Location and Type London (Hybrid, 2 days WFH, 3 days in-office) Full-time, Practice Director / Associate Director level About Salt Company: Salt Salt is launching a new specialist practice covering Quantitative Trading, AI Research, and Capital Markets Technology, and we're looking for the person to build and lead it. This is not an MD hire. This is not a come and run a desk role. This is a genuine platform to build a specialist business inside a global recruitment group, backed by Salt's brand, infrastructure, CEO sponsorship, and dedicated research capability in Brazil and South Africa. If you're currently billing big numbers in a boutique quant/trading recruitment firm and feel capped, this is the platform you've been waiting for. Mission Build Salt's Quantitative Trading, AI & Capital Markets practice into a recognised specialist business, with the ambition of becoming a £3m+ GP division within three to five years. What You'll Be Doing Building the go-to-market strategy for this practice from the ground up Mapping and winning clients across hedge funds, prop trading firms, market makers, investment banks, and capital markets technology businesses Personally billing while building your team and pipeline Creating a repeatable delivery model using dedicated Brazil and South Africa research support Building candidate communities across quant research, quant development, low latency engineering, ML/AI, and trading systems Producing market maps, salary guides, and talent intelligence reports Hosting client events, breakfasts, and leadership dinners Hiring, training, and mentoring a future team of consultants Working across Salt's full offering: permanent, contract, executive search, and advisory Client Universe Hedge funds, proprietary trading firms, market makers, investment banks, asset managers, crypto trading firms, exchanges, AI first investment firms, fintechs, and capital markets technology businesses. Think Citadel, Two Sigma, Jane Street, DE Shaw, Millennium, Point72, Hudson River Trading, Optiver, Man Group, and similar. Candidate Markets Quant researchers, quant developers, C++/Python/Rust engineers, low latency and FPGA engineers, ML engineers, AI researchers, execution and market data engineers, systematic trading specialists, and trading/risk technology talent. What We're Looking For Proven billing history in quant, trading, hedge fund, or capital markets technology recruitment (likely £350k-£750k+) Strong, established client development ability in this space Entrepreneurial drive, you want to build something bigger than your current desk Ability to lead, train, and mentor a future team Comfortable working with offshore/nearshore research support Currently operating as a Principal Consultant, Senior Principal Consultant, Associate Director, Practice Lead, Team Lead, or rising Director What Salt Offers Global brand and infrastructure across 22 offices in 15 countries CEO sponsorship and marketing support Dedicated research team build out (Brazil and South Africa) Existing technology, data, and financial services client relationships Full CRM and technology stack Entrepreneurial freedom to build a practice, without startup risk Trajectory Year 1: £750k-£1m GP, 5-10 strategic clients, 4 dedicated researchers, first retained/exclusive search wins Year 2: £1.5m-£2m GP, 2-3 fee earners, 6-8 researchers, recognised market presence, expansion into US and UAE Longer term: £3m-£5m GP specialist division, with a team of 5+ fee earners and 10+ researchers Salt is acting as an Employment Agency in relation to this vacancy.
Jul 09, 2026
Full time
Location and Type London (Hybrid, 2 days WFH, 3 days in-office) Full-time, Practice Director / Associate Director level About Salt Company: Salt Salt is launching a new specialist practice covering Quantitative Trading, AI Research, and Capital Markets Technology, and we're looking for the person to build and lead it. This is not an MD hire. This is not a come and run a desk role. This is a genuine platform to build a specialist business inside a global recruitment group, backed by Salt's brand, infrastructure, CEO sponsorship, and dedicated research capability in Brazil and South Africa. If you're currently billing big numbers in a boutique quant/trading recruitment firm and feel capped, this is the platform you've been waiting for. Mission Build Salt's Quantitative Trading, AI & Capital Markets practice into a recognised specialist business, with the ambition of becoming a £3m+ GP division within three to five years. What You'll Be Doing Building the go-to-market strategy for this practice from the ground up Mapping and winning clients across hedge funds, prop trading firms, market makers, investment banks, and capital markets technology businesses Personally billing while building your team and pipeline Creating a repeatable delivery model using dedicated Brazil and South Africa research support Building candidate communities across quant research, quant development, low latency engineering, ML/AI, and trading systems Producing market maps, salary guides, and talent intelligence reports Hosting client events, breakfasts, and leadership dinners Hiring, training, and mentoring a future team of consultants Working across Salt's full offering: permanent, contract, executive search, and advisory Client Universe Hedge funds, proprietary trading firms, market makers, investment banks, asset managers, crypto trading firms, exchanges, AI first investment firms, fintechs, and capital markets technology businesses. Think Citadel, Two Sigma, Jane Street, DE Shaw, Millennium, Point72, Hudson River Trading, Optiver, Man Group, and similar. Candidate Markets Quant researchers, quant developers, C++/Python/Rust engineers, low latency and FPGA engineers, ML engineers, AI researchers, execution and market data engineers, systematic trading specialists, and trading/risk technology talent. What We're Looking For Proven billing history in quant, trading, hedge fund, or capital markets technology recruitment (likely £350k-£750k+) Strong, established client development ability in this space Entrepreneurial drive, you want to build something bigger than your current desk Ability to lead, train, and mentor a future team Comfortable working with offshore/nearshore research support Currently operating as a Principal Consultant, Senior Principal Consultant, Associate Director, Practice Lead, Team Lead, or rising Director What Salt Offers Global brand and infrastructure across 22 offices in 15 countries CEO sponsorship and marketing support Dedicated research team build out (Brazil and South Africa) Existing technology, data, and financial services client relationships Full CRM and technology stack Entrepreneurial freedom to build a practice, without startup risk Trajectory Year 1: £750k-£1m GP, 5-10 strategic clients, 4 dedicated researchers, first retained/exclusive search wins Year 2: £1.5m-£2m GP, 2-3 fee earners, 6-8 researchers, recognised market presence, expansion into US and UAE Longer term: £3m-£5m GP specialist division, with a team of 5+ fee earners and 10+ researchers Salt is acting as an Employment Agency in relation to this vacancy.
Job Description Your Impact Do you want to play a critical role in safeguarding the integrity and security of our products? Our Electronics Warfare (EW) and Future Combat Air (FCA) Design Integrity team are seeking a Head of Product Security. This is a pivotal role reporting directly to the Chief Engineer of Design Integrity. You'll provide independent product security and legislative assessor assurance to make sure that; requirements have been adequately defined for product development, product plans will achieve contractual and company requirements, as well as assurance of claims and evidence for products. As Head of Product Security, your expertise and vision will ensure robust governance, the sharing of best practice, and consistent, high quality security outcomes across our programmes. This role is working on a hybrid basis (3x days per week on site) can be based on our following sites: Luton, Lincoln, Southampton, and Bristol. Responsibilities Operate as the Security signatory on behalf of the company. Liaison with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Participate in Product Security Panels as a specialist advisor to manage and resolve security incidents. Maintain an up-to-date knowledge of security legislation. Participate in company working groups to monitor proposed changes to the legislative environment. Provide input and advice to the product development teams. Operate as a consultant to promote security culture within Leonardo working with Security teams to ensure secure working practices are maintained. Develop and deliver training courses and speak with confidence on Product Security and Information Assurance matters. Perform audits of internal and external/subcontract teams assuring that security and Information Assurance requirements are achieved. What You'll Bring Hashands on experienceofdevelopingrobustsecurity riskmanagement system for complex high integrity electronics systems. Familiarity with Legislation - e.g.IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATOInformation Assurancestandards, procedures & systems, including HMGSecurity PolicyFramework, ISOsecurity standards, DO326A. Familiarity with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC andCommon Criteriasecurity evaluation techniques. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating to safety. A background in design implementation of high integrity complex electronics, such asSoftware designto DO178C level C, Complex Electronics hardware up to DO254 Level. Experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754. Understanding of the role of advisory boards within the UK Government or NATO for security. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding Performance: All employees at management level and below are eligible for our bonus scheme. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: Receive a financial reward through our referral programme. Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location GB - Luton - Cap. Green 300 Additional Locations GB - Bristol - Coldharbour Lane, GB - Bristol - Others, GB - Lincoln, GB - Southampton Contract Type Permanent Hybrid Working Hybrid
Jun 25, 2026
Full time
Job Description Your Impact Do you want to play a critical role in safeguarding the integrity and security of our products? Our Electronics Warfare (EW) and Future Combat Air (FCA) Design Integrity team are seeking a Head of Product Security. This is a pivotal role reporting directly to the Chief Engineer of Design Integrity. You'll provide independent product security and legislative assessor assurance to make sure that; requirements have been adequately defined for product development, product plans will achieve contractual and company requirements, as well as assurance of claims and evidence for products. As Head of Product Security, your expertise and vision will ensure robust governance, the sharing of best practice, and consistent, high quality security outcomes across our programmes. This role is working on a hybrid basis (3x days per week on site) can be based on our following sites: Luton, Lincoln, Southampton, and Bristol. Responsibilities Operate as the Security signatory on behalf of the company. Liaison with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Participate in Product Security Panels as a specialist advisor to manage and resolve security incidents. Maintain an up-to-date knowledge of security legislation. Participate in company working groups to monitor proposed changes to the legislative environment. Provide input and advice to the product development teams. Operate as a consultant to promote security culture within Leonardo working with Security teams to ensure secure working practices are maintained. Develop and deliver training courses and speak with confidence on Product Security and Information Assurance matters. Perform audits of internal and external/subcontract teams assuring that security and Information Assurance requirements are achieved. What You'll Bring Hashands on experienceofdevelopingrobustsecurity riskmanagement system for complex high integrity electronics systems. Familiarity with Legislation - e.g.IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATOInformation Assurancestandards, procedures & systems, including HMGSecurity PolicyFramework, ISOsecurity standards, DO326A. Familiarity with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC andCommon Criteriasecurity evaluation techniques. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating to safety. A background in design implementation of high integrity complex electronics, such asSoftware designto DO178C level C, Complex Electronics hardware up to DO254 Level. Experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754. Understanding of the role of advisory boards within the UK Government or NATO for security. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding Performance: All employees at management level and below are eligible for our bonus scheme. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: Receive a financial reward through our referral programme. Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location GB - Luton - Cap. Green 300 Additional Locations GB - Bristol - Coldharbour Lane, GB - Bristol - Others, GB - Lincoln, GB - Southampton Contract Type Permanent Hybrid Working Hybrid
Job Description Your Impact Do you want to play a critical role in safeguarding the integrity and security of our products? Our Electronics Warfare (EW) and Future Combat Air (FCA) Design Integrity team are seeking a Head of Product Security. This is a pivotal role reporting directly to the Chief Engineer of Design Integrity. You'll provide independent product security and legislative assessor assurance to make sure that; requirements have been adequately defined for product development, product plans will achieve contractual and company requirements, as well as assurance of claims and evidence for products. As Head of Product Security, your expertise and vision will ensure robust governance, the sharing of best practice, and consistent, high quality security outcomes across our programmes. This role is working on a hybrid basis (3x days per week on site) can be based on our following sites: Luton, Lincoln, Southampton, and Bristol. Responsibilities Operate as the Security signatory on behalf of the company. Liaison with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Participate in Product Security Panels as a specialist advisor to manage and resolve security incidents. Maintain an up-to-date knowledge of security legislation. Participate in company working groups to monitor proposed changes to the legislative environment. Provide input and advice to the product development teams. Operate as a consultant to promote security culture within Leonardo working with Security teams to ensure secure working practices are maintained. Develop and deliver training courses and speak with confidence on Product Security and Information Assurance matters. Perform audits of internal and external/subcontract teams assuring that security and Information Assurance requirements are achieved. What You'll Bring Hashands on experienceofdevelopingrobustsecurity riskmanagement system for complex high integrity electronics systems. Familiarity with Legislation - e.g.IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATOInformation Assurancestandards, procedures & systems, including HMGSecurity PolicyFramework, ISOsecurity standards, DO326A. Familiarity with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC andCommon Criteriasecurity evaluation techniques. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating to safety. A background in design implementation of high integrity complex electronics, such asSoftware designto DO178C level C, Complex Electronics hardware up to DO254 Level. Experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754. Understanding of the role of advisory boards within the UK Government or NATO for security. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding Performance: All employees at management level and below are eligible for our bonus scheme. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: Receive a financial reward through our referral programme. Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location GB - Luton - Cap. Green 300 Additional Locations GB - Bristol - Coldharbour Lane, GB - Bristol - Others, GB - Lincoln, GB - Southampton Contract Type Permanent Hybrid Working Hybrid
Jun 24, 2026
Full time
Job Description Your Impact Do you want to play a critical role in safeguarding the integrity and security of our products? Our Electronics Warfare (EW) and Future Combat Air (FCA) Design Integrity team are seeking a Head of Product Security. This is a pivotal role reporting directly to the Chief Engineer of Design Integrity. You'll provide independent product security and legislative assessor assurance to make sure that; requirements have been adequately defined for product development, product plans will achieve contractual and company requirements, as well as assurance of claims and evidence for products. As Head of Product Security, your expertise and vision will ensure robust governance, the sharing of best practice, and consistent, high quality security outcomes across our programmes. This role is working on a hybrid basis (3x days per week on site) can be based on our following sites: Luton, Lincoln, Southampton, and Bristol. Responsibilities Operate as the Security signatory on behalf of the company. Liaison with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Participate in Product Security Panels as a specialist advisor to manage and resolve security incidents. Maintain an up-to-date knowledge of security legislation. Participate in company working groups to monitor proposed changes to the legislative environment. Provide input and advice to the product development teams. Operate as a consultant to promote security culture within Leonardo working with Security teams to ensure secure working practices are maintained. Develop and deliver training courses and speak with confidence on Product Security and Information Assurance matters. Perform audits of internal and external/subcontract teams assuring that security and Information Assurance requirements are achieved. What You'll Bring Hashands on experienceofdevelopingrobustsecurity riskmanagement system for complex high integrity electronics systems. Familiarity with Legislation - e.g.IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATOInformation Assurancestandards, procedures & systems, including HMGSecurity PolicyFramework, ISOsecurity standards, DO326A. Familiarity with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC andCommon Criteriasecurity evaluation techniques. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating to safety. A background in design implementation of high integrity complex electronics, such asSoftware designto DO178C level C, Complex Electronics hardware up to DO254 Level. Experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754. Understanding of the role of advisory boards within the UK Government or NATO for security. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding Performance: All employees at management level and below are eligible for our bonus scheme. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: Receive a financial reward through our referral programme. Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location GB - Luton - Cap. Green 300 Additional Locations GB - Bristol - Coldharbour Lane, GB - Bristol - Others, GB - Lincoln, GB - Southampton Contract Type Permanent Hybrid Working Hybrid
We are currently seeking a Fintech, Payments & Digital Assets Lawyer to support Axiom clients across the financial services, technology, fintech, payments, crypto and digital assets sectors. In this role, you will provide practical, commercially focused legal advice on complex commercial, regulatory and technology matters, working closely with fintech platforms, payment service providers, digital asset businesses, financial institutions, technology companies and other regulated or high-growth organisations. Responsibilities: Provide legal advice and support on fintech, payments, digital assets, crypto, blockchain and technology-related matters, including commercial partnerships, platform arrangements, payment products, embedded finance, digital wallets, tokenisation and other innovative financial services offerings. Draft, review and negotiate a broad range of commercial and technology agreements, including partnership agreements, payment services agreements, SaaS agreements, cloud services contracts, outsourcing arrangements, referral agreements, reseller agreements, supplier contracts and technology service agreements. Advise on regulatory compliance for financial services, payments and digital asset-related activities, including FCA regulation, payment services, e-money, cryptoasset regulation, outsourcing, operational resilience, data governance, technology risk and cross-border service delivery. Support the development, launch and scaling of fintech, payments and digital asset products, ensuring contractual frameworks and regulatory considerations align with commercial objectives, stakeholder requirements and risk management expectations. Monitor and interpret UK, EU and global regulatory developments impacting fintech, payments, digital assets, crypto, technology transactions, outsourcing, digital transformation and financial services innovation. Minimum Qualifications: Qualified lawyer eligible to practise in the UK, or equivalent overseas qualification with strong relevant UK experience. Demonstrated experience advising on fintech, payments, digital assets, crypto, blockchain, technology transactions or financial services regulatory matters. Strong experience drafting, reviewing and negotiating complex commercial and technology agreements, including SaaS, cloud, outsourcing, partnership, supplier, payment services and platform agreements. Experience advising fintech companies, payment service providers, e-money institutions, digital asset businesses, technology companies, banks, financial institutions or other regulated financial services organisations. Excellent commercial awareness, stakeholder management skills and the ability to deliver pragmatic, business-focused legal advice in a fast-paced and highly regulated environment. Compensation, Benefits & Location: This role offers a highly competitive compensation and benefits package in the alternative legal services marketplace, that includes health benefits, pension and more. Axiomites also get access to professional development resources and learning and development programs. Axiom provides the opportunity to work remotely, onsite or hybrid, depending on client requirements. Axiom is the global leader in high-calibre, on-demand legal talent. Covering North America, the UK, Europe, and APAC, we enable legal departments to drive efficiency and growth and meet the demands of today's business landscape with best in breed alterative legal services. Axiom is a leader in diversity, inclusion, and social engagement. Diversity is core to our values and we are proud to be an equal opportunity employer. We are proud to be named a best place to work for LGBTQ+ Equality, earning top marks in the 2021 Corporate Equality Index for the second consecutive year. Axiom's legal department is Mansfield certified and is committed to considering at least 50% diverse candidates for leadership roles and outside counsel representation. Learn more about working at Axiom . Equal Opportunity Employer: Axiom ensures equal employment opportunity in recruitment and employment, without discrimination or harassment on the basis of race, color, nationality, national or ethnic origin, religious creed or belief, political opinion, sex, gender reassignment, pregnancy or maternity, age, disability, alienage or citizenship status, marital (or civil or other partnership recognized by law) status, genetic predisposition or carrier status, sexual orientation, military service, or any other characteristic protected by applicable law. Axiom prohibits and will not tolerate any such discrimination or harassment. We understand that many legal professionals have chosen to adopt the consultancy model, and we are happy to discuss this option with you. We offer both consultants and employees the opportunity to work with our enviable client roster. Contact us in complete confidence to find out more about opportunities to work with Axiom as an employee or consultant. Accommodation for Individuals with Disabilities: Upon request and consistent with applicable laws, Axiom will provide reasonable accommodations for individuals with disabilities who require an accommodation to participate in each stage of the recruitment process. To request an accommodation to complete the application form, please contact us at and include "Applicant Accommodation" in the subject line. Axiom Global Limited is a company registered in England and Wales. Registered number: Registered Office: Challoner House, 3rd Floor, 19-21 Clerkenwell Close, London, UK, EC1R 0AA. Axiom respects your privacy. For an explanation of the kind of information we collect about you and how it is used, our full privacy notice is available at . Employment with Axiom may be contingent upon successful completion of a background check, providing proof of identity, and possessing the necessary legal authorization to work. By submitting an application, you acknowledge that all information contained therein, and provided at any part of the application process, is correct and accurate to the best of your knowledge.
May 31, 2026
Full time
We are currently seeking a Fintech, Payments & Digital Assets Lawyer to support Axiom clients across the financial services, technology, fintech, payments, crypto and digital assets sectors. In this role, you will provide practical, commercially focused legal advice on complex commercial, regulatory and technology matters, working closely with fintech platforms, payment service providers, digital asset businesses, financial institutions, technology companies and other regulated or high-growth organisations. Responsibilities: Provide legal advice and support on fintech, payments, digital assets, crypto, blockchain and technology-related matters, including commercial partnerships, platform arrangements, payment products, embedded finance, digital wallets, tokenisation and other innovative financial services offerings. Draft, review and negotiate a broad range of commercial and technology agreements, including partnership agreements, payment services agreements, SaaS agreements, cloud services contracts, outsourcing arrangements, referral agreements, reseller agreements, supplier contracts and technology service agreements. Advise on regulatory compliance for financial services, payments and digital asset-related activities, including FCA regulation, payment services, e-money, cryptoasset regulation, outsourcing, operational resilience, data governance, technology risk and cross-border service delivery. Support the development, launch and scaling of fintech, payments and digital asset products, ensuring contractual frameworks and regulatory considerations align with commercial objectives, stakeholder requirements and risk management expectations. Monitor and interpret UK, EU and global regulatory developments impacting fintech, payments, digital assets, crypto, technology transactions, outsourcing, digital transformation and financial services innovation. Minimum Qualifications: Qualified lawyer eligible to practise in the UK, or equivalent overseas qualification with strong relevant UK experience. Demonstrated experience advising on fintech, payments, digital assets, crypto, blockchain, technology transactions or financial services regulatory matters. Strong experience drafting, reviewing and negotiating complex commercial and technology agreements, including SaaS, cloud, outsourcing, partnership, supplier, payment services and platform agreements. Experience advising fintech companies, payment service providers, e-money institutions, digital asset businesses, technology companies, banks, financial institutions or other regulated financial services organisations. Excellent commercial awareness, stakeholder management skills and the ability to deliver pragmatic, business-focused legal advice in a fast-paced and highly regulated environment. Compensation, Benefits & Location: This role offers a highly competitive compensation and benefits package in the alternative legal services marketplace, that includes health benefits, pension and more. Axiomites also get access to professional development resources and learning and development programs. Axiom provides the opportunity to work remotely, onsite or hybrid, depending on client requirements. Axiom is the global leader in high-calibre, on-demand legal talent. Covering North America, the UK, Europe, and APAC, we enable legal departments to drive efficiency and growth and meet the demands of today's business landscape with best in breed alterative legal services. Axiom is a leader in diversity, inclusion, and social engagement. Diversity is core to our values and we are proud to be an equal opportunity employer. We are proud to be named a best place to work for LGBTQ+ Equality, earning top marks in the 2021 Corporate Equality Index for the second consecutive year. Axiom's legal department is Mansfield certified and is committed to considering at least 50% diverse candidates for leadership roles and outside counsel representation. Learn more about working at Axiom . Equal Opportunity Employer: Axiom ensures equal employment opportunity in recruitment and employment, without discrimination or harassment on the basis of race, color, nationality, national or ethnic origin, religious creed or belief, political opinion, sex, gender reassignment, pregnancy or maternity, age, disability, alienage or citizenship status, marital (or civil or other partnership recognized by law) status, genetic predisposition or carrier status, sexual orientation, military service, or any other characteristic protected by applicable law. Axiom prohibits and will not tolerate any such discrimination or harassment. We understand that many legal professionals have chosen to adopt the consultancy model, and we are happy to discuss this option with you. We offer both consultants and employees the opportunity to work with our enviable client roster. Contact us in complete confidence to find out more about opportunities to work with Axiom as an employee or consultant. Accommodation for Individuals with Disabilities: Upon request and consistent with applicable laws, Axiom will provide reasonable accommodations for individuals with disabilities who require an accommodation to participate in each stage of the recruitment process. To request an accommodation to complete the application form, please contact us at and include "Applicant Accommodation" in the subject line. Axiom Global Limited is a company registered in England and Wales. Registered number: Registered Office: Challoner House, 3rd Floor, 19-21 Clerkenwell Close, London, UK, EC1R 0AA. Axiom respects your privacy. For an explanation of the kind of information we collect about you and how it is used, our full privacy notice is available at . Employment with Axiom may be contingent upon successful completion of a background check, providing proof of identity, and possessing the necessary legal authorization to work. By submitting an application, you acknowledge that all information contained therein, and provided at any part of the application process, is correct and accurate to the best of your knowledge.
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
May 21, 2026
Contractor
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
May 04, 2026
Full time
Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
Apr 22, 2026
Contractor
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
