106 jobs found

Cyber Security Consultant Role Amethyst delivers a range of specialist cyber security professional services. We help businesses and organisations to understand the value of their information assets, assess associated security risks and develop the technical and procedural controls to protect them. We work across both private and public sectors specialising in taking ownership of cyber security through life, from inception to disposal and seek to develop long term trusted relationships with our customers. As part of our growth strategy, we are looking for a talented Cyber Security Consultant to join our team. About the Role As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Production of formal deliverables such as security policies and operating procedures, risk assessments, security assurance management plans and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Support business development by developing and managing relationships with existing and new customers Essential Skills & Experience Recognised industry cyber security certifications or qualifications, e.g. CISSP, CISM, CISA Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practice Baseline knowledge of information systems, e.g. cloud, access control, networking Experience of working in a customer facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience UK Cyber Security Council - Professional Registration Title, e.g. Chartered, Principal, Practitioner Knowledge and understanding of HMG and MoD, cyber security policy, standards, guidance, security processes and organisation Practical exposure and experience of implementing the Secure by Design principles based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG or industry project/programme Knowledge and understanding of MOD cyber security policy, e.g. JSP440, standards and guidance Chairing and participation in HMG/MoD Security Working Groups Expert understanding of Secure by Design and associated tooling, e.g. MoD Continual Assurance Activity Tracker, and HMG SbD Self Assurance Tracker Experience of the NCSC Cyber Assurance Framework (CAF) and conduct of GovAssure audits Knowledge and experience of NIST standards, e.g. the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience, e.g. ISO/IEC 27001 audit Experience of Supplier Assurance and security of the supply chain Experience of scoping assessing output from IT Health Checks; Penetration Tests and Vulnerability Assessments Candidates must be Ideally National Security Vetted, SC or DV; if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel To apply To apply, email a copy of your CV to: . For more information about Amethyst, visit:

The Opportunity We're seeking a forward-thinking IT Security and Compliance Manager to play a key role in protecting and shaping our technology environment while supporting our continued business growth. Reporting to the Chief Information Officer, you will lead the security, governance and operational delivery of our IT services, ensuring systems remain secure, compliant and resilient. This is a highly visible role where you'll partner with internal teams, customers and third-party providers to strengthen cyber security, drive certification and audit readiness, and support the development of scalable, reliable IT services. If you enjoy combining strategic security leadership with hands on operational oversight in a collaborative and evolving environment, this is an exciting opportunity to make a genuine impact. Who We Are OpenWorks is a rapidly growing business operating globally with a passion for exceptional engineering and building on a legacy of defence innovation in the North East of England. Our products provide ultra high performance, real time detection, tracking, identification and targeting of dynamic aerial threats. They have been deployed internationally to protect high profile military and civilian assets, and contribute towards the defeat of nuisance, misguided and maliciously deployed drones during operations. We are very proud to have supported a wide range of law enforcement and military operators, protecting many of the most high profile sites and individuals around the world. The amazing things we do are only possible because of a dedicated and passionate team. Why You'll Love Working With Us Join a high energy, collaborative where great ideas thrive, challenges are embraced and people truly love what they do. Here's what our benefits have to offer: Competitive remuneration package, with performance related bonuses and clear progression opportunities. 25 days' holiday + public holidays, with long service rewards and the option to buy up to 5 additional days. Free breakfast and freshly cooked lunches every day, courtesy of Chef Mark and his team. Private healthcare through Aviva, keeping you feeling your best. Life assurance for peace of mind. Salary sacrifice schemes - including EV car and Cycle to Work options for easy, sustainable travel. Paid team socials - from quiz nights and football to board games and more; we love to have fun together. Pension plan with up to 4% employer matched contributions to help you plan for the future. A culture that empowers - we enable change, encourage challenge, and celebrate personal growth. What you'll be doing: Cyber Security and Compliance Policy & Standards: Develop and maintain cyber security policies, standards and procedures. ISMS Management: Own and continuously improve the Information Security Management System. Certification & Frameworks: Lead Cyber Essentials Plus and maintain alignment with recognised security frameworks. Audit Leadership: Manage customer and external cyber security audits and evidence preparation. Governance Alignment: Partner with Contracts, Compliance and Quality teams to meet governance and contractual requirements. Risk & Assurance: Conduct internal audits of systems, suppliers and contractors to identify and manage risk. Incident Management: Lead security incident response, remediation and lessons learned. Threat & Regulatory Monitoring: Track emerging threats, regulatory changes and industry best practice. Customer & Bid Support: Provide cyber security expertise for bids, customer engagements and contract negotiations. Access & Data Protection: Oversee governance of system usage, access controls and data protection. IT Service Delivery and Operational Management Service Performance: Oversee reliable and effective day to day IT service delivery. Escalation Management: Act as the primary escalation point for IT service issues. Supplier Management: Manage and optimise Managed Service Provider performance. Infrastructure Growth: Support scalable and resilient IT infrastructure development. Microsoft 365 Management: Oversee Microsoft 365 and collaboration platforms. Project Delivery: Support IT projects, ensuring security and resilience are embedded. Stakeholder Support: Provide technical guidance to promote secure and effective system use. What we're looking for: IT Security Leadership: Experience in an IT Security, Information Security or IT Management role with responsibility for secure service delivery. Governance & Compliance: Strong understanding of cyber security frameworks, policy development, audits and certification, ideally in regulated industries such as defence or aerospace. ISMS & Risk Management: Proven experience implementing or managing cyber security management systems, risk assessments, and security assurance programmes. Microsoft 365 & Cloud Security: Experience managing or supporting Microsoft 365 environments and associated security controls. Stakeholder & Communication Skills: Ability to engage stakeholders and clearly translate technical risks into business impact. Strategic & Operational Balance: Comfortable balancing hands on IT operational delivery with longer term security and governance objectives. Problem Solving & Adaptability: Strong analytical skills, proactive and self motivated, able to thrive in a growing and evolving organisation. Qualifications and Certifications Essential Relevant degree or equivalent professional experience in IT, Cyber Security or Information Security. Desirable Cyber Essentials / Cyber Essentials Plus training or certification. Experience implementing and maintaining DCC and NIST cyber security accreditations in partnership with external consultants. What you'll get: As a small, fast growing company with over 70 people which is continually expanding, we offer the opportunity for a professional to have autonomy and responsibility. You'll directly see the impact of your efforts. More about us: Vision Help protect the territory and airspace of NATO countries and their allies. Mission Be a world leading provider of autonomous technology for Surveillance applications and Defence. Values Be a Good Egg: Earn respect, have mutual trust and be honest. Do cool stuff: We develop cool tech with an awesome team, and we get stuff done. Be empowered: We are autonomous, reliable and take personal responsibility. We are one team: Look out for each other and the team. Things go wrong: Fail fast, learn and move on. Have fun: We're doing amazing things with passionate people.

My client, an International bank, are looking for a Cyber IT Audit Manager at VP level to join their growing team in London. This role will require you to be in their offices up to 3 times per week. I am afraid there is no sponsorship for this role. I have a call with the hiring manager at 4 PM on Wed 11th Feb to find out more. About the Cyber IT Audit Manager position This role will serve as a senior independent reviewer and will be accountable for providing high quality and in-depth analyses and observations to the business and supporting functions on behalf of the IT Team utilising the support of other team members where necessary. The role is to be an active participant and, where appropriate, leader of risk-based audit reviews, and will assist the IT Team to issue recommendations to remediate any identified issues and weaknesses. Key Responsibilities Leads or acts as a key resource in IG (internal audit) assignments, ad-hoc projects and investigations, accountable for the timely performance of the role's own duties whilst also validating the work of other team members involved in an assignment. At all times, the role holder will have regard for the main risks detailed in the Risk and related Control Matrix and, where acting in a management capacity, will plan and organise an assignment (including the allocation of staff) as well as ensure that all missions, associated documentation and IG standard are inputted into relevant tools as required by the relevant processes. Completes other audit related tasks (such as the continuous/annual risk assessment or requests for audit recommendation closure, archiving, preparing restitution slides, and inputting findings, recommendations) to ensure that audits are effectively performed, maintained and coordinated within BNP Paribas Audit Methodologies and Tools, procedures, guidelines and expectations. Leads the performance of the continuous monitoring and annual risk assessment processes in relation to audit areas, working with senior team members (including the Deputy Head of Hub, IT) to ensure a consistent and compliant approach. Develops and manages operational initiatives within their business area, in line with relevant policies, procedures and any relevant regulatory requirements or professional codes of conduct. Keeps abreast of the best practices in the industry to drive innovation within the team, with the aim of contributing to the development of the tools and techniques used by the IG Department. Keeps relevant stakeholders, including the Deputy Head of Hub, IT and assignment Supervisors, suitably always updated on progress of assignments and work so that they have a good understanding of workstream status. Supports junior team members on assignments with their assigned work and contacting other members of the IG team and contributes to their development, including by preparing their end of assignment appraisals (PMRs) for discussion with the Deputy Head of Hub, IT. Monitors progress in relation to post-audit recommendations related to the IT and Cyber Security specialism to evaluate them as specified in the appropriate procedures and facilitates their closure. Develops and maintains strong relationships with key stakeholders in the teams being audited, and operational managers across the business to ensure that a high-quality integrated IG service is provided. Acts as a point of escalation for more junior staff to support them where problems are more complex and require sophisticated analysis or experience to ensure that they can perform and provide a consistent service to the business. Will be required to provide certain managerial, coaching or appraisal functions for junior roles allocated to any assignments being led / resourced by the role to support the development of talent in the team. Contributes to the maintenance and development of the data analytics tools and methodologies used by the IT Audit team within IG. Requirements Professional qualification required with knowledge related to performing IT and Cybersecurity audits in the banking / finance industry. Proven experience in IT and Cybersecurity risks and controls, either at a Bank or consulting firm, or other by conducting other relevant Internal/External Audits. Strong grasp of industry standards and regulations related to IT and Cyber. For example, NIST, PCI DSS, DORA, COBIT, ISO 27001 etc. Knowledge of a wide range of IG (Internal Audit) principles, processes, regulations and legislation appropriate for the IT team and ability to translate knowledge and experience into recommendations to improve team operating practices. Strong analytical skills, including ability to understand quickly the critical steps in a process, synthesise and process complex information and understand the related risks of various natures, including use of data. Good people management skills and an ability to work with individuals to set individual objectives and manage performance to ensure their delivery. Thorough and organised with an ability to project manager, prioritise and work under time-pressure. Excellent written and oral English skills to articulate technical issues and to be able to take the complex concepts and summarise it in simple English, to enable effective communication with individuals across the business. Ability to produce quality audit artefacts such as reports, findings and opinions for senior management. Computer literacy and a good knowledge of standard computer software and able to learn and utilise specialist applications appropriately. Intermediate level proficiency in Data Analytics or the use of AI to facilitate accurate analysis of large data sets. An academic background in IT, Management Information System, Computer Science or a related discipline. Beginner to Intermediate level proficiency in Data Analytics or AI prompting to facilitate accurate analysis of large data sets. Prior experience working in technical capacity (IT & Cyber) will be an advantage. A professional qualification / certificate in Audit (e.g. CISA, CISSP, CISM, OSCP, CCSP) If the above role is of interest please apply to this advertisement or email me your CV to or call me on to find out more Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates About the job Contract Type: Permanent Focus: Information Security Workplace Type: Hybrid Experience Level: Senior Management Location: London Specialism: Technology & Digital Industry: Banking Salary: £90,000 - £107,000 per annum FULL_TIME Job Reference: W1JKZW-BDBD540D Date posted: 11 February 2026 Consultant: Darius Goodarzi

Group Head of Data Protection: About DFT Operator Join Our Team at DFTO DFTO is the government's public sector rail owning group. Its purpose is to bring all currently privately owned train operators into public ownership in advance of the creation of Great British Railways in 2027 - and deliver improvements in the here and now by unifying and integrating train operations under common public ownership. DFTO has over 23,000 employees, runs over 6,000 services a day and delivers over 450 million customer journeys across its networks every year. This accounts for 26% of total UK passenger journeys and 30% of passenger miles. Major improvements are being delivered by DFTO train operators (TOCs) that are already under public ownership - these are LNER, Northern, TransPennine Express (TPE), Southeast, South Western Railway (SWR), c2c and Greater Anglia. Primary Purpose of Job: Provide leadership, direction and advice at a strategic level to promote data protection awareness and compliance across the DFTO group, integrating the data protection strategy across the organisation. Drive cultural change, manage risk, and deliver consistent pragmatic compliance during a transitionary period for the organisation and the railway. Act as the statutory Data Protection Officer for DFTO. Key Responsibilities: Shape, steer and provide expert advice to senior leadership on DFTO's privacy strategy and governance model, setting the group wide privacy vision and the standards that will be applied across DFTO and all the Train Operating Companies (TOCs). Monitor and advise on a strategy that is compliant with relevant legislation, regulatory requirements and ICO guidance, reduces risk for the organisation and is aligned with wider business objectives and digital transformation plans. Provide strategic advice to the DFTO Board, and other senior executives and stakeholders, on privacy risks and recommended actions (including advising on risks around emerging technologies and regulatory trends) to deliver group wide best practise data protection solutions. Engage with external regulators and stakeholders, acting as DFTO's lead contact with the ICO and industry bodies to maintain constructive relationships, influence policy, and achieve timely, compliant outcomes. Act as the statutory DPO for DFTO, delivering on all minimum tasks defined in the Data Protection Act 2018 (as may be updated from time to time), reporting into the DFTO Board and acting as DFTO's designated contact for the ICO. Lead and develop a high performing team of data protection professionals, setting clear priorities and standards, whilst fostering alignment and peer support amongst data privacy employees in TOCs to achieve consistent compliance and a unified privacy culture Advise on the handling of complex or high risk Data Protection Impact Assessments (DPIAs), Data Subject Access Requests (DSARs) and breach investigations, approving and reviewing documentation where necessary, and acting as an escalation point to achieve legally compliant outcomes and maintain consistent standards. Collaborate with IT and cybersecurity teams to embed privacy controls into system architecture and introduce data systems that strengthen compliance, improve risk management, and support privacy by design across DFTO and TOCs. Influence and shape the long term evolution of DFTO's data protection operating model and resourcing plan that supports an efficient service across the group. Also, work collaboratively with Network Rail's Data Protection Office and cross industry partners to shape future data protection strategy and governance in preparation for Great British Railways. Oversee data protection mobilisation and transition activities for new TOCs joining DFTO, driving standardisation of group artefacts, policies and strategy in order to embed best practice and maintain consistency and quality across the group. Champion a privacy culture, embedding awareness of data protection through communications and development of a comprehensive training strategy, so that all individuals across the group are up to date with data protection requirements relevant to the role. Provide oversight of key Group wide documents - including the privacy risk register, the group record of processing activities, the breach log and DPIA register. Monitor data protection compliance (including through regular audits), maintain accurate, up to date records, track compliance trends, and use insights to inform risk management, compliance reporting, and drive continuous improvement across DFTO and TOCs. Provide independent oversight and advice on major breach responses at group level, including coordinating regulatory liaison and managing reputational risk. Establish and regularly test privacy crisis plans integrated with DFTO's business continuity framework so the organisation is prepared for major incidents and can maintain resilience and protect personal data during disruptions. Knowledge, Skills, Experience & Technical Qualifications: In-depth knowledge of UK GDPR, DPA 2018, PECR, and sector specific obligations with significant experience of the practical application of these regulations, including the development and implementation of privacy frameworks at an organisation level. Understanding of public sector governance and legal accountability models Familiarity with information security, data sharing, records management and digital Proven ability to carry out the statutory tasks of a data protection officer in of a large, devolved organisation with group companies, including a track record of engaging with the ICO and leading high risk privacy work. An excellent communicator (both verbal and written), confident interpreting and explaining complex requirements to a range of audiences and excellent drafting skills. Experience of leading a team to deliver performance improvement in a data protection or other compliance related field in a complex environment. Able to achieve results through persuading and influencing others at all levels of the organisation. Sound judgement, strong commercial acumen, resilience and a balanced attitude to risk Comfortable working at pace, with ability to effectively prioritise competing demands and to manage ambiguity during organisational change Desirable: Professional privacy qualification strongly preferred (e.g. CIPP/E, BCS) Desirable: Legal qualification helpful but not essential Vacancy Details: Duration: 2 year Fixed Term contract/secondment Reports to: Deputy Group General Counsel Location: London Waterloo Salary: £67,956 - £79,011 Closing date: 25th February 2026 DFTO Benefits: Annual Leave: Starting at 25 days and rising to an additional day per year of service completed within the first 5 completed years up to a maximum of 5 additional (30 days) DC Pension Scheme: 10% Employer contribution, 5% Employee contribution Opportunities to learn and network across the wider industry Additional Information Disclaimer: Candidates applying for this position on a secondment basis must inform their line manager prior to submitting their application. This is to ensure transparency and facilitate any necessary discussions regarding workload and responsibilities. About our people and the recruitment process - We're an inclusive employer of choice and we welcome applications from everyone! We encourage our colleagues to work flexibly, as we know traditional working patterns don't always fit. If you want to consider working flexibly, just let us know and we'll do our best to help and invest in your career with us, whilst you have a healthy work life balance. Contact: If you have any questions or reasonable adjustments, please contact . Please do not email any CV's to us, your application must be made by clicking the 'Apply' button.

You are required to be onsite 3 times per week in your local office which can be Edinburgh, Bristol or, London At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. It is an exciting time for our Financial Services Cyber Security practice. We're looking for Senior Consultants to join our ever expanding team of professionals to help us deliver the exceptional client experience. The opportunity EY's EMEIA Cyber Practice is rapidly growing and the UK team is looking for a Cyber Security Senior Consultant experienced in working on a range of projects covering the breadth of Cyber Security including: Cyber Strategy Development, Cyber Programme Management and Definition, Cyber Maturity Assessments, Cyber Transformation and Cyber Risk. You will join an expanding team of over 1,000 Cyber professionals across EMEIA and align to the UK team dedicated to providing Cyber advisory services to leading Financial Services organisations. Your key responsibilities UK Financial Services Cyber Security professionals draw upon their knowledge and experience to manage client engagement teams, act as an advisor to a variety of clients and contribute to business development activities on strategic and global priority accounts. Drawing on their industry knowledge and experience, professionals provide innovative commercial insights for clients, adapt methods and practices to fit operational team and cultural needs and contribute to thought leadership. Professionals also actively improve operational efficiency on projects and internal initiatives, in line with EY's commitment to quality. Your role will require you to deliver engagements with teams of different sizes under the guidance of Managers and Senior Managers. You will help to create a positive learning culture and will coach and counsel junior team members to assist in their professional development. You will lead by example and act as a role model for our people in the way that you live our values. Client responsibilities Deliver Cyber Security engagements Supporting in client business development activities, including proposal writing and presentations to potential clients Support senior members of the team in go-to-market activities across UK in collaboration with our European teams Build EY brand awareness and start to build key client relationships Assist in managing financial aspects of engagements by organising staffing, tracking fees and communicating issues to engagement partners Build strong internal relationships within Consulting and across other services People responsibilities Develop people through effectively supervising, coaching, and mentoring staff Conduct performance reviews and contribute to performance feedback for staff Contribute to people initiatives including recruiting, retaining, and training Cyber professionals Skills and attributes for success To qualify for the role you must have: Experience in advising Financial Services organisations on what good cyber security looks like, based on the cyber security threats and risks they face Pragmatic approach to identifying and explaining cyber risks within complex transformation initiatives Project management and delivery experience across the following Cyber Security areas: frameworks (e.g. NIST CSF, CPMI IOSCO, ISO, 'Profile' - Financial Services sector-specific distillation of the NIST CSF, etc.), assessments, implementation, roadmap definition (tactical and strategic), strategy, risk identification and management, controls framework, programme management and target operating modelling Understanding of the Financial Services Cyber Security threat landscape and the UK Financial Services regulatory landscape (e.g. PRA, FCA, BoE, ECB, MAS) Awareness of security standards and regulations within the UK Financial Services sector Experience in supporting winning proposals and RFP responses, and working in complex multinational engagements Excellent communication skills, both oral and written Experience in people management, coaching and development of colleagues Security certifications such as CISSP, CISA or CISM is a plus Ideally you'll also have: Some experience, and an understanding of the concepts and terminology in the following: Cyber Security architecture design and implementation experience, including Cloud Identity & Access Management (IAM) and solutions (e.g. SailPoint) Data Loss Protection and Data protection Security assessments related to threat, vulnerability and penetration testing (e.g. MITRE, CBEST, Tiber) What we look for We look for candidates with experience in the industry, that can prove their knowledge of Cyber regulations and frameworks in the UK. We are looking for people with the motivation and ambition to lead teams and the communication skills required to interact with clients. What we offer We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer: Continuous learning: You'll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way. Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You'll be embraced for who you are and empowered to use your voice to help others find theirs. Apply now If you can demonstrate that you meet the criteria above, please contact us as soon as possible. The exceptional EY experience. It's yours to build. Apply now. EY Building a better working world

Senior Cyber, Governance, Risk and Compliance Manager Employer: Government Recruitment Service Location: Cardiff Pay: £44,898 to £59,848 per year, London: £48,797 to £59,848 / National: £44,898 - £56,031 (including allowance). Your salary will be determined by your skills and capability as assessed at interview Contract Type: Permanent Hours: Full time Disability Confident: Yes Closing Date: 14/03/2026 About this job The Department for Business and Trade (DBT) has a clear mission to grow the economy. Our role is to help businesses invest, grow and export to create jobs and opportunities right across the country. We do this in three ways. Firstly, we help to build a strong, competitive business environment, where consumers are protected and companies rewarded for treating their employees properly. Secondly, we open international markets and ensure resilient supply chains. This can be through Free Trade Agreements, trade facilitation and multilateral agreements. Finally, we work in partnership with businesses every day, providing advance, finance and deal making support to those looking to start up, invest, export and grow. The Digital, Data and Technology (DDaT) directorate develops and operates tools and services to support us in this mission. The team have been nominated four times in a row for 'Best Public Sector Employer' at the Women in Tech awards and won the award in 2025 Ready to move into a space where cyber isn't an afterthought but a priority? Join DBT and help mature a security capability in a department that values expertise, moves quickly, and gives you the autonomy to drive meaningful change. This is a place where your skills won't be sidelined, they'll set the direction. The GRC team plays a critical role in establishing governance, managing cyber risk, and maintaining system security assurance. They also deliver GovAssure, Secure by Design, security training and user education, maintain security policy, set compliance standards, and manage the delivery of cyber audits. Consequently, this role requires strong acumen across cyber security and corporate disciplines to actively shape governance practices and provide expert advice to inform decision makers. Sitting at the heart of DBT's Cyber Security function, as a Senior Cyber Governance, Risk and Compliance (GRC) Manager, you will play a central role in maturing the organisation's cyber governance model, completing risk assessments, driving assurance activity, and helping to embed strong security culture across DBT. Working closely with Lead GRC Managers and collaborating with colleagues across Cyber Security, DDaT, and the wider Government Security Profession, this is a role that blends strategic thinking with hands on delivery. You will support the uplift of organisational cyber posture within a broad remit, providing strong opportunity for personal development through empowerment to deliver within a growing government department. Indeed, in DBT we prioritise the wellbeing and careers of our Cyber professionals, with access to industry recognised training and civil service development pathways. Main responsibilities The post holder will be required to deliver across multiple areas within a complex cyber security portfolio. Experience across as many of the below as possible is desirable: Risk Management: Undertake complex cyber risk assessments, including, where applicable, tailored threat analysis and supply chain assurance, in compliance with appropriate legislation, regulation and policy. Digital Programmes: Provide cyber expertise and actively contribute to the delivery of key digital programmes of work across the organisation, ensuring all works are conducted cognizant of risk and in compliance with governmental standards and best practice, including ISO 27001, NCSC guidance, NIST CSF, NIS regulations and internal policy requirements. Security Audits: Manage cyber audit activities, compliance reviews and penetration tests, including GovAssure and Secure by Design, collaborating with diverse stakeholders to implement mitigations throughout programme lifecycles. User Education: Deliver cyber security education and awareness training across the organisation, developing auditable datasets that identify key areas for improvement and evidence knowledge uplift iteratively. Policy and Strategy: Contribute to the production and delivery of cyber strategies, security policies, standards and procedures across the cyber governance, risk and compliance portfolio ensuring they remain responsive to evolving threats and business requirements. Third party engagement: Support arm's length bodies and partner organisations to uplift their cyber security posture, standardising and sharing knowledge to align with departmental approaches, governmental standards and best practice wherever possible. Provide specialist cyber guidance: Offer specialist cyber security and data protection guidance to risk owners and stakeholders, enabling informed, risk based decisions, while acting as an advocate for best practice within DBT and across government, engaging with peers in the public sector and industry. Stakeholder Engagement: Build strong relationships with internal and external stakeholders, including senior leaders, to enhance organisational cyber security capability. Proud member of the Disability Confident employer scheme

Senior Cyber, Governance, Risk and Compliance Manager Employer: Government Recruitment Service Location: Birmingham Pay: £44,898 to £59,848 per year, London: £48,797 to £59,848 / National: £44,898 - £56,031 (including allowance). Your salary will be determined by your skills and capability as assessed at interview Contract Type: Permanent Hours: Full time Disability Confident: Yes Closing Date: 14/03/2026 About this job The Department for Business and Trade (DBT) has a clear mission to grow the economy. Our role is to help businesses invest, grow and export to create jobs and opportunities right across the country. We do this in three ways. Firstly, we help to build a strong, competitive business environment, where consumers are protected and companies rewarded for treating their employees properly. Secondly, we open international markets and ensure resilient supply chains. This can be through Free Trade Agreements, trade facilitation and multilateral agreements. Finally, we work in partnership with businesses every day, providing advance, finance and deal making support to those looking to start up, invest, export and grow. The Digital, Data and Technology (DDaT) directorate develops and operates tools and services to support us in this mission. The team have been nominated four times in a row for 'Best Public Sector Employer' at the Women in Tech awards and won the award in 2025 Ready to move into a space where cyber isn't an afterthought but a priority? Join DBT and help mature a security capability in a department that values expertise, moves quickly, and gives you the autonomy to drive meaningful change. This is a place where your skills won't be sidelined, they'll set the direction. The GRC team plays a critical role in establishing governance, managing cyber risk, and maintaining system security assurance. They also deliver GovAssure, Secure by Design, security training and user education, maintain security policy, set compliance standards, and manage the delivery of cyber audits. Consequently, this role requires strong acumen across cyber security and corporate disciplines to actively shape governance practices and provide expert advice to inform decision makers. Sitting at the heart of DBT's Cyber Security function, as a Senior Cyber Governance, Risk and Compliance (GRC) Manager, you will play a central role in maturing the organisation's cyber governance model, completing risk assessments, driving assurance activity, and helping to embed strong security culture across DBT. Working closely with Lead GRC Managers and collaborating with colleagues across Cyber Security, DDaT, and the wider Government Security Profession, this is a role that blends strategic thinking with hands on delivery. You will support the uplift of organisational cyber posture within a broad remit, providing strong opportunity for personal development through empowerment to deliver within a growing government department. Indeed, in DBT we prioritise the wellbeing and careers of our Cyber professionals, with access to industry recognised training and civil service development pathways. Main responsibilities The post holder will be required to deliver across multiple areas within a complex cyber security portfolio. Experience across as many of the below as possible is desirable: Risk Management: Undertake complex cyber risk assessments, including, where applicable, tailored threat analysis and supply chain assurance, in compliance with appropriate legislation, regulation and policy. Digital Programmes: Provide cyber expertise and actively contribute to the delivery of key digital programmes of work across the organisation, ensuring all works are conducted cognisant of risk and in compliance with governmental standards and best practice, including ISO 27001, NCSC guidance, NIST CSF, NIS regulations and internal policy requirements. Security Audits: Manage cyber audit activities, compliance reviews and penetration tests, including GovAssure and Secure by Design, collaborating with diverse stakeholders to implement mitigations throughout programme lifecycles. User Education: Deliver cyber security education and awareness training across the organisation, developing auditable datasets that identify key areas for improvement and evidence knowledge uplift iteratively. Policy and Strategy: Contribute to the production and delivery of cyber strategies, security policies, standards and procedures across the cyber governance, risk and compliance portfolio ensuring they remain responsive to evolving threats and business requirements. Third party engagement: Support arm's length bodies and partner organisations to uplift their cyber security posture, standardising and sharing knowledge to align with departmental approaches, governmental standards and best practice wherever possible. Provide specialist cyber guidance: Offer specialist cyber security and data protection guidance to risk owners and stakeholders, enabling informed, risk based decisions, while acting as an advocate for best practice within DBT and across government, engaging with peers in the public sector and industry. Stakeholder Engagement: Build strong relationships with internal and external stakeholders, including senior leaders, to enhance organisational cyber security capability. Proud member of the Disability Confident employer scheme Jobs are provided by the Find a Job Service from the Department for Work and Pensions (DWP).

Category Manager - Technology Procurement Department: 61-681 - Technology Operations - Delivery & Strategic Programmes : Employment Type: Permanent - Full Time Location: UK - Leeds Reporting To: Chris Lear Description Why Join DAZN? At DAZN, we're redefining how the world experiences sport. As the global home of live and on-demand sports streaming, we operate at the intersection of technology, media, and fandom - delivering premium content to millions of subscribers across multiple markets. Joining DAZN means working in a high-growth, high-performance environment where innovation is constant and ambition is encouraged. You'll collaborate with world-class talent across product, technology, content, and commercial teams, building experiences that truly matter to fans. We move fast, we take ownership, and we back people who bring ideas and drive. Whether you're shaping strategy, building platforms, producing content, or leading teams, you'll have the opportunity to make a real impact on a global stage. The Role As our Technology Procurement Category Manager, you'll own the strategy and execution for how we source, negotiate, and manage the technology that powers the world's leading sports streaming platform. From cloud infrastructure to SaaS platforms, broadcast tech to AI tooling-if it's tech and we're buying it, you'll have a hand in making it happen. You'll work closely with teams across Engineering, Product, Finance, Legal, and IT to make sure we're getting the best value, building strong vendor partnerships, and staying ahead of the curve. This isn't just about cutting costs-it's about enabling DAZN to move fast, scale globally, and keep innovating. If you're passionate about technology, love a good negotiation, and want to be part of something that millions of sports fans care about-let's talk. What You'll Be Doing Owning category strategy - Develop and execute procurement strategies across technology categories including cloud, SaaS, infrastructure, broadcast/streaming tech, cybersecurity, and AI/ML tooling Running sourcing & negotiations - Lead end-to-end sourcing activities, from RFPs to contract negotiation, securing favourable terms and long-term value Building vendor relationships - Manage strategic supplier partnerships, conduct performance reviews, and hold vendors accountable to SLAs and deliverables Driving cost optimisation - Analyse spend data to identify savings opportunities, eliminate waste, and support FinOps initiatives across cloud and SaaS Collaborating cross-functionally - Partner with Engineering, IT, Product, Finance, and Legal to understand requirements and align procurement with business priorities Implementing tools & processes - Identify opportunities to improve procurement operations through new tools, automation, or policy enhancements Staying ahead of the market - Track emerging technologies, vendor landscapes, and industry trends to inform sourcing decisions and bring fresh ideas to the table Supporting AI & innovation initiatives - Contribute to the evaluation and procurement of AI/ML solutions and help embed responsible, forward-thinking sourcing practices What You'll Bring 3-5 years' experience in technology procurement, sourcing, or category management Solid track record negotiating contracts and managing vendors across technology categories Strong analytical skills-comfortable digging into spend data and turning insights into actionExcellent communication and stakeholder management skills; you can influence without authority Organised and delivery-focused, able to manage multiple projects and priorities simultaneously Genuine interest in technology and how it enables business outcomes Benefits Benefits include access to DAZN, 25 days' annual leave (increasing by 3 days after 3 years), private medical insurance, life assurance, pension contributions up to 5%, family friendly community including enhanced parental leave, electric vehicle benefit option, free access for you and one other to our workplace mental health platform app (Unmind), learning and development resources, opportunity for flexible working, and access to our internal speaker series and events.