and paternity leave. • Workplace nursery scheme. • Fully stocked Bulk Pantry. • Happy Hour drinks fridge on Thursdays and Fridays. • Summer working hours. • Hybrid working - 3 days in the Colchester office / 2 days from home. Your Experience / Background / Previous Roles May Include 3rd Line Engineer, Senior 3rd Line Engineer, Infrastructure Engineer, IT Infrastructure Engineer, Infrastructure & Security Engineer, IT Security Engineer, Systems & Security Engineer, Senior IT Engineer, Cloud Infrastructure Engineer, Cyber Security Engineer or Infrastructure Support Engineer. Apply Now If you've built strong 3rd Line foundations and you're ready for a role where you can take genuine ownership across infrastructure, cyber security and emerging AI technology, we'd love to hear from you. Bring your technical breadth, security mindset and curiosity about what's coming next - and help build the resilient, secure technology foundation behind Bulk's continued growth. Bulk is an equal opportunities employer and is committed to building a diverse and inclusive team. We welcome applications regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any other protected characteristic. Application notice We take your privacy seriously . click apply for full job details
Aug 24, 2026
Full time
Ready to Own More Than the Ticket Queue? You've built solid 3rd Line infrastructure experience. You know how to get to the bottom of complex technical problems, understand the importance of security and you're ready for more ownership. This could be that step. Join Bulk , one of Europe's leading active nutrition brands, and take ownership across the infrastructure and cyber security environment supporting our fast-moving digital business. You'll work across cloud, networks, endpoints and security, strengthen our email security, help lead our upcoming Cyber Essentials project and tackle the security challenges that come with our rapidly evolving use of AI. We're ahead of the curve when it comes to building with AI, so you'll get extensive exposure to new tools, integrations and systems - with the freedom to get involved in other technical projects as the business evolves. If you're a strong 3rd Line Engineer with cyber security credentials who's ready to broaden your remit and take genuine ownership, we'd love to hear from you. The Role at a Glance IT Infrastructure & Cyber Security Engineer Colchester, Essex Hybrid - 3 Days Office / 2 Days Home Occasional out-of-hours working and travel to London will be required. Competitive Salary + Excellent Benefits Full Time Permanent Focus: Infrastructure Cyber Security Cloud AI Enablement Your Background / Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are Bulk is on an incredible journey, with a mission to evolve from a manufacturing-led retailer into a destination brand for active nutrition. We're shaking up the sports nutrition industry through innovative products, disruptive marketing and bold digital thinking that encourages people to see our brand differently. We want passionate risk-takers. People who challenge our thinking, live and breathe digital and aren't afraid to find a better way of doing things. And as our technology continues to evolve - particularly through AI - we need the infrastructure and security behind it to evolve just as quickly. The Opportunity As our IT Infrastructure & Cyber Security Engineer, you'll take ownership of Bulk's infrastructure and cyber security environment, supported by our IT Service Desk Team Lead and wider team. This is a broad, hands-on technical role with some clear priorities. You'll help upgrade our email security, manage the security aspects of AI integration and take a leading role in our Cyber Essentials project next year. You'll also oversee infrastructure, security tooling, incident response, budgeting and contracting, while becoming a Tier 3 escalation point for complex issues that need deeper technical expertise. And we're not expecting you to walk through the door knowing every technology on our list. We're looking for someone with strong infrastructure foundations and genuine cyber security capability who can demonstrate experience across roughly 80% of our technical environment, with the curiosity and ability to pick up the rest. What You'll Be Doing Infrastructure • Manage and maintain Bulk s on-premise and cloud infrastructure, including Azure, Google Workspace, networks, firewalls and VPNs. • Ensure systems are secure, reliable, resilient and up to date. • Lead infrastructure projects from planning through to deployment, including budgets and contracts. • Provide Tier 3 support for complex issues and maintain clear technical documentation and handovers. • Support wider technical projects as business requirements evolve. Cyber Security • Develop and improve Bulk s security environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work with stakeholders to implement secure technology solutions. AI Tooling & Security • Support the secure adoption and scaling of AI tools across Bulk. • Manage AI platforms including Claude Code, GitHub Copilot, Codex-style tools, MCP servers, integrations and connectors. • Own user access, permissions and governance, applying least-privilege principles. • Support teams onboarding new AI technologies, balancing innovation and productivity with security and compliance. • Develop appropriate controls as agentic AI, MCP and connector-based technologies evolve. About You You're probably already operating at strong 3rd Line Engineer level and looking for the opportunity to take broader ownership across infrastructure and cyber security. You enjoy getting hands-on with technology, but you're also interested in the bigger picture - resilience, security, risk, projects and how technology can enable the business to move faster. You don't need to tick every technology box. Breadth, strong foundations and the ability to learn matter here. You'll likely bring: • Around 2-3 years' experience in a similar role, operating at 3rd Line Engineer level or equivalent. • At least one cyber security certification. • Hands-on experience across approximately 80% of the technologies and environments outlined within this advert. • Strong infrastructure experience spanning cloud and on-premise environments. • Good working knowledge of Azure, Google Workspace, networking, endpoint management and security. • Experience across technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs. • Strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation. • Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001. • The confidence and technical capability to handle complex Tier 3 escalations. • Strong problem-solving skills and a proactive approach to improving infrastructure and security. • Excellent communication skills and the confidence to work with colleagues, suppliers and senior leadership. • Willingness to undertake occasional out-of-hours work and travel to London. Even Better If You Bring • Hands-on experience administering AI coding or agent tools, including Claude Code, GitHub Copilot or Codex. • Experience configuring MCP servers, connectors, permissions and access controls. • Familiarity with emerging agentic AI infrastructure and its associated security considerations. • Experience working with Netskope. • Hands-on Netskope CASB/SSE experience covering areas such as SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design and SCIM-based provisioning. • ITIL or project management certification such as PRINCE2. • Additional cyber security certifications such as CISSP, CISM or CompTIA. Why Join Bulk ? This is a great opportunity if you're ready to move beyond traditional 3rd Line support and build broader experience across infrastructure, cyber security and AI. You'll have genuine ownership, support from the wider IT team and exposure to a broad technology landscape within a business that's actively embracing new ways of working. Because Bulk is already pushing ahead with AI, you'll also be solving security and infrastructure challenges that many businesses haven't encountered yet. You'll also enjoy: • Monthly Bulk Bank Benefits Allowance, including subsidised gym membership. • 60% discount on Bulk products. • Birthday day off. • PerkBox subscription. • Flexi Start. • Optional additional annual leave. • Teammate pension scheme. • Life Assurance. • Medicash. • Volunteering day. • Cycle to Work Scheme. • Enhanced maternity and paternity leave. • Workplace nursery scheme. • Fully stocked Bulk Pantry. • Happy Hour drinks fridge on Thursdays and Fridays. • Summer working hours. • Hybrid working - 3 days in the Colchester office / 2 days from home. Your Experience / Background / Previous Roles May Include 3rd Line Engineer, Senior 3rd Line Engineer, Infrastructure Engineer, IT Infrastructure Engineer, Infrastructure & Security Engineer, IT Security Engineer, Systems & Security Engineer, Senior IT Engineer, Cloud Infrastructure Engineer, Cyber Security Engineer or Infrastructure Support Engineer. Apply Now If you've built strong 3rd Line foundations and you're ready for a role where you can take genuine ownership across infrastructure, cyber security and emerging AI technology, we'd love to hear from you. Bring your technical breadth, security mindset and curiosity about what's coming next - and help build the resilient, secure technology foundation behind Bulk's continued growth. Bulk is an equal opportunities employer and is committed to building a diverse and inclusive team. We welcome applications regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any other protected characteristic. Application notice We take your privacy seriously . click apply for full job details
Proposals Co-ordinator (Nuclear)- Leatherhead (hybrid working) Leatherhead, Surrey Proposals Co-ordinator (Nuclear) Leatherhead Hybrid working - 3 days in the office, 2 days remotely. Please advise hourly Ltd company Outside IR35 - Subject to QDOS assessment Start Date - ASAP Project - Nuclear Duration - 3 - 6 months Job description : - In the civil nuclear sector, KBR primarily delivers programme management, engineering, project delivery, systems integration, technical consultancy, and decommissioning support. Our work spans the full nuclear lifecycle, from new build projects through operations, waste management and decommissioning. Our Leatherhead office is seeking an experienced Proposals Coordinator to support the growth of our Civil Nuclear business unit. The Proposals Coordinator reports to the Proposal Manager (Nuclear) and forms part of the pursuit team that works closely with sales (business development) and operations (project manager) in ensuring we offer creative, client-focused and winning proposals Roles & Responsibilities Support the proposal team throughout the bid lifecycle, from receipt of the Invitation to Tender (ITT) through to final submission. Coordinate the preparation, review and submission of bids, PQQs, SQs, framework responses and capability statements for UK nuclear and government opportunities. Prepare proposal templates and formatting to ensure compliance with client requirements and corporate branding. Manage document production activities including formatting, proofreading, version control and quality assurance of proposal documents. Track reviewer comments and coordinate the incorporation of feedback during proposal development Prepare and maintain bid documentation in accordance with corporate branding, client requirements and nuclear-sector quality standards. Maintain proposal schedules, action trackers, tender clarification logs and submission plans to ensure deadlines are achieved Arrange and support proposal kick-off meetings, reviews, workshops, and lessons learned sessions Support registrations and submissions through client procurement and e-sourcing portals, including Ariba, Jaggaer, Achilles, GCA and other nuclear-industry and government procurement systems. Assist with bid compliance reviews to ensure responses fully address tender requirements, evaluation criteria and mandatory submission requirements. Coordinate inputs from technical, commercial, legal, quality, HSE and supply chain stakeholders from inside the organisation and partners / 3rd parties Maintain and develop the proposal knowledge library, including nuclear project references, case studies, CVs, organisational charts and standard company information. Support lessons learned activities and continuous improvement initiatives across the proposals function. Assist with opportunity tracking, pipeline reporting, and bid governance activities Ensure all bid activities are undertaken with a strong focus on quality, governance, security and confidentiality. Experience and Competencies: Nuclear and Government Bids Relevant: Familiarity with nuclear industry and government procurement processes, terminology, and bid requirement framework, particularly in UK. Understanding of nuclear cybersecurity culture principles and the importance of quality, traceability and compliance. Experience of working with partners and 3rd parties in a regulated engineering, energy, defence or infrastructure environment. Previous experience supporting bids for UK nuclear clients such as Sizewell C, Sellafield Ltd, Nuclear Restoration Services, EDF, Rolls-Royce SMR or related organisations would be advantageous. General: Effectively prioritises workload and manages multiple competing deadlines. Maintains attention to detail while working in a fast-paced environment. Demonstrates strong time management and coordination skills. Builds productive working relationships across multi-disciplinary teams. Communicates clearly and professionally with stakeholders at all levels. Confidently coordinates meetings, workshops, and review activities. Maintains high standards of accuracy and document quality. Follows established processes and governance requirements. Ensures proposal submissions meet client instructions and compliance requirements. Proactively identifies issues and works collaboratively to resolve them. Demonstrates a positive, flexible, and solutions-focused approach. Willingly takes ownership of tasks and follows them through to completion. Proficient in Microsoft Office 365 applications. Experience using SharePoint and document collaboration tools. Comfortable working with databases, trackers, and reporting tools. Requirements Essential - UK national, solo nationality At least 5 years' experience in bid management, preferably in the nuclear and government sector Minimum requirement of three days in the office with flexibility to do extended hours to meet bid submission deadlines. Advanced Microsoft Word skills, strong written English and attention to detail are essential for this role.
Aug 24, 2026
Full time
Proposals Co-ordinator (Nuclear)- Leatherhead (hybrid working) Leatherhead, Surrey Proposals Co-ordinator (Nuclear) Leatherhead Hybrid working - 3 days in the office, 2 days remotely. Please advise hourly Ltd company Outside IR35 - Subject to QDOS assessment Start Date - ASAP Project - Nuclear Duration - 3 - 6 months Job description : - In the civil nuclear sector, KBR primarily delivers programme management, engineering, project delivery, systems integration, technical consultancy, and decommissioning support. Our work spans the full nuclear lifecycle, from new build projects through operations, waste management and decommissioning. Our Leatherhead office is seeking an experienced Proposals Coordinator to support the growth of our Civil Nuclear business unit. The Proposals Coordinator reports to the Proposal Manager (Nuclear) and forms part of the pursuit team that works closely with sales (business development) and operations (project manager) in ensuring we offer creative, client-focused and winning proposals Roles & Responsibilities Support the proposal team throughout the bid lifecycle, from receipt of the Invitation to Tender (ITT) through to final submission. Coordinate the preparation, review and submission of bids, PQQs, SQs, framework responses and capability statements for UK nuclear and government opportunities. Prepare proposal templates and formatting to ensure compliance with client requirements and corporate branding. Manage document production activities including formatting, proofreading, version control and quality assurance of proposal documents. Track reviewer comments and coordinate the incorporation of feedback during proposal development Prepare and maintain bid documentation in accordance with corporate branding, client requirements and nuclear-sector quality standards. Maintain proposal schedules, action trackers, tender clarification logs and submission plans to ensure deadlines are achieved Arrange and support proposal kick-off meetings, reviews, workshops, and lessons learned sessions Support registrations and submissions through client procurement and e-sourcing portals, including Ariba, Jaggaer, Achilles, GCA and other nuclear-industry and government procurement systems. Assist with bid compliance reviews to ensure responses fully address tender requirements, evaluation criteria and mandatory submission requirements. Coordinate inputs from technical, commercial, legal, quality, HSE and supply chain stakeholders from inside the organisation and partners / 3rd parties Maintain and develop the proposal knowledge library, including nuclear project references, case studies, CVs, organisational charts and standard company information. Support lessons learned activities and continuous improvement initiatives across the proposals function. Assist with opportunity tracking, pipeline reporting, and bid governance activities Ensure all bid activities are undertaken with a strong focus on quality, governance, security and confidentiality. Experience and Competencies: Nuclear and Government Bids Relevant: Familiarity with nuclear industry and government procurement processes, terminology, and bid requirement framework, particularly in UK. Understanding of nuclear cybersecurity culture principles and the importance of quality, traceability and compliance. Experience of working with partners and 3rd parties in a regulated engineering, energy, defence or infrastructure environment. Previous experience supporting bids for UK nuclear clients such as Sizewell C, Sellafield Ltd, Nuclear Restoration Services, EDF, Rolls-Royce SMR or related organisations would be advantageous. General: Effectively prioritises workload and manages multiple competing deadlines. Maintains attention to detail while working in a fast-paced environment. Demonstrates strong time management and coordination skills. Builds productive working relationships across multi-disciplinary teams. Communicates clearly and professionally with stakeholders at all levels. Confidently coordinates meetings, workshops, and review activities. Maintains high standards of accuracy and document quality. Follows established processes and governance requirements. Ensures proposal submissions meet client instructions and compliance requirements. Proactively identifies issues and works collaboratively to resolve them. Demonstrates a positive, flexible, and solutions-focused approach. Willingly takes ownership of tasks and follows them through to completion. Proficient in Microsoft Office 365 applications. Experience using SharePoint and document collaboration tools. Comfortable working with databases, trackers, and reporting tools. Requirements Essential - UK national, solo nationality At least 5 years' experience in bid management, preferably in the nuclear and government sector Minimum requirement of three days in the office with flexibility to do extended hours to meet bid submission deadlines. Advanced Microsoft Word skills, strong written English and attention to detail are essential for this role.
# Workday Project ManagerBirmingham, Glasgow, London, Manchester, WorthingApply for this job Permanent Experienced Professionals SaaS Solutions ID 507603-en\_GB About the job you're considering We are looking for an experienced Workday Engagement Manager to join our growing Workday Practice and lead the successful delivery of Workday engagements for our clients. This is a client-facing delivery leadership role for someone who combines strong project and programme management capability with commercial awareness, stakeholder leadership and a practical understanding of Workday delivery. You will take accountability for the delivery of Workday engagements, working with client sponsors, delivery leaders, functional and technical teams, commercial stakeholders, and account teams to deliver high-quality outcomes. You will also contribute to the continued growth of our Workday capability by supporting pre-sales activity, strengthening delivery governance, developing reusable delivery assets, and sharing knowledge across the practice. Your Role As a Workday Engagement Manager, you will act as the primary delivery lead for Workday implementation, enhancement and optimisation engagements. You will manage the end-to-end delivery lifecycle, create the conditions for effective project execution, and ensure that scope, timeline, budget, quality, risk, commercial performance and client satisfaction are actively managed throughout the engagement. You will be expected to bring a modern consulting mindset: outcome-focused, commercially aware, structured in delivery, confident with senior stakeholders and comfortable helping clients adopt Workday capabilities, data-led decision-making, automation and emerging AI-enabled functionality responsibly and effectively. Engagement delivery and governance Lead the end-to-end delivery of Workday implementation, enhancement and optimisation projects, ensuring engagements are delivered to agreed scope, quality, timeline and budget expectations. Own and maintain robust project governance, including plans, RAID management, status reporting, decision tracking, change control, dependency management and delivery assurance inputs. Client leadership and stakeholder management Act as a trusted delivery partner and primary point of contact for client stakeholders throughout the engagement lifecycle. Build and maintain strong relationships with client sponsors, programme leaders, HR, Finance, IT and operational stakeholders. Commercial, risk and quality management Manage engagement commercials, including forecast, budget, profitability, resource demand, scope control and change management within agreed governance. Ensure delivery quality through effective governance, review points, risk management, assurance activity and adherence to Workday and Capgemini delivery methods. Team leadership and practice contribution Lead, motivate and coordinate diverse delivery teams across onshore, nearshore and offshore locations. Create clarity for teams by setting expectations, managing workload, removing blockers and promoting collaborative ways of working. Your skills and experience Proven experience leading technology or Workday implementation engagements in a consultancy or professional services environment. Current Workday Services Partner certification as an Engagement Manager/Project Manager Strong understanding of Workday delivery lifecycles, deployment methodologies and the practical realities of delivering HCM, Finance, Payroll, Recruiting or broader Workday programmes. Demonstrable experience managing scope, plans, resources, budgets, risks, issues, dependencies, quality standards and profitability targets. Ability to lead diverse project teams and coordinate activity across functional, technical, data, testing, change and deployment workstreams. Strong client-facing skills, with the confidence to engage senior stakeholders, manage expectations and translate delivery complexity into clear business language. Commercial awareness and experience supporting statements of work, change control, delivery estimates, governance reporting and project financial management. Excellent communication, facilitation, problem-solving and organisational skills, with a structured and proactive approach to delivery leadership. Experience working across onshore, nearshore and offshore delivery models with multi-disciplinary and geographically distributed teams. A practical, inclusive and outcome-focused leadership style, with a willingness to coach others and contribute to the wider practice. Desirable experience Experience managing complex or multi-workstream Workday programmes, including senior stakeholder governance and delivery recovery activity. Experience supporting pre-sales, bid responses, solution proposals, mobilisation planning, commercial shaping or client demonstrations. Awareness of Workday HCM, Finance, Payroll, Recruiting, Talent, Absence, Time Tracking, Integrations, Security, Reporting, Extend or broader enterprise architecture considerations. Understanding of responsible AI adoption in HR and Finance transformation, including data readiness, governance, explainability, adoption and change considerations. Professional project or programme management qualification such as PRINCE2, PMP, MSP, Agile or equivalent practical delivery experience. We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government's Disability Confident scheme.As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:Declare they have a disability, and Meet the minimum essential criteria for the role.Please opt in during the application process. Your security clearance and pre-employment checks If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service) To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Make it real - what does it mean for you? Shape Your Path You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.Flexibility to work your way You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. Why you should consider Capgemini Growing clients' businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you'll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what's possible. It's why, together, we seek out opportunities that will transform the world's leading businesses, and it's how you'll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you'll build the skills you want. You'll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is. About Capgemini Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion.
Aug 24, 2026
Full time
# Workday Project ManagerBirmingham, Glasgow, London, Manchester, WorthingApply for this job Permanent Experienced Professionals SaaS Solutions ID 507603-en\_GB About the job you're considering We are looking for an experienced Workday Engagement Manager to join our growing Workday Practice and lead the successful delivery of Workday engagements for our clients. This is a client-facing delivery leadership role for someone who combines strong project and programme management capability with commercial awareness, stakeholder leadership and a practical understanding of Workday delivery. You will take accountability for the delivery of Workday engagements, working with client sponsors, delivery leaders, functional and technical teams, commercial stakeholders, and account teams to deliver high-quality outcomes. You will also contribute to the continued growth of our Workday capability by supporting pre-sales activity, strengthening delivery governance, developing reusable delivery assets, and sharing knowledge across the practice. Your Role As a Workday Engagement Manager, you will act as the primary delivery lead for Workday implementation, enhancement and optimisation engagements. You will manage the end-to-end delivery lifecycle, create the conditions for effective project execution, and ensure that scope, timeline, budget, quality, risk, commercial performance and client satisfaction are actively managed throughout the engagement. You will be expected to bring a modern consulting mindset: outcome-focused, commercially aware, structured in delivery, confident with senior stakeholders and comfortable helping clients adopt Workday capabilities, data-led decision-making, automation and emerging AI-enabled functionality responsibly and effectively. Engagement delivery and governance Lead the end-to-end delivery of Workday implementation, enhancement and optimisation projects, ensuring engagements are delivered to agreed scope, quality, timeline and budget expectations. Own and maintain robust project governance, including plans, RAID management, status reporting, decision tracking, change control, dependency management and delivery assurance inputs. Client leadership and stakeholder management Act as a trusted delivery partner and primary point of contact for client stakeholders throughout the engagement lifecycle. Build and maintain strong relationships with client sponsors, programme leaders, HR, Finance, IT and operational stakeholders. Commercial, risk and quality management Manage engagement commercials, including forecast, budget, profitability, resource demand, scope control and change management within agreed governance. Ensure delivery quality through effective governance, review points, risk management, assurance activity and adherence to Workday and Capgemini delivery methods. Team leadership and practice contribution Lead, motivate and coordinate diverse delivery teams across onshore, nearshore and offshore locations. Create clarity for teams by setting expectations, managing workload, removing blockers and promoting collaborative ways of working. Your skills and experience Proven experience leading technology or Workday implementation engagements in a consultancy or professional services environment. Current Workday Services Partner certification as an Engagement Manager/Project Manager Strong understanding of Workday delivery lifecycles, deployment methodologies and the practical realities of delivering HCM, Finance, Payroll, Recruiting or broader Workday programmes. Demonstrable experience managing scope, plans, resources, budgets, risks, issues, dependencies, quality standards and profitability targets. Ability to lead diverse project teams and coordinate activity across functional, technical, data, testing, change and deployment workstreams. Strong client-facing skills, with the confidence to engage senior stakeholders, manage expectations and translate delivery complexity into clear business language. Commercial awareness and experience supporting statements of work, change control, delivery estimates, governance reporting and project financial management. Excellent communication, facilitation, problem-solving and organisational skills, with a structured and proactive approach to delivery leadership. Experience working across onshore, nearshore and offshore delivery models with multi-disciplinary and geographically distributed teams. A practical, inclusive and outcome-focused leadership style, with a willingness to coach others and contribute to the wider practice. Desirable experience Experience managing complex or multi-workstream Workday programmes, including senior stakeholder governance and delivery recovery activity. Experience supporting pre-sales, bid responses, solution proposals, mobilisation planning, commercial shaping or client demonstrations. Awareness of Workday HCM, Finance, Payroll, Recruiting, Talent, Absence, Time Tracking, Integrations, Security, Reporting, Extend or broader enterprise architecture considerations. Understanding of responsible AI adoption in HR and Finance transformation, including data readiness, governance, explainability, adoption and change considerations. Professional project or programme management qualification such as PRINCE2, PMP, MSP, Agile or equivalent practical delivery experience. We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government's Disability Confident scheme.As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:Declare they have a disability, and Meet the minimum essential criteria for the role.Please opt in during the application process. Your security clearance and pre-employment checks If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service) To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Make it real - what does it mean for you? Shape Your Path You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.Flexibility to work your way You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. Why you should consider Capgemini Growing clients' businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you'll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what's possible. It's why, together, we seek out opportunities that will transform the world's leading businesses, and it's how you'll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you'll build the skills you want. You'll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is. About Capgemini Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion.
Benefit & Realisation Manager (Scan 4 Safety) NHS England The National Patient Safety Team is seeking an experienced and strategic programme leader to support the development of Scan4Safety - NHS England's national approach to improve patient safety through the digital identification, tracking and traceability of patients, products and medical devices. Reporting to the Deputy Director of Patient Safety (Digital), you will play a key role in shaping and delivering Scan4Safety work that sits at the intersection of patient safety, digital transformation and clinical innovation. Working closely with national partners including DHSC, NHS Supply Chain, GS1 UK and the MHRA, you will help drive the adoption of standards, processes and technologies that support safer care, improved traceability and stronger system-wide learning. Working collaboratively with NHS organisations, clinicians, digital teams, suppliers, policymakers and patient safety experts, you will support Scan4Safety development, stakeholder engagement, evidence generation and continuous improvement. You will help ensure that Scan4Safety continues to support national patient safety priorities while demonstrating tangible benefits for patients, healthcare organisations and the wider NHS. Key responsibilities include: Supporting the strategic development and delivery of the national Scan4Safety development. Working with national partners to support the adoption of digital identification and traceability standards. Developing evidence, evaluation and assurance approaches that demonstrate the patient safety impact of Scan4Safety. Building strong relationships with clinicians, digital leaders, policymakers, regulators and delivery partners. Supporting the development of business cases, programme plans, governance arrangements and policy recommendations. Promoting the use of data, standards and technology to improve patient safety, quality of care and operational effectiveness. Identifying and sharing learning, innovation and best practice across the health and care system. Providing strategic advice and briefings to senior stakeholders on patient safety, digital transformation and programme delivery. NHS England has a wide range of statutory functions, responsibilities and regulatory powers. These are focused on supporting the wider NHS to deliver high quality care, as well as doing those things that are best done once for the whole NHS. Our staff bring expertise across clinical, operational, commissioning, technology, data science, cyber security, software engineering, education, and commercial specialisms - enabling us to design and deliver high-quality NHS services. In March 2025,the Government announcedthat NHS England and the Department of Health and Social Care will increasingly merge functions, ultimately leading to NHS England being fully integrated into the department. If you currently work within the NHS and if successful at interview, we will initiate an Inter Authority Transfer (IAT) via the Electronic Staff Record (ESR).This retrieves key data from your current or previous NHS employer to support onboarding, including competency status, Continuous Service Dates (CSD), and annual leave entitlement. You may opt out at any stage of the process. Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in our offices. Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band. We cannot offer visa sponsorship for any vacancies. You will be an experienced programme or transformation leader with a strong understanding of patient safety, healthcare improvement and digital innovation. You will have experience of working across organisational boundaries, influencing senior stakeholders and delivering complex programmes within challenging and evolving environments. You will bring knowledge of the NHS policy landscape and an appreciation of how data, digital technologies and national standards can support safer care. Experience of patient safety improvement, digital transformation, clinical informatics, healthcare technology or related national programmes would be highly desirable. Most importantly, you will be passionate about improving patient outcomes and reducing harm through evidence-based approaches, collaboration and innovation. This is an exciting opportunity to contribute to one of the NHS's most important patient safety and digital transformation programmes, helping to shape how technology, data and traceability are used to support safer care for patients across England. You can find further details about the role,including key responsibilities and accountabilities, alongside theorganisational structureand person specificationin the attached Job Descriptionand other supporting documents. Secondments Applicants from within the NHS willbe offered on a secondment basis only, agreementshouldbeobtainedfromtheiremployerpriortosubmittingtheapplication.
Aug 24, 2026
Full time
Benefit & Realisation Manager (Scan 4 Safety) NHS England The National Patient Safety Team is seeking an experienced and strategic programme leader to support the development of Scan4Safety - NHS England's national approach to improve patient safety through the digital identification, tracking and traceability of patients, products and medical devices. Reporting to the Deputy Director of Patient Safety (Digital), you will play a key role in shaping and delivering Scan4Safety work that sits at the intersection of patient safety, digital transformation and clinical innovation. Working closely with national partners including DHSC, NHS Supply Chain, GS1 UK and the MHRA, you will help drive the adoption of standards, processes and technologies that support safer care, improved traceability and stronger system-wide learning. Working collaboratively with NHS organisations, clinicians, digital teams, suppliers, policymakers and patient safety experts, you will support Scan4Safety development, stakeholder engagement, evidence generation and continuous improvement. You will help ensure that Scan4Safety continues to support national patient safety priorities while demonstrating tangible benefits for patients, healthcare organisations and the wider NHS. Key responsibilities include: Supporting the strategic development and delivery of the national Scan4Safety development. Working with national partners to support the adoption of digital identification and traceability standards. Developing evidence, evaluation and assurance approaches that demonstrate the patient safety impact of Scan4Safety. Building strong relationships with clinicians, digital leaders, policymakers, regulators and delivery partners. Supporting the development of business cases, programme plans, governance arrangements and policy recommendations. Promoting the use of data, standards and technology to improve patient safety, quality of care and operational effectiveness. Identifying and sharing learning, innovation and best practice across the health and care system. Providing strategic advice and briefings to senior stakeholders on patient safety, digital transformation and programme delivery. NHS England has a wide range of statutory functions, responsibilities and regulatory powers. These are focused on supporting the wider NHS to deliver high quality care, as well as doing those things that are best done once for the whole NHS. Our staff bring expertise across clinical, operational, commissioning, technology, data science, cyber security, software engineering, education, and commercial specialisms - enabling us to design and deliver high-quality NHS services. In March 2025,the Government announcedthat NHS England and the Department of Health and Social Care will increasingly merge functions, ultimately leading to NHS England being fully integrated into the department. If you currently work within the NHS and if successful at interview, we will initiate an Inter Authority Transfer (IAT) via the Electronic Staff Record (ESR).This retrieves key data from your current or previous NHS employer to support onboarding, including competency status, Continuous Service Dates (CSD), and annual leave entitlement. You may opt out at any stage of the process. Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in our offices. Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band. We cannot offer visa sponsorship for any vacancies. You will be an experienced programme or transformation leader with a strong understanding of patient safety, healthcare improvement and digital innovation. You will have experience of working across organisational boundaries, influencing senior stakeholders and delivering complex programmes within challenging and evolving environments. You will bring knowledge of the NHS policy landscape and an appreciation of how data, digital technologies and national standards can support safer care. Experience of patient safety improvement, digital transformation, clinical informatics, healthcare technology or related national programmes would be highly desirable. Most importantly, you will be passionate about improving patient outcomes and reducing harm through evidence-based approaches, collaboration and innovation. This is an exciting opportunity to contribute to one of the NHS's most important patient safety and digital transformation programmes, helping to shape how technology, data and traceability are used to support safer care for patients across England. You can find further details about the role,including key responsibilities and accountabilities, alongside theorganisational structureand person specificationin the attached Job Descriptionand other supporting documents. Secondments Applicants from within the NHS willbe offered on a secondment basis only, agreementshouldbeobtainedfromtheiremployerpriortosubmittingtheapplication.
Select how often (in days) to receive an alert: Solutions Architect Department: INFORMATION TECHNOLOGY City: London Location: GB INTRODUCTION At Burberry, we believe creativity opens spaces. Our purpose is to unlock the power of imagination to push boundaries and open new possibilities for our people, our customers and our communities. This is the core belief that has guided Burberry since it was founded in 1856 and is central to how we operate as a company today. We aim to provide an environment for creative minds from different backgrounds to thrive, bringing a wide range of skills and experiences to everything we do. As a purposeful, values-driven brand, we are committed to being a force for good in the world as well, creating the next generation of sustainable luxury for customers, driving industry change and championing our communities. JOB PURPOSE The Data Platform Architect is accountable for the technical architecture of the enterprise data platform, ensuring it meets the demands of a growing data estate while maintaining performance, cost efficiency, security, and alignment with enterprise architecture standards. This role will be expected to own the internal technical architecture (compute and storage design, ingestion framework patterns, data modelling standards, andaccess control architecture, platform performance and capacity planning, and establishing architectural authority, documenting design decisions, and ensuring knowledge retention within Burberry. This role defines the architecture, sets the standards, provides design governance, and ensures what is built is consistent, scalable, and aligned to the enterprise technology strategy. The architect participates in cross-functional squads where architectural input is required, providing design guidance for complex data initiatives. ACCOUNTABILITY BOUNDARIES AND KEY INTERFACES Accountable for platform architecture, standards, technical guardrails, architectural roadmap and design assurance for the enterprise data platform. Not accountable for day-to-day platform operations or individual data product delivery, but accountable for the architectural standards those teams consume. Key interfaces include Enterprise Data, Enterprise Platforms & Operations, Data Governance, Cyber Security, Solution Architecture, MLOps/AI teams and strategic technology vendors. RESPONSIBILITIES Design and maintain the platform's technical architecture, including compute/storage design, ingestion frameworks, access control, performance tuning, and capacity planning. Define and maintain architectural standards and guardrails (naming conventions, environment management, deployment pipelines, partitioning strategies, and cost optimisation patterns). Own platform cost modelling and FinOps governance, defining cost allocation patterns and identifying optimisation opportunities. Align with the Data Senior Solution Architect and Data Solution Architects to ensure consistency with enterprise data architecture and models. Translate architectural direction into practical engineering guidance for Data Platform Engineers and Data Engineers, ensuring teams can implement within defined standards without requiring bespoke architectural intervention for standard use cases. Design data ingestion architecture (batch, micro-batch, and streaming) with clear boundaries for system-to-system integration. Define architecture for the semantic layer and self-serve analytics infrastructure. Provide input to data squads for complex data products and support Data Product Managers and Data Engineers where architectural complexity requires it. Ensure architecture supports emerging requirements, including agentic AI data infrastructure, MLOps productionisation, and advanced analytics. Collaborate with the Senior Manager, Data Platform Engineering (within the Enterprise Platforms & Operations team) to ensure platform operations are aligned to the target architecture, providing feedback on feasibility and translating architectural decisions into implementable guidance. Collaborate with the Senior Manager, Data Engineering (within the Enterprise Data team) to ensure data engineering work follows defined patterns and standards. Own the data platform roadmap from an architectural perspective, defining how the platform evolves over time (e.g.,SAP BW transition/retirement path, Databricks maturation, Datasphere integration layer decisions). Contribute to enterprise architecture governance forums, representing data platform considerations in broader technology decisions. Provide architectural input to vendor and tooling decisions, evaluating technology options and providing recommendations for platform evolution. Maintain comprehensive documentation of design decisions, patterns, standards, and trade-offs. Define non-functional platform architecture standards covering resilience, backup/restore, disaster recovery, observability, service levels, auditability and operational readiness. Define platform security and privacy architecture in partnership with Cyber Security and Data Governance, including PII handling, access recertification, audit logging and retention patterns. Establish architecture decision records, exception/waiver processes and design scorecards so deviations from platform standards are visible, time-bound and governed. Maintain platform adoption, performance, cost and standards-compliance metrics, using them to guide roadmap priorities and architecture governance decisions. PERSONAL PROFILE Deep expertise in Databricks (Unity Catalog, Delta Lake, Spark, Databricks SQL) or equivalent Lakehouse platforms, including administration, cost management, and performance optimisation. Strong understanding of cloud-native architecture principles, cost models, and practical experience with CI/CD pipelines and environment strategies. Proven implementation of data security (encryption, RBAC, column/row-level security, data masking). Strong understanding of ingestion and pipeline architecture patterns for diverse source systems. Experience with SAP data landscapes (BW, Datasphere, S/4HANA data flows) is highly desirable given the Burberry technology estate. Experience defining architectural standards and patterns that engineering teams implement and comfortable setting direction without hands-on delivery. Experience working within a centralised architecture function that engages flexibly with delivery squads. Ability to communicate architectural decisions to both technical and non-technical stakeholders. Experience establishing architectural authority in environments transitioning from outsourced to in-house ownership is beneficial. Experience defining non-functional requirements and architecture patterns for enterprise-grade resilience, observability, disaster recovery, data lifecycle management and operational readiness. Experience using architecture decision records, design authorities, exception management and measurable standards adoption to embed architectural governance without slowing delivery.
Aug 24, 2026
Full time
Select how often (in days) to receive an alert: Solutions Architect Department: INFORMATION TECHNOLOGY City: London Location: GB INTRODUCTION At Burberry, we believe creativity opens spaces. Our purpose is to unlock the power of imagination to push boundaries and open new possibilities for our people, our customers and our communities. This is the core belief that has guided Burberry since it was founded in 1856 and is central to how we operate as a company today. We aim to provide an environment for creative minds from different backgrounds to thrive, bringing a wide range of skills and experiences to everything we do. As a purposeful, values-driven brand, we are committed to being a force for good in the world as well, creating the next generation of sustainable luxury for customers, driving industry change and championing our communities. JOB PURPOSE The Data Platform Architect is accountable for the technical architecture of the enterprise data platform, ensuring it meets the demands of a growing data estate while maintaining performance, cost efficiency, security, and alignment with enterprise architecture standards. This role will be expected to own the internal technical architecture (compute and storage design, ingestion framework patterns, data modelling standards, andaccess control architecture, platform performance and capacity planning, and establishing architectural authority, documenting design decisions, and ensuring knowledge retention within Burberry. This role defines the architecture, sets the standards, provides design governance, and ensures what is built is consistent, scalable, and aligned to the enterprise technology strategy. The architect participates in cross-functional squads where architectural input is required, providing design guidance for complex data initiatives. ACCOUNTABILITY BOUNDARIES AND KEY INTERFACES Accountable for platform architecture, standards, technical guardrails, architectural roadmap and design assurance for the enterprise data platform. Not accountable for day-to-day platform operations or individual data product delivery, but accountable for the architectural standards those teams consume. Key interfaces include Enterprise Data, Enterprise Platforms & Operations, Data Governance, Cyber Security, Solution Architecture, MLOps/AI teams and strategic technology vendors. RESPONSIBILITIES Design and maintain the platform's technical architecture, including compute/storage design, ingestion frameworks, access control, performance tuning, and capacity planning. Define and maintain architectural standards and guardrails (naming conventions, environment management, deployment pipelines, partitioning strategies, and cost optimisation patterns). Own platform cost modelling and FinOps governance, defining cost allocation patterns and identifying optimisation opportunities. Align with the Data Senior Solution Architect and Data Solution Architects to ensure consistency with enterprise data architecture and models. Translate architectural direction into practical engineering guidance for Data Platform Engineers and Data Engineers, ensuring teams can implement within defined standards without requiring bespoke architectural intervention for standard use cases. Design data ingestion architecture (batch, micro-batch, and streaming) with clear boundaries for system-to-system integration. Define architecture for the semantic layer and self-serve analytics infrastructure. Provide input to data squads for complex data products and support Data Product Managers and Data Engineers where architectural complexity requires it. Ensure architecture supports emerging requirements, including agentic AI data infrastructure, MLOps productionisation, and advanced analytics. Collaborate with the Senior Manager, Data Platform Engineering (within the Enterprise Platforms & Operations team) to ensure platform operations are aligned to the target architecture, providing feedback on feasibility and translating architectural decisions into implementable guidance. Collaborate with the Senior Manager, Data Engineering (within the Enterprise Data team) to ensure data engineering work follows defined patterns and standards. Own the data platform roadmap from an architectural perspective, defining how the platform evolves over time (e.g.,SAP BW transition/retirement path, Databricks maturation, Datasphere integration layer decisions). Contribute to enterprise architecture governance forums, representing data platform considerations in broader technology decisions. Provide architectural input to vendor and tooling decisions, evaluating technology options and providing recommendations for platform evolution. Maintain comprehensive documentation of design decisions, patterns, standards, and trade-offs. Define non-functional platform architecture standards covering resilience, backup/restore, disaster recovery, observability, service levels, auditability and operational readiness. Define platform security and privacy architecture in partnership with Cyber Security and Data Governance, including PII handling, access recertification, audit logging and retention patterns. Establish architecture decision records, exception/waiver processes and design scorecards so deviations from platform standards are visible, time-bound and governed. Maintain platform adoption, performance, cost and standards-compliance metrics, using them to guide roadmap priorities and architecture governance decisions. PERSONAL PROFILE Deep expertise in Databricks (Unity Catalog, Delta Lake, Spark, Databricks SQL) or equivalent Lakehouse platforms, including administration, cost management, and performance optimisation. Strong understanding of cloud-native architecture principles, cost models, and practical experience with CI/CD pipelines and environment strategies. Proven implementation of data security (encryption, RBAC, column/row-level security, data masking). Strong understanding of ingestion and pipeline architecture patterns for diverse source systems. Experience with SAP data landscapes (BW, Datasphere, S/4HANA data flows) is highly desirable given the Burberry technology estate. Experience defining architectural standards and patterns that engineering teams implement and comfortable setting direction without hands-on delivery. Experience working within a centralised architecture function that engages flexibly with delivery squads. Ability to communicate architectural decisions to both technical and non-technical stakeholders. Experience establishing architectural authority in environments transitioning from outsourced to in-house ownership is beneficial. Experience defining non-functional requirements and architecture patterns for enterprise-grade resilience, observability, disaster recovery, data lifecycle management and operational readiness. Experience using architecture decision records, design authorities, exception management and measurable standards adoption to embed architectural governance without slowing delivery.
Date Posted: 2026-08-21 Country: United Kingdom Location: Ayrshire, South Ayrshire Position Role Type: Onsite At RTX, the world's largest aerospace and defence company, 185,000 great minds are united by purpose and inspired to make a difference by solving the world's most complex problems. With our three market-leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunities no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defence industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defence. At Prestwick Service Centre, we are specialists in the maintenance, repair and overhaul of aircraft engine nacelle systems and engine components. As part of our continued growth, we require experienced individuals who will contribute to our success while upholding our reputation as a leading provider of quality MRO services to our European and Middle Eastern customers. A fantastic opportunity has arisen within our EHS team for a dynamic individual looking to take on a new challenge in their career. We are seeking to recruit an EHS & Facilities Business Leader. This is an onsite role located within our Prestwick facility, Scotland, UK. What You Will Do: Lead and own the site's EHS and Facilities strategy, ensuring alignment with Collins Aerospace, regulatory and business requirements, and promoting a proactive culture of safety, environmental responsibility and continuous improvement. Act as the primary site point of contact for EHS, providing expert advice and guidance to leaders and employees while driving ownership and accountability across the organisation. Ensure compliance with applicable EHS legislation, regulatory requirements and company standards, including environmental compliance, regulatory reporting and submissions. Develop, maintain and continuously improve EHS management systems, plans, procedures and programmes, including risk assessment, ergonomics, confined spaces, respiratory protection, electrical safety and contractor safety. Lead EHS performance management, including metrics, audits, incident and near-miss investigations, root cause analysis and effective corrective and preventative actions. Own the site's EHS training and communication strategy, ensuring employees and leaders have the appropriate knowledge, competence and awareness. Lead the Facilities function, ensuring buildings, infrastructure, utilities, services and the workplace environment are safe, compliant, reliable and fit for purpose. Develop and manage facilities maintenance and improvement programmes, balancing safety, operational requirements, cost and long-term asset performance. Oversee facilities contractors and service providers, ensuring appropriate standards, permits, controls and performance management are in place. Support capital projects, site modifications and improvement programmes, ensuring EHS and Facilities requirements are incorporated from design through to completion. Ensure effective emergency preparedness, business continuity and site resilience arrangements, while partnering with business and functional leaders to identify and address EHS and Facilities risks and opportunities. Build effective relationships with internal stakeholders, regulatory bodies, contractors and specialist departments to achieve and maintain compliance. Drive the use of digital solutions, data and analytics to improve EHS and Facilities visibility, compliance, decision-making and operational efficiency. Identify and deliver opportunities for continuous improvement, cost reduction and sustainable performance, while ensuring compliance with all Collins Aerospace policies and procedures, including EHS, Code of Ethics, Intellectual Property and International Trade Compliance requirements. Qualifications You Must Have: Degree qualified in an EHS, Engineering, Facilities Management or related discipline, or equivalent relevant professional experience. Proven experience leading both EHS and Facilities functions, ideally within a manufacturing, engineering, aerospace or similarly regulated environment. Strong knowledge of UK EHS legislation, regulatory requirements and industry best practice. Strong leadership, communication and influencing skills, with the ability to engage effectively with employees at all levels and influence senior stakeholders. Qualifications We Prefer: Experience developing and implementing EHS management systems, with demonstrable experience in risk management, compliance, auditing, incident investigation and continuous improvement. Experience leading facilities operations, including infrastructure, utilities, maintenance, workplace environment and facilities service providers. Proven experience managing contractors and third-party service providers within a controlled or regulated environment. Strong organisational and project management skills, with the ability to manage competing priorities across EHS and Facilities. Strong digital and analytical capability, including experience with Microsoft Office and relevant EHS and Facilities management systems. A proactive, pragmatic and solutions-focused approach, with the confidence to challenge where required and drive sustainable improvements. Initiative, enthusiasm and the ability to work effectively both independently and as part of the Site Leadership Team. A strong commitment to creating a safe, compliant, efficient and high-performing workplace. What We Can Offer You: Competitive Compensation Package 25 days Annual Leave + Public Holidays + option to buy / sell up to 5 days per year Generous Employer Contribution Pension Scheme with 2:1 matched contributions up to 10% Private Medical Insurance Health & Wellbeing Cash Plan - (dental/optical/therapy/chiropody/health screening) Life Assurance & Group Income protection scheme participation Professional Development & Growth Support with professional fees Employee Assistance Program (EAP) Employee Discounts & Flexible Benefits Platform Employee Recognition & Referral Bonuses and much more! This position is classified as: Onsite: Employees who are working in onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility. RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law. Privacy Policy and Terms: Click on this link to read the Policy and Terms RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses - Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.
Aug 24, 2026
Full time
Date Posted: 2026-08-21 Country: United Kingdom Location: Ayrshire, South Ayrshire Position Role Type: Onsite At RTX, the world's largest aerospace and defence company, 185,000 great minds are united by purpose and inspired to make a difference by solving the world's most complex problems. With our three market-leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunities no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defence industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defence. At Prestwick Service Centre, we are specialists in the maintenance, repair and overhaul of aircraft engine nacelle systems and engine components. As part of our continued growth, we require experienced individuals who will contribute to our success while upholding our reputation as a leading provider of quality MRO services to our European and Middle Eastern customers. A fantastic opportunity has arisen within our EHS team for a dynamic individual looking to take on a new challenge in their career. We are seeking to recruit an EHS & Facilities Business Leader. This is an onsite role located within our Prestwick facility, Scotland, UK. What You Will Do: Lead and own the site's EHS and Facilities strategy, ensuring alignment with Collins Aerospace, regulatory and business requirements, and promoting a proactive culture of safety, environmental responsibility and continuous improvement. Act as the primary site point of contact for EHS, providing expert advice and guidance to leaders and employees while driving ownership and accountability across the organisation. Ensure compliance with applicable EHS legislation, regulatory requirements and company standards, including environmental compliance, regulatory reporting and submissions. Develop, maintain and continuously improve EHS management systems, plans, procedures and programmes, including risk assessment, ergonomics, confined spaces, respiratory protection, electrical safety and contractor safety. Lead EHS performance management, including metrics, audits, incident and near-miss investigations, root cause analysis and effective corrective and preventative actions. Own the site's EHS training and communication strategy, ensuring employees and leaders have the appropriate knowledge, competence and awareness. Lead the Facilities function, ensuring buildings, infrastructure, utilities, services and the workplace environment are safe, compliant, reliable and fit for purpose. Develop and manage facilities maintenance and improvement programmes, balancing safety, operational requirements, cost and long-term asset performance. Oversee facilities contractors and service providers, ensuring appropriate standards, permits, controls and performance management are in place. Support capital projects, site modifications and improvement programmes, ensuring EHS and Facilities requirements are incorporated from design through to completion. Ensure effective emergency preparedness, business continuity and site resilience arrangements, while partnering with business and functional leaders to identify and address EHS and Facilities risks and opportunities. Build effective relationships with internal stakeholders, regulatory bodies, contractors and specialist departments to achieve and maintain compliance. Drive the use of digital solutions, data and analytics to improve EHS and Facilities visibility, compliance, decision-making and operational efficiency. Identify and deliver opportunities for continuous improvement, cost reduction and sustainable performance, while ensuring compliance with all Collins Aerospace policies and procedures, including EHS, Code of Ethics, Intellectual Property and International Trade Compliance requirements. Qualifications You Must Have: Degree qualified in an EHS, Engineering, Facilities Management or related discipline, or equivalent relevant professional experience. Proven experience leading both EHS and Facilities functions, ideally within a manufacturing, engineering, aerospace or similarly regulated environment. Strong knowledge of UK EHS legislation, regulatory requirements and industry best practice. Strong leadership, communication and influencing skills, with the ability to engage effectively with employees at all levels and influence senior stakeholders. Qualifications We Prefer: Experience developing and implementing EHS management systems, with demonstrable experience in risk management, compliance, auditing, incident investigation and continuous improvement. Experience leading facilities operations, including infrastructure, utilities, maintenance, workplace environment and facilities service providers. Proven experience managing contractors and third-party service providers within a controlled or regulated environment. Strong organisational and project management skills, with the ability to manage competing priorities across EHS and Facilities. Strong digital and analytical capability, including experience with Microsoft Office and relevant EHS and Facilities management systems. A proactive, pragmatic and solutions-focused approach, with the confidence to challenge where required and drive sustainable improvements. Initiative, enthusiasm and the ability to work effectively both independently and as part of the Site Leadership Team. A strong commitment to creating a safe, compliant, efficient and high-performing workplace. What We Can Offer You: Competitive Compensation Package 25 days Annual Leave + Public Holidays + option to buy / sell up to 5 days per year Generous Employer Contribution Pension Scheme with 2:1 matched contributions up to 10% Private Medical Insurance Health & Wellbeing Cash Plan - (dental/optical/therapy/chiropody/health screening) Life Assurance & Group Income protection scheme participation Professional Development & Growth Support with professional fees Employee Assistance Program (EAP) Employee Discounts & Flexible Benefits Platform Employee Recognition & Referral Bonuses and much more! This position is classified as: Onsite: Employees who are working in onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility. RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law. Privacy Policy and Terms: Click on this link to read the Policy and Terms RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses - Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.
Are you ready to redefine defence technology and lead innovative software solutions that truly make a difference? This is your chance to join a company at the forefront of pioneering advanced cryptographic and key management solutions. As a Chief Software Architect , you will lead and shape the software engineering strategy for advanced cyber and defence systems, overseeing a team of engineers across multiple high-security projects. The position focuses on defining software architectures, driving best-practice development processes, and ensuring collaboration across software, hardware, systems, and firmware teams to deliver secure, scalable, and high-quality solutions. The role requires deep expertise in embedded and application software development using technologies such as C/C++, Rust, Linux, and RTOS environments, alongside experience with DevSecOps, automated testing, and secure development standards. In addition to technical leadership, the architect will mentor engineers, support bids and proposals, influence organisational software standards, and contribute to the delivery of mission-critical defence technologies requiring DV security clearance. What You Will Do: - Provide technical leadership across multiple projects, ensuring optimal approaches, architecture, and tool chains are selected. - Collaborate with stakeholders to develop software requirements, architectures, and designs that meet system and security needs. - Work closely with software leads and project managers to create development plans that deliver value early to customers. - Mentor and coach software engineers, sharing knowledge and driving process improvements for technical excellence. - Specify, design, and review software using UML and SysML modelling tools, ensuring high-quality, modular, and compliant solutions. - Champion best practices in software development, including continuous integration, automated testing, and secure coding standards. What You Will Bring: - Advanced knowledge and experience in C/C++, Rust, or embedded product development, including RTOSes. - Expertise in software engineering practices, methodologies, and technology trends. - Proven track record of delivering complex software solutions to schedule while exceeding customer expectations. - Experience with tools such as version control systems, change control, bug tracking, and automated testing frameworks. - Familiarity with defence or high-assurance development standards, including coding standards like MISRA. This company is committed to delivering innovative solutions that empower decision-making at both tactical and strategic levels. As a Chief Software Architect , you will be instrumental in driving technical excellence and ensuring the success of critical programmes that protect lives and enhance global security. Your contributions will align with the company's values of trust, collaboration, and innovation, making a real impact in the defence industry. Location: The role is an onsite role in Maidenhead, offering good flexibility with working hours. Interested?: If you're ready to take your career to the next level and lead transformative software projects, apply now to become the Chief Software Architect . Don't miss the opportunity to make a difference in the future of defence technology. Your CV will be forwarded to Jonathan Lee Recruitment, a leading engineering and manufacturing recruitment consultancy established in 1978. The services advertised by Jonathan Lee Recruitment are those of an Employment Agency. In order for your CV to be processed effectively, please ensure your name, email address, phone number and location (post code OR town OR county, as a minimum) are included.
Aug 23, 2026
Full time
Are you ready to redefine defence technology and lead innovative software solutions that truly make a difference? This is your chance to join a company at the forefront of pioneering advanced cryptographic and key management solutions. As a Chief Software Architect , you will lead and shape the software engineering strategy for advanced cyber and defence systems, overseeing a team of engineers across multiple high-security projects. The position focuses on defining software architectures, driving best-practice development processes, and ensuring collaboration across software, hardware, systems, and firmware teams to deliver secure, scalable, and high-quality solutions. The role requires deep expertise in embedded and application software development using technologies such as C/C++, Rust, Linux, and RTOS environments, alongside experience with DevSecOps, automated testing, and secure development standards. In addition to technical leadership, the architect will mentor engineers, support bids and proposals, influence organisational software standards, and contribute to the delivery of mission-critical defence technologies requiring DV security clearance. What You Will Do: - Provide technical leadership across multiple projects, ensuring optimal approaches, architecture, and tool chains are selected. - Collaborate with stakeholders to develop software requirements, architectures, and designs that meet system and security needs. - Work closely with software leads and project managers to create development plans that deliver value early to customers. - Mentor and coach software engineers, sharing knowledge and driving process improvements for technical excellence. - Specify, design, and review software using UML and SysML modelling tools, ensuring high-quality, modular, and compliant solutions. - Champion best practices in software development, including continuous integration, automated testing, and secure coding standards. What You Will Bring: - Advanced knowledge and experience in C/C++, Rust, or embedded product development, including RTOSes. - Expertise in software engineering practices, methodologies, and technology trends. - Proven track record of delivering complex software solutions to schedule while exceeding customer expectations. - Experience with tools such as version control systems, change control, bug tracking, and automated testing frameworks. - Familiarity with defence or high-assurance development standards, including coding standards like MISRA. This company is committed to delivering innovative solutions that empower decision-making at both tactical and strategic levels. As a Chief Software Architect , you will be instrumental in driving technical excellence and ensuring the success of critical programmes that protect lives and enhance global security. Your contributions will align with the company's values of trust, collaboration, and innovation, making a real impact in the defence industry. Location: The role is an onsite role in Maidenhead, offering good flexibility with working hours. Interested?: If you're ready to take your career to the next level and lead transformative software projects, apply now to become the Chief Software Architect . Don't miss the opportunity to make a difference in the future of defence technology. Your CV will be forwarded to Jonathan Lee Recruitment, a leading engineering and manufacturing recruitment consultancy established in 1978. The services advertised by Jonathan Lee Recruitment are those of an Employment Agency. In order for your CV to be processed effectively, please ensure your name, email address, phone number and location (post code OR town OR county, as a minimum) are included.
Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Aug 23, 2026
Contractor
Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Aug 23, 2026
Full time
Role: Cyber and Information Assurance Consultant Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000 £120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into complex problems and turning security risks into practical solutions? We re looking for Cyber and Information Assurance Consultants across Mid, Senior and Principal levels to join a growing team working on complex, high-assurance environments across defence, government and critical infrastructure. This is a consultancy-focused role, so you won t be sitting in a purely internal security position. You ll work directly with customers, technical teams and senior stakeholders to assess risk, understand threats and vulnerabilities, and provide clear recommendations on how security can be improved. You ll work across areas including cyber risk assessments, information assurance, security governance and secure-by-design. Depending on your level and experience, you could be reviewing solution designs, developing security cases, supporting accreditation and assurance activity, maintaining risk registers or helping shape security requirements across major programmes. You ll also work closely with architects, engineers, project teams, suppliers and customer security teams. A big part of the role will be taking technical evidence and security requirements and explaining what they actually mean from a risk and business perspective. You ll ideally have professional experience in cyber security, information assurance, risk management, systems engineering or a related discipline, alongside experience contributing to security assessment or assurance work. You ll need to be comfortable producing clear security documentation and communicating with both technical and non-technical audiences. Knowledge of areas such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government, critical infrastructure or another high-assurance environment would be particularly relevant. Experience with cloud security assurance, security architecture reviews, accreditation or secure information exchange would also be useful. The level you join at will depend on your experience, with opportunities available from Mid-level through to Principal. There is a clear progression route into senior consultancy, security architecture, cyber risk leadership and information assurance leadership, with support towards professional qualifications such as CISSP, CISM, CRISC and ISO 27001. The role is remote-first, although you ll need to be comfortable travelling to the Nottingham office and customer sites when required. Regular UK travel may form part of the role, with occasional international travel possible. If you re looking for a role where you can work on genuinely complex security challenges, have direct customer exposure and continue developing your career across cyber security and assurance, please apply now or get in touch to find out more. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background.
Project Quality Assurance Engineer This role will be based at our Cyber Centre of Excellence in Maidenhead. Hybrid working is available. Candidates must be willing and able to obtain & maintain DV Security Clearance. Our Cyber business unit is at the forefront of pioneering advanced cryptographic and key management solutions, facilitating the confidential exchange of vital information for customers operating at both tactical and strategic echelons. Join our team and participate in the innovation that ensures the highest security and trust worldwide. As Project Quality Engineer, you are responsible for developing and implementing project quality plans that meet business, customer and contractual requirements. Working under the delegated authority of the Director of Security, Quality & Compliance, the role assures quality across assigned projects and supports the mandatory quality elements of the Business Management System, and helps ensure agreed quality objectives and deliverables are consistently achieved. Key Responsibilities: Develop, implement and maintain project and product quality plans to ensure customer flow-down requirements, contractual obligations and applicable quality standards are met. Define, communicate and manage project quality assurance activities through approved quality plans and effective quality controls. Plan and conduct project, product and process audits in line with applicable standards, including AS9101, to confirm compliance with customer, statutory, regulatory and business management system requirements. Carry out in-process, final and first article inspections to verify that defined processes consistently deliver products that meet specification. Manage non-conformance reporting, root cause analysis, corrective and preventive actions to support continual improvement and prevent recurrence. Work with project, production and process teams to improve operating processes, product yields and overall quality performance. Review, improve and, where appropriate, implement quality processes within Cyber to ensure products and services meet customer needs efficiently and cost-effectively. Develop and maintain strong relationships with internal and external stakeholders to support effective quality outcomes. Promote a quality-focused culture across the business. Required Skills and Qualifications: Degree-qualified, or able to demonstrate equivalent verifiable experience, ideally in a business, quality, software engineering or mechanical engineering discipline. Proven quality engineering experience within the aerospace, defence or similarly regulated sector. Qualified internal auditor with experience of AS9100; IRCA-approved Lead Auditor qualification is preferred. Experience working in a business improvement environment, with knowledge of recognised improvement frameworks. Experience in the use of root cause analysis and problem-solving methodologies. Notice: Due to the nature of the programs we deliver for our customers, candidates may need to obtain the relevant security clearance or handle export-controlled material as defined by the role's requirements. Applicants must be able to obtain and maintain the appropriate level of security clearance for the role. Due to the nature of our work, you must be a British Citizen who has been resident in the UK for the past 5 years in order to apply for SC clearance and 10 years for DV. For more information, please visit the UKSV website. Our Benefits: Every employee is critical to our success, and as such, we offer a range of flexible employee benefits, including: Participation in an Annual Bonus Scheme Private Medical Cover 25 days holiday (plus Bank Holidays) with the option to buy an extra 5 days Pension Contribution 4 x Life Assurance Cover Flexible working hours with opportunity for a 1pm finish on a Friday Flexible benefits including cycle to work scheme, will writing and more Security Clearance Allowance where relevant and subject to you holding the required security clearance Diversity, Equity & Inclusion Statement: At Ultra I&C, we are an equal opportunity employer and value diversity and inclusivity. Underpinned by our values, behaviours, and policies, we want you to feel empowered to be the best version of yourself. We also believe that people from different backgrounds and cultures will increase our diversity of thinking, ensuring we successfully deliver to our customers. We, therefore, do not discriminate based on race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We also support requests for flexible working arrangements wherever possible.
Aug 22, 2026
Full time
Project Quality Assurance Engineer This role will be based at our Cyber Centre of Excellence in Maidenhead. Hybrid working is available. Candidates must be willing and able to obtain & maintain DV Security Clearance. Our Cyber business unit is at the forefront of pioneering advanced cryptographic and key management solutions, facilitating the confidential exchange of vital information for customers operating at both tactical and strategic echelons. Join our team and participate in the innovation that ensures the highest security and trust worldwide. As Project Quality Engineer, you are responsible for developing and implementing project quality plans that meet business, customer and contractual requirements. Working under the delegated authority of the Director of Security, Quality & Compliance, the role assures quality across assigned projects and supports the mandatory quality elements of the Business Management System, and helps ensure agreed quality objectives and deliverables are consistently achieved. Key Responsibilities: Develop, implement and maintain project and product quality plans to ensure customer flow-down requirements, contractual obligations and applicable quality standards are met. Define, communicate and manage project quality assurance activities through approved quality plans and effective quality controls. Plan and conduct project, product and process audits in line with applicable standards, including AS9101, to confirm compliance with customer, statutory, regulatory and business management system requirements. Carry out in-process, final and first article inspections to verify that defined processes consistently deliver products that meet specification. Manage non-conformance reporting, root cause analysis, corrective and preventive actions to support continual improvement and prevent recurrence. Work with project, production and process teams to improve operating processes, product yields and overall quality performance. Review, improve and, where appropriate, implement quality processes within Cyber to ensure products and services meet customer needs efficiently and cost-effectively. Develop and maintain strong relationships with internal and external stakeholders to support effective quality outcomes. Promote a quality-focused culture across the business. Required Skills and Qualifications: Degree-qualified, or able to demonstrate equivalent verifiable experience, ideally in a business, quality, software engineering or mechanical engineering discipline. Proven quality engineering experience within the aerospace, defence or similarly regulated sector. Qualified internal auditor with experience of AS9100; IRCA-approved Lead Auditor qualification is preferred. Experience working in a business improvement environment, with knowledge of recognised improvement frameworks. Experience in the use of root cause analysis and problem-solving methodologies. Notice: Due to the nature of the programs we deliver for our customers, candidates may need to obtain the relevant security clearance or handle export-controlled material as defined by the role's requirements. Applicants must be able to obtain and maintain the appropriate level of security clearance for the role. Due to the nature of our work, you must be a British Citizen who has been resident in the UK for the past 5 years in order to apply for SC clearance and 10 years for DV. For more information, please visit the UKSV website. Our Benefits: Every employee is critical to our success, and as such, we offer a range of flexible employee benefits, including: Participation in an Annual Bonus Scheme Private Medical Cover 25 days holiday (plus Bank Holidays) with the option to buy an extra 5 days Pension Contribution 4 x Life Assurance Cover Flexible working hours with opportunity for a 1pm finish on a Friday Flexible benefits including cycle to work scheme, will writing and more Security Clearance Allowance where relevant and subject to you holding the required security clearance Diversity, Equity & Inclusion Statement: At Ultra I&C, we are an equal opportunity employer and value diversity and inclusivity. Underpinned by our values, behaviours, and policies, we want you to feel empowered to be the best version of yourself. We also believe that people from different backgrounds and cultures will increase our diversity of thinking, ensuring we successfully deliver to our customers. We, therefore, do not discriminate based on race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We also support requests for flexible working arrangements wherever possible.
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
Aug 22, 2026
Full time
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
Senior Security Architect (contractor)- Data Protection & Azure Cloud Security Rate: Flexible Duration: 1 year Hybrid working - 8 days onsite per month (Inside of IR35) We are looking for an experienced Senior Security Architect to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across Data Protection and Cloud Security . This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset. A major focus of the role will be enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information. Key Responsibilities Lead the design and delivery of end-to-end security architecture across enterprise applications, platforms and cloud environments. Develop high-level security designs and translate business, technology and risk requirements into practical security architecture. Define and maintain security architecture principles, standards, patterns and reusable design guidance . Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle. Act as a Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams. Design and govern enterprise data protection and data security controls , including: Data discovery and inventory Data classification and sensitivity labelling Data Loss Prevention (DLP) Data governance Data retention and disposal Data lifecycle controls Protection of structured and unstructured information Encryption and access controls Support the secure design and adoption of Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments. Ensure appropriate security controls across applications, infrastructure, identities, networks and data. Translate cyber risks and regulatory requirements into appropriate security controls and non-functional requirements (NFRs) . Conduct and support security architecture reviews, threat/risk assessments and design validation. Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams. Identify gaps within the existing security landscape and recommend improvements. Support secure technology adoption and major transformation initiatives. Essential Experience We are looking for candidates with strong experience across both Security Architecture and Data/Cloud Security . You should have: Significant experience as a Security Architect, Cyber Security Architect, Security Solution Architect or Enterprise Security Architect . Proven experience delivering end-to-end security architecture within large and complex organisations. Strong knowledge of security architecture governance, including standards, patterns, design reviews and architecture assurance . Strong Data Protection / Data Security Architecture experience. Experience with data classification, discovery, inventory, labelling, governance, retention/disposal and lifecycle controls. Understanding of security controls for both structured and unstructured data . Strong Microsoft Azure Security architecture experience. Good knowledge of AWS, SaaS and hybrid/multi-cloud security. Experience securing enterprise applications, infrastructure and cloud platforms. Understanding of IAM, Zero Trust, encryption, key management and access-control principles. Ability to translate risk assessments and regulatory requirements into technical security architecture. Experience working within regulatory frameworks such as GDPR, DORA, PCI-DSS, SOX and/or SWIFT CSP . Excellent communication skills with the ability to engage with senior stakeholders, architects, engineers, risk and compliance teams. Highly Desirable Experience with Microsoft Purview , particularly Information Protection, data classification, sensitivity labelling, DLP and information governance. Experience defining data-protection architecture across Azure and Microsoft 365 environments. Financial Services, Banking, Payments, Market Infrastructure or other highly regulated/critical infrastructure experience. Experience with security architecture frameworks such as SABSA, TOGAF or similar . Knowledge of DevSecOps and secure SDLC practices. Experience working within Agile delivery environments and across multiple release trains. Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security/Architecture, CISM or equivalent . Rates depend on experience and client requirements
Aug 22, 2026
Contractor
Senior Security Architect (contractor)- Data Protection & Azure Cloud Security Rate: Flexible Duration: 1 year Hybrid working - 8 days onsite per month (Inside of IR35) We are looking for an experienced Senior Security Architect to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across Data Protection and Cloud Security . This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset. A major focus of the role will be enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information. Key Responsibilities Lead the design and delivery of end-to-end security architecture across enterprise applications, platforms and cloud environments. Develop high-level security designs and translate business, technology and risk requirements into practical security architecture. Define and maintain security architecture principles, standards, patterns and reusable design guidance . Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle. Act as a Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams. Design and govern enterprise data protection and data security controls , including: Data discovery and inventory Data classification and sensitivity labelling Data Loss Prevention (DLP) Data governance Data retention and disposal Data lifecycle controls Protection of structured and unstructured information Encryption and access controls Support the secure design and adoption of Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments. Ensure appropriate security controls across applications, infrastructure, identities, networks and data. Translate cyber risks and regulatory requirements into appropriate security controls and non-functional requirements (NFRs) . Conduct and support security architecture reviews, threat/risk assessments and design validation. Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams. Identify gaps within the existing security landscape and recommend improvements. Support secure technology adoption and major transformation initiatives. Essential Experience We are looking for candidates with strong experience across both Security Architecture and Data/Cloud Security . You should have: Significant experience as a Security Architect, Cyber Security Architect, Security Solution Architect or Enterprise Security Architect . Proven experience delivering end-to-end security architecture within large and complex organisations. Strong knowledge of security architecture governance, including standards, patterns, design reviews and architecture assurance . Strong Data Protection / Data Security Architecture experience. Experience with data classification, discovery, inventory, labelling, governance, retention/disposal and lifecycle controls. Understanding of security controls for both structured and unstructured data . Strong Microsoft Azure Security architecture experience. Good knowledge of AWS, SaaS and hybrid/multi-cloud security. Experience securing enterprise applications, infrastructure and cloud platforms. Understanding of IAM, Zero Trust, encryption, key management and access-control principles. Ability to translate risk assessments and regulatory requirements into technical security architecture. Experience working within regulatory frameworks such as GDPR, DORA, PCI-DSS, SOX and/or SWIFT CSP . Excellent communication skills with the ability to engage with senior stakeholders, architects, engineers, risk and compliance teams. Highly Desirable Experience with Microsoft Purview , particularly Information Protection, data classification, sensitivity labelling, DLP and information governance. Experience defining data-protection architecture across Azure and Microsoft 365 environments. Financial Services, Banking, Payments, Market Infrastructure or other highly regulated/critical infrastructure experience. Experience with security architecture frameworks such as SABSA, TOGAF or similar . Knowledge of DevSecOps and secure SDLC practices. Experience working within Agile delivery environments and across multiple release trains. Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security/Architecture, CISM or equivalent . Rates depend on experience and client requirements
SRT Marine Systems plc
Gloucester, Gloucestershire
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
Aug 22, 2026
Full time
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
Aug 22, 2026
Full time
SRT Marine Systems plc (SRT) are a market leader in its domain of international marine surveillance technology and systems. We are respected, established and an ambitious multi-national company headquartered in the UK with a global customer base. The company has a global impact in the marine domain by leading the next generation of Maritime Domain Awareness 'MDA' technologies, products and systems that significantly enhance, security, safety and environment protection and sustainability. Our customers are worldwide and range from the largest national coast guards to individual vessel owners. SRT is an exciting company where high quality results are rewarded. We are ambitious and are constantly seeking to innovate to deliver better products and services to our customers. We strive to make SRT a rewarding and challenging place to work where talented hard-working individuals have the opportunity to make a real impact across the marine world. We are looking for a Security & Compliance Manager to own the security of how our products and systems are deployed, operated and maintained in customer environments around the world, and to lead the security assurance and certification activity that stands behind them. This is a senior, customer-facing leadership role sitting at the intersection of secure delivery, customer operations and corporate security. You as a Security & Compliance Manager will work closely with our delivery, customer-facing, network & infrastructure and corporate IT teams, and with our external security partners, to make sure the systems we deploy remain secure throughout their operational life. The role is focused on leadership, coordination and communication rather than hands-on engineering. Much of the knowledge needed already exists across the business - your job is to bring it together into a coherent programme, and to be the champion who drives it through, backed by enough technical understanding to hold detailed conversations with customers, auditors and developers. The role of Security & Compliance Manager is primarily based from our Bristol office, but you must be willing to travel to our offices in Cardiff and Bath on occasion, and from time to time to customer sites worldwide, with good flexibility for Hybrid working. Responsibilities - Security & Compliance Manager - not exhaustive: Act as the senior voice and champion for security across our delivery and customer operations, ensuring deployed systems receive the same security attention as new ones. Define the customer operating policies, principles and patterns that delivery and customer-facing teams should follow for the secure implementation and operation of SRT systems. Own the through-life security of equipment deployed in customer environments, including patching, secure configuration, and equipment lifecycle and end-of-life replacement. Lead SRT's responses to customer security requirements, assurance questionnaires and connection approvals, including for sophisticated government and defence customers. Work with internal stakeholders to ensure engineering and operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme of improvement. Direct our external security partners as an extended resource pool for monitoring, assessments and remediation. Assign pragmatic risk levels and support sensible prioritisation of remediation alongside project delivery and other commitments. Report clearly to senior leadership on risk, progress and priorities in business terms. Requirements - Security & Compliance Manager - not exhaustive: Strong experience in security management, security assurance, compliance or a similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle management. Experience leading customer-facing security engagements, including security questionnaires, accreditation and third-party assurance. The presence and communication skills to champion change across teams and to influence stakeholders without direct authority. The judgement to assess risk and business impact pragmatically. Experience coordinating third-party security providers such as managed SOC or security service partners. Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials Plus, NIST CSF or similar. Experience in an engineering or manufacturing business delivering long-lived systems would be helpful. Experience in high-trust, regulated or mission-critical environments would be valuable. Benefits Highly Competitive Salary and benefits package 25 days annual leave rising to 28 days with service Real individual development opportunities SRT Marine Systems plc is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and welcome applications from all backgrounds.
CBSbutler Holdings Limited trading as CBSbutler
Luton, Bedfordshire
Product Security Engineer - Defence & Government Location: Luton - 90% onsite Rate: 80- 90 per hour Security Clearance: Active SC Clearance required Nationality: UK Eyes Only / Sole British National required Contract: 12 Months + The Role We are seeking an experienced Product Security Engineer to support the development and maintenance of bespoke security capabilities for Defence and Government customers. You will take responsibility for security across the full product lifecycle , from design and development through verification, deployment and ongoing maintenance. The role will focus on security risk assessment, security requirements, risk mitigation, security assurance and the implementation of appropriate security controls . You will work closely with product development teams, security assurance authorities, risk owners and engineering SMEs to ensure products meet relevant customer and organisational security requirements. This is a highly technical role suited to a Product Security professional with experience working across UK Defence, Government, aerospace or other highly regulated environments . Key Responsibilities Develop Security Management Plans, work package descriptions and cost estimates for bids, services and proposals. Undertake security risk assessments and develop risk mitigation plans. Conduct mitigation gap analysis and produce security management documentation for system assurance. Define product security requirements and advise engineering teams on security control implementation. Work directly with product development teams throughout the product lifecycle. Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security hardening. Support penetration testing activities, analyse findings and develop remedial action plans. Manage through-life product security, including vulnerability management, patch management and security obsolescence planning. Support security incident management and crisis response activities. Review and contribute to corporate product security policies and processes. Deliver product security training and guidance to engineering teams. Produce and maintain technical security artefacts and assurance documentation. Security Risk & Assurance You will be responsible for ensuring security risks are appropriately identified, assessed and managed throughout the product lifecycle. This will include: Security risk assessments. Risk mitigation planning. Security requirements definition. Security cases and assurance documentation. Mitigation gap analysis. Security verification and testing. Penetration testing support and remediation. Engagement with customer security authorities and risk owners. Demonstrating compliance against applicable UK, NATO and international security frameworks. Product Security Engineering The role will require a strong understanding of how security controls are applied to bespoke products and systems, including: Product-specific operating systems. Firmware. Software. Platform security and hardening. Cryptographic technologies. Key management systems. Secure configuration and lockdown. Vulnerability and patch management. Security monitoring and incident response. You will work closely with engineering teams to ensure security requirements are translated into practical and effective technical controls. Essential Skills & Experience Demonstrable experience developing product-based security solutions for military, defence, government or commercial products and systems. Strong experience in Product Security / Information Security / Cyber Security Engineering . Experience undertaking security risk assessments and developing risk mitigation strategies. Experience defining and managing product security requirements. Experience producing technical security assurance documentation. Experience working directly with engineering and product development teams. Strong understanding of security throughout the product lifecycle. Practical experience with security assurance and compliance activities. Knowledge of UK Defence and Government security frameworks . Recent experience with relevant UK/EU/NATO information security standards and frameworks, including: UK MOD Secure by Design GovS 007 HMG IS1/IS2 ISO 27001 NIST SP 800-30, 800-37 and 800-53 UK MOD Information Security-related JSPs EU Cyber Resilience Act (CRA) US Department of Defense information security policies Experience producing security artefacts such as Key Management Plans, Security Operating Procedures, Security Cases and security testing documentation . Knowledge of cryptographic technologies and key management. Understanding of Model-Based Systems Engineering (MBSE) and the role of Product Security within the systems engineering lifecycle. Understanding of operating system, firmware and software security controls. Excellent written and verbal communication skills. Strong stakeholder management and influencing skills. Ability to work collaboratively with engineering, security and customer stakeholders. Active SC Clearance or eligibility for SC clearance with UK Eyes Only requirements. Desirable Experience DV Clearance . Practical experience with Common Criteria security evaluation techniques. Knowledge of quantum cryptography and quantum key management. Experience using threat intelligence sources. Knowledge of NATO security policy, risk management and accreditation. Understanding of security advisory boards within UK Government or NATO environments. Experience supporting security incidents or crisis management activities. Experience working across classified or highly sensitive environments. Qualifications & Professional Membership Degree or postgraduate qualification in Engineering, Computer Science, Cyber Security or a related scientific/technical discipline , or equivalent professional experience. Professional membership of an NCSC-recognised security organisation such as CIISec, ISC2 or ISACA .
Aug 22, 2026
Contractor
Product Security Engineer - Defence & Government Location: Luton - 90% onsite Rate: 80- 90 per hour Security Clearance: Active SC Clearance required Nationality: UK Eyes Only / Sole British National required Contract: 12 Months + The Role We are seeking an experienced Product Security Engineer to support the development and maintenance of bespoke security capabilities for Defence and Government customers. You will take responsibility for security across the full product lifecycle , from design and development through verification, deployment and ongoing maintenance. The role will focus on security risk assessment, security requirements, risk mitigation, security assurance and the implementation of appropriate security controls . You will work closely with product development teams, security assurance authorities, risk owners and engineering SMEs to ensure products meet relevant customer and organisational security requirements. This is a highly technical role suited to a Product Security professional with experience working across UK Defence, Government, aerospace or other highly regulated environments . Key Responsibilities Develop Security Management Plans, work package descriptions and cost estimates for bids, services and proposals. Undertake security risk assessments and develop risk mitigation plans. Conduct mitigation gap analysis and produce security management documentation for system assurance. Define product security requirements and advise engineering teams on security control implementation. Work directly with product development teams throughout the product lifecycle. Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks. Work collaboratively with external security authorities, including the NCSC , where required to support security assurance. Manage security activities across development, testing and manufacturing environments. Advise engineering teams on platform lockdown, secure configuration and security hardening. Support penetration testing activities, analyse findings and develop remedial action plans. Manage through-life product security, including vulnerability management, patch management and security obsolescence planning. Support security incident management and crisis response activities. Review and contribute to corporate product security policies and processes. Deliver product security training and guidance to engineering teams. Produce and maintain technical security artefacts and assurance documentation. Security Risk & Assurance You will be responsible for ensuring security risks are appropriately identified, assessed and managed throughout the product lifecycle. This will include: Security risk assessments. Risk mitigation planning. Security requirements definition. Security cases and assurance documentation. Mitigation gap analysis. Security verification and testing. Penetration testing support and remediation. Engagement with customer security authorities and risk owners. Demonstrating compliance against applicable UK, NATO and international security frameworks. Product Security Engineering The role will require a strong understanding of how security controls are applied to bespoke products and systems, including: Product-specific operating systems. Firmware. Software. Platform security and hardening. Cryptographic technologies. Key management systems. Secure configuration and lockdown. Vulnerability and patch management. Security monitoring and incident response. You will work closely with engineering teams to ensure security requirements are translated into practical and effective technical controls. Essential Skills & Experience Demonstrable experience developing product-based security solutions for military, defence, government or commercial products and systems. Strong experience in Product Security / Information Security / Cyber Security Engineering . Experience undertaking security risk assessments and developing risk mitigation strategies. Experience defining and managing product security requirements. Experience producing technical security assurance documentation. Experience working directly with engineering and product development teams. Strong understanding of security throughout the product lifecycle. Practical experience with security assurance and compliance activities. Knowledge of UK Defence and Government security frameworks . Recent experience with relevant UK/EU/NATO information security standards and frameworks, including: UK MOD Secure by Design GovS 007 HMG IS1/IS2 ISO 27001 NIST SP 800-30, 800-37 and 800-53 UK MOD Information Security-related JSPs EU Cyber Resilience Act (CRA) US Department of Defense information security policies Experience producing security artefacts such as Key Management Plans, Security Operating Procedures, Security Cases and security testing documentation . Knowledge of cryptographic technologies and key management. Understanding of Model-Based Systems Engineering (MBSE) and the role of Product Security within the systems engineering lifecycle. Understanding of operating system, firmware and software security controls. Excellent written and verbal communication skills. Strong stakeholder management and influencing skills. Ability to work collaboratively with engineering, security and customer stakeholders. Active SC Clearance or eligibility for SC clearance with UK Eyes Only requirements. Desirable Experience DV Clearance . Practical experience with Common Criteria security evaluation techniques. Knowledge of quantum cryptography and quantum key management. Experience using threat intelligence sources. Knowledge of NATO security policy, risk management and accreditation. Understanding of security advisory boards within UK Government or NATO environments. Experience supporting security incidents or crisis management activities. Experience working across classified or highly sensitive environments. Qualifications & Professional Membership Degree or postgraduate qualification in Engineering, Computer Science, Cyber Security or a related scientific/technical discipline , or equivalent professional experience. Professional membership of an NCSC-recognised security organisation such as CIISec, ISC2 or ISACA .
