55 jobs found

Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Cyber Security ConsultantMainly remote with occasional UK office/site visits£55,000-£65,000 depending on experience, + Benefits An established and expanding information security consultancy is looking to appoint a Cyber Security Consultant to support a growing portfolio of client engagements across the UK. This is an excellent opportunity for someone fairly early in their cyber or information security career who wants exposure to a wide range of security disciplines, client environments and real-world challenges. The role offers strong development support, varied project work and clear progression. Candidates must be UK-based, with full right to work in the UK without sponsorship. The role: You will work alongside experienced consultants delivering practical, business-focused security services to clients ranging from fast-growing SMEs to large, complex organisations. Depending on your background and interests, your work may include: Reviewing security maturity against recognised good practice Supporting Cyber Essentials preparation and assessments Developing and testing incident response plans Carrying out tabletop and simulated incident exercises Assessing and improving supply chain security Advising on secure application and software development Contributing to physical security testing activities Delivering security awareness sessions Completing risk assessments and threat modelling Writing and reviewing security policies and governance documentation Experience required: 2+ years experience in information or cyber security Previous consultancy experience with the ability to engage effectively with clients/customers and understand their requirements Ability to simplify complex topics and offer practical, grounded advice An understanding of ISO 27001, GDPR, or broader information-security concepts/frameworks Are comfortable engaging with clients and stakeholders Curious, self-directed, and motivated to work towards further industry certifications Someone who enjoys solving problems, not just following checklists UK-based, with full right to work in the UK without sponsorship Why Join? £55,000-£65,000 salary , depending on experience 25 days' annual leave + bank holidays + other benefits Remote-first flexibility A people-first culture that values kindness, curiosity, and growth Exposure to a wide range of projects across IR, GRC, and technical security Opportunities to see the long-term impact of your work through ongoing client relationships If you're ready to grow your career in a supportive consulting environment, then we'd love to hear from you. Apply now and send over your CV for a quick review. Security, Cyber, Cybersecurity, Infosec, Information Security, Incident Response, IR, Consult, Consultant, Consulting, Compliance, 27001, GDPR, DPA, Data Protection, GRC, Governance, Risk Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.

Cyber Assurance Lead Contract Duration: 6 Months Location: Hybrid (London / Birmingham) Job Type: Contract - Outside IR35 Reed Professional Services is seeking a Cyber Assurance Lead to provide senior leadership and strategic direction in cyber security assurance across a dynamic digital and cloud portfolio. This role is crucial for ensuring security risk management, documentation, and compliance in a regulated environment, focusing on cloud-hosted platforms and enterprise SaaS solutions. Day-to-day of the role: Own and lead cross-project cyber security assurance for a complex multi-system digital portfolio. Act as the senior security decision-maker, providing clear risk-based recommendations and approvals. Prioritise assurance activity across multiple live projects and services. Constructively challenge senior delivery, digital, and technical stakeholders on risk, architecture, and control gaps. Ensure consistent production and maintenance of assurance artefacts, risk registers, control mapping, and decisions. Oversee and quality-assure the work of senior and mid-level security consultants. Support compliance and assurance activities in regulated or audited environments, such as government-style assurance. Provide assurance input across cloud, SaaS, integration, and OT-adjacent initiatives. Required Skills & Qualifications: Extensive experience leading security assurance and risk management across live digital environments. Proven ability to operate at programme/portfolio level. Strong background in cloud and SaaS environments (AWS preferred). Experience with integration-heavy estates, APIs, and third-party platforms. Excellent stakeholder management skills, with confidence engaging at CISO and senior leadership level. Pragmatic, delivery-focused mindset - able to balance pace with control. Desirable: Exposure to GovAssure or central government assurance models, experience with OT, IoT, smart-building or property technology environments, familiarity with Salesforce, ServiceNow, Planon or similar SaaS platforms. Additional Information: BPSS and active Security Clearance required. This position offers hybrid working options, with locations in London and Birmingham. To apply for the Cyber Assurance Lead position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.

Security Architect - SC Cleared - Outside IR35 Location : London Length: Initial 6 Months Type : 1 day a week on-site Clearance : Active SC Clearance IR35: Outside Rate: £500 - £550 Contingency : Must be able to start within 1-2 weeks Sanderson G&D are seeking a Security Architect who will provide strategic cyber security advice and guidance to digital product teams, acting as a Close Support Partner to ensure Secure by Design principles are embedded throughout the product development lifecycle. The role focuses on assurance, architecture guidance, and risk-based decision support, enabling secure delivery without owning build or operations. Key Responsibilities Attend regular project and design meetings to understand requirements and delivery milestones. Perform initial and iterative threat modelling for new features, integrations, and architectural changes. Advise on secure architecture design, including IAM, network segmentation, encryption, and data protection. Recommend and review security controls for cloud-native environments. Provide guidance on secure coding practices and advisory support for code reviews. Support incident response planning and vulnerability management during development. Review and advise on third-party integrations, ensuring appropriate technical and contractual safeguards. Provide assurance that Secure by Design principles are being consistently applied. Essential Experience Proven experience as a Security Architect or senior cyber security consultant in digital delivery environments. Strong Secure by Design, threat modelling, and risk-based security expertise. Experience advising product teams in agile, cloud-based delivery contexts. Confident engaging with architects, developers, and delivery leads in an advisory capacity. If you're interested, apply or reach out to Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Principal Consultant - Incident Response Salary: Up to £85,000 + cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the office About the Role Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering proactive incident readiness engagements. You will work closely with organisations to strengthen their preparedness. This includes reviewing and developing incident response plans, facilitating tabletop exercises, running simulated attack scenarios, and advising on preventative engineering and operational readiness. The focus is on ensuring clients are not only able to respond effectively in a crisis, but are proactively building resilience into their environments. This role offers the opportunity to work on complex and high-profile cyber incidents, while also shaping how organisations think about planning, governance and technical response capability. The Role As a Principal Consultant, you will: Lead and deliver technical incident response engagements, helping clients respond, remediate and recover from cyber security incidents. Conduct high-quality forensic and technical analysis to determine root cause, scope and impact of security breaches. Produce clear, well-structured outputs ranging from executive briefings to detailed technical investigation reports. Act as the technical lead on small to medium-sized incidents, overseeing team members and ensuring technical excellence throughout delivery. Support detection engineering and SecOps enhancement initiatives, including identifying coverage gaps in EDR/SIEM tooling and contributing to orchestration and automation playbooks. Work directly with client technical teams, acting as a trusted advisor and primary point of contact during engagements. Scope and design both emergency response and preparatory readiness engagements. In addition to reactive incident work, you will: Assess and improve clients' incident response plans and protocols. Facilitate tabletop exercises and simulated attack scenarios to test organisational readiness. Deliver incident preparedness services, including playbook development, runbook design and capability gap analysis. Provide threat briefings and strategic guidance to help organisations strengthen their preventative and detection capabilities. Mentor and develop junior consultants within the practice. About You Our client is looking for an experienced incident responder with strong technical depth and the ability to engage confidently with stakeholders at all levels. You will have recent hands-on experience in at least two of the following areas: Digital forensics and technical incident response Enterprise security operations tooling and processes Detection engineering within EDR/SIEM environments, including addressing ATT&CK TTP coverage gaps Enterprise IT networks and Active Directory Cloud platforms such as Microsoft 365, Azure, AWS or GCP You will also demonstrate: A strong understanding of threat actors and the techniques used to compromise organisations. The ability to analyse complex technical problems and communicate findings clearly to both technical and non-technical audiences. Experience leading investigations and managing client-facing engagements. Familiarity with incident readiness and preparedness services, including tabletop exercises, playbook development and response planning. The ability to build strong working relationships with clients and internal stakeholders. A commitment to mentoring and developing others within the team. This is an excellent opportunity for an experienced incident response professional who enjoys both the intensity of live incident work and the strategic value of helping organisations strengthen their cyber resilience before an attack occurs. Apply now for immediate review! Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments click apply for full job details

Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice click apply for full job details

Cyber Security - Government projects - DV Clearance Are you a Cyber Security consultant looking for your next challenge? I am working with a well-known client working on a range of National Security & Digital programmes for the government. They are looking for a Cyber Security Consultant to join their team click apply for full job details

Information Security Consultant Salary: £50,000 - £65,000 depending on experience + benefits Location: Remote with occasional travel The Role We're seeking an experienced Information Security / Cyber Security Consultant to support client engagement, helping organisations understand risk, strengthen security controls, and demonstrate assurance against recognised standards and frameworks. You'll work as part of delivery teams on client-facing projects, contributing to assessments, remediation activities, and ongoing compliance programmes. This is a hands-on consulting role combining structured advisory work with practical delivery. You'll gain exposure to organisations of varying size, sector, and maturity, while developing your technical security knowledge, client engagement skills, and consulting capability within a commercial environment. What You'll Do Contribute to security assessment and improvement programmes aligned to frameworks such as ISO/IEC 27001, NIST CSF, Cyber Essentials, CAF, CSA CCM and comparable standards Perform structured gap analyses that consider business risk, regulatory drivers, and client priorities Support the execution of cyber and information risk assessments using recognised approaches (e.g. ISO 27005, NIST RMF, FAIR or similar methodologies) Develop, review, and maintain security documentation including policies, standards, procedures, and supporting guidance Assist with the design and implementation of administrative, technical, and physical security controls mapped to relevant frameworks (including ISO/IEC 27001:2022) Support internal audits, external assurance activities, and certification or compliance-readiness engagements Help clients manage evidence, metrics, and reporting to demonstrate ongoing security posture and compliance Contribute to client workshops, briefings, and awareness sessions to embed effective security practices Experience Practical experience working with one or more recognised security frameworks such as ISO 27001, NIST CSF, Cyber Essentials, CAF, or CSA CCM A solid understanding of core cyber and information security principles, risk management, and control design Experience supporting security assessments, audits, or compliance-focused initiatives in a consulting or in-house role Strong written and verbal communication skills, with the ability to engage professionally with clients and internal stakeholders A structured, proactive approach to analysis, documentation, and problem-solving Relevant security certifications, or active progression towards them (e.g. ISO 27001 Implementor or Auditor) Awareness of AI risk management and responsible AI standards (e.g. NIST AI RMF, ISO/IEC 42001) Familiarity with GRC tooling such as Vanta, OneTrust, or similar platforms Working knowledge of Microsoft 365 and Google Workspace environments What's in it for You? Remote-first flexibility with expected UK travel 1-2 times per month Ongoing career development with access to training and certifications Comprehensive benefits package including Private Healthcare, Cash-Back Plan, and enhanced wellbeing support Opportunity to lead high-impact security programmes across cloud, AI, and modern engineering environments Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Senior BESS Integration & Plant Control Engineer Project Name: HOW03 BESS Duration: 07-Apr-2026 - 31-May-2027 Job Classification: Electrical Systems Primarily remote (UK-based preferred), with travel to Norwich and London Bring own PPE Mon - Friday Description Project: 300MW BESS integrated with 2.6GW Offshore Wind Farm via HVDC Role Overview We are seeking a specialist engineer to support the BESS Technical Lead with the integration of a large-scale Battery Energy Storage System (BESS) with a major offshore wind farm connected via HVDC. This is a technically challenging and high-profile role focused on ensuring robust integration between the BESS, HVDC system, offshore wind plant, control systems, trading and optimisation platforms, and operational stakeholders. The role has a particular emphasis on the BESS interfaces and requires an engineer who can provide input into the development of the operating philosophy, control philosophy, and interface design across multiple systems and parties. This individual will play a key role in ensuring the integrated system is operable, reliable, commercially optimised, and validated through practical testing that the BESS is grid code compliant. Key Responsibilities BESS-HVDC-Offshore Wind Integration Support the design and coordination of the control interfaces between the BESS and HVDC system across a range of operating scenarios. Define and manage key integration interfaces between the BESS, offshore wind farm, HVDC controls, plant controllers, and other relevant OEM systems. Support the BESS Technical Lead to provide input into the development of the overall integrated operating and control philosophy for the BESS, HVDC system, and offshore wind plant. Support the BESS Technical Lead working closely with OEMs and project stakeholders to ensure the integrated solution is correctly designed, built, tested, and commissioned. Trading, Revenue & Operational Interfaces Lead the definition of BESS interfaces related to trading, dispatch, and revenue optimisation, including interfaces with the optimiser platform. Ensure control logic and system design appropriately reflect network constraints, including restrictions arising from shared grid connection arrangements, offshore wind generation conditions, HVDC operating constraints, and wider transmission system limitations. Develop the functional approach to automatically limit or adjust traded power when plant or grid constraints apply. Coordinate interfaces between the BESS and the trading optimiser, the BESS OEM for warranty, maintenance, and condition monitoring signals, and the 24/7 control centre supporting NESO and the BESS owner/operator. Technical Leadership & Interface Management Provide technical leadership across complex multidisciplinary interfaces involving controls, SCADA, commercial/trading systems, OEM platforms, and grid compliance functions. Act as the glue across multiple technical and commercial workstreams to ensure a coherent and reliable end-to-end solution. Manage model and interface coordination between different OEMs, particularly where control interactions between the BESS and HVDC are critical. Work closely with the Plant Control Engineer for the HVDC and offshore wind plant to ensure aligned design and testing. Work closely with the Lead BESS HV Engineer to ensure aligned design and testing. Grid Code Compliance & Testing Lead the BESS aspects of UK grid code compliance planning and testing by working closely with the Plant Control Engineer for the HVDC and Offshore Windfarm as well as the overall commissioning team. Support and coordinate compliance activities with NESO, including a practical understanding of E-ON, I-ON A, I-ON B, and FON working closely with the Design & Compliance Manager as well as the Grid Connection Manager. Good understanding of operational tripping schemes and the compliance testing associated with this. Ensure that control design, plant operation, and interface behaviour support successful compliance demonstration. Coordinate with specialists responsible for compliance studies, testing, and technical evidence packages. Develop Grid Code Compliance test procedures using client templates and formatting that are familiar to NESO. Prepare Grid Code Compliance test results and reports using client templates and formatting that are familiar to NESO. Integrated Control Design Documentation Produce and maintain the integrated documentation required to pull together inputs from different packages, contractors, and OEMs for the BESS control design implementation. Develop clear, structured documentation covering operational modes, operational tripping philosophy, control schemes, and key interface definitions. Ensure documentation clearly defines interfaces with neighbouring systems, including the HVDC system, offshore wind plant, plant control systems, control room, trading and revenue, Optimiser, the Transmission System Operator (TSO). Coordinate across packages and stakeholders to ensure documentation is aligned, complete, traceable, and suitable to support design, implementation, testing, commissioning, and operations. Why This Role? The successful candidate will be supported by experienced teams across HV, protection, SCADA, metering, commercial, trading, and revenue, as well as receiving training and support from the optimiser provider. This role offers genuine scope for growth, learning, and technical leadership. If solving complex engineering challenges across BESS, HVDC, and offshore wind integration motivates you, this is an exceptional opportunity. Requirements Essential Strong experience in the integration of Battery Energy Storage Systems (BESS) into complex power projects. Demonstrable experience with control interfaces between the BESS and other plant systems, ideally including HVDC, renewable generation, or grid-connected infrastructure. A basic understanding of communication network infrastructure and cyber security. Good understanding of BESS trading, dispatch, and revenue optimisation interfaces in the UK market. Experience defining or managing interfaces with optimisers/trading platforms, OEM control systems, SCADA and plant control systems, and remote operational/control centres. Strong understanding of how shared grid connection constraints impact BESS operation and traded power availability. Experience with co-located BESS projects sharing a grid connection with other generation assets, such as offshore wind, onshore wind, solar, or other generation plant. Ability to develop and manage an integrated operating and control philosophy across multiple systems and stakeholders. Good working knowledge of UK grid code compliance processes for large grid-connected plant, including practical awareness of testing and energisation stages. Understanding of REMIT considerations regarding trading and implication of where data/signals are sent. Experience producing integrated technical documentation that consolidates control design inputs, operating philosophies, trip logic, and interface requirements across multiple OEMs and packages. Desirable Experience working on projects involving HVDC-connected offshore wind. Broader understanding of power systems and control interactions, sufficient to manage technical interfaces and challenge OEMs effectively. Familiarity with grid code compliance studies, even if not personally conducting PSCAD or PowerFactory simulations. Awareness of related areas such as SCADA integration, metering interfaces, protection interactions and control room operations. Prior experience coordinating across multiple OEMs and contractors in a complex delivery environment. Technical Capability Profile The successful candidate will not be expected to personally carry out PSCAD or PowerFactory studies, but should have sufficient knowledge of power system behaviour, control interactions, and dynamic plant integration to: understand the implications of study outputs. manage technical discussions with OEMs and consultants. review interface assumptions. ensure appropriate integration between BESS and HVDC control systems; and support the delivery of a technically robust and compliant solution. Qualifications Degree in Electrical Engineering, Control Systems Engineering, or similar relevant discipline. Master's degree preferred. A solid background in control theory, and practical site experience especially grid code compliance testing. Location & Travel UK-based candidates are strongly preferred. The role is primarily remote, but regular travel will be required. The project site is in Norwich, and the optimiser provider / employer offices are in London. Candidates should expect travel of approximately 1-2 days per week, depending on project phase. During key periods-particularly grid code compliance testing, initial energisation, and early operational phases-a greater site presence in Norwich will be required to support issue resolution and successful delivery. For site visits, the consultant must bring their own work clothes and basic PPE.

Construction Project Manager 12 Months Based: BAE Warton- 5 days onsite Hourly Rate: £30.42 Paye or £ 40.90 Umbrella inside IR Hours per week Overview As a Specialist Works Service Engineer you would be responsible for the coordination of the design, construction planning and implementation of a wide range of infrastructure projects both on the estate and connected to plant and equipment across the BAE Systems Warton Unit sites (Samlesbury)Skills Previous experience in the Design Management of Construction activities Previous experience in Construction Management Good supplier Management and communication Skills Knowledge of construction and or Plant and Equipment installations Relevant qualification of equivalent experience in managing Health & safety - NEBOSH The Job Liaising with both internal and external customers, engineering professionals, subject matter experienced and professional consultancy support teams Co-ordinating with consultant teams and construction contractors in respect of the development of defined facilities Responsible for all project design phases following the RIBA stages Responsible for all installation in accordance with the current company, statutory health and safety legislation, building control and CDM regulations Please note - FULL SC clearance is required for this role About BAE: BAE Systems is a leading global defence, aerospace, and security company. They're experts in delivering advanced solutions for air, land, and naval forces, as well as commercial aerospace and cyber security. Known for its commitment to innovation and excellence, BAE Systems offers exciting career opportunities for those looking to make a significant impact in cutting-edge technology and defence sectors. Inclusion statement Outsource UK is committed to creating a diverse environment and is proud to be an equal opportunity employer. You'll receive consideration for your application without regard to race, religion or belief, gender identity or expression, sex, sexual orientation, disability, marriage and civil partnership, pregnancy and maternity, or age.

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Programme Manager - Derby Belcan Workforce Solutions are looking for an experienced Programme Manager for our client based in Derby. The Programme Manager will be responsible for executing and leading engineering programmes. You will have the ability to set direction and carry out statement of work from the client. The Programme Manager shall manage and provide leadership for engineering tasks. This includes leading engineering teams which perform the entire range of tasks required for: concept studies, systems engineering, mechanical design, heat transfer, structures analysis, modelling, final drawing/ documentation for hardware, instrumentation, assembly and commissioning for an Aerospace Test Rig. The Programme Manager shall be responsible for resource, budget, schedule, and technical accuracy of the Integrated Project Team(s) they are leading. You will be expected to have good technical knowhow to support decision making in collaboration with the Technical Lead through the evolution of the programs. Responsibilities Lead and manage engineering programs, including budget, schedule, and risk management. Must be able to work with customers to define and document requirements, address technical concerns, then manage the overall program scope of work as agreed with the customer and provide project status. Resolve arising matters within the integrated project team. Ensure compliance with all contract requirements and deliverables and maintain overall programme schedule. Make technical and programmatic presentations internally and to customers. Use of Earned Value Management Systems to monitor spend and progress. Assist with the creation of bids and proposals for programs that the candidate will manage in the future. Qualifications and Experience Bachelor's degree or equivalent experience in Aeronautical Engineering, Mechanical Engineering or a relevant technical degree. Applicable work experience, ideally some of which is in a turbomachinery design environment. The candidate shall have prior experience in Project/Program Management which covers budgets, cost and earned value management, schedules, bids and proposals. The candidate shall have also spent time in other roles e.g. design to have an appreciation of the activities involved in the program. Strong organisational and communication skills. Ability to make technical presentations internally and to customers. Have knowledge of Test Rig engineering methodology and practices. Excellent written and verbal communication skills. Have strong scope management skills. What will you get: Competitive Salary Holidays - 33 days per year total (incl. Bank hols) Pension Private Medical Insurance Death in Service Income Protection Employee Share Purchase Plan Cycle to Work Belcan, a Cognizant company, is a global force in technical services and engineering consultancy. Our legacy is built on delivering high-quality outputs and our unwavering commitment to developing the next generation of technical consultants and specialist engineers. Our expertise is vast, spanning across various engineering industries including aerospace, defence, marine, nuclear, automotive, and cyber security. This vacancy is being advertised by Belcan.

Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.

Nuclear Security Consultant British Engineering Consultancy £50,000 - £60,000 About the Company Our client is a British engineering and technology consultancy with a strong reputation in the national security and defence sectors. Their nuclear practice works across the full spectrum of protective security - from physical and personnel controls through to technical and cyber-blended solutions - s click apply for full job details