Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Aug 23, 2026
Contractor
Senior Cyber Security Risk & Assurance Consultant - Product Risk (PBRA) (CONTRACTOR) - London Duration: 1 year contract Hybrid Working - 8 days onsite per month - the rest is remote working About the Team The Product-Based Risk Assessment (PBRA) service conducts recurring security assessments of applications, services, and technologies to identify emerging threats, evaluate control effectiveness, and drive remediation that strengthens The clients cyber resilience. The team supports business and technology stakeholders by assessing cyber security risks and ensuring alignment with The Banks security standards and risk appetite. Key Accountabilities Product-Based Risk Assessments Lead end-to-end Product-Based Risk Assessments (PBRA) for critical applications, platforms, and technology services. Analyse application architectures, business processes, information flows, and supporting infrastructure. Identify and assess cyber threats, vulnerabilities, control weaknesses, and potential business impacts. Evaluate the design and effectiveness of security controls using clients security frameworks and standards. Assess residual risks and propose actionable remediation plans. Security Risk Analysis Perform security risk assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement Act as the primary security assessment contact for business and IT stakeholders. Facilitate workshops, interviews, and assessment review sessions. Challenge assumptions and provide expert security guidance to delivery and operations teams. Build trusted relationships across CISO, CTO, Architecture, Risk Management, and Engineering teams. Reporting & Governance Produce high-quality assessment reports, risk summaries, and executive-level communications. Present findings and recommendations to senior management and governance bodies. Track remediation plans and risk treatment activities through closure. Support internal and external audit activities as required. Continuous Improvement Contribute to the evolution of the PBRA service, methodologies, tools, and operating model. Help drive the transition toward data-enabled and automated security assessment capabilities. Identify opportunities to improve efficiency, consistency, and risk coverage across assessments. Support knowledge sharing and mentoring of junior analysts. Required Skills & Experience Technical Skills Strong understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework (SCF) DORA ANSSI EBIOS RM OWASP Professional Experience Minimum 7 years of experience in Information Security, Cyber Risk, Security Assurance, or Security Architecture. Experience leading complex security assessments across large technology environments. Experience working with senior business and technology stakeholders. Strong report-writing and presentation skills. Personal Competencies Strong analytical and critical-thinking capabilities. Excellent communication and stakeholder management skills. Ability to challenge constructively and influence decision-making. Self-driven with strong ownership and accountability. Pragmatic, risk-based mindset. Comfortable operating in a complex, regulated environment. Please do send across to me the most up to date CV to (url removed) Rates depend on experience and client requirements
Cyber Governance Consultant x2 SC CLEARED - UK Wide 90-100k Our client is looking for a Cyber Governance Consultant, to help clients design and implement cyber guidelines and guardrails tailored to their needs. You'll contribute to a range of consulting activities, both pre- and post-sales, across areas such as: Gap Analysis and rationalization of controls against regulatory frameworks Threat Modelling, risk identification and assessment, and mitigation planning and management Data and outputs analysis, protection and storage (e.g., Data Loss Prevention, Rights Management) 3rd Party Risk analysis, controls and audit, cyber Resilience and recovery analysis Cloud and network security posture and controls including mobile data and device protection Policy and procedure management, covering policy development, testing and review, compliance audit preparation and participation (internal and external) Skills / Experience Designing or implementing secure solutions based on regulatory frameworks including ISO, NIS, NIST, TISAX, DORA, NCSC CAF, IEC62443 Providing GRC consulting services or supporting business development in cybersecurity governance Balancing security needs with compliance requirements, with a pragmatic approach to usability, agility, and cost considerations Creating business cases or roadmaps to enable clients to meet regulatory requirements and industry best practice
Aug 22, 2026
Full time
Cyber Governance Consultant x2 SC CLEARED - UK Wide 90-100k Our client is looking for a Cyber Governance Consultant, to help clients design and implement cyber guidelines and guardrails tailored to their needs. You'll contribute to a range of consulting activities, both pre- and post-sales, across areas such as: Gap Analysis and rationalization of controls against regulatory frameworks Threat Modelling, risk identification and assessment, and mitigation planning and management Data and outputs analysis, protection and storage (e.g., Data Loss Prevention, Rights Management) 3rd Party Risk analysis, controls and audit, cyber Resilience and recovery analysis Cloud and network security posture and controls including mobile data and device protection Policy and procedure management, covering policy development, testing and review, compliance audit preparation and participation (internal and external) Skills / Experience Designing or implementing secure solutions based on regulatory frameworks including ISO, NIS, NIST, TISAX, DORA, NCSC CAF, IEC62443 Providing GRC consulting services or supporting business development in cybersecurity governance Balancing security needs with compliance requirements, with a pragmatic approach to usability, agility, and cost considerations Creating business cases or roadmaps to enable clients to meet regulatory requirements and industry best practice
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
Aug 21, 2026
Full time
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
Job Description Overview Become a vital member of our Complex Projects, Delivery Partner team, proudly taking on some of the world's most exciting and prestigious projects. Join us, and you'll be part of our genuinely collaborative environment, where everyone is supported to make the most of their talents. It's about recognising everyone's contributions equally while delivering excellence together. When you join our practice team, you'll share our vision to be the industry's foremost capability in Estimating & Cost Advisory and always doing what's right. Enjoy a diverse and exciting workload surrounded by talented colleagues ready to lend a hand. You'll support multi-disciplinary and specialist project teams on high-profile schemes across a range of sectors, delivering high impact estimating services to a range of key clients. Plus, you'll have the opportunity to grow your career and develop our internal capabilities. We are looking to hire a Cost Assurance Consultant - Cost Verification and Assurance to support our growing business. In Complex Projects we work across three major markets: Infrastructure (Water, Defence, Aviation, etc.). Transport (Rail, Highways, Local Authorities, etc.). Energy (Nuclear, Renewable Energy, Power, etc.). Your role Provide cost verification, audit and assurance activities, including forensic reviews across large-scale complex infrastructure projects. Support and deliver evaluation of cost data and structures, assessing them against contractual/commercial principles. Analyse supplier cost data to identify patterns, themes, trends and risks. Provide detailed cost verification, payroll audits and wider data sampling for targeted audit activities. Assess and appraise cost capture and commercial management processes. Identify supplier commercial process improvement opportunities for improved commercial governance and cost control. Interpret and advise on contract documentation, particularly under NEC4 contracts. Engage with client teams, contractors and other project stakeholders to complete cost verification/substantiation together with obtaining key documentation and data. Deliver high-quality assurance reports and present those findings to senior stakeholders. Support the presentation of outputs and recommendations to clients and their wider supply chain. Support the integration of innovative digital tools for data analysis and reporting. About you Demonstratable experience of delivering cost and commercial assurance/audit activities. Competent in the interpretation of a wide range of contracts, with experience in the application of the principles of a schedule of cost components. Experienced and comfortable analysing large data sets as well as experience of different costing systems. The ability to interrogate and assess data sets and produce outputs that can be used in the decision-making process. Bachelor's degree in an Estimating, Quantity Surveying, Engineering, Construction sectors or Equivalent Work Experience. Chartership with or demonstrably working towards RICS, ICE, AACE, ACostE or similar. Good working knowledge of NEC3/4 suit of contracts across all option types. Ability to work autonomously in a fast-paced environment, working through challenges as they develop during the delivery stage. Strong report writing and presentation skills. Excellent communication skills both verbal and written. Experience of working within a client organisation, either directly or through a colocation/secondment arrangement. Rewards & benefits Explore the rewards and benefits that help you thrive - at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life. Be rewarded. About AtkinsRéalis We're AtkinsRéalis, a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world's infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We're committed to leading our clients across our various end markets to engineer a better future for our planet and its people. Additional information Security Clearance This role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at interview. The vetting process is delivered by United Kingdom Security Vetting (UKSV) and may require candidates to provide proof of residency in the UK of 5 years or longer. We are committed to creating a culture where everyone feels that they belong - a place where we can all be ourselves, thrive and develop to be the best we can be. So, we offer a range of family friendly, inclusive employment policies, flexible working arrangements and employee resource groups to support all employees. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures and ability. As a Disability Confident Leader, we are committed to offering an interview to all applicants who have a disability and meet the essential criteria. Worker Type Employee Job Type Regular At AtkinsRéalis At AtkinsRéalis, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world-class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences. Created by the integration of long-standing organizations dating back to 1911, AtkinsRéalis is a world-class engineering services and nuclear company dedicated to engineering a better future for our planet and its people. We create sustainable solutions that connect people, data and technology to transform the world's infrastructure and energy systems. We deploy global capabilities locally to our clients and deliver unique end-to-end services across the whole life cycle of an asset including consulting, advisory & environmental services, intelligent networks & cybersecurity, design & engineering, procurement, project & construction management, operations & maintenance, decommissioning and capital. The breadth and depth of our capabilities are delivered to clients in strategic sectors such as Engineering Services, Nuclear and Capital. News and information are available at Atkinsrealis or follow us on LinkedIn.
Aug 21, 2026
Full time
Job Description Overview Become a vital member of our Complex Projects, Delivery Partner team, proudly taking on some of the world's most exciting and prestigious projects. Join us, and you'll be part of our genuinely collaborative environment, where everyone is supported to make the most of their talents. It's about recognising everyone's contributions equally while delivering excellence together. When you join our practice team, you'll share our vision to be the industry's foremost capability in Estimating & Cost Advisory and always doing what's right. Enjoy a diverse and exciting workload surrounded by talented colleagues ready to lend a hand. You'll support multi-disciplinary and specialist project teams on high-profile schemes across a range of sectors, delivering high impact estimating services to a range of key clients. Plus, you'll have the opportunity to grow your career and develop our internal capabilities. We are looking to hire a Cost Assurance Consultant - Cost Verification and Assurance to support our growing business. In Complex Projects we work across three major markets: Infrastructure (Water, Defence, Aviation, etc.). Transport (Rail, Highways, Local Authorities, etc.). Energy (Nuclear, Renewable Energy, Power, etc.). Your role Provide cost verification, audit and assurance activities, including forensic reviews across large-scale complex infrastructure projects. Support and deliver evaluation of cost data and structures, assessing them against contractual/commercial principles. Analyse supplier cost data to identify patterns, themes, trends and risks. Provide detailed cost verification, payroll audits and wider data sampling for targeted audit activities. Assess and appraise cost capture and commercial management processes. Identify supplier commercial process improvement opportunities for improved commercial governance and cost control. Interpret and advise on contract documentation, particularly under NEC4 contracts. Engage with client teams, contractors and other project stakeholders to complete cost verification/substantiation together with obtaining key documentation and data. Deliver high-quality assurance reports and present those findings to senior stakeholders. Support the presentation of outputs and recommendations to clients and their wider supply chain. Support the integration of innovative digital tools for data analysis and reporting. About you Demonstratable experience of delivering cost and commercial assurance/audit activities. Competent in the interpretation of a wide range of contracts, with experience in the application of the principles of a schedule of cost components. Experienced and comfortable analysing large data sets as well as experience of different costing systems. The ability to interrogate and assess data sets and produce outputs that can be used in the decision-making process. Bachelor's degree in an Estimating, Quantity Surveying, Engineering, Construction sectors or Equivalent Work Experience. Chartership with or demonstrably working towards RICS, ICE, AACE, ACostE or similar. Good working knowledge of NEC3/4 suit of contracts across all option types. Ability to work autonomously in a fast-paced environment, working through challenges as they develop during the delivery stage. Strong report writing and presentation skills. Excellent communication skills both verbal and written. Experience of working within a client organisation, either directly or through a colocation/secondment arrangement. Rewards & benefits Explore the rewards and benefits that help you thrive - at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life. Be rewarded. About AtkinsRéalis We're AtkinsRéalis, a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world's infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We're committed to leading our clients across our various end markets to engineer a better future for our planet and its people. Additional information Security Clearance This role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at interview. The vetting process is delivered by United Kingdom Security Vetting (UKSV) and may require candidates to provide proof of residency in the UK of 5 years or longer. We are committed to creating a culture where everyone feels that they belong - a place where we can all be ourselves, thrive and develop to be the best we can be. So, we offer a range of family friendly, inclusive employment policies, flexible working arrangements and employee resource groups to support all employees. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures and ability. As a Disability Confident Leader, we are committed to offering an interview to all applicants who have a disability and meet the essential criteria. Worker Type Employee Job Type Regular At AtkinsRéalis At AtkinsRéalis, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world-class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences. Created by the integration of long-standing organizations dating back to 1911, AtkinsRéalis is a world-class engineering services and nuclear company dedicated to engineering a better future for our planet and its people. We create sustainable solutions that connect people, data and technology to transform the world's infrastructure and energy systems. We deploy global capabilities locally to our clients and deliver unique end-to-end services across the whole life cycle of an asset including consulting, advisory & environmental services, intelligent networks & cybersecurity, design & engineering, procurement, project & construction management, operations & maintenance, decommissioning and capital. The breadth and depth of our capabilities are delivered to clients in strategic sectors such as Engineering Services, Nuclear and Capital. News and information are available at Atkinsrealis or follow us on LinkedIn.
Cloud Security Consultant A Global Financial Services firm requires a Contract Cloud Security Consultant to join their Cyber Transformation Programme consulting across Al, DevSecOps & Microsoft Security Suite. Travel: Hydbrid Location: London IT Security Cloud Consultant working in Al engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability). Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR). Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive the security agenda within a matrixed environment. Serve as the security point of contact for projects, leveraging deep knowledge in DevSecOps, Azure IAM, PKI, secure SDLC, and adversarial Al threats, while promoting a culture of continuous improvement and security awareness.
Aug 13, 2026
Full time
Cloud Security Consultant A Global Financial Services firm requires a Contract Cloud Security Consultant to join their Cyber Transformation Programme consulting across Al, DevSecOps & Microsoft Security Suite. Travel: Hydbrid Location: London IT Security Cloud Consultant working in Al engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability). Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities and ensuring compliance with data protection laws (e.g., GDPR). Establish, implement, and maintain security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive the security agenda within a matrixed environment. Serve as the security point of contact for projects, leveraging deep knowledge in DevSecOps, Azure IAM, PKI, secure SDLC, and adversarial Al threats, while promoting a culture of continuous improvement and security awareness.
CBSbutler Holdings Limited trading as CBSbutler
City, London
Global Financial Services organisation is hiring for an experienced Operational Resilience Consultant to join their team based in London. This is a permanent role with a hybrid working pattern of 3-4 days per week in the City office. Salary ranges between 55K - 63K (depending on experience) + Bonus and Benefits. You will be working with UK Banking, Insurance and Financial Services clients, helping them build and enhance robust Operational Resilience frameworks and meet regulatory requirements. Responsibilities: Deliver Operational Resilience programmes across Financial Services. Identify Important Business Services (IBS), impact tolerances and critical dependencies. Lead service mapping, resilience assessments and scenario testing. Develop governance frameworks, policies, MI and remediation plans. Support FCA/PRA regulatory reviews, audits and assurance activity. Embed resilience across Operational Risk, Business Continuity, Technology, Cyber and Third-Party Risk. Engage and influence senior stakeholders and facilitate client workshops. Skills and Experience: 5-8 years experience in Operational Resilience / Operational Risk / Business Continuity / Risk Consulting. Strong hands-on experience with FCA/PRA Operational Resilience requirements. Knowledge of IBS, impact tolerances, service mapping and scenario testing. Financial Services experience, ideally across Banking and/or Insurance. Strong stakeholder management and consulting skills. Experience with BCP, Disaster Recovery and Third-Party Risk. DORA (Digital Operational Resilience Act) Please apply for immediate interview! CBSbutler is operating and advertising as an Employment Agency for permanent positions and as an Employment Business for interim / contract / temporary positions. CBSbutler is an Equal Opportunities employer and we encourage applicants from all backgrounds.
Aug 10, 2026
Full time
Global Financial Services organisation is hiring for an experienced Operational Resilience Consultant to join their team based in London. This is a permanent role with a hybrid working pattern of 3-4 days per week in the City office. Salary ranges between 55K - 63K (depending on experience) + Bonus and Benefits. You will be working with UK Banking, Insurance and Financial Services clients, helping them build and enhance robust Operational Resilience frameworks and meet regulatory requirements. Responsibilities: Deliver Operational Resilience programmes across Financial Services. Identify Important Business Services (IBS), impact tolerances and critical dependencies. Lead service mapping, resilience assessments and scenario testing. Develop governance frameworks, policies, MI and remediation plans. Support FCA/PRA regulatory reviews, audits and assurance activity. Embed resilience across Operational Risk, Business Continuity, Technology, Cyber and Third-Party Risk. Engage and influence senior stakeholders and facilitate client workshops. Skills and Experience: 5-8 years experience in Operational Resilience / Operational Risk / Business Continuity / Risk Consulting. Strong hands-on experience with FCA/PRA Operational Resilience requirements. Knowledge of IBS, impact tolerances, service mapping and scenario testing. Financial Services experience, ideally across Banking and/or Insurance. Strong stakeholder management and consulting skills. Experience with BCP, Disaster Recovery and Third-Party Risk. DORA (Digital Operational Resilience Act) Please apply for immediate interview! CBSbutler is operating and advertising as an Employment Agency for permanent positions and as an Employment Business for interim / contract / temporary positions. CBSbutler is an Equal Opportunities employer and we encourage applicants from all backgrounds.
We are currently recruiting a Technical Security Design or Enterprise Security Design Consultant to join our growing Security Consulting practice. If you are passionate about Information and Cyber Security Architecture with a strong consulting background, are obsessive about solving business and client challenges, and you are strongly security risk focused We can provide an excellent platform to develop your ambition and career, while helping our clients tackle some of their biggest challenges. What to Expect This is a great opportunity for you to play a pivotal role in helping to shape our client's transformation journeys. Using your consultative background, you will be able to: Work in the capabilities phases of the systems development life cycle; unpacking and translating technology security requirements, business and environmental conditions (e.g., law and regulations) into enterprise security architecture patterns and processes at contextual, conceptual or logical levels. Draw upon Enterprise Security Design or Technical Security Design experience to: Identify Business objectives, goals and strategy. Business attributes that are required to achieve those goals. Enterprise assets, systems, and information processes to support enterprise mission needs. Stakeholder security requirements for protecting the organization's mission and business processes. The risk associated with the attributes that can prevent a business from achieving its goals. The required controls to manage the risk. Assumptions, issues and dependencies. Define Strategic, tactical and operational client Enterprise Security Architecture or Security Solution Architecture options. Information Technology (IT), Network & Security principles, and the requirements that describe baseline and target architectures. Security architectures that manage business risks. Logical Security control architectures, mapping to conceptual and contextual architectures. Organizational and Operational architectures. Security controls in line with good industry Security practices (for example: NIST, ISO, CIS, NCSC, etc.), and relevant UK Cyber Regulation and Standards. Programmes or project to design and implement those controls. Client requirements and supporting Use Cases. Solution and segment architectures align to business mission and processes. Oversee, evaluate, and support. Documentation, validation, assessment, and authorisation processes necessary to assure new and existing information. Discovery and audits, for extraction of findings and documentation of recommendations. The adoption of Cyber / Technology Security Controls Frameworks (NIST / ISO/ISF / COBIT / etc.) and using this to implement solutions. Demonstrate Subject matter knowledge in the architecture of specific Security domains (for example: PAM / IAM, Cloud, IoT, Threat Profiling, etc.). Your ability to take both clients and colleagues on a journey. Knowledge of concepts and principles of 'Secure by Design' and 'Zero Trust'. Experienced in shaping a variety of end to end control requirements across application, systems and infrastructure, in hybrid Cloud (incl. O/D365, AWS, Azure, GCP) and On Prem. Ability to architect solutions across service and network infrastructure, with a solid foundation in both. What experience you'll bring: What's Important It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a broad security consulting background and have previous experience: Must have worked in a Telecoms environment. Multi year client facing project and presentation experience in a professional services environment. Ability to operate in demanding situations whilst still having relentless drive to deliver with enthusiasm. Strong influencer, with a wide range of styles, having ability to build good working relationships with delivery partners and differing stakeholder levels within an organisation. Must be able to interface with and build relationships with Enterprise Architects, business people, and technologists at all levels. Evidence of continued personal growth attaining necessary further architectural and security qualifications and learning (such as; Open CA, TOGAF, SABSA, CCSK, ACSP, CCSP, CCSS, ACSA, CISSIP-ISSAP, CNDA). We work with Public Sector clients where Defence Vetting to such as SC may be required, as such you hold or are willing to hold vetting certification. Previous experience of working within this type of environment is required. Who we are: At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co innovate solutions with clients and partners globally for business and societal impact. Serving 75 % of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow. what we'll offer you: We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensures that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options. We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team. "Upon joining the NTT DATA UK family, you will experience a culturally diverse organisation living our values of Clients First, Teamwork and Foresight as we partner with our customers every day. At NTT DATA UK, we are proud to support and invest in our people. We offer a variety of rewarding career paths and opportunities to develop professionally - with access to cutting edge innovation." Niccolo Spataro, CEO, NTT DATA UK
Aug 09, 2026
Full time
We are currently recruiting a Technical Security Design or Enterprise Security Design Consultant to join our growing Security Consulting practice. If you are passionate about Information and Cyber Security Architecture with a strong consulting background, are obsessive about solving business and client challenges, and you are strongly security risk focused We can provide an excellent platform to develop your ambition and career, while helping our clients tackle some of their biggest challenges. What to Expect This is a great opportunity for you to play a pivotal role in helping to shape our client's transformation journeys. Using your consultative background, you will be able to: Work in the capabilities phases of the systems development life cycle; unpacking and translating technology security requirements, business and environmental conditions (e.g., law and regulations) into enterprise security architecture patterns and processes at contextual, conceptual or logical levels. Draw upon Enterprise Security Design or Technical Security Design experience to: Identify Business objectives, goals and strategy. Business attributes that are required to achieve those goals. Enterprise assets, systems, and information processes to support enterprise mission needs. Stakeholder security requirements for protecting the organization's mission and business processes. The risk associated with the attributes that can prevent a business from achieving its goals. The required controls to manage the risk. Assumptions, issues and dependencies. Define Strategic, tactical and operational client Enterprise Security Architecture or Security Solution Architecture options. Information Technology (IT), Network & Security principles, and the requirements that describe baseline and target architectures. Security architectures that manage business risks. Logical Security control architectures, mapping to conceptual and contextual architectures. Organizational and Operational architectures. Security controls in line with good industry Security practices (for example: NIST, ISO, CIS, NCSC, etc.), and relevant UK Cyber Regulation and Standards. Programmes or project to design and implement those controls. Client requirements and supporting Use Cases. Solution and segment architectures align to business mission and processes. Oversee, evaluate, and support. Documentation, validation, assessment, and authorisation processes necessary to assure new and existing information. Discovery and audits, for extraction of findings and documentation of recommendations. The adoption of Cyber / Technology Security Controls Frameworks (NIST / ISO/ISF / COBIT / etc.) and using this to implement solutions. Demonstrate Subject matter knowledge in the architecture of specific Security domains (for example: PAM / IAM, Cloud, IoT, Threat Profiling, etc.). Your ability to take both clients and colleagues on a journey. Knowledge of concepts and principles of 'Secure by Design' and 'Zero Trust'. Experienced in shaping a variety of end to end control requirements across application, systems and infrastructure, in hybrid Cloud (incl. O/D365, AWS, Azure, GCP) and On Prem. Ability to architect solutions across service and network infrastructure, with a solid foundation in both. What experience you'll bring: What's Important It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a broad security consulting background and have previous experience: Must have worked in a Telecoms environment. Multi year client facing project and presentation experience in a professional services environment. Ability to operate in demanding situations whilst still having relentless drive to deliver with enthusiasm. Strong influencer, with a wide range of styles, having ability to build good working relationships with delivery partners and differing stakeholder levels within an organisation. Must be able to interface with and build relationships with Enterprise Architects, business people, and technologists at all levels. Evidence of continued personal growth attaining necessary further architectural and security qualifications and learning (such as; Open CA, TOGAF, SABSA, CCSK, ACSP, CCSP, CCSS, ACSA, CISSIP-ISSAP, CNDA). We work with Public Sector clients where Defence Vetting to such as SC may be required, as such you hold or are willing to hold vetting certification. Previous experience of working within this type of environment is required. Who we are: At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co innovate solutions with clients and partners globally for business and societal impact. Serving 75 % of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow. what we'll offer you: We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensures that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options. We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team. "Upon joining the NTT DATA UK family, you will experience a culturally diverse organisation living our values of Clients First, Teamwork and Foresight as we partner with our customers every day. At NTT DATA UK, we are proud to support and invest in our people. We offer a variety of rewarding career paths and opportunities to develop professionally - with access to cutting edge innovation." Niccolo Spataro, CEO, NTT DATA UK
Location: Hybrid with travel to Corsham and other South Military sites. Security Clearance: SC Conventus is recruiting a Junior Cyber Audit Consultant to join a Defence focused Cyber Assurance team, playing a supporting role to senior consultants delivering audits across customer processes and systems. This is a great opportunity to build a career in Defence Cyber Audit, with a genuine pathway to progress into a fully fledged Cyber Audit Consultant role. You will be playing a supporting role to the main consultants delivering Cyber Risk Profile (CRP) audit work, with development into a fully fledged Cyber Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective corrective actions. Maintain accurate and current records of audit activities, including audit reports and documentation of corrective actions taken. Stay current with regulatory requirements and industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor or equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2/v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently and as part of a team. Permanent role with a genuine career path into a Cyber Audit Consultant position. Structured support, mentoring and development within a specialist Defence focused team. Exposure to nationally significant Defence cyber assurance work. Due to the nature of the work, applicants must hold or be eligible to hold UK Security clearance to SC level. Please familiarise yourself with the security vetting process before applying.
Jul 31, 2026
Full time
Location: Hybrid with travel to Corsham and other South Military sites. Security Clearance: SC Conventus is recruiting a Junior Cyber Audit Consultant to join a Defence focused Cyber Assurance team, playing a supporting role to senior consultants delivering audits across customer processes and systems. This is a great opportunity to build a career in Defence Cyber Audit, with a genuine pathway to progress into a fully fledged Cyber Audit Consultant role. You will be playing a supporting role to the main consultants delivering Cyber Risk Profile (CRP) audit work, with development into a fully fledged Cyber Audit Consultant role over time. Responsibilities: Plan and conduct audits of customer processes and systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective corrective actions. Maintain accurate and current records of audit activities, including audit reports and documentation of corrective actions taken. Stay current with regulatory requirements and industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills/Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ISO certification (for example ISO 27001 Lead Auditor or equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2/v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently and as part of a team. Permanent role with a genuine career path into a Cyber Audit Consultant position. Structured support, mentoring and development within a specialist Defence focused team. Exposure to nationally significant Defence cyber assurance work. Due to the nature of the work, applicants must hold or be eligible to hold UK Security clearance to SC level. Please familiarise yourself with the security vetting process before applying.
Lead Data Product ManagerApplylocations: London York Roadtime type: Full timeposted on: Posted 6 Days Agojob requisition id: R198483, United Kingdom Job Family Group: Trading Jobs Worker Type: Regular Posting Start Date: July 23, 2026 Business Unit: Trading and Supply Experience Level: Experienced Professionals Job Description: What's the role As a Lead Data Product Manager, within the Shell Energy Chief Data Office (CDO) organisation, you will own the business-led data product strategy, acquisition design and delivery for Shell Energy Trading & Supply. The role is accountable for translating trading, risk, finance and operations needs into high-value data products, define onboarding priorities, data contracts, target-state designs and adoption outcomes. Working in partnership with Shell's Information & Digital Technology (IDT) group, you will provide deep commodities data context, business design authority and knowledge to ensure engineered solutions are fit for trading use and deliver measurable business value. What you'll be doing Own business-led data product strategy, acquisition design and ingestion priorities Define the business target state and product roadmap for source onboarding, data acquisition priorities, data contracts, schemas, controls and service expectations across trading, risk, finance and operations. Provide product and design authority on what the data product needs to do for the business, including usability, quality, timeliness, lineage, adoption, control requirements and measurable value delivery. Partner with IDT to ensure technical designs on Azure data platforms are fit for purpose, while maintaining clear separation between business design ownership and IDT-led engineering build, infrastructure, cyber and operational run. Industrialise onboarding of sources such as ETRM/Endur, Trayport, market data vendors, SAP and operational data feeds through clear product requirements, SLAs, observability needs, runbook expectations and adoption measures. Translate business context into product outcomes and engineered delivery Bring deep commodities data knowledge across trading lifecycles, market data, reference data, ETRM workflows and risk/finance dependencies to shape practical, commercially relevant solutions. Translate trading desk, risk, operations and finance needs into a prioritised product backlog, clear epics/stories, acceptance criteria and value measures that IDT and engineering teams can deliver against. Contribute to and challenge designs constructively, shaping best practice and partnering with IDT accountabilities for engineering delivery, platform operations or solution architecture ownership. Partner with Product Owners, Business Interface, Solution/Data Architects and IDT delivery leads to align business requirements, data models, master data standards, prioritisation, adoption and delivery plans. Go to Data Manager responsibilities for the domain Steward business data definitions, ownership, lineage, metadata, quality KPIs, access requirements and product adoption metrics; chair data change forums and ensure decisions are grounded in commodities trading context. Apply Shell's technical information & data lifecycle: register, receive, set up/load, update/maintain, publish/archive or dispose; uphold audit trail and records management. Maintain clear decision rights between business SME data ownership and IDT technical delivery, ensuring requirements, controls and acceptance criteria are agreed before build and evidenced at handover. Shape product capacity plans, skills roadmap and vendor contributions; foster a culture of safety, compliance, customer focus and continuous improvement. Operate reliably & safely Oversee resilience, recoverability and cyber hygiene; meet controls for data privacy, confidentiality and regulatory obligations in trading (e.g., REMIT/EMIR, privacy). Drive incident, change & problem management; measure and report service health and user satisfaction. What you bring Deep commodities data knowledge, ideally within energy trading, including ETRM/Endur workflows, market data, reference data, trade lifecycle, risk, finance and operations data dependencies. Proven ability to translate business needs into data product designs, requirements, data contracts, controls, prioritised backlogs and adoption outcomes that engineering teams can execute. Strong product and technical judgement across modern data platforms, ingestion patterns, APIs, streaming/batch, schema management, CDC, metadata, lineage and data quality, with the ability to assess what good looks like. Experience leading cross-functional product delivery through Product Owners, architects, engineers and business SMEs; comfortable shaping acceptance criteria, priorities, value measures and handover into production. Practical exposure to Azure data services, Databricks, SQL, Python/Spark, event-based integration and DevOps practices; hands-on engineering experience is beneficial. Degree in a relevant discipline or equivalent experience; Azure Data Engineer, Databricks or data governance certifications are a plus. What we offer You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You'll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You'll be able to balance your priorities as you become the best version of yourself. Progress as a person as we work on the energy transition together. Continuously grow the transferable skills you need to get ahead. Work at the forefront of technology, trends, and practices. Collaborate with experienced colleagues with unique expertise. Achieve your balance in a values-led culture that encourages you to be the best version of yourself. Benefit from a range of flexible working options. Perform at your best with a competitive starting salary and annual performance related salary increase - our pay and benefits packages are considered to be among the best in the world. Take advantage of paid parental leave, including for non-birthing parents. Join an organisation working to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply. Grow as you progress through diverse career opportunities in national and international teams. Gain access to a wide range of training and development programmes.We are committed to attracting a broader and more diverse pool of candidates. If this position doesn't feel like the perfect fit for your qualifications right now, we'd still love to hear from you.Shell is working to advance an inclusive, psychologically safe and accessible environment where people with disabilities can excel. If you require any accommodations or accessibility adjustments (e.g. assistive technology, communication support, or other) during the application or interview process, please let us know when prompted in your application. We strive to ensure that our process and workplace is accessible to everyone and are dedicated to making reasonable adjustments to support your needs. Shell in The United Kingdom Shell UK remains one of the North Sea's biggest producers, supplying around 10% of the UK's total oil and gas needs. But perhaps the most recognisable face of Shell in the UK is our network of over 1,000 Shell-branded service stations.In the years ahead, as the UK looks to strengthen energy security and deliver its 2050 net-zero goal, Shell UK aims to play a crucial role. We aim to be a major investor in the UK energy system by helping our customers decarbonise with a focus on transport and industry.- DISCLAIMER: Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.
Jul 31, 2026
Full time
Lead Data Product ManagerApplylocations: London York Roadtime type: Full timeposted on: Posted 6 Days Agojob requisition id: R198483, United Kingdom Job Family Group: Trading Jobs Worker Type: Regular Posting Start Date: July 23, 2026 Business Unit: Trading and Supply Experience Level: Experienced Professionals Job Description: What's the role As a Lead Data Product Manager, within the Shell Energy Chief Data Office (CDO) organisation, you will own the business-led data product strategy, acquisition design and delivery for Shell Energy Trading & Supply. The role is accountable for translating trading, risk, finance and operations needs into high-value data products, define onboarding priorities, data contracts, target-state designs and adoption outcomes. Working in partnership with Shell's Information & Digital Technology (IDT) group, you will provide deep commodities data context, business design authority and knowledge to ensure engineered solutions are fit for trading use and deliver measurable business value. What you'll be doing Own business-led data product strategy, acquisition design and ingestion priorities Define the business target state and product roadmap for source onboarding, data acquisition priorities, data contracts, schemas, controls and service expectations across trading, risk, finance and operations. Provide product and design authority on what the data product needs to do for the business, including usability, quality, timeliness, lineage, adoption, control requirements and measurable value delivery. Partner with IDT to ensure technical designs on Azure data platforms are fit for purpose, while maintaining clear separation between business design ownership and IDT-led engineering build, infrastructure, cyber and operational run. Industrialise onboarding of sources such as ETRM/Endur, Trayport, market data vendors, SAP and operational data feeds through clear product requirements, SLAs, observability needs, runbook expectations and adoption measures. Translate business context into product outcomes and engineered delivery Bring deep commodities data knowledge across trading lifecycles, market data, reference data, ETRM workflows and risk/finance dependencies to shape practical, commercially relevant solutions. Translate trading desk, risk, operations and finance needs into a prioritised product backlog, clear epics/stories, acceptance criteria and value measures that IDT and engineering teams can deliver against. Contribute to and challenge designs constructively, shaping best practice and partnering with IDT accountabilities for engineering delivery, platform operations or solution architecture ownership. Partner with Product Owners, Business Interface, Solution/Data Architects and IDT delivery leads to align business requirements, data models, master data standards, prioritisation, adoption and delivery plans. Go to Data Manager responsibilities for the domain Steward business data definitions, ownership, lineage, metadata, quality KPIs, access requirements and product adoption metrics; chair data change forums and ensure decisions are grounded in commodities trading context. Apply Shell's technical information & data lifecycle: register, receive, set up/load, update/maintain, publish/archive or dispose; uphold audit trail and records management. Maintain clear decision rights between business SME data ownership and IDT technical delivery, ensuring requirements, controls and acceptance criteria are agreed before build and evidenced at handover. Shape product capacity plans, skills roadmap and vendor contributions; foster a culture of safety, compliance, customer focus and continuous improvement. Operate reliably & safely Oversee resilience, recoverability and cyber hygiene; meet controls for data privacy, confidentiality and regulatory obligations in trading (e.g., REMIT/EMIR, privacy). Drive incident, change & problem management; measure and report service health and user satisfaction. What you bring Deep commodities data knowledge, ideally within energy trading, including ETRM/Endur workflows, market data, reference data, trade lifecycle, risk, finance and operations data dependencies. Proven ability to translate business needs into data product designs, requirements, data contracts, controls, prioritised backlogs and adoption outcomes that engineering teams can execute. Strong product and technical judgement across modern data platforms, ingestion patterns, APIs, streaming/batch, schema management, CDC, metadata, lineage and data quality, with the ability to assess what good looks like. Experience leading cross-functional product delivery through Product Owners, architects, engineers and business SMEs; comfortable shaping acceptance criteria, priorities, value measures and handover into production. Practical exposure to Azure data services, Databricks, SQL, Python/Spark, event-based integration and DevOps practices; hands-on engineering experience is beneficial. Degree in a relevant discipline or equivalent experience; Azure Data Engineer, Databricks or data governance certifications are a plus. What we offer You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You'll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You'll be able to balance your priorities as you become the best version of yourself. Progress as a person as we work on the energy transition together. Continuously grow the transferable skills you need to get ahead. Work at the forefront of technology, trends, and practices. Collaborate with experienced colleagues with unique expertise. Achieve your balance in a values-led culture that encourages you to be the best version of yourself. Benefit from a range of flexible working options. Perform at your best with a competitive starting salary and annual performance related salary increase - our pay and benefits packages are considered to be among the best in the world. Take advantage of paid parental leave, including for non-birthing parents. Join an organisation working to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply. Grow as you progress through diverse career opportunities in national and international teams. Gain access to a wide range of training and development programmes.We are committed to attracting a broader and more diverse pool of candidates. If this position doesn't feel like the perfect fit for your qualifications right now, we'd still love to hear from you.Shell is working to advance an inclusive, psychologically safe and accessible environment where people with disabilities can excel. If you require any accommodations or accessibility adjustments (e.g. assistive technology, communication support, or other) during the application or interview process, please let us know when prompted in your application. We strive to ensure that our process and workplace is accessible to everyone and are dedicated to making reasonable adjustments to support your needs. Shell in The United Kingdom Shell UK remains one of the North Sea's biggest producers, supplying around 10% of the UK's total oil and gas needs. But perhaps the most recognisable face of Shell in the UK is our network of over 1,000 Shell-branded service stations.In the years ahead, as the UK looks to strengthen energy security and deliver its 2050 net-zero goal, Shell UK aims to play a crucial role. We aim to be a major investor in the UK energy system by helping our customers decarbonise with a focus on transport and industry.- DISCLAIMER: Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.
Security Clearance: To be successfully appointed to this role, must be eligible to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time. If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back three continuous years, and unspent criminal record check (known as Disclosure and Barring Service) What we will offer you You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard Manage Mentor, Cybersecurity qualifications and much more. Why we are different At Capgemini, we help organisations across the world become more agile, more competitive, and more successful. Smart, tailored, often ground-breaking technical solutions to complex problems are the norm. But so, too, is a culture that is as collaborative as it is forward thinking. Working closely with each other, and with our clients, we get under the skin of businesses and to the heart of their goals. You will too. Capgemini is proud to represent nearly 130 nationalities and its cultural diversity. Our holistic definition of diversity extends beyond gender, gender identity, sexual orientation, disability, ethnicity, race, age, and religion. Capgemini views diversity as everything that makes us who we are as an organization, including our social background, our experiences in life and work, our communication styles and even our personality. These dimensions contribute to the type of diversity we value the most: diversity of thought. Who you will be working with You will join the Data Trust Capability in Capgemini's Insights and Data (I&D) business unit. Insights and Data is a global business unit covering Enterprise Data Management, Cloud Platforms, Enterprise Content Management and AI & Analytics. Our team is one of the largest and most successful Data Management teams in the UK delivering innovative Data Management and Governance thought leadership to our clients. The Enterprise Data Management provides services on Information Strategy, Data Governance, Master Data Management, Data Architecture, Data Migration and Lifecycle Management. We help our clients build an enterprise-class data platform that allows them to move ahead in their journey of data and insights. Primarily working with leading software vendors like SAP, Informatica, IBM, Oracle et al, the team are primarily Consultants, putting client requirements and industry best practices at the heart of delivery. The focus of your role Configure and maintain Microsoft Purview features, including: Information Protection (sensitivity labels, auto-labelling), Data Loss Prevention (M365, Endpoint, Cloud Apps), Data Governance (catalogue, scanning, classification), Records Management (retention labels & policies), Insider Risk Management, eDiscovery (Standard & Premium) Manage scanning rules, data connectors, metadata sources, and catalog assets. Support integration with M365, Azure, Power Platform, and on premises data sources Monitor Purview alerts, DLP incidents, policy matches, and governance activity logs Perform investigation of policy violations, insider risk alerts, and data protection events Track and escape issues to engineering or architecture teams as required Maintain audit trails, compliance dashboards, and monthly reporting Assist with maintaining data classification schemas, taxonomy, and metadata models Support data owners and stewards in cataloguing and tagging data assets Run data scans, quality checks, and lineage validation tasks Produce and maintain operational runbooks, configuration documentation, and governance processes Create user guides for end users, compliance officers, and IT support teams Document incident response processes related to Purview alerts Work closely with Compliance, Security, Data Governance, and IT teams to implement policies into Purview Support end users by troubleshooting classification, labelling, and access issues Provide training sessions and knowledge transfer on Purview features Identify gaps in data governance and compliance processes; recommend improvements You may also offer insights to the wider community through blogs, articles, and social media. At Capgemini, we believe in bringing your whole self to work. Equity, diversity, and inclusion are woven into our everyday culture, creating a welcoming and supportive environment for everyone. What You Will Bring As a Technical Purview Analyst, you will have 7 years plus experience in data governance, security, compliance, or Microsoft 365 administration. You will have hands on experience with Microsoft Purview or related compliance/security platforms, with exposure to operational support, incident management, or compliance monitoring. Experience Microsoft Purview Information Protection - labels, policies, auto labelling, encryption Data Loss Prevention - endpoint, SharePoint/OneDrive/Teams, Exchange, cloud apps Purview Data Governance - cataloguing, scanning, metadata management Records Management & Retention Labelling eDiscovery workflows and case management Defender for Cloud Apps Wider integration with SharePoint, OneDrive, Exchange, Azure Storage, SQL, Synapse, Data Factory, and Power BI Understanding of classification, metadata, and governance principles Knowledge of Microsoft 365 security & compliance capabilities Basic understanding of Azure Active Directory / Entra ID identity and access concepts Familiarity with ITSM/incident management processes Understanding of regulatory compliance basics How compliance and data protection teams use Purview outputs Data sensitivity models and how they map to business processes Governance best practices, including cataloguing and lineage use cases Ability to configure and manage Purview policies and scanning tools Strong analytical and troubleshooting skills Familiarity with KQL, PowerShell, or Microsoft Graph Ability to interpret logs, alerts, and governance reporting Strong documentation and verbal communication skills Ability to work collaboratively with cross functional teams Good organisational and time management abilities Certifications (Desirable)
Jun 03, 2026
Full time
Security Clearance: To be successfully appointed to this role, must be eligible to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time. If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back three continuous years, and unspent criminal record check (known as Disclosure and Barring Service) What we will offer you You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's 'learning for life' mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard Manage Mentor, Cybersecurity qualifications and much more. Why we are different At Capgemini, we help organisations across the world become more agile, more competitive, and more successful. Smart, tailored, often ground-breaking technical solutions to complex problems are the norm. But so, too, is a culture that is as collaborative as it is forward thinking. Working closely with each other, and with our clients, we get under the skin of businesses and to the heart of their goals. You will too. Capgemini is proud to represent nearly 130 nationalities and its cultural diversity. Our holistic definition of diversity extends beyond gender, gender identity, sexual orientation, disability, ethnicity, race, age, and religion. Capgemini views diversity as everything that makes us who we are as an organization, including our social background, our experiences in life and work, our communication styles and even our personality. These dimensions contribute to the type of diversity we value the most: diversity of thought. Who you will be working with You will join the Data Trust Capability in Capgemini's Insights and Data (I&D) business unit. Insights and Data is a global business unit covering Enterprise Data Management, Cloud Platforms, Enterprise Content Management and AI & Analytics. Our team is one of the largest and most successful Data Management teams in the UK delivering innovative Data Management and Governance thought leadership to our clients. The Enterprise Data Management provides services on Information Strategy, Data Governance, Master Data Management, Data Architecture, Data Migration and Lifecycle Management. We help our clients build an enterprise-class data platform that allows them to move ahead in their journey of data and insights. Primarily working with leading software vendors like SAP, Informatica, IBM, Oracle et al, the team are primarily Consultants, putting client requirements and industry best practices at the heart of delivery. The focus of your role Configure and maintain Microsoft Purview features, including: Information Protection (sensitivity labels, auto-labelling), Data Loss Prevention (M365, Endpoint, Cloud Apps), Data Governance (catalogue, scanning, classification), Records Management (retention labels & policies), Insider Risk Management, eDiscovery (Standard & Premium) Manage scanning rules, data connectors, metadata sources, and catalog assets. Support integration with M365, Azure, Power Platform, and on premises data sources Monitor Purview alerts, DLP incidents, policy matches, and governance activity logs Perform investigation of policy violations, insider risk alerts, and data protection events Track and escape issues to engineering or architecture teams as required Maintain audit trails, compliance dashboards, and monthly reporting Assist with maintaining data classification schemas, taxonomy, and metadata models Support data owners and stewards in cataloguing and tagging data assets Run data scans, quality checks, and lineage validation tasks Produce and maintain operational runbooks, configuration documentation, and governance processes Create user guides for end users, compliance officers, and IT support teams Document incident response processes related to Purview alerts Work closely with Compliance, Security, Data Governance, and IT teams to implement policies into Purview Support end users by troubleshooting classification, labelling, and access issues Provide training sessions and knowledge transfer on Purview features Identify gaps in data governance and compliance processes; recommend improvements You may also offer insights to the wider community through blogs, articles, and social media. At Capgemini, we believe in bringing your whole self to work. Equity, diversity, and inclusion are woven into our everyday culture, creating a welcoming and supportive environment for everyone. What You Will Bring As a Technical Purview Analyst, you will have 7 years plus experience in data governance, security, compliance, or Microsoft 365 administration. You will have hands on experience with Microsoft Purview or related compliance/security platforms, with exposure to operational support, incident management, or compliance monitoring. Experience Microsoft Purview Information Protection - labels, policies, auto labelling, encryption Data Loss Prevention - endpoint, SharePoint/OneDrive/Teams, Exchange, cloud apps Purview Data Governance - cataloguing, scanning, metadata management Records Management & Retention Labelling eDiscovery workflows and case management Defender for Cloud Apps Wider integration with SharePoint, OneDrive, Exchange, Azure Storage, SQL, Synapse, Data Factory, and Power BI Understanding of classification, metadata, and governance principles Knowledge of Microsoft 365 security & compliance capabilities Basic understanding of Azure Active Directory / Entra ID identity and access concepts Familiarity with ITSM/incident management processes Understanding of regulatory compliance basics How compliance and data protection teams use Purview outputs Data sensitivity models and how they map to business processes Governance best practices, including cataloguing and lineage use cases Ability to configure and manage Purview policies and scanning tools Strong analytical and troubleshooting skills Familiarity with KQL, PowerShell, or Microsoft Graph Ability to interpret logs, alerts, and governance reporting Strong documentation and verbal communication skills Ability to work collaboratively with cross functional teams Good organisational and time management abilities Certifications (Desirable)
The Company Cognizant (NASDAQ:CTSH) is a leading provider of information technology, consulting, and business process outsourcing services, dedicated to helping the world's leading companies build stronger businesses. Headquartered in Teaneck, New Jersey (U.S.), Cognizant has over 350,000 employees as of January 2025. Cognizant is a member of the NASDAQ-100, the S&P 500, the Forbes Global 1000, and the Fortune 500 and is ranked among the top performing and fastest growing companies in the world. Cognizant Consulting At Cognizant, our consultants orchestrate the capabilities to truly change the game across strategy, design, technology and industry/functional knowledge to deliver insight at speed and solutions at scale. Our consulting services elevate the unique abilities and business aspirations of customers and employees and build relationships based on trust and value. Water Utilities Consulting We are seeking a highly skilled Cyber Assurance Lead with in-depth knowledge of the water domain and expertise in water network management. This role is pivotal in driving operational efficiency optimizing water networks and delivering transformative solutions to stakeholders in the water utilities sector. The ideal candidate will bridge the gap between business needs and technical solutions ensuring alignment with organizational goals and regulatory compliance. Role Overview We are seeking an exceptional Cyber Assurance Lead who brings CISO-level expertise and deep CNI sector experience to guide our organisation through a comprehensive cyber maturity transformation. This senior role is accountable for defining and driving the cyber assurance strategy, overseeing the cyber maturity roadmap, and providing best-practice leadership across the full spectrum of cyber security governance, risk, and compliance (GRC). The successful candidate will have either served as a CISO or worked extensively at CISO advisory level within CNI environments, with the credibility and authority to influence at Board and Executive Committee level whilst translating strategy into operational delivery. Key Responsibilities Lead the design and delivery of an enterprise-wide Cyber Maturity Assessment, benchmarking the organisation against NIST CSF, NCSC CAF, ISO 27001, and IEC 62443. Develop and own a multi-year Cyber Maturity Roadmap, prioritising investments and improvements based on risk appetite, regulatory obligations, and operational impact. Define and implement a comprehensive Cyber Assurance Framework covering governance, policy, risk management, third-party assurance, and technical control validation. Act as the principal cyber security advisor to the CISO, Executive Committee, and Board, providing clear, risk-informed reporting and strategic recommendations. Oversee second-line cyber assurance activities: control effectiveness testing, penetration testing governance, audit management, and exception handling. Lead engagement with regulators including the NCSC, OFWAT, and Defra on cyber resilience obligations, CAF submissions, and improvement plans. Drive the development and embedding of cyber security best practices across IT, OT, and supply chain domains. Establish cyber security KPIs and metrics, developing dashboards and reporting mechanisms for Board, CISO, and operational audiences. Manage and develop the cyber assurance team, fostering a culture of continuous improvement and learning. Support procurement and contract assurance, ensuring cyber security requirements are embedded in vendor and supply chain arrangements. Essential Experience & Skills Previous CISO experience, or extensive advisory / Deputy CISO experience at an equivalent level within a CNI organisation. Demonstrable track record of developing and delivering cyber maturity strategies and roadmaps in complex, regulated environments. Deep expertise in cyber security frameworks: NIST CSF, NCSC CAF, ISO 27001/27002, IEC 62443. Strong understanding of the UK CNI regulatory landscape: NIS Regulations, OFWAT security requirements, NCSC guidance, and emerging NIS2-aligned obligations. Experience designing and overseeing Cyber Assurance Frameworks including GRC, third party risk, policy governance, and audit management. Proven ability to communicate cyber risk in business terms at Board and Executive level. Knowledge of both IT and OT security environments, appreciating the distinct risk profiles of operational technology in water or utilities. Experience managing and developing high performing cyber security teams. Strong interpersonal, leadership, and influencing skills across technical and non technical stakeholders. Desirable Experience CISO experience specifically within the UK water sector or equivalent regulated utility. Experience leading or responding to NCSC CAF assessments or formal NIS regulatory audits. Exposure to OT/SCADA cyber security assurance in water treatment or distribution environments. Non executive advisory or board level cyber governance experience. Published thought leadership or active participation in water sector cyber security forums (e.g. Water Industry Cyber Security). CISSP, CISM, SABSA (CSA), or equivalent senior security certifications. Qualifications Degree in Cyber Security, Information Security, Computer Science, or equivalent (Masters preferred). CISSP, CISM, or SABSA Chartered Security Architect certification strongly preferred. SC / DV security clearance required or eligible.
May 30, 2026
Full time
The Company Cognizant (NASDAQ:CTSH) is a leading provider of information technology, consulting, and business process outsourcing services, dedicated to helping the world's leading companies build stronger businesses. Headquartered in Teaneck, New Jersey (U.S.), Cognizant has over 350,000 employees as of January 2025. Cognizant is a member of the NASDAQ-100, the S&P 500, the Forbes Global 1000, and the Fortune 500 and is ranked among the top performing and fastest growing companies in the world. Cognizant Consulting At Cognizant, our consultants orchestrate the capabilities to truly change the game across strategy, design, technology and industry/functional knowledge to deliver insight at speed and solutions at scale. Our consulting services elevate the unique abilities and business aspirations of customers and employees and build relationships based on trust and value. Water Utilities Consulting We are seeking a highly skilled Cyber Assurance Lead with in-depth knowledge of the water domain and expertise in water network management. This role is pivotal in driving operational efficiency optimizing water networks and delivering transformative solutions to stakeholders in the water utilities sector. The ideal candidate will bridge the gap between business needs and technical solutions ensuring alignment with organizational goals and regulatory compliance. Role Overview We are seeking an exceptional Cyber Assurance Lead who brings CISO-level expertise and deep CNI sector experience to guide our organisation through a comprehensive cyber maturity transformation. This senior role is accountable for defining and driving the cyber assurance strategy, overseeing the cyber maturity roadmap, and providing best-practice leadership across the full spectrum of cyber security governance, risk, and compliance (GRC). The successful candidate will have either served as a CISO or worked extensively at CISO advisory level within CNI environments, with the credibility and authority to influence at Board and Executive Committee level whilst translating strategy into operational delivery. Key Responsibilities Lead the design and delivery of an enterprise-wide Cyber Maturity Assessment, benchmarking the organisation against NIST CSF, NCSC CAF, ISO 27001, and IEC 62443. Develop and own a multi-year Cyber Maturity Roadmap, prioritising investments and improvements based on risk appetite, regulatory obligations, and operational impact. Define and implement a comprehensive Cyber Assurance Framework covering governance, policy, risk management, third-party assurance, and technical control validation. Act as the principal cyber security advisor to the CISO, Executive Committee, and Board, providing clear, risk-informed reporting and strategic recommendations. Oversee second-line cyber assurance activities: control effectiveness testing, penetration testing governance, audit management, and exception handling. Lead engagement with regulators including the NCSC, OFWAT, and Defra on cyber resilience obligations, CAF submissions, and improvement plans. Drive the development and embedding of cyber security best practices across IT, OT, and supply chain domains. Establish cyber security KPIs and metrics, developing dashboards and reporting mechanisms for Board, CISO, and operational audiences. Manage and develop the cyber assurance team, fostering a culture of continuous improvement and learning. Support procurement and contract assurance, ensuring cyber security requirements are embedded in vendor and supply chain arrangements. Essential Experience & Skills Previous CISO experience, or extensive advisory / Deputy CISO experience at an equivalent level within a CNI organisation. Demonstrable track record of developing and delivering cyber maturity strategies and roadmaps in complex, regulated environments. Deep expertise in cyber security frameworks: NIST CSF, NCSC CAF, ISO 27001/27002, IEC 62443. Strong understanding of the UK CNI regulatory landscape: NIS Regulations, OFWAT security requirements, NCSC guidance, and emerging NIS2-aligned obligations. Experience designing and overseeing Cyber Assurance Frameworks including GRC, third party risk, policy governance, and audit management. Proven ability to communicate cyber risk in business terms at Board and Executive level. Knowledge of both IT and OT security environments, appreciating the distinct risk profiles of operational technology in water or utilities. Experience managing and developing high performing cyber security teams. Strong interpersonal, leadership, and influencing skills across technical and non technical stakeholders. Desirable Experience CISO experience specifically within the UK water sector or equivalent regulated utility. Experience leading or responding to NCSC CAF assessments or formal NIS regulatory audits. Exposure to OT/SCADA cyber security assurance in water treatment or distribution environments. Non executive advisory or board level cyber governance experience. Published thought leadership or active participation in water sector cyber security forums (e.g. Water Industry Cyber Security). CISSP, CISM, SABSA (CSA), or equivalent senior security certifications. Qualifications Degree in Cyber Security, Information Security, Computer Science, or equivalent (Masters preferred). CISSP, CISM, or SABSA Chartered Security Architect certification strongly preferred. SC / DV security clearance required or eligible.
Junior Cyber Security Consultant / Analyst An exciting opportunity for a Junior Cyber Security Consultant / Analyst to join a growing technology consultancy delivering cyber security, Microsoft 365 security, Azure cloud and IT support solutions. Ideal for candidates passionate about cyber security compliance, cloud computing and client advisory services. If you've also worked in the following roles, we'd also like to hear from you: Cyber Security Consultant, IT Security Analyst, Information Security Analyst, Cyber Security Advisor, Microsoft Security Analyst, Cyber Security Analyst, Information Security Consultant Recent Graduates and Experience Candidates Considered If you're a smart, driven, problem-solver, with a passion for technology, a hunger for continuous learning, and a desire to add value to clients, you could be exactly who the organisation is looking for. SALARY: £30,000 - £35,000 per annum (DOE) + Benefits LOCATION: Hybrid working 3 days from the City of London office (Faringdon / Chancery Lane) (EC1N) and 2 days from home JOB TYPE: Full-Time, Permanent WORKING HOURS: 35 hours per week, Monday to Friday JOB OVERVIEW We have a fantastic new job opportunity for a Junior Cyber Security Consultant / Analyst to join a supportive and forward-thinking technology consultancy based in Central London. As a Junior Cyber Security Consultant / Analyst you will support professional service clients with cyber security audits, Microsoft 365 and Azure security controls, security compliance and cloud-based risk management. You will work across Cyber Essentials, ISO27001 and security awareness programmes while building strong client relationships. The successful Junior Cyber Security Consultant / Analyst will combine technical knowledge with excellent communication skills, delivering high-quality consultancy, security reporting and customer-focused support within a fast-paced managed services environment. DUTIES Your duties as a Junior Cyber Security Consultant / Analyst will include: Conducting Security Audits: Undertaking audits of client systems to assess cyber security compliance and identify areas for improvement Producing Client Reports: Creating detailed security reports with practical recommendations and remediation guidance Supporting Security Compliance: Assisting clients with Cyber Essentials, Cyber Essentials Plus, LOCS:23 and ISO27001 accreditation processes Implementing Security Controls: Configuring and maintaining cyber security controls across Microsoft 365 and cloud-based environments Delivering Client Meetings: Engaging with technical and non-technical stakeholders to review security posture and recommend improvements Managing Awareness Programmes: Supporting phishing simulations and security awareness training campaigns for client organisations Completing Vendor Assessments: Conducting vendor security reviews and cyber insurance audits relating to client systems Collaborating with Teams: Working closely with internal technical teams to deliver high-quality consultancy and support services CANDIDATE REQUIREMENTS Have a Cyber Security, IT or Computer Science related degree (or relevant experience) Have previous experience in a technology or consultancy role (desirable) Have strong interpersonal and communication skills and be able to communicate technical information to non-technical stakeholders Be passionate about delivering excellent customer service through professional communication Have a strong knowledge of cybersecurity frameworks and fundamental concepts Foundational technical knowledge in networking and cloud services Experience with Microsoft 365, Azure, and scripting with PowerShell is beneficial Be a self-starter and a proud tech geek who loves to dig deep until the problem is solved Communicate clearly without the tech jargon, ensuring clients understand every step along the way Be driven by growth - actively seeking learning opportunities, certifications and new cloud technologies Deliver top-notch client service in a fast-paced environment, balancing urgency with precision and quality Be a team player and collaborate closely within an inclusive and supportive team culture Have a strong work ethic BENEFITS Learning and development opportunities including Microsoft certifications and training programmes Career progression opportunities 21 days holiday increasing with length of service plus public holidays Birthday day off Private healthcare after probation Discounted gym membership Pension scheme from day one Cycle to work scheme Eyecare vouchers Regular social events Electric car scheme after qualifying service Recruitment referral scheme To be considered for this role, please ensure you complete your application on the company's careers portal. Incomplete applications will not be reviewed . APPLY TODAY By submitting your job application to us you are hereby giving us your express consent to submit your details to our Client for this purpose. JOB REF: AWDO-P14730 Full-Time, Permanent IT Jobs, Careers and Vacancies. Find a new job and work in City of London / Hybrid. Multi-Job Board Advertising and CV Sourcing Recruitment Services provided by AWD online. AWD online specialise in sourcing candidates and advertising vacancies on multiple job boards for companies on a non-commission basis. AWD online operates as an employment agency. AWD-IN-SPJ
May 24, 2026
Full time
Junior Cyber Security Consultant / Analyst An exciting opportunity for a Junior Cyber Security Consultant / Analyst to join a growing technology consultancy delivering cyber security, Microsoft 365 security, Azure cloud and IT support solutions. Ideal for candidates passionate about cyber security compliance, cloud computing and client advisory services. If you've also worked in the following roles, we'd also like to hear from you: Cyber Security Consultant, IT Security Analyst, Information Security Analyst, Cyber Security Advisor, Microsoft Security Analyst, Cyber Security Analyst, Information Security Consultant Recent Graduates and Experience Candidates Considered If you're a smart, driven, problem-solver, with a passion for technology, a hunger for continuous learning, and a desire to add value to clients, you could be exactly who the organisation is looking for. SALARY: £30,000 - £35,000 per annum (DOE) + Benefits LOCATION: Hybrid working 3 days from the City of London office (Faringdon / Chancery Lane) (EC1N) and 2 days from home JOB TYPE: Full-Time, Permanent WORKING HOURS: 35 hours per week, Monday to Friday JOB OVERVIEW We have a fantastic new job opportunity for a Junior Cyber Security Consultant / Analyst to join a supportive and forward-thinking technology consultancy based in Central London. As a Junior Cyber Security Consultant / Analyst you will support professional service clients with cyber security audits, Microsoft 365 and Azure security controls, security compliance and cloud-based risk management. You will work across Cyber Essentials, ISO27001 and security awareness programmes while building strong client relationships. The successful Junior Cyber Security Consultant / Analyst will combine technical knowledge with excellent communication skills, delivering high-quality consultancy, security reporting and customer-focused support within a fast-paced managed services environment. DUTIES Your duties as a Junior Cyber Security Consultant / Analyst will include: Conducting Security Audits: Undertaking audits of client systems to assess cyber security compliance and identify areas for improvement Producing Client Reports: Creating detailed security reports with practical recommendations and remediation guidance Supporting Security Compliance: Assisting clients with Cyber Essentials, Cyber Essentials Plus, LOCS:23 and ISO27001 accreditation processes Implementing Security Controls: Configuring and maintaining cyber security controls across Microsoft 365 and cloud-based environments Delivering Client Meetings: Engaging with technical and non-technical stakeholders to review security posture and recommend improvements Managing Awareness Programmes: Supporting phishing simulations and security awareness training campaigns for client organisations Completing Vendor Assessments: Conducting vendor security reviews and cyber insurance audits relating to client systems Collaborating with Teams: Working closely with internal technical teams to deliver high-quality consultancy and support services CANDIDATE REQUIREMENTS Have a Cyber Security, IT or Computer Science related degree (or relevant experience) Have previous experience in a technology or consultancy role (desirable) Have strong interpersonal and communication skills and be able to communicate technical information to non-technical stakeholders Be passionate about delivering excellent customer service through professional communication Have a strong knowledge of cybersecurity frameworks and fundamental concepts Foundational technical knowledge in networking and cloud services Experience with Microsoft 365, Azure, and scripting with PowerShell is beneficial Be a self-starter and a proud tech geek who loves to dig deep until the problem is solved Communicate clearly without the tech jargon, ensuring clients understand every step along the way Be driven by growth - actively seeking learning opportunities, certifications and new cloud technologies Deliver top-notch client service in a fast-paced environment, balancing urgency with precision and quality Be a team player and collaborate closely within an inclusive and supportive team culture Have a strong work ethic BENEFITS Learning and development opportunities including Microsoft certifications and training programmes Career progression opportunities 21 days holiday increasing with length of service plus public holidays Birthday day off Private healthcare after probation Discounted gym membership Pension scheme from day one Cycle to work scheme Eyecare vouchers Regular social events Electric car scheme after qualifying service Recruitment referral scheme To be considered for this role, please ensure you complete your application on the company's careers portal. Incomplete applications will not be reviewed . APPLY TODAY By submitting your job application to us you are hereby giving us your express consent to submit your details to our Client for this purpose. JOB REF: AWDO-P14730 Full-Time, Permanent IT Jobs, Careers and Vacancies. Find a new job and work in City of London / Hybrid. Multi-Job Board Advertising and CV Sourcing Recruitment Services provided by AWD online. AWD online specialise in sourcing candidates and advertising vacancies on multiple job boards for companies on a non-commission basis. AWD online operates as an employment agency. AWD-IN-SPJ
Who we are At Grant Thornton we're building something bold. We're doing things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity. Our journey from great to exceptional is well underway. With significant investment behind us and a clear strategy for growth, there's real momentum. Our Agile Talent Community (ATC) brings together experienced contract professionals who want choice without losing connection. You work where you add the most value, alongside teams who treat you as a partner rather than a placeholder. Joining us in Audit Our Public Sector Audit division is at the forefront of delivering trusted, independent assurance to public sector across the country. We specialise in statutory audits for local authorities, NHS bodies, and a wide range of public sector entities, helping to ensure transparency, accountability, and the highest standards of financial stewardship. Our team combines deep sector expertise with a proactive approach to emerging challenges, including digital transformation, cyber resilience, and sustainability reporting. We go beyond compliance, providing valuable insights into governance, risk management, and value for money. With a commitment to quality and ethical standards, we empower public sector organisations to build confidence with stakeholders and drive positive change. If you're an experienced Interim Public Sector Auditor who's tired of choosing between freedom and meaningful work, there's another route. Within our Audit team , you'll be given the opportunity to take on short- to medium-term projects that sharpen your expertise, stretch your thinking, and give you a different angle on familiar challenges - all without locking you into a single path. You can engage with us through your own limited company or on inside IR35 terms - whichever way gives you the freedom you're looking for. Skills we are looking for Proven experience in external audit within the NHS or Local Government sector, with a strong understanding of public sector audit requirements, frameworks, and regulations. Demonstrated experience operating as an in-charge or team leader, with the ability to manage audit assignments and oversee delivery to deadlines. Strong project management skills, with the ability to plan, organise, and prioritise workload effectively across multiple engagements. Experience in coaching, mentoring, and supporting junior team members, fostering development and promoting a collaborative team environment. Excellent communication and stakeholder management skills, with the ability to build effective working relationships and confidently engage with clients and colleagues at all levels. Why Consultants choose the ATC Work that moves you forward When a project fits your skills, we'll get in touch, but you choose whether it's right for you. That means working on engagements that genuinely build your portfolio and expand your expertise. The freedom of contracting without the hidden admin You're not left to navigate the freelance world alone. Our Agile Talent team helps you understand freelance regulation and connects you with people who broaden your thinking through our teams and clients. Community you can actually feel Connection shouldn't disappear just because you're contracting. From market insights to wellbeing sessions to networking events, you'll be part of a community designed to make the independent path less isolated and more impactful. Our culture and values We have a culture where talented people thrive - where high performance is not just expected but enabled. It's a culture built on clarity, curiosity, and care. One that challenges us to aim higher, where we're encouraged to make the most of an abundance of resources to fuel our own development, and where we support each other to grow, learn, and succeed. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work. How to join We keep the process straightforward, because the real work happens once you're here. Submit your CV and basic details through our online application. If there's a match, a recruiter will reach out to discuss. Meet key stakeholders for a focused conversation. Complete your background checks, join the Agile Talent Community, and start exploring the opportunities we have to offer. If you need adjustments at any point in the process, please let us know during the application stage - we aim to make sure our roles are accessible to everyone.
May 22, 2026
Contractor
Who we are At Grant Thornton we're building something bold. We're doing things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity. Our journey from great to exceptional is well underway. With significant investment behind us and a clear strategy for growth, there's real momentum. Our Agile Talent Community (ATC) brings together experienced contract professionals who want choice without losing connection. You work where you add the most value, alongside teams who treat you as a partner rather than a placeholder. Joining us in Audit Our Public Sector Audit division is at the forefront of delivering trusted, independent assurance to public sector across the country. We specialise in statutory audits for local authorities, NHS bodies, and a wide range of public sector entities, helping to ensure transparency, accountability, and the highest standards of financial stewardship. Our team combines deep sector expertise with a proactive approach to emerging challenges, including digital transformation, cyber resilience, and sustainability reporting. We go beyond compliance, providing valuable insights into governance, risk management, and value for money. With a commitment to quality and ethical standards, we empower public sector organisations to build confidence with stakeholders and drive positive change. If you're an experienced Interim Public Sector Auditor who's tired of choosing between freedom and meaningful work, there's another route. Within our Audit team , you'll be given the opportunity to take on short- to medium-term projects that sharpen your expertise, stretch your thinking, and give you a different angle on familiar challenges - all without locking you into a single path. You can engage with us through your own limited company or on inside IR35 terms - whichever way gives you the freedom you're looking for. Skills we are looking for Proven experience in external audit within the NHS or Local Government sector, with a strong understanding of public sector audit requirements, frameworks, and regulations. Demonstrated experience operating as an in-charge or team leader, with the ability to manage audit assignments and oversee delivery to deadlines. Strong project management skills, with the ability to plan, organise, and prioritise workload effectively across multiple engagements. Experience in coaching, mentoring, and supporting junior team members, fostering development and promoting a collaborative team environment. Excellent communication and stakeholder management skills, with the ability to build effective working relationships and confidently engage with clients and colleagues at all levels. Why Consultants choose the ATC Work that moves you forward When a project fits your skills, we'll get in touch, but you choose whether it's right for you. That means working on engagements that genuinely build your portfolio and expand your expertise. The freedom of contracting without the hidden admin You're not left to navigate the freelance world alone. Our Agile Talent team helps you understand freelance regulation and connects you with people who broaden your thinking through our teams and clients. Community you can actually feel Connection shouldn't disappear just because you're contracting. From market insights to wellbeing sessions to networking events, you'll be part of a community designed to make the independent path less isolated and more impactful. Our culture and values We have a culture where talented people thrive - where high performance is not just expected but enabled. It's a culture built on clarity, curiosity, and care. One that challenges us to aim higher, where we're encouraged to make the most of an abundance of resources to fuel our own development, and where we support each other to grow, learn, and succeed. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work. How to join We keep the process straightforward, because the real work happens once you're here. Submit your CV and basic details through our online application. If there's a match, a recruiter will reach out to discuss. Meet key stakeholders for a focused conversation. Complete your background checks, join the Agile Talent Community, and start exploring the opportunities we have to offer. If you need adjustments at any point in the process, please let us know during the application stage - we aim to make sure our roles are accessible to everyone.
Who we are At Grant Thornton we're building something bold. We're doing things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity. Our journey from great to exceptional is well underway. With significant investment behind us and a clear strategy for growth, there's real momentum. Our Agile Talent Community (ATC) brings together experienced contract professionals who want choice without losing connection. You work where you add the most value, alongside teams who treat you as a partner rather than a placeholder. Joining us in Audit Our Public Sector Audit division is at the forefront of delivering trusted, independent assurance to public sector across the country. We specialise in statutory audits for local authorities, NHS bodies, and a wide range of public sector entities, helping to ensure transparency, accountability, and the highest standards of financial stewardship. Our team combines deep sector expertise with a proactive approach to emerging challenges, including digital transformation, cyber resilience, and sustainability reporting. We go beyond compliance, providing valuable insights into governance, risk management, and value for money. With a commitment to quality and ethical standards, we empower public sector organisations to build confidence with stakeholders and drive positive change. If you're an experienced Interim Public Sector Auditor who's tired of choosing between freedom and meaningful work, there's another route. Within our Audit team , you'll be given the opportunity to take on short- to medium-term projects that sharpen your expertise, stretch your thinking, and give you a different angle on familiar challenges - all without locking you into a single path. You can engage with us through your own limited company or on inside IR35 terms - whichever way gives you the freedom you're looking for. Skills we are looking for: Proven experience in external audit within the NHS or Local Government sector, with a strong understanding of public sector audit requirements, frameworks, and regulations. Demonstrated experience operating as an in-charge or team leader, with the ability to manage audit assignments and oversee delivery to deadlines. Strong project management skills, with the ability to plan, organise, and prioritise workload effectively across multiple engagements. Experience in coaching, mentoring, and supporting junior team members, fostering development and promoting a collaborative team environment. Excellent communication and stakeholder management skills, with the ability to build effective working relationships and confidently engage with clients and colleagues at all levels. Why Consultants choose the ATC Work that moves you forward: When a project fits your skills, we'll get in touch, but you choose whether it's right for you. That means working on engagements that genuinely build your portfolio and expand your expertise. The freedom of contracting without the hidden admin: You're not left to navigate the freelance world alone. Our Agile Talent team helps you understand freelance regulation and connects you with people who broaden your thinking through our teams and clients. Community you can actually feel: Connection shouldn't disappear just because you're contracting. From market insights to wellbeing sessions to networking events, you'll be part of a community designed to make the independent path less isolated and more impactful. Our culture and values We have a culture where talented people thrive - where high performance is not just expected but enabled. It's a culture built on clarity, curiosity, and care. One that challenges us to aim higher, where we're encouraged to make the most of an abundance of resources to fuel our own development, and where we support each other to grow, learn, and succeed. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work. How to join We keep the process straightforward, because the real work happens once you're here. Submit your CV and basic details through our online application. If there's a match, a recruiter will reach out to discuss. Meet key stakeholders for a focused conversation. Complete your background checks, join the Agile Talent Community, and start exploring the opportunities we have to offer. If you need adjustments at any point in the process, please let us know during the application stage - we aim to make sure our roles are accessible to everyone.
May 22, 2026
Full time
Who we are At Grant Thornton we're building something bold. We're doing things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity. Our journey from great to exceptional is well underway. With significant investment behind us and a clear strategy for growth, there's real momentum. Our Agile Talent Community (ATC) brings together experienced contract professionals who want choice without losing connection. You work where you add the most value, alongside teams who treat you as a partner rather than a placeholder. Joining us in Audit Our Public Sector Audit division is at the forefront of delivering trusted, independent assurance to public sector across the country. We specialise in statutory audits for local authorities, NHS bodies, and a wide range of public sector entities, helping to ensure transparency, accountability, and the highest standards of financial stewardship. Our team combines deep sector expertise with a proactive approach to emerging challenges, including digital transformation, cyber resilience, and sustainability reporting. We go beyond compliance, providing valuable insights into governance, risk management, and value for money. With a commitment to quality and ethical standards, we empower public sector organisations to build confidence with stakeholders and drive positive change. If you're an experienced Interim Public Sector Auditor who's tired of choosing between freedom and meaningful work, there's another route. Within our Audit team , you'll be given the opportunity to take on short- to medium-term projects that sharpen your expertise, stretch your thinking, and give you a different angle on familiar challenges - all without locking you into a single path. You can engage with us through your own limited company or on inside IR35 terms - whichever way gives you the freedom you're looking for. Skills we are looking for: Proven experience in external audit within the NHS or Local Government sector, with a strong understanding of public sector audit requirements, frameworks, and regulations. Demonstrated experience operating as an in-charge or team leader, with the ability to manage audit assignments and oversee delivery to deadlines. Strong project management skills, with the ability to plan, organise, and prioritise workload effectively across multiple engagements. Experience in coaching, mentoring, and supporting junior team members, fostering development and promoting a collaborative team environment. Excellent communication and stakeholder management skills, with the ability to build effective working relationships and confidently engage with clients and colleagues at all levels. Why Consultants choose the ATC Work that moves you forward: When a project fits your skills, we'll get in touch, but you choose whether it's right for you. That means working on engagements that genuinely build your portfolio and expand your expertise. The freedom of contracting without the hidden admin: You're not left to navigate the freelance world alone. Our Agile Talent team helps you understand freelance regulation and connects you with people who broaden your thinking through our teams and clients. Community you can actually feel: Connection shouldn't disappear just because you're contracting. From market insights to wellbeing sessions to networking events, you'll be part of a community designed to make the independent path less isolated and more impactful. Our culture and values We have a culture where talented people thrive - where high performance is not just expected but enabled. It's a culture built on clarity, curiosity, and care. One that challenges us to aim higher, where we're encouraged to make the most of an abundance of resources to fuel our own development, and where we support each other to grow, learn, and succeed. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work. How to join We keep the process straightforward, because the real work happens once you're here. Submit your CV and basic details through our online application. If there's a match, a recruiter will reach out to discuss. Meet key stakeholders for a focused conversation. Complete your background checks, join the Agile Talent Community, and start exploring the opportunities we have to offer. If you need adjustments at any point in the process, please let us know during the application stage - we aim to make sure our roles are accessible to everyone.
Role: Information Governance Administrative Assistant Hours: 37 hrs/week, full year Location: Hybrid Reports to: Information Governance Lead Purpose: Provide administrative support to ensure Trust-wide compliance with safeguarding, GDPR, and statutory requirements. Key Responsibilities: Maintain records of data breaches, SARs, and FOI requests. Act as first contact for SAR queries and provide guidance. Support and process SARs/FOIs, including data collation. Provide templates and advice to schools on compliance processes. Monitor deadlines and escalate risks. Keep records of data systems and processors up to date. Maintain intranet guidance, templates, and training records. Support and deliver training on data protection and cybersecurity. Analyse trends to identify risks and training needs. Communicate regulatory updates to staff. Assist with reports for leadership. Undertake other duties as required. In return for the above you can expect to receive: A dedicated team of consultants available 24/7 to help you with the easy onboarding process Guaranteed Payment Scheme Terms and Conditions apply CPD Courses and certificates as part of the My-Progression channel Market leading rates of pay TeacherActive Referral Scheme Receive up to £100 when you refer a friend Terms and Conditions apply Our staff are paid on a PAYE basis, so you can rest assured that you re paying the right level of TAX and National Insurance and there s no messing around with admin charges coming out of your hard earned cash. If you are interested in this position, then click APPLY NOW and I will be in touch regarding this fantastic opportunity. Email: (url removed) Contact Number: (phone number removed) About TeacherActive TeacherActive is one of the UK s leading education recruitment agencies, with over 20 years of experience supporting schools and placing teachers and support staff into rewarding roles. We pride ourselves on providing an excellent service to both our schools and candidates. Equal Opportunities Statement TeacherActive is an equal opportunities employer, and operates as an Employment Business in providing temporary or contract job seeking services. Safeguarding and DBS Compliance Registration involves an enhanced DBS check, ID checks and will require you to supply good professional references. We pride ourselves on excellent service. We can provide a wide range of opportunities in schools and other educational institutions, with good rates of pay, at times to suit your needs. Regular external audits have shown repeatedly that our standards are exceptional. We are passionate about finding the right staff for each environment.
May 13, 2026
Full time
Role: Information Governance Administrative Assistant Hours: 37 hrs/week, full year Location: Hybrid Reports to: Information Governance Lead Purpose: Provide administrative support to ensure Trust-wide compliance with safeguarding, GDPR, and statutory requirements. Key Responsibilities: Maintain records of data breaches, SARs, and FOI requests. Act as first contact for SAR queries and provide guidance. Support and process SARs/FOIs, including data collation. Provide templates and advice to schools on compliance processes. Monitor deadlines and escalate risks. Keep records of data systems and processors up to date. Maintain intranet guidance, templates, and training records. Support and deliver training on data protection and cybersecurity. Analyse trends to identify risks and training needs. Communicate regulatory updates to staff. Assist with reports for leadership. Undertake other duties as required. In return for the above you can expect to receive: A dedicated team of consultants available 24/7 to help you with the easy onboarding process Guaranteed Payment Scheme Terms and Conditions apply CPD Courses and certificates as part of the My-Progression channel Market leading rates of pay TeacherActive Referral Scheme Receive up to £100 when you refer a friend Terms and Conditions apply Our staff are paid on a PAYE basis, so you can rest assured that you re paying the right level of TAX and National Insurance and there s no messing around with admin charges coming out of your hard earned cash. If you are interested in this position, then click APPLY NOW and I will be in touch regarding this fantastic opportunity. Email: (url removed) Contact Number: (phone number removed) About TeacherActive TeacherActive is one of the UK s leading education recruitment agencies, with over 20 years of experience supporting schools and placing teachers and support staff into rewarding roles. We pride ourselves on providing an excellent service to both our schools and candidates. Equal Opportunities Statement TeacherActive is an equal opportunities employer, and operates as an Employment Business in providing temporary or contract job seeking services. Safeguarding and DBS Compliance Registration involves an enhanced DBS check, ID checks and will require you to supply good professional references. We pride ourselves on excellent service. We can provide a wide range of opportunities in schools and other educational institutions, with good rates of pay, at times to suit your needs. Regular external audits have shown repeatedly that our standards are exceptional. We are passionate about finding the right staff for each environment.
Oscar Associates (UK) Limited
Cheltenham, Gloucestershire
Information Security Consultant Mostly Remote £50k SC Eligibility Required We're working with a growing cyber and risk consultancy that's looking to bring in an Information Security Consultant to support the delivery of security assessments, audits, and client-facing projects across a varied portfolio. This is a great opportunity for someone with a solid grounding in security assurance or ris click apply for full job details
May 08, 2026
Full time
Information Security Consultant Mostly Remote £50k SC Eligibility Required We're working with a growing cyber and risk consultancy that's looking to bring in an Information Security Consultant to support the delivery of security assessments, audits, and client-facing projects across a varied portfolio. This is a great opportunity for someone with a solid grounding in security assurance or ris click apply for full job details
Senior Security Consultant Contract Duration: 6 Months Location: Hybrid (London / Birmingham) Job Type: Contract - Outside IR35 Reed Professional Services is seeking a Senior Security Consultant to join our dynamic team. This role is crucial for delivering hands-on security assurance, cloud security input, and technical risk management across live projects in a fast-paced digital portfolio that includes cloud-hosted platforms, enterprise SaaS solutions, and integration-heavy services. Day-to-day of the role: Deliver hands-on security assurance across cloud and SaaS-based services. Provide security input to AWS, SaaS, and IaaS environments. Assess and manage API and integration risks across complex estates. Produce and maintain assurance artefacts, risk logs, and control evidence. Support remediation activity and work with delivery teams to close security gaps. Challenge delivery teams constructively on security weaknesses and proposed designs. Support audits, reviews, and formal assurance processes as required. Operate across multiple projects simultaneously within a fast-moving environment. Required Skills & Qualifications: Strong experience in security assurance and risk management. Practical experience working with AWS and SaaS environments. Experience supporting integration-heavy landscapes. Ability to make clear, actionable security recommendations and see them through. Strong written and verbal communication skills. Comfortable working in live delivery settings rather than purely advisory roles. Desirable: Central government or public sector assurance experience. Experience with ServiceNow, Salesforce, or comparable enterprise SaaS platforms. Exposure to OT, IoT, or smart-building technology. Cloud or cyber security certifications (AWS, CISSP, CCSK, etc.). Additional Information: BPSS and active Security Clearance required. To apply for the Senior Security Consultant position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.
May 05, 2026
Seasonal
Senior Security Consultant Contract Duration: 6 Months Location: Hybrid (London / Birmingham) Job Type: Contract - Outside IR35 Reed Professional Services is seeking a Senior Security Consultant to join our dynamic team. This role is crucial for delivering hands-on security assurance, cloud security input, and technical risk management across live projects in a fast-paced digital portfolio that includes cloud-hosted platforms, enterprise SaaS solutions, and integration-heavy services. Day-to-day of the role: Deliver hands-on security assurance across cloud and SaaS-based services. Provide security input to AWS, SaaS, and IaaS environments. Assess and manage API and integration risks across complex estates. Produce and maintain assurance artefacts, risk logs, and control evidence. Support remediation activity and work with delivery teams to close security gaps. Challenge delivery teams constructively on security weaknesses and proposed designs. Support audits, reviews, and formal assurance processes as required. Operate across multiple projects simultaneously within a fast-moving environment. Required Skills & Qualifications: Strong experience in security assurance and risk management. Practical experience working with AWS and SaaS environments. Experience supporting integration-heavy landscapes. Ability to make clear, actionable security recommendations and see them through. Strong written and verbal communication skills. Comfortable working in live delivery settings rather than purely advisory roles. Desirable: Central government or public sector assurance experience. Experience with ServiceNow, Salesforce, or comparable enterprise SaaS platforms. Exposure to OT, IoT, or smart-building technology. Cloud or cyber security certifications (AWS, CISSP, CCSK, etc.). Additional Information: BPSS and active Security Clearance required. To apply for the Senior Security Consultant position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.
Senior Security Consultant Contract Duration: 6 Months Location: Hybrid (London / Birmingham) Job Type: Contract - Outside IR35 Reed Professional Services is seeking a Senior Security Consultant to join our dynamic team. This role is crucial for delivering hands-on security assurance, cloud security input, and technical risk management across live projects in a fast-paced digital portfolio that includes cloud-hosted platforms, enterprise SaaS solutions, and integration-heavy services. Day-to-day of the role: Deliver hands-on security assurance across cloud and SaaS-based services. Provide security input to AWS, SaaS, and IaaS environments. Assess and manage API and integration risks across complex estates. Produce and maintain assurance artefacts, risk logs, and control evidence. Support remediation activity and work with delivery teams to close security gaps. Challenge delivery teams constructively on security weaknesses and proposed designs. Support audits, reviews, and formal assurance processes as required. Operate across multiple projects simultaneously within a fast-moving environment. Required Skills & Qualifications: Strong experience in security assurance and risk management. Practical experience working with AWS and SaaS environments. Experience supporting integration-heavy landscapes. Ability to make clear, actionable security recommendations and see them through. Strong written and verbal communication skills. Comfortable working in live delivery settings rather than purely advisory roles. Desirable: Central government or public sector assurance experience. Experience with ServiceNow, Salesforce, or comparable enterprise SaaS platforms. Exposure to OT, IoT, or smart-building technology. Cloud or cyber security certifications (AWS, CISSP, CCSK, etc.). Additional Information: BPSS and active Security Clearance required. To apply for the Senior Security Consultant position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.
May 05, 2026
Seasonal
Senior Security Consultant Contract Duration: 6 Months Location: Hybrid (London / Birmingham) Job Type: Contract - Outside IR35 Reed Professional Services is seeking a Senior Security Consultant to join our dynamic team. This role is crucial for delivering hands-on security assurance, cloud security input, and technical risk management across live projects in a fast-paced digital portfolio that includes cloud-hosted platforms, enterprise SaaS solutions, and integration-heavy services. Day-to-day of the role: Deliver hands-on security assurance across cloud and SaaS-based services. Provide security input to AWS, SaaS, and IaaS environments. Assess and manage API and integration risks across complex estates. Produce and maintain assurance artefacts, risk logs, and control evidence. Support remediation activity and work with delivery teams to close security gaps. Challenge delivery teams constructively on security weaknesses and proposed designs. Support audits, reviews, and formal assurance processes as required. Operate across multiple projects simultaneously within a fast-moving environment. Required Skills & Qualifications: Strong experience in security assurance and risk management. Practical experience working with AWS and SaaS environments. Experience supporting integration-heavy landscapes. Ability to make clear, actionable security recommendations and see them through. Strong written and verbal communication skills. Comfortable working in live delivery settings rather than purely advisory roles. Desirable: Central government or public sector assurance experience. Experience with ServiceNow, Salesforce, or comparable enterprise SaaS platforms. Exposure to OT, IoT, or smart-building technology. Cloud or cyber security certifications (AWS, CISSP, CCSK, etc.). Additional Information: BPSS and active Security Clearance required. To apply for the Senior Security Consultant position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
May 03, 2026
Full time
Lead Cyber Security Consultant (Defence) UK Remote (travel required approx. 60% / 3 days onsite per week) Full-time & Permanent Consultancy Competitive salary + Excellent benefits About the Opportunity We're working with an established and growing UK cybersecurity consultancy expanding its Defence and Public Sector practice. This is a great opportunity for an experienced security professional to lead high-impact programmes, influence senior stakeholders, and shape security outcomes across MOD and wider Defence environments. The Role As a Lead Cyber Security Consultant, you'll take ownership of multiple client engagements, delivering expert advice across governance, risk, compliance, and Secure by Design practices. You'll work closely with senior stakeholders to assess risk, define security controls, deliver assurance activities, and support secure architecture across complex, high-profile systems. This is a hands-on, strategic role that combines leadership, client engagement, and technical depth. Key Responsibilities Lead Secure by Design and security assurance activities across MOD and Public Sector programmes Support and guide the application of risk management frameworks, ISMS, and Enterprise Security Risk Management Conduct and lead workshops with technical and business stakeholders Produce clear, actionable reporting on risk, vulnerabilities, and remediation Provide pragmatic, proportionate recommendations aligned to business goals Support secure design across cloud and on-premise platforms Contribute to internal knowledge sharing and thought leadership Experience & Expertise Strong background in Technical/Security Architecture or Governance, Risk & Compliance Experience working in Defence / MOD environments Strong analytical and communication skills, with the ability to influence senior stakeholders Passion for continuous learning and high-quality security outcomes Desirable Knowledge SAC (Security Assurance Coordinator) or Delivery Team Security Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ITHC scoping and remediation Certifications (Highly Desirable) CIISEC UK Cyber Security Council registration (Chartered or Principal) AWS/Azure Security (Professional) CCSP, CISSP, CISM ISO 27001 Lead Auditor Security Vetting / Clearance Active and transferable DV clearance is essential Must be a sole British National and UK-based Benefits Competitive salary and benefits package Private healthcare & wellbeing support Flexible working (remote with travel) Career pathways, mentoring and continuous learning Inclusive, supportive culture Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
Apr 30, 2026
Full time
Our client, a leading consultancy in the cyber security sector, specialising in defence & security, is currently seeking a talented Cyber Security Consultant to join their team on a permanent basis. This role involves delivering specialist cyber security professional services, helping businesses and organisations to understand the value of their information assets, assess associated security risks, and develop technical and procedural controls to protect them. About the Role: As a Cyber Security Consultant, you will be responsible for providing expert cyber security technical advice, guidance and support. Specific responsibilities include: Advising and supporting companies, organisations, programmes or projects on all aspects of cyber security Producing formal deliverables such as security policies, operating procedures, risk assessments, security assurance management plans, and audits Liaising and working closely with customers to meet project/programme deadlines Understanding, assessing, and articulating business and information security risk at a technical and business process level Reviewing the effectiveness of existing security controls and proposing proportionate security improvements Supporting business development by developing and managing relationships with existing and new customers Job Requirements: Essential Skills & Experience: Recognised industry cyber security certifications or qualifications (e.g., CISSP, CISM, CISA) Relevant experience in a cyber security role Knowledge of cyber security industry standards and good practices Baseline knowledge of information systems (e.g., cloud, access control, networking) Experience in a customer-facing role Good understanding and working knowledge of Governance, Risk & Compliance Strong written, verbal, and interpersonal communication skills Ability to work independently, manage own time and work to deadlines Desirable Skills & Experience: UK Cyber Security Council - Professional Registration Title (e.g., Chartered, Principal, Practitioner) Knowledge and understanding of HMG and MoD cyber security policies, standards, guidance, security processes, and organisation Experience implementing the Secure by Design principles-based approach Previous experience as a Security Manager or Security Lead on a MoD, HMG, or industry project/programme Knowledge and understanding of MOD cyber security policy (e.g., JSP440), standards, and guidance Chairing and participation in HMG/MoD Security Working Groups Experience with the NCSC Cyber Assurance Framework (CAF) and GovAssure audits Knowledge and experience of NIST standards, e.g., the Cyber Security Framework, Risk Assessment Cyber security audit skills, knowledge and experience (e.g., ISO/IEC 27001 audit) Experience of Supplier Assurance and security of the supply chain Experience of scoping and assessing output from IT Health Checks, Penetration Tests, and Vulnerability Assessments Requirements: Ideally National Security Vetted, SC or DV, if not, willing to undergo government security vetting process Eligible to work in the UK and have the appropriate right to work documents Willing to travel as necessary Benefits: Opportunity to work on a variety of interesting and challenging projects Professional development and training opportunities Supportive and collaborative work environment Employee benefits package If you are an experienced Cyber Security Consultant looking for a new opportunity to further develop your career, we would love to hear from you. Apply now to join our client's dynamic and talented team.
