Senior Architect - Email & Collaboration SecurityApplylocations: Great Britain - Londontime type: Full timeposted on: Posted Todayjob requisition id: R6496 Senior Solutions Architect - Email & Collaboration Security - London UK Why This Role Exists The Email & Collaboration Security (ECS) product line sits at the intersection of some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait.This architecture is not greenfield. It carries two decades of accumulated product decisions, integration contracts, and operational constraints. The right candidate understands why that history matters before proposing how to move beyond it. Reasoning about legacy shape and evolutionary trajectory simultaneously is not optional; it is the job.The successful candidate will serve as connective tissue across product management, engineering, and the broader Architecture Leadership Team - turning customer and business problems into coherent, deliverable technical direction, and owning the decisions that give ECS engineering teams a stable foundation to move fast with quality. AI-First Ways of Working Mimecast is an AI-first engineering organisation. This is not a cultural aspiration - it is an operating expectation. The person in this role is expected to use AI tools as a genuine, daily part of how they work: for design exploration and iteration, documentation, analysis, prototyping, and research synthesis.This means having a real, practised opinion on where AI tooling accelerates quality decisions and where it introduces risk. It also means designing systems that incorporate AI components thoughtfully: understanding the implications of LLM integration, agent boundaries, prompt and data-contract stability, and evaluation coverage for AI-driven features.Candidates who treat AI tooling as optional or experimental are not the right fit for this role. The expectation is fluency and daily practice, not passing familiarity. The ECS Domain ECS covers the following product and capability areas: Email threat detection and prevention Email security efficacy Collaboration security DMARC analyzer Data platform and observability Analysis and Response End user application integration Internal operations enablement What You Will Do Lead from Problem Space, Not Solution Space The role engages at the problem-framing stage, not after requirements have already hardened into tickets. This means facilitating workshops with PMs, UX, and engineers to surface real customer constraints and articulate what good looks like in business and user terms before any technical shape is proposed. Own Integration Contracts as Product Artefacts The durable interfaces - APIs, event contracts, data schemas - that connect ECS capabilities to the broader Mimecast platform are first-class artefacts owned by this role. They outlast individual features, and the coordination work that makes integrations actually land across teams and time is part of the remit. Build the Architectural Context Engineering Teams Operate Inside ADRs, service interaction patterns, NFR targets, and data contracts are not documentation - they are the substrate that lets engineering teams and AI-assisted development workflows make consistent decisions at scale. The artefacts produced in this role are clear, reasoned, and durable. Govern Without Blocking Governance is a mechanism for alignment and acceleration, not gatekeeping. Structure and discipline are introduced where they reduce risk or improve quality - and removed where ceremony adds cost without value. The role engages the Chief Architect early, pushes back constructively when platform standards do not fit the ECS context, and helps teams close decisions with conviction rather than endless review. Reason About Cost and Unit Economics Infrastructure choices are sized, cost trajectories modelled for new architecture work, and unexpected spend is flagged with a proposed remediation. The frame is cost per outcome - per protected mailbox, per remediated incident - not just monthly AWS spend. Communicate at Every Altitude A one-page decision record that lands with engineers, a solution brief that holds up under senior architecture review, a strategy narrative that resonates with product and commercial leadership - this role operates across all of those registers. Whiteboard sessions produce actual decisions, not just richer ambiguity. What You Will Bring Breadth Over Depth - and Knowing the Difference 10+ years building and operating production SaaS systems, with at least 3 years in a Solutions Architect, Principal Engineer, or equivalent role carrying product-shaping responsibility A genuinely broad architectural lens - thinking about system shape, data flows, and organisational constraints rather than reaching for the nearest deep technical rabbit hole Comfort operating across cloud-native patterns (AWS, Kafka, managed services, distributed event architectures) at high throughput - able to reason about trade-offs with confidence, without needing to be the most technically specialist person in the room Product Understanding - Not Just Technical Understanding Prior close collaboration with Product Managers and UX designers, with an understanding of jobs-to-be-done framing and a real opinion on what makes a product bet good - not just a technical bet Genuine customer orientation: asking what problem the customer has before asking how to build the feature Understanding of SaaS unit economics, the commercial implications of architectural choices, and how to reason about scale from a product perspective as well as a systems one The Right Mindset for Complex, Inherited Systems An understanding of what twenty years of software history means in a production system - no assumption of greenfield, and no treatment of legacy as only debt; it is accumulated context Structure and discipline as cognitive defaults, not imposed processes - thorough, well-reasoned artefacts, and a habit of leaving things clearer than they were found An ability to connect dots across a large picture with many moving parts, make a call, and communicate it clearly - rather than waiting for certainty that will not arrive Self-Direction and Strategic Initiative A proactive self-starter who identifies the right problems to work on without being told, and drives them to resolution Comfortable acting independently within a set of principles, while keeping the right stakeholders informed and in sync - not seeking permission, but maintaining alignment Thrives with ambiguity and treats it as a problem to be structured, not a reason to pause Learning Orientation - Not Encyclopaedic Knowledge Able to reach a solution even without all the knowledge in front of them - a problem-solver who knows how to navigate to an answer, not a mnemonic database AI tooling treated as a core capability multiplier, with a real daily practice in design work, documentation, research synthesis, and prototyping Stays ahead of where the market and the technology are going, and brings that signal back into product and architecture decisions Bonus Points Background in email security, threat detection, DLP, identity, or data platforms Familiarity with agentic AI, MCP (Model Context Protocol), or LLM application architecture Experience with eval design for AI features, product discovery practices, or data contract / data mesh approaches Exposure to M365 or GWS integration patterns, SMTP relay architecture, or cloud-native security SaaS What We Offer Impact : architecture decisions that protect millions of mailboxes and shape the technical direction of one of Mimecast's core product pillars Voice : a direct working relationship with the Chief Architect and a genuine say in technology direction - not an advisory lane Senior peers : a small, high-trust Architecture Leadership Team where everyone operates at a high level Qualifications Bachelor's degree in Computer Science, Software Engineering, or a related field - or equivalent demonstrable experience 10+ years of professional software engineering and architecture experience, with at least 3 years in a senior architecture or principal engineering role A track record of product-shaping responsibility, not just technical delivery Active, daily use of AI development tools in a professional setting - not experimentation, practice Mimecast is an equal opportunity employer committed to an inclusive and diverse workplace. The base salary range for this position is £124,000 - £186,000 base + benefits. This reflects the minimum and maximum target for new hire salaries for this position. This position may also be eligible for incentive plans and other related benefits. Our salary ranges are determined by role, level, and location. These factors and individual capabilities will also determine the individual pay offered.
Aug 22, 2026
Full time
Senior Architect - Email & Collaboration SecurityApplylocations: Great Britain - Londontime type: Full timeposted on: Posted Todayjob requisition id: R6496 Senior Solutions Architect - Email & Collaboration Security - London UK Why This Role Exists The Email & Collaboration Security (ECS) product line sits at the intersection of some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait.This architecture is not greenfield. It carries two decades of accumulated product decisions, integration contracts, and operational constraints. The right candidate understands why that history matters before proposing how to move beyond it. Reasoning about legacy shape and evolutionary trajectory simultaneously is not optional; it is the job.The successful candidate will serve as connective tissue across product management, engineering, and the broader Architecture Leadership Team - turning customer and business problems into coherent, deliverable technical direction, and owning the decisions that give ECS engineering teams a stable foundation to move fast with quality. AI-First Ways of Working Mimecast is an AI-first engineering organisation. This is not a cultural aspiration - it is an operating expectation. The person in this role is expected to use AI tools as a genuine, daily part of how they work: for design exploration and iteration, documentation, analysis, prototyping, and research synthesis.This means having a real, practised opinion on where AI tooling accelerates quality decisions and where it introduces risk. It also means designing systems that incorporate AI components thoughtfully: understanding the implications of LLM integration, agent boundaries, prompt and data-contract stability, and evaluation coverage for AI-driven features.Candidates who treat AI tooling as optional or experimental are not the right fit for this role. The expectation is fluency and daily practice, not passing familiarity. The ECS Domain ECS covers the following product and capability areas: Email threat detection and prevention Email security efficacy Collaboration security DMARC analyzer Data platform and observability Analysis and Response End user application integration Internal operations enablement What You Will Do Lead from Problem Space, Not Solution Space The role engages at the problem-framing stage, not after requirements have already hardened into tickets. This means facilitating workshops with PMs, UX, and engineers to surface real customer constraints and articulate what good looks like in business and user terms before any technical shape is proposed. Own Integration Contracts as Product Artefacts The durable interfaces - APIs, event contracts, data schemas - that connect ECS capabilities to the broader Mimecast platform are first-class artefacts owned by this role. They outlast individual features, and the coordination work that makes integrations actually land across teams and time is part of the remit. Build the Architectural Context Engineering Teams Operate Inside ADRs, service interaction patterns, NFR targets, and data contracts are not documentation - they are the substrate that lets engineering teams and AI-assisted development workflows make consistent decisions at scale. The artefacts produced in this role are clear, reasoned, and durable. Govern Without Blocking Governance is a mechanism for alignment and acceleration, not gatekeeping. Structure and discipline are introduced where they reduce risk or improve quality - and removed where ceremony adds cost without value. The role engages the Chief Architect early, pushes back constructively when platform standards do not fit the ECS context, and helps teams close decisions with conviction rather than endless review. Reason About Cost and Unit Economics Infrastructure choices are sized, cost trajectories modelled for new architecture work, and unexpected spend is flagged with a proposed remediation. The frame is cost per outcome - per protected mailbox, per remediated incident - not just monthly AWS spend. Communicate at Every Altitude A one-page decision record that lands with engineers, a solution brief that holds up under senior architecture review, a strategy narrative that resonates with product and commercial leadership - this role operates across all of those registers. Whiteboard sessions produce actual decisions, not just richer ambiguity. What You Will Bring Breadth Over Depth - and Knowing the Difference 10+ years building and operating production SaaS systems, with at least 3 years in a Solutions Architect, Principal Engineer, or equivalent role carrying product-shaping responsibility A genuinely broad architectural lens - thinking about system shape, data flows, and organisational constraints rather than reaching for the nearest deep technical rabbit hole Comfort operating across cloud-native patterns (AWS, Kafka, managed services, distributed event architectures) at high throughput - able to reason about trade-offs with confidence, without needing to be the most technically specialist person in the room Product Understanding - Not Just Technical Understanding Prior close collaboration with Product Managers and UX designers, with an understanding of jobs-to-be-done framing and a real opinion on what makes a product bet good - not just a technical bet Genuine customer orientation: asking what problem the customer has before asking how to build the feature Understanding of SaaS unit economics, the commercial implications of architectural choices, and how to reason about scale from a product perspective as well as a systems one The Right Mindset for Complex, Inherited Systems An understanding of what twenty years of software history means in a production system - no assumption of greenfield, and no treatment of legacy as only debt; it is accumulated context Structure and discipline as cognitive defaults, not imposed processes - thorough, well-reasoned artefacts, and a habit of leaving things clearer than they were found An ability to connect dots across a large picture with many moving parts, make a call, and communicate it clearly - rather than waiting for certainty that will not arrive Self-Direction and Strategic Initiative A proactive self-starter who identifies the right problems to work on without being told, and drives them to resolution Comfortable acting independently within a set of principles, while keeping the right stakeholders informed and in sync - not seeking permission, but maintaining alignment Thrives with ambiguity and treats it as a problem to be structured, not a reason to pause Learning Orientation - Not Encyclopaedic Knowledge Able to reach a solution even without all the knowledge in front of them - a problem-solver who knows how to navigate to an answer, not a mnemonic database AI tooling treated as a core capability multiplier, with a real daily practice in design work, documentation, research synthesis, and prototyping Stays ahead of where the market and the technology are going, and brings that signal back into product and architecture decisions Bonus Points Background in email security, threat detection, DLP, identity, or data platforms Familiarity with agentic AI, MCP (Model Context Protocol), or LLM application architecture Experience with eval design for AI features, product discovery practices, or data contract / data mesh approaches Exposure to M365 or GWS integration patterns, SMTP relay architecture, or cloud-native security SaaS What We Offer Impact : architecture decisions that protect millions of mailboxes and shape the technical direction of one of Mimecast's core product pillars Voice : a direct working relationship with the Chief Architect and a genuine say in technology direction - not an advisory lane Senior peers : a small, high-trust Architecture Leadership Team where everyone operates at a high level Qualifications Bachelor's degree in Computer Science, Software Engineering, or a related field - or equivalent demonstrable experience 10+ years of professional software engineering and architecture experience, with at least 3 years in a senior architecture or principal engineering role A track record of product-shaping responsibility, not just technical delivery Active, daily use of AI development tools in a professional setting - not experimentation, practice Mimecast is an equal opportunity employer committed to an inclusive and diverse workplace. The base salary range for this position is £124,000 - £186,000 base + benefits. This reflects the minimum and maximum target for new hire salaries for this position. This position may also be eligible for incentive plans and other related benefits. Our salary ranges are determined by role, level, and location. These factors and individual capabilities will also determine the individual pay offered.
IT Security Manager- Cyber Security Manager - PCI-DSS Location: Luton, 2 days per week on-site. Our client, a national organisation with offices near Luton, are seeking an experienced IT Security Manager to lead and enhance their security landscape while owning their Tier 1 PCI-DSS compliance programme. This is a fantastic opportunity for a hands-on security specialist who enjoys operating at both strategic and technical levels, working closely with senior stakeholders to drive security best practice across the organisation. Reporting to the Head of Technical Delivery, you will be the go-to expert for all aspects of cyber security, governance, risk, and compliance. This is a standalone role offering significant ownership and influence, making it ideal for someone who enjoys autonomy and genuinely shaping an organisation's security strategy. Key Responsibilities Cyber Security: Develop and continuously improve the organisation's cyber security strategy, controls, and policies. Monitor emerging threats and ensure effective protection across endpoint, network, cloud, and identity environments. Lead security incident response activities, investigations, and remediation efforts. Drive vulnerability management and penetration testing programmes through to successful resolution. Act as the internal cyber security subject matter expert. PCI-DSS Compliance & Audit: Take ownership of end-to-end PCI-DSS compliance activities. Lead annual audit and attestation processes, working closely with external assessors. Manage compliance documentation, evidence gathering, and control frameworks. Coordinate with technical and business teams to embed compliance requirements into day-to-day operations. Provide compliance reporting and updates to senior stakeholders. Governance, Risk & Compliance: Support wider compliance initiatives including ISO 27001, Cyber Essentials, and GDPR. Maintain security policies, standards, and procedures. Conduct risk assessments and manage the security risk register. Deliver security awareness initiatives across the business. Manage relationships with third-party suppliers, security vendors, and auditors. Essential Skills & Experience Proven experience within IT or Cyber Security with ownership of PCI-DSS compliance in a Tier 1 environment. Strong understanding of security frameworks, controls, and governance practices. Experience managing security incidents, vulnerability remediation, and audit activities. Ability to engage confidently with senior stakeholders and external auditors. Comfortable working independently and taking ownership of a broad security remit. Desirable CISSP, CISM, CISA, PCI ISA, or similar industry certifications. Experience within retail, hospitality, payments, or other highly regulated environments. Knowledge of Azure, AWS, and modern SOC/SIEM technologies. If you're an experienced IT Security Manager, Cyber Security Manager, Information Security Manager, or PCI Compliance Specialist looking for your next challenge, we'd love to hear from you.
Aug 20, 2026
Full time
IT Security Manager- Cyber Security Manager - PCI-DSS Location: Luton, 2 days per week on-site. Our client, a national organisation with offices near Luton, are seeking an experienced IT Security Manager to lead and enhance their security landscape while owning their Tier 1 PCI-DSS compliance programme. This is a fantastic opportunity for a hands-on security specialist who enjoys operating at both strategic and technical levels, working closely with senior stakeholders to drive security best practice across the organisation. Reporting to the Head of Technical Delivery, you will be the go-to expert for all aspects of cyber security, governance, risk, and compliance. This is a standalone role offering significant ownership and influence, making it ideal for someone who enjoys autonomy and genuinely shaping an organisation's security strategy. Key Responsibilities Cyber Security: Develop and continuously improve the organisation's cyber security strategy, controls, and policies. Monitor emerging threats and ensure effective protection across endpoint, network, cloud, and identity environments. Lead security incident response activities, investigations, and remediation efforts. Drive vulnerability management and penetration testing programmes through to successful resolution. Act as the internal cyber security subject matter expert. PCI-DSS Compliance & Audit: Take ownership of end-to-end PCI-DSS compliance activities. Lead annual audit and attestation processes, working closely with external assessors. Manage compliance documentation, evidence gathering, and control frameworks. Coordinate with technical and business teams to embed compliance requirements into day-to-day operations. Provide compliance reporting and updates to senior stakeholders. Governance, Risk & Compliance: Support wider compliance initiatives including ISO 27001, Cyber Essentials, and GDPR. Maintain security policies, standards, and procedures. Conduct risk assessments and manage the security risk register. Deliver security awareness initiatives across the business. Manage relationships with third-party suppliers, security vendors, and auditors. Essential Skills & Experience Proven experience within IT or Cyber Security with ownership of PCI-DSS compliance in a Tier 1 environment. Strong understanding of security frameworks, controls, and governance practices. Experience managing security incidents, vulnerability remediation, and audit activities. Ability to engage confidently with senior stakeholders and external auditors. Comfortable working independently and taking ownership of a broad security remit. Desirable CISSP, CISM, CISA, PCI ISA, or similar industry certifications. Experience within retail, hospitality, payments, or other highly regulated environments. Knowledge of Azure, AWS, and modern SOC/SIEM technologies. If you're an experienced IT Security Manager, Cyber Security Manager, Information Security Manager, or PCI Compliance Specialist looking for your next challenge, we'd love to hear from you.
At Anaplan, we are a team of innovators focused on optimizing business decision making through our leading AI infused scenario planning and analysis platform so our customers can outpace their competition and the market. What unites Anaplanners across teams and geographies is our collective commitment to our customers' success and to our Winning Culture. Our customers rank among the who's who in the Fortune 50. Coca Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best in class platform. Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins - big and small. Supported by operating principles of being strategy led, values based and disciplined in execution, you'll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let's build what's next - together! Anaplan's Product Security team is responsible for securing a platform that large enterprises rely on for real business decisions-across finance, supply chain, workforce, and sales planning. As Senior Manager, you will own the day to day leadership of a team that spans application security, infrastructure and cloud security, offensive security, and vulnerability management. You report to the Director of Product Security and are accountable for turning strategy into consistent, measurable security outcomes across the product portfolio. Role Summary This is a people leadership role owning Anaplan's Product Security team across AppSec, InfraSec, OffSec, and vulnerability management. The Senior Manager reports to the Director of Product Security and is responsible for team output, prioritisation, operating rhythm, and engineering partnerships. The role requires genuine technical depth-this is not a project management seat-combined with the management maturity to build and scale a high performing team. Your Impact Lead and develop the Product Security team: hire, coach, and retain engineers across AppSec, InfraSec, OffSec, and vulnerability management. Set clear expectations and build a team that ships security improvements, not just findings. Own the operating rhythm: run sprint planning, triage, and retrospectives. Calibrate work across BAU vulnerability management, strategic projects, and longer term capability building. Drive secure SDLC integration: ensure threat modelling, design reviews, and security tooling are embedded into how engineering teams build-not bolted on after the fact. Prioritise based on real risk: translate scanner output, pen test findings, and threat intelligence into prioritised remediation plans that engineering teams actually execute. Scale security through automation and self service: invest in tooling, guardrails, and developer facing documentation that reduce friction and increase coverage without linear headcount growth. Partner with engineering and platform leadership: represent Product Security in cross functional planning, influence roadmaps, and ensure security trade offs are understood at the right level. Manage security incidents: coordinate response for product security incidents, run post mortems, and ensure findings translate into durable fixes. Report on programme health: provide clear, honest reporting to the Director and broader leadership on risk posture, coverage gaps, and team capacity. Your Qualifications Demonstrated experience leading a product or application security team, including hiring, coaching, and performance management. Broad technical grounding across at least two of: application security, cloud/infrastructure security, offensive security, and vulnerability management. Hands on history in secure SDLC practices-threat modelling, design reviews, security tooling in CI/CD-enough to credibly challenge your team's work. Ability to prioritise ruthlessly: separate high impact risk reduction from low value compliance theatre. Experience building cross functional partnerships with engineering, product, and platform teams-influencing without owning the delivery backlog. Clear, direct communication-able to present risk, trade offs, and programme status to senior leadership without hiding behind jargon. Comfort operating in a product led, engineering heavy organisation where security earns its seat through credibility, not authority. Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB) We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren't just words on paper - this is what drives our innovation, it's how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day! We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
Aug 06, 2026
Full time
At Anaplan, we are a team of innovators focused on optimizing business decision making through our leading AI infused scenario planning and analysis platform so our customers can outpace their competition and the market. What unites Anaplanners across teams and geographies is our collective commitment to our customers' success and to our Winning Culture. Our customers rank among the who's who in the Fortune 50. Coca Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best in class platform. Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins - big and small. Supported by operating principles of being strategy led, values based and disciplined in execution, you'll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let's build what's next - together! Anaplan's Product Security team is responsible for securing a platform that large enterprises rely on for real business decisions-across finance, supply chain, workforce, and sales planning. As Senior Manager, you will own the day to day leadership of a team that spans application security, infrastructure and cloud security, offensive security, and vulnerability management. You report to the Director of Product Security and are accountable for turning strategy into consistent, measurable security outcomes across the product portfolio. Role Summary This is a people leadership role owning Anaplan's Product Security team across AppSec, InfraSec, OffSec, and vulnerability management. The Senior Manager reports to the Director of Product Security and is responsible for team output, prioritisation, operating rhythm, and engineering partnerships. The role requires genuine technical depth-this is not a project management seat-combined with the management maturity to build and scale a high performing team. Your Impact Lead and develop the Product Security team: hire, coach, and retain engineers across AppSec, InfraSec, OffSec, and vulnerability management. Set clear expectations and build a team that ships security improvements, not just findings. Own the operating rhythm: run sprint planning, triage, and retrospectives. Calibrate work across BAU vulnerability management, strategic projects, and longer term capability building. Drive secure SDLC integration: ensure threat modelling, design reviews, and security tooling are embedded into how engineering teams build-not bolted on after the fact. Prioritise based on real risk: translate scanner output, pen test findings, and threat intelligence into prioritised remediation plans that engineering teams actually execute. Scale security through automation and self service: invest in tooling, guardrails, and developer facing documentation that reduce friction and increase coverage without linear headcount growth. Partner with engineering and platform leadership: represent Product Security in cross functional planning, influence roadmaps, and ensure security trade offs are understood at the right level. Manage security incidents: coordinate response for product security incidents, run post mortems, and ensure findings translate into durable fixes. Report on programme health: provide clear, honest reporting to the Director and broader leadership on risk posture, coverage gaps, and team capacity. Your Qualifications Demonstrated experience leading a product or application security team, including hiring, coaching, and performance management. Broad technical grounding across at least two of: application security, cloud/infrastructure security, offensive security, and vulnerability management. Hands on history in secure SDLC practices-threat modelling, design reviews, security tooling in CI/CD-enough to credibly challenge your team's work. Ability to prioritise ruthlessly: separate high impact risk reduction from low value compliance theatre. Experience building cross functional partnerships with engineering, product, and platform teams-influencing without owning the delivery backlog. Clear, direct communication-able to present risk, trade offs, and programme status to senior leadership without hiding behind jargon. Comfort operating in a product led, engineering heavy organisation where security earns its seat through credibility, not authority. Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB) We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren't just words on paper - this is what drives our innovation, it's how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day! We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
At Anaplan, we are a team of innovators focused on optimizing business decision making through our leading AI infused scenario planning and analysis platform so our customers can outpace their competition and the market. What unites Anaplanners across teams and geographies is our collective commitment to our customers' success and to our Winning Culture. Our customers rank among the who's who in the Fortune 50. Coca Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best in class platform. Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins - big and small. Supported by operating principles of being strategy led, values based and disciplined in execution, you'll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let's build what's next - together! Anaplan's Product Security team is responsible for securing a platform that large enterprises rely on for real business decisions-across finance, supply chain, workforce, and sales planning. As Senior Manager, you will own the day to day leadership of a team that spans application security, infrastructure and cloud security, offensive security, and vulnerability management. You report to the Director of Product Security and are accountable for turning strategy into consistent, measurable security outcomes across the product portfolio. Role Summary This is a people leadership role owning Anaplan's Product Security team across AppSec, InfraSec, OffSec, and vulnerability management. The Senior Manager reports to the Director of Product Security and is responsible for team output, prioritisation, operating rhythm, and engineering partnerships. The role requires genuine technical depth-this is not a project management seat-combined with the management maturity to build and scale a high performing team. Your Impact Lead and develop the Product Security team: hire, coach, and retain engineers across AppSec, InfraSec, OffSec, and vulnerability management. Set clear expectations and build a team that ships security improvements, not just findings. Own the operating rhythm: run sprint planning, triage, and retrospectives. Calibrate work across BAU vulnerability management, strategic projects, and longer term capability building. Drive secure SDLC integration: ensure threat modelling, design reviews, and security tooling are embedded into how engineering teams build-not bolted on after the fact. Prioritise based on real risk: translate scanner output, pen test findings, and threat intelligence into prioritised remediation plans that engineering teams actually execute. Scale security through automation and self service: invest in tooling, guardrails, and developer facing documentation that reduce friction and increase coverage without linear headcount growth. Partner with engineering and platform leadership: represent Product Security in cross functional planning, influence roadmaps, and ensure security trade offs are understood at the right level. Manage security incidents: coordinate response for product security incidents, run post mortems, and ensure findings translate into durable fixes. Report on programme health: provide clear, honest reporting to the Director and broader leadership on risk posture, coverage gaps, and team capacity. Your Qualifications Demonstrated experience leading a product or application security team, including hiring, coaching, and performance management. Broad technical grounding across at least two of: application security, cloud/infrastructure security, offensive security, and vulnerability management. Hands on history in secure SDLC practices-threat modelling, design reviews, security tooling in CI/CD-enough to credibly challenge your team's work. Ability to prioritise ruthlessly: separate high impact risk reduction from low value compliance theatre. Experience building cross functional partnerships with engineering, product, and platform teams-influencing without owning the delivery backlog. Clear, direct communication-able to present risk, trade offs, and programme status to senior leadership without hiding behind jargon. Comfort operating in a product led, engineering heavy organisation where security earns its seat through credibility, not authority. Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB) We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren't just words on paper - this is what drives our innovation, it's how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day! We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
Aug 06, 2026
Full time
At Anaplan, we are a team of innovators focused on optimizing business decision making through our leading AI infused scenario planning and analysis platform so our customers can outpace their competition and the market. What unites Anaplanners across teams and geographies is our collective commitment to our customers' success and to our Winning Culture. Our customers rank among the who's who in the Fortune 50. Coca Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best in class platform. Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins - big and small. Supported by operating principles of being strategy led, values based and disciplined in execution, you'll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let's build what's next - together! Anaplan's Product Security team is responsible for securing a platform that large enterprises rely on for real business decisions-across finance, supply chain, workforce, and sales planning. As Senior Manager, you will own the day to day leadership of a team that spans application security, infrastructure and cloud security, offensive security, and vulnerability management. You report to the Director of Product Security and are accountable for turning strategy into consistent, measurable security outcomes across the product portfolio. Role Summary This is a people leadership role owning Anaplan's Product Security team across AppSec, InfraSec, OffSec, and vulnerability management. The Senior Manager reports to the Director of Product Security and is responsible for team output, prioritisation, operating rhythm, and engineering partnerships. The role requires genuine technical depth-this is not a project management seat-combined with the management maturity to build and scale a high performing team. Your Impact Lead and develop the Product Security team: hire, coach, and retain engineers across AppSec, InfraSec, OffSec, and vulnerability management. Set clear expectations and build a team that ships security improvements, not just findings. Own the operating rhythm: run sprint planning, triage, and retrospectives. Calibrate work across BAU vulnerability management, strategic projects, and longer term capability building. Drive secure SDLC integration: ensure threat modelling, design reviews, and security tooling are embedded into how engineering teams build-not bolted on after the fact. Prioritise based on real risk: translate scanner output, pen test findings, and threat intelligence into prioritised remediation plans that engineering teams actually execute. Scale security through automation and self service: invest in tooling, guardrails, and developer facing documentation that reduce friction and increase coverage without linear headcount growth. Partner with engineering and platform leadership: represent Product Security in cross functional planning, influence roadmaps, and ensure security trade offs are understood at the right level. Manage security incidents: coordinate response for product security incidents, run post mortems, and ensure findings translate into durable fixes. Report on programme health: provide clear, honest reporting to the Director and broader leadership on risk posture, coverage gaps, and team capacity. Your Qualifications Demonstrated experience leading a product or application security team, including hiring, coaching, and performance management. Broad technical grounding across at least two of: application security, cloud/infrastructure security, offensive security, and vulnerability management. Hands on history in secure SDLC practices-threat modelling, design reviews, security tooling in CI/CD-enough to credibly challenge your team's work. Ability to prioritise ruthlessly: separate high impact risk reduction from low value compliance theatre. Experience building cross functional partnerships with engineering, product, and platform teams-influencing without owning the delivery backlog. Clear, direct communication-able to present risk, trade offs, and programme status to senior leadership without hiding behind jargon. Comfort operating in a product led, engineering heavy organisation where security earns its seat through credibility, not authority. Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB) We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren't just words on paper - this is what drives our innovation, it's how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day! We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
EMEA Facilities ManagerApplylocations: Office - Edinburghtime type: Full timeposted on: Posted Todayjob requisition id: R11927 Job Description: The Europe Lead, Facilities is a people-manager role responsible for the planning, operation, and continuous improvement of Clearwater Analytics' European office portfolio. Partnering closely with HR, IT, Finance, and Executive Leadership, this individual ensures that every European workplace is safe, efficient, inspiring, and aligned with Clearwater's culture and growth trajectory. The role has direct accountability for office operations, real estate strategy, vendor relationships, health and safety compliance, employee experience programming, physical security, and regional facilities budgets across multiple European countries. Key Responsibilities Office Operations & Vendor Management Lead day-to-day operations across all European office locations, ensuring facilities are clean, functional, and well-maintained at all times. Source, onboard, and manage third-party vendors (janitorial, security, catering, maintenance, courier, furniture) through competitive procurement processes, accounting for local market practices in each country. Negotiate and administer vendor contracts, service-level agreements, and renewals; track KPIs and hold partners accountable to commitments. Oversee preventive maintenance programs and coordinate timely resolution of reactive maintenance requests via the facilities ticketing system. Manage relationships with landlords, building management companies, and local service providers across all European sites. Space Planning & Real Estate Partner with HR, Finance, and Executive Leadership on short- and long-range European headcount forecasting to inform space planning and lease decisions. Drive seat utilization analyses and develop data-backed workspace strategies (open plan, hoteling, hybrid models) to optimize real estate spend. Lead office build-outs, reconfigurations, and relocations end-to-end - from site selection and design brief through construction management and move-in. Maintain accurate floor plans and space allocation records; update CAD/CAFM drawings as layouts evolve. Serve as the primary Facilities point of contact in lease negotiations, renewals, and expansions, working closely with Legal and Finance, and navigating varying lease structures and tenancy laws across European jurisdictions. Health, Safety & Compliance Own the European Health & Safety program, ensuring full compliance with applicable EU Framework Directive (89/391/EEC) requirements, local fire codes, accessibility standards, and internal EHS policies across all countries of operation. Conduct regular safety inspections, risk assessments, and emergency-preparedness drills across all European locations, tailored to country-specific regulatory requirements. Maintain and test emergency response plans (fire, medical, security incident) and coordinate with local authorities as needed in each jurisdiction. Ensure all required permits, certificates of occupancy, and regulatory filings are current across the European portfolio. Investigate workplace incidents, lead root-cause analyses, and implement corrective actions to prevent recurrence, ensuring compliance with local employment and safety reporting obligations. Serve as the primary point of contact for all European facility and security emergencies, coordinating response efforts across internal teams, vendors, and local authorities. Employee Experience & Events Champion a best-in-class workplace experience that reflects Clearwater's values and supports a collaborative, inclusive culture across diverse European offices. Partner with HR, People Operations, and DE&I teams to design and execute employee amenity programs, office events, and milestone celebrations tailored to local customs and traditions. Oversee reception, mail services, and hospitality operations to ensure a warm, professional first impression for employees and visitors alike. Gather ongoing employee feedback on the physical environment and experience; translate insights into actionable improvements. Support new-hire onboarding by ensuring workstations, access credentials, and office orientations are ready on day one Physical Security Own the physical security program across all European office locations, including access control systems, visitor management, CCTV, and alarm monitoring, in compliance with GDPR and local data protection requirements. Partner with IT and InfoSec to ensure physical and digital security controls are aligned and mutually reinforcing. Manage relationships with security vendors and guard services; define post orders and monitor performance against SLAs. Conduct regular security assessments and audits of all European sites; identify vulnerabilities and implement remediation plans. Develop and maintain physical security policies and procedures, including badge issuance, visitor escort protocols, and after-hours access. Lead incident response for physical security events (unauthorized access, theft, workplace violence) and coordinate with HR, Legal, and local law enforcement as appropriate. Ensure all physical security systems are tested, maintained, and compliant with relevant regulatory and insurance requirements in each country of operation. Transportation Program Ensure transportation operations comply with all applicable local, state, and federal regulations, including ADA accessibility requirements. Partner with HR and Finance on commuter benefit programs, tax-advantaged transit accounts, and related employee communications. People Leadership Directly manage a team of European Facilities Coordinators and/or Office Managers across multiple countries; provide coaching, goal-setting, and career development support. Foster a high-performance team culture grounded in accountability, continuous learning, and customer service excellence. Collaborate with the Global Facilities team to share best practices and drive consistency across international locations. What We Are Looking For Required 7+ years of progressive facilities management experience, with at least 3 years in a people-manager capacity. Proven track record managing multi-site European office portfolios in a high-growth corporate or technology environment. Strong knowledge of EU Health & Safety Framework Directive requirements, local building codes, GDPR, and facilities compliance requirements across multiple European jurisdictions. Experience managing physical security programs, including access control, CCTV, and vendor-provided guard services. Proficiency with facilities management systems (CAFM/CMMS), space planning tools, and workplace analytics platforms. Exceptional communication and stakeholder management skills; comfortable presenting to senior leadership and working across multicultural, multilingual teams. Ability to travel up to 25% across Europe to support multiple office locations. Physical ability to perform facilities-related tasks, including the ability to lift and carry up to 50 lbs (approximately 23 kg), stand for extended periods, and navigate active office and building environments. What We Offer Competitive base salary and benefits package including private medical insurance, private dental insurance, Healthcare Cash Plan, discounted gym membership + other discounts Industry competitive pension contributions. 34 days initial holiday allowance (increasing with each year of tenure) + 2 days annual VTO. Professional development budget and support for facilities certifications. Collaborative, mission-driven culture with real impact on how thousands of employees experience work every day. WelcomeThank you for your interest in a career with Clearwater! About usClearwater Analytics (NYSE: CWAN) is transforming investment management with the industry's most comprehensive cloud-native platform for institutional investors across global public and private markets. While legacy systems create risk, inefficiency, and data fragmentation, Clearwater's single-instance, multi-tenant architecture delivers real-time data and AI-driven insights throughout the investment lifecycle. The platform eliminates information silos by integrating portfolio management, trading, investment accounting, reconciliation, regulatory reporting, performance, compliance, and risk analytics in one unified system. Serving leading insurers, asset managers, hedge funds, banks, corporations, and governments, Clearwater supports over $8.8 trillion in assets globally. Learn more at . Don't meet every single requirement?Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. We are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your past experience doesn't align perfectly with the job description, we encourage you to still apply! You may be just what we're looking for.
Jul 31, 2026
Full time
EMEA Facilities ManagerApplylocations: Office - Edinburghtime type: Full timeposted on: Posted Todayjob requisition id: R11927 Job Description: The Europe Lead, Facilities is a people-manager role responsible for the planning, operation, and continuous improvement of Clearwater Analytics' European office portfolio. Partnering closely with HR, IT, Finance, and Executive Leadership, this individual ensures that every European workplace is safe, efficient, inspiring, and aligned with Clearwater's culture and growth trajectory. The role has direct accountability for office operations, real estate strategy, vendor relationships, health and safety compliance, employee experience programming, physical security, and regional facilities budgets across multiple European countries. Key Responsibilities Office Operations & Vendor Management Lead day-to-day operations across all European office locations, ensuring facilities are clean, functional, and well-maintained at all times. Source, onboard, and manage third-party vendors (janitorial, security, catering, maintenance, courier, furniture) through competitive procurement processes, accounting for local market practices in each country. Negotiate and administer vendor contracts, service-level agreements, and renewals; track KPIs and hold partners accountable to commitments. Oversee preventive maintenance programs and coordinate timely resolution of reactive maintenance requests via the facilities ticketing system. Manage relationships with landlords, building management companies, and local service providers across all European sites. Space Planning & Real Estate Partner with HR, Finance, and Executive Leadership on short- and long-range European headcount forecasting to inform space planning and lease decisions. Drive seat utilization analyses and develop data-backed workspace strategies (open plan, hoteling, hybrid models) to optimize real estate spend. Lead office build-outs, reconfigurations, and relocations end-to-end - from site selection and design brief through construction management and move-in. Maintain accurate floor plans and space allocation records; update CAD/CAFM drawings as layouts evolve. Serve as the primary Facilities point of contact in lease negotiations, renewals, and expansions, working closely with Legal and Finance, and navigating varying lease structures and tenancy laws across European jurisdictions. Health, Safety & Compliance Own the European Health & Safety program, ensuring full compliance with applicable EU Framework Directive (89/391/EEC) requirements, local fire codes, accessibility standards, and internal EHS policies across all countries of operation. Conduct regular safety inspections, risk assessments, and emergency-preparedness drills across all European locations, tailored to country-specific regulatory requirements. Maintain and test emergency response plans (fire, medical, security incident) and coordinate with local authorities as needed in each jurisdiction. Ensure all required permits, certificates of occupancy, and regulatory filings are current across the European portfolio. Investigate workplace incidents, lead root-cause analyses, and implement corrective actions to prevent recurrence, ensuring compliance with local employment and safety reporting obligations. Serve as the primary point of contact for all European facility and security emergencies, coordinating response efforts across internal teams, vendors, and local authorities. Employee Experience & Events Champion a best-in-class workplace experience that reflects Clearwater's values and supports a collaborative, inclusive culture across diverse European offices. Partner with HR, People Operations, and DE&I teams to design and execute employee amenity programs, office events, and milestone celebrations tailored to local customs and traditions. Oversee reception, mail services, and hospitality operations to ensure a warm, professional first impression for employees and visitors alike. Gather ongoing employee feedback on the physical environment and experience; translate insights into actionable improvements. Support new-hire onboarding by ensuring workstations, access credentials, and office orientations are ready on day one Physical Security Own the physical security program across all European office locations, including access control systems, visitor management, CCTV, and alarm monitoring, in compliance with GDPR and local data protection requirements. Partner with IT and InfoSec to ensure physical and digital security controls are aligned and mutually reinforcing. Manage relationships with security vendors and guard services; define post orders and monitor performance against SLAs. Conduct regular security assessments and audits of all European sites; identify vulnerabilities and implement remediation plans. Develop and maintain physical security policies and procedures, including badge issuance, visitor escort protocols, and after-hours access. Lead incident response for physical security events (unauthorized access, theft, workplace violence) and coordinate with HR, Legal, and local law enforcement as appropriate. Ensure all physical security systems are tested, maintained, and compliant with relevant regulatory and insurance requirements in each country of operation. Transportation Program Ensure transportation operations comply with all applicable local, state, and federal regulations, including ADA accessibility requirements. Partner with HR and Finance on commuter benefit programs, tax-advantaged transit accounts, and related employee communications. People Leadership Directly manage a team of European Facilities Coordinators and/or Office Managers across multiple countries; provide coaching, goal-setting, and career development support. Foster a high-performance team culture grounded in accountability, continuous learning, and customer service excellence. Collaborate with the Global Facilities team to share best practices and drive consistency across international locations. What We Are Looking For Required 7+ years of progressive facilities management experience, with at least 3 years in a people-manager capacity. Proven track record managing multi-site European office portfolios in a high-growth corporate or technology environment. Strong knowledge of EU Health & Safety Framework Directive requirements, local building codes, GDPR, and facilities compliance requirements across multiple European jurisdictions. Experience managing physical security programs, including access control, CCTV, and vendor-provided guard services. Proficiency with facilities management systems (CAFM/CMMS), space planning tools, and workplace analytics platforms. Exceptional communication and stakeholder management skills; comfortable presenting to senior leadership and working across multicultural, multilingual teams. Ability to travel up to 25% across Europe to support multiple office locations. Physical ability to perform facilities-related tasks, including the ability to lift and carry up to 50 lbs (approximately 23 kg), stand for extended periods, and navigate active office and building environments. What We Offer Competitive base salary and benefits package including private medical insurance, private dental insurance, Healthcare Cash Plan, discounted gym membership + other discounts Industry competitive pension contributions. 34 days initial holiday allowance (increasing with each year of tenure) + 2 days annual VTO. Professional development budget and support for facilities certifications. Collaborative, mission-driven culture with real impact on how thousands of employees experience work every day. WelcomeThank you for your interest in a career with Clearwater! About usClearwater Analytics (NYSE: CWAN) is transforming investment management with the industry's most comprehensive cloud-native platform for institutional investors across global public and private markets. While legacy systems create risk, inefficiency, and data fragmentation, Clearwater's single-instance, multi-tenant architecture delivers real-time data and AI-driven insights throughout the investment lifecycle. The platform eliminates information silos by integrating portfolio management, trading, investment accounting, reconciliation, regulatory reporting, performance, compliance, and risk analytics in one unified system. Serving leading insurers, asset managers, hedge funds, banks, corporations, and governments, Clearwater supports over $8.8 trillion in assets globally. Learn more at . Don't meet every single requirement?Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. We are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your past experience doesn't align perfectly with the job description, we encourage you to still apply! You may be just what we're looking for.
Role Overview Sr. Manager, Site Reliability Engineering (London) is an experienced leader responsible for overseeing a globally distributed team of SRE technologists with diverse skills in software development, systems, network, application, and/or database management. This role ensures seamless, continuous coverage of Cboe's real time low latency trading platforms around the clock and provides direct platform support for Cboe's European operations. Responsibilities Technical Leadership & System Availability: Provide technical leadership, support and operational oversight to sustain resiliency and high availability of critical business operations across European and GTH market sessions; monitor production, disaster recovery and certification systems; troubleshoot and drive resolution of issues; analyze and optimize performance of real time trading platforms; oversee daily system checks and ensure platforms are operating as expected; take direct action to resolve known issues; assist the build team to resolve build/deployment issues. People Leadership & Team Development: Lead, mentor and provide guidance to direct reports across European and APAC time zones; delegate assignments; create and execute agile based processes such as Kanban and Scrum; connect direct reports to others within and across the organization; support training and development; establish operational objectives, policies and procedures; liaise with management and other stakeholders. Platform Configuration Management & Project Oversight: Develop and manage operational initiatives; translate functional plans into operational processes; guide execution and provide project management support; deliver tactical results; manage configuration of new and existing trading platforms; prepare for new features; monitor development activities, change management tickets, evaluate impact; approve and execute daily change tickets; organize testing prior to deployment; work with software engineering to resolve systemic issues; ensure compliance obligations are met. Incident Response & Escalation Management: Serve as senior escalation point for production incidents across European and GTH market hours; coordinate incident triage, root cause analysis and resolution; provide timely communication to stakeholders; drive post incident reviews and remediation tracking. Subject Matter Expertise & Stakeholder Engagement: Provide subject matter expertise on all aspects of platforms; advise teams on moderately complex matters; liaise with vendors and facilities operators supporting critical financial infrastructure. Reporting & Data Analysis: Create and improve reports related to Operations management; analyze technical data sets to troubleshoot or explain perceived issues; use SQL, UNIX shell and other tools to gather and analyze data. Capacity Planning: Drive capacity planning decisions for Cboe Exchanges, especially within the European region; support capacity planning needs of various business units; participate in capacity planning meetings. Automation & Process Improvement: Identify and lead task automation opportunities; develop, test and maintain Python tools; leverage AI to maximize efficiency. On Call & Weekend Testing: Lead and participate in weekend testing (e.g., capacity testing, fail over); provide follow the sun on call technical support as part of the global Operations team. Qualifications Education: Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Business, Financial Services, Communications, or a related discipline (Master's preferred). Experience & Technical Skills: Deep subject matter expertise in one or more of the following areas: Technical Operations; UNIX Shell; Software Engineering or Systems, Network, or Database Administration; SQL; Python, C++, or other programming language; Leadership or Senior Role; Networking (TCP/IP and Multicast) and NIC Configuration. Communication & Language Skills: Fluency in English - both written and spoken - is required; clear, precise and unambiguous communication across time zones, cultures and technical disciplines. Global Markets Awareness: Familiarity with European markets and US equities, options, and/or futures market structures is strongly preferred; situational awareness across multiple market sessions and regulatory environments. Benefits & Perks Competitive total rewards package including private healthcare coverage, pension contributions, professional development opportunities, and access to global employee resource groups and internal mobility programs. Equal Opportunity Employer Cboe Global Markets is an Equal Opportunity Employer.
Jul 31, 2026
Full time
Role Overview Sr. Manager, Site Reliability Engineering (London) is an experienced leader responsible for overseeing a globally distributed team of SRE technologists with diverse skills in software development, systems, network, application, and/or database management. This role ensures seamless, continuous coverage of Cboe's real time low latency trading platforms around the clock and provides direct platform support for Cboe's European operations. Responsibilities Technical Leadership & System Availability: Provide technical leadership, support and operational oversight to sustain resiliency and high availability of critical business operations across European and GTH market sessions; monitor production, disaster recovery and certification systems; troubleshoot and drive resolution of issues; analyze and optimize performance of real time trading platforms; oversee daily system checks and ensure platforms are operating as expected; take direct action to resolve known issues; assist the build team to resolve build/deployment issues. People Leadership & Team Development: Lead, mentor and provide guidance to direct reports across European and APAC time zones; delegate assignments; create and execute agile based processes such as Kanban and Scrum; connect direct reports to others within and across the organization; support training and development; establish operational objectives, policies and procedures; liaise with management and other stakeholders. Platform Configuration Management & Project Oversight: Develop and manage operational initiatives; translate functional plans into operational processes; guide execution and provide project management support; deliver tactical results; manage configuration of new and existing trading platforms; prepare for new features; monitor development activities, change management tickets, evaluate impact; approve and execute daily change tickets; organize testing prior to deployment; work with software engineering to resolve systemic issues; ensure compliance obligations are met. Incident Response & Escalation Management: Serve as senior escalation point for production incidents across European and GTH market hours; coordinate incident triage, root cause analysis and resolution; provide timely communication to stakeholders; drive post incident reviews and remediation tracking. Subject Matter Expertise & Stakeholder Engagement: Provide subject matter expertise on all aspects of platforms; advise teams on moderately complex matters; liaise with vendors and facilities operators supporting critical financial infrastructure. Reporting & Data Analysis: Create and improve reports related to Operations management; analyze technical data sets to troubleshoot or explain perceived issues; use SQL, UNIX shell and other tools to gather and analyze data. Capacity Planning: Drive capacity planning decisions for Cboe Exchanges, especially within the European region; support capacity planning needs of various business units; participate in capacity planning meetings. Automation & Process Improvement: Identify and lead task automation opportunities; develop, test and maintain Python tools; leverage AI to maximize efficiency. On Call & Weekend Testing: Lead and participate in weekend testing (e.g., capacity testing, fail over); provide follow the sun on call technical support as part of the global Operations team. Qualifications Education: Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Business, Financial Services, Communications, or a related discipline (Master's preferred). Experience & Technical Skills: Deep subject matter expertise in one or more of the following areas: Technical Operations; UNIX Shell; Software Engineering or Systems, Network, or Database Administration; SQL; Python, C++, or other programming language; Leadership or Senior Role; Networking (TCP/IP and Multicast) and NIC Configuration. Communication & Language Skills: Fluency in English - both written and spoken - is required; clear, precise and unambiguous communication across time zones, cultures and technical disciplines. Global Markets Awareness: Familiarity with European markets and US equities, options, and/or futures market structures is strongly preferred; situational awareness across multiple market sessions and regulatory environments. Benefits & Perks Competitive total rewards package including private healthcare coverage, pension contributions, professional development opportunities, and access to global employee resource groups and internal mobility programs. Equal Opportunity Employer Cboe Global Markets is an Equal Opportunity Employer.
Service Manager up to £70k 1 day per week in Huddersfield or Manchester We're working with a long-standing UK organisation undergoing continued investment in its technology operations and service maturity. They're now appointing a senior IT Service Manager to strengthen operational governance and drive service excellence across the business. You'll own key operational processes including incident management, service controls and risk mitigation, working alongside senior technical and delivery stakeholders to ensure systems remain stable, secure and scalable. Key responsibilities Own and lead technical incident management (including P1/P2 incidents and out-of-hours escalation) Act as incident commander during major incidents, managing communications and mitigation strategies Define, maintain and report on SLAs, SLOs and service health metrics Oversee service desk triage processes, priorities and ceremonies Lead cyber incident response and vulnerability remediation across the tech estate Support audit readiness and compliance (ISO 27001 and related frameworks) Partner with engineering and product teams on service improvement and capacity planning What we're looking for 5+ years' experience in IT / Technology Service Management, Incident Management or similar Strong knowledge of ITIL practices (incident, problem, change, service level management) Proven experience running major incidents and out-of-hours support models Hands-on experience with vulnerability management and cyber security processes Familiarity with ISO 27001 / SOC 2 environments and working with audits Experience with ITSM tools (e.g. Jira Service Management, ServiceNow) Comfortable producing dashboards and service reporting (Power BI, Jira, Confluence, etc.) If interested, apply directly through LinkedIn or drop me a message!
May 22, 2026
Full time
Service Manager up to £70k 1 day per week in Huddersfield or Manchester We're working with a long-standing UK organisation undergoing continued investment in its technology operations and service maturity. They're now appointing a senior IT Service Manager to strengthen operational governance and drive service excellence across the business. You'll own key operational processes including incident management, service controls and risk mitigation, working alongside senior technical and delivery stakeholders to ensure systems remain stable, secure and scalable. Key responsibilities Own and lead technical incident management (including P1/P2 incidents and out-of-hours escalation) Act as incident commander during major incidents, managing communications and mitigation strategies Define, maintain and report on SLAs, SLOs and service health metrics Oversee service desk triage processes, priorities and ceremonies Lead cyber incident response and vulnerability remediation across the tech estate Support audit readiness and compliance (ISO 27001 and related frameworks) Partner with engineering and product teams on service improvement and capacity planning What we're looking for 5+ years' experience in IT / Technology Service Management, Incident Management or similar Strong knowledge of ITIL practices (incident, problem, change, service level management) Proven experience running major incidents and out-of-hours support models Hands-on experience with vulnerability management and cyber security processes Familiarity with ISO 27001 / SOC 2 environments and working with audits Experience with ITSM tools (e.g. Jira Service Management, ServiceNow) Comfortable producing dashboards and service reporting (Power BI, Jira, Confluence, etc.) If interested, apply directly through LinkedIn or drop me a message!
SOC Manager Exeter (Hybrid - 2 days onsite) Day Rate: £850 (Umbrella) / £616.61 (PAYE)SC Cleared An enterprise government backed organisation is seeking a SOC manager to provide day to day leadership of incidents and mangment of the SOC Analysts. This is a critical leadership role, responsible for protecting the organisation against real-time cyber threats, driving incident response, and ensuring resilience across a complex technology estate. Our client is offering a 6 month rolling contract, paying up to £850 PD Inside IR 35 to start ASAP to be based in Exeter 2 days per week.This is a high-impact opportunity to shape cyber strategy at an enterprise level, working closely with senior stakeholders and external agencies to strengthen security posture and response capability. You will play a key role in building and evolving the CSOC capability, operating within a highly visible and business-critical function, with regular engagement across senior leadership and external partners.To be successful, you will hold active SC clearance and bring proven experience working within Central Government, the Public Sector, or highly regulated scientific environments.Key Responsibilities Define and lead the Cyber Security Operations Centre (CSOC), ensuring effective detection, response, and remediation of cyber incidents Own and continuously improve the cyber incident response plan, ensuring readiness across the organisation Provide strategic cyber security advice to senior leadership on monitoring, logging, and threat response Establish a use-case driven monitoring and alerting capability to improve threat detection and response times Oversee threat intelligence, vulnerability management, and proactive risk mitigation across the estate Lead the analysis of network traffic and behaviours, identifying threats and communicating insights to the wider business Define and manage cyber security operations strategy, aligned to organisational risk appetite and government guidance Manage stakeholders and external agencies, including regulatory bodies where required Identify and plan cyber investment requirements across tooling, governance, and team capability Core Experience Required Proven experience leading a Security Operations Centre (SOC/CSOC) or cyber security operations function Strong background in incident response, threat detection, and cyber resilience Hands-on experience with SIEM, IDS/IPS, endpoint security, and monitoring tools Solid understanding of threat intelligence, vulnerability management, and remediation practices Knowledge of cyber frameworks and regulations including GDPR, NIS, and National Cyber Security Centre guidance Familiarity with frameworks such as MITRE ATT&CK and ITIL processes Experience operating within complex, regulated environments (e.g. public sector, financial services) Strong stakeholder management skills, with the ability to influence at senior level
May 20, 2026
Full time
SOC Manager Exeter (Hybrid - 2 days onsite) Day Rate: £850 (Umbrella) / £616.61 (PAYE)SC Cleared An enterprise government backed organisation is seeking a SOC manager to provide day to day leadership of incidents and mangment of the SOC Analysts. This is a critical leadership role, responsible for protecting the organisation against real-time cyber threats, driving incident response, and ensuring resilience across a complex technology estate. Our client is offering a 6 month rolling contract, paying up to £850 PD Inside IR 35 to start ASAP to be based in Exeter 2 days per week.This is a high-impact opportunity to shape cyber strategy at an enterprise level, working closely with senior stakeholders and external agencies to strengthen security posture and response capability. You will play a key role in building and evolving the CSOC capability, operating within a highly visible and business-critical function, with regular engagement across senior leadership and external partners.To be successful, you will hold active SC clearance and bring proven experience working within Central Government, the Public Sector, or highly regulated scientific environments.Key Responsibilities Define and lead the Cyber Security Operations Centre (CSOC), ensuring effective detection, response, and remediation of cyber incidents Own and continuously improve the cyber incident response plan, ensuring readiness across the organisation Provide strategic cyber security advice to senior leadership on monitoring, logging, and threat response Establish a use-case driven monitoring and alerting capability to improve threat detection and response times Oversee threat intelligence, vulnerability management, and proactive risk mitigation across the estate Lead the analysis of network traffic and behaviours, identifying threats and communicating insights to the wider business Define and manage cyber security operations strategy, aligned to organisational risk appetite and government guidance Manage stakeholders and external agencies, including regulatory bodies where required Identify and plan cyber investment requirements across tooling, governance, and team capability Core Experience Required Proven experience leading a Security Operations Centre (SOC/CSOC) or cyber security operations function Strong background in incident response, threat detection, and cyber resilience Hands-on experience with SIEM, IDS/IPS, endpoint security, and monitoring tools Solid understanding of threat intelligence, vulnerability management, and remediation practices Knowledge of cyber frameworks and regulations including GDPR, NIS, and National Cyber Security Centre guidance Familiarity with frameworks such as MITRE ATT&CK and ITIL processes Experience operating within complex, regulated environments (e.g. public sector, financial services) Strong stakeholder management skills, with the ability to influence at senior level
Behind every moment of support we give someone living with dementia, there's infrastructure that has to work. What does it take to keep a charity like ours running? What sits behind every support call answered, every research database accessed, every fundraising campaign delivered? Infrastructure. And the people who build, protect and evolve it. As a Senior Infrastructure Engineer, you'll play a central role in shaping, operating and maintaining our predominantly Microsoft cloud environment - keeping it strong, secure and ready for what comes next. Reporting to the Infrastructure Services Manager, you'll support, maintain and enhance our enterprise infrastructure across Azure cloud, Microsoft 365, identity, endpoint, network and core platform services. You'll lead on complex incidents, drive root-cause analysis, and bring the kind of calm, expert thinking that keeps services running and colleagues confident. This is a hands-on, cloud-first role with real scope to influence how we design, govern and optimise cloud services and our infrastructure for the long term. This role would particularly suit someone who has moved beyond traditional, on-prem infrastructure into operational Azure and Microsoft 365 engineering and is confident owning cloud platforms end to end. This is a 12 month fixed term contract. About you: You're an experienced infrastructure professional who brings both depth of technical knowledge and the mindset of a trusted colleague. You understand that the work you do has real consequences for real people, and that motivates you to get things right. You're equally comfortable diving into a complex incident at pace and stepping back to think about how we build more resilient, secure and cost-effective cloud services over time. You take security seriously, communicate with clarity across technical and non-technical audiences, and you thrive in environments where collaboration and accountability go hand in hand. You're someone who keeps learning, shares what you know, and makes the team around you better. You'll have: - Proven, demonstrable experience in Microsoft cloud technologies, including in-depth hands-on Azure experience (cloud platforms, virtual compute, storage, networking and the governance principles that keep it all accountable). - Experience administering and optimising Microsoft 365 services, including identity, security and collaboration tooling. - A grounding in enterprise infrastructure - servers, directory services, hybrid identity - and the hands-on experience to back it up. - Experience managing and supporting Disaster Recovery services to address continuity of vital business functions. - A security-first mindset, with practical knowledge of MFA, conditional access, privileged access management and vulnerability remediation. - Proven networking foundations across WAN, VPN, firewalling and secure remote access. - The discipline to work within ITSM frameworks and the rigour to maintain accurate configuration and asset data. - Experience working alongside a Managed Service Provider as part of an augmented team, including managing service quality and accountability. - A track record of producing documentation that works for diverse audiences - runbooks, procedures, service improvement write-ups. - Genuine curiosity about the infrastructure landscape and a commitment to staying sharp as it evolves. What you'll focus on: - Owning, evolving and maintaining our hybrid (predominantly Microsoft cloud platform) infrastructure - secure, stable and performing, day in, day out, and under pressure when it counts. - Owning complex incidents from first response through to root-cause analysis and lasting fixes. - Working shoulder-to-shoulder with our Security team to embed good practice across everything we build and run. - Helping us get more from what we have - through cost optimisation, service rationalisation and smarter configuration. - Being a dependable partner to suppliers and managed service providers, holding them to the standard our users deserve. - Championing modern identity protection across the organisation. - Bringing energy and expertise to a team that genuinely wants to do good work together. The infrastructure you build here will help us reach more people living with dementia, more quickly, more reliably. If you're ready to bring your infrastructure skills and wider technology expertise to a role with real purpose, we'd love to hear from you. Important Dates - Application deadline is 23:59 on Sunday 31st May 2026 - Interviews begin week commencing: 8th June 2026 About Alzheimer's Society Dementia is the UK's biggest killer. One in three people born in the UK today will develop dementia in their lifetime. At Alzheimer's Society, we're the UK's leading dementia charity and the only one to tackle all aspects of dementia by giving help and hope to people living with dementia today and in the future. We give vital support to people facing the most frightening times of their lives, while also funding groundbreaking research and campaigning to make dementia the priority it should be. Together with our supporters, we're working towards a world where dementia no longer devastates lives. Our values make sure that our focus is clear for the challenges and opportunities ahead and remind us of what we all stand for. Our commitment to Equity, Diversity, Inclusion & Belonging We need to ensure the voices around our table better reflect and understand the communities we exist to serve. We strongly encourage individuals to apply who have a disability, impairment or health condition or individuals who identify as Black, Asian or from another minority ethnic background, as these groups are currently under-represented at Alzheimer's Society. We want everyone we work with, as a colleague, volunteer, supporter, or someone we support, to feel included and that they belong at Alzheimer's Society. Our Equity, Diversity and Inclusion Strategy here along with our internal employee forum and Employee Lived Experience network groups help us promote inclusion and belonging, becoming an engaged and inclusive organisation for all our people. Our hiring process During your recruitment process we want to make sure that you bring your whole self and can be at your best. We are working hard to ensure our recruitment process is as inclusive as possible, so please do inform us of your experience and anything you think we could do better by completing our candidate survey when you apply. Please also contact Alzheimer's Society Talent Acquisition Team via for application support or any adjustments you might need. To ensure fairness and consistency to select the best candidate for this role, all our applications are anonymised up until an interview has been confirmed. We recognise the benefits of AI, but if you're considering using it to submit your application, we encourage you to reflect on the value it truly adds. AI tools often lack the personal touch and authenticity that set candidates apart. We want to hear your unique perspective, experiences, and skills, so we encourage you to showcase them in your own voice. We try to avoid closing roles early where possible, however if we receive a high volume of applications, we may close earlier than the advertised closing date. Should this occur, we will aim to provide you with at least 48 hours' notice. We are committed to safer recruitment and ensuring the welfare of those we work with, due to the nature of some of our roles, we might need to carry out a Criminal Record Check at the relevant level. You can read more information via our Website. Giving back to you Our employees work hard every day to make a true difference in people's lives. We are proud to support them with a range of benefits, recognition and many options for working agilely, all contributing to a strong work life balance. We also have various learning programmes to support you in your development and help you grow to realise your potential and shape a career with Alzheimer's Society. You can also visit our Working for Us pages, which give you more information about what it's like to be an employee at the Society.
May 20, 2026
Full time
Behind every moment of support we give someone living with dementia, there's infrastructure that has to work. What does it take to keep a charity like ours running? What sits behind every support call answered, every research database accessed, every fundraising campaign delivered? Infrastructure. And the people who build, protect and evolve it. As a Senior Infrastructure Engineer, you'll play a central role in shaping, operating and maintaining our predominantly Microsoft cloud environment - keeping it strong, secure and ready for what comes next. Reporting to the Infrastructure Services Manager, you'll support, maintain and enhance our enterprise infrastructure across Azure cloud, Microsoft 365, identity, endpoint, network and core platform services. You'll lead on complex incidents, drive root-cause analysis, and bring the kind of calm, expert thinking that keeps services running and colleagues confident. This is a hands-on, cloud-first role with real scope to influence how we design, govern and optimise cloud services and our infrastructure for the long term. This role would particularly suit someone who has moved beyond traditional, on-prem infrastructure into operational Azure and Microsoft 365 engineering and is confident owning cloud platforms end to end. This is a 12 month fixed term contract. About you: You're an experienced infrastructure professional who brings both depth of technical knowledge and the mindset of a trusted colleague. You understand that the work you do has real consequences for real people, and that motivates you to get things right. You're equally comfortable diving into a complex incident at pace and stepping back to think about how we build more resilient, secure and cost-effective cloud services over time. You take security seriously, communicate with clarity across technical and non-technical audiences, and you thrive in environments where collaboration and accountability go hand in hand. You're someone who keeps learning, shares what you know, and makes the team around you better. You'll have: - Proven, demonstrable experience in Microsoft cloud technologies, including in-depth hands-on Azure experience (cloud platforms, virtual compute, storage, networking and the governance principles that keep it all accountable). - Experience administering and optimising Microsoft 365 services, including identity, security and collaboration tooling. - A grounding in enterprise infrastructure - servers, directory services, hybrid identity - and the hands-on experience to back it up. - Experience managing and supporting Disaster Recovery services to address continuity of vital business functions. - A security-first mindset, with practical knowledge of MFA, conditional access, privileged access management and vulnerability remediation. - Proven networking foundations across WAN, VPN, firewalling and secure remote access. - The discipline to work within ITSM frameworks and the rigour to maintain accurate configuration and asset data. - Experience working alongside a Managed Service Provider as part of an augmented team, including managing service quality and accountability. - A track record of producing documentation that works for diverse audiences - runbooks, procedures, service improvement write-ups. - Genuine curiosity about the infrastructure landscape and a commitment to staying sharp as it evolves. What you'll focus on: - Owning, evolving and maintaining our hybrid (predominantly Microsoft cloud platform) infrastructure - secure, stable and performing, day in, day out, and under pressure when it counts. - Owning complex incidents from first response through to root-cause analysis and lasting fixes. - Working shoulder-to-shoulder with our Security team to embed good practice across everything we build and run. - Helping us get more from what we have - through cost optimisation, service rationalisation and smarter configuration. - Being a dependable partner to suppliers and managed service providers, holding them to the standard our users deserve. - Championing modern identity protection across the organisation. - Bringing energy and expertise to a team that genuinely wants to do good work together. The infrastructure you build here will help us reach more people living with dementia, more quickly, more reliably. If you're ready to bring your infrastructure skills and wider technology expertise to a role with real purpose, we'd love to hear from you. Important Dates - Application deadline is 23:59 on Sunday 31st May 2026 - Interviews begin week commencing: 8th June 2026 About Alzheimer's Society Dementia is the UK's biggest killer. One in three people born in the UK today will develop dementia in their lifetime. At Alzheimer's Society, we're the UK's leading dementia charity and the only one to tackle all aspects of dementia by giving help and hope to people living with dementia today and in the future. We give vital support to people facing the most frightening times of their lives, while also funding groundbreaking research and campaigning to make dementia the priority it should be. Together with our supporters, we're working towards a world where dementia no longer devastates lives. Our values make sure that our focus is clear for the challenges and opportunities ahead and remind us of what we all stand for. Our commitment to Equity, Diversity, Inclusion & Belonging We need to ensure the voices around our table better reflect and understand the communities we exist to serve. We strongly encourage individuals to apply who have a disability, impairment or health condition or individuals who identify as Black, Asian or from another minority ethnic background, as these groups are currently under-represented at Alzheimer's Society. We want everyone we work with, as a colleague, volunteer, supporter, or someone we support, to feel included and that they belong at Alzheimer's Society. Our Equity, Diversity and Inclusion Strategy here along with our internal employee forum and Employee Lived Experience network groups help us promote inclusion and belonging, becoming an engaged and inclusive organisation for all our people. Our hiring process During your recruitment process we want to make sure that you bring your whole self and can be at your best. We are working hard to ensure our recruitment process is as inclusive as possible, so please do inform us of your experience and anything you think we could do better by completing our candidate survey when you apply. Please also contact Alzheimer's Society Talent Acquisition Team via for application support or any adjustments you might need. To ensure fairness and consistency to select the best candidate for this role, all our applications are anonymised up until an interview has been confirmed. We recognise the benefits of AI, but if you're considering using it to submit your application, we encourage you to reflect on the value it truly adds. AI tools often lack the personal touch and authenticity that set candidates apart. We want to hear your unique perspective, experiences, and skills, so we encourage you to showcase them in your own voice. We try to avoid closing roles early where possible, however if we receive a high volume of applications, we may close earlier than the advertised closing date. Should this occur, we will aim to provide you with at least 48 hours' notice. We are committed to safer recruitment and ensuring the welfare of those we work with, due to the nature of some of our roles, we might need to carry out a Criminal Record Check at the relevant level. You can read more information via our Website. Giving back to you Our employees work hard every day to make a true difference in people's lives. We are proud to support them with a range of benefits, recognition and many options for working agilely, all contributing to a strong work life balance. We also have various learning programmes to support you in your development and help you grow to realise your potential and shape a career with Alzheimer's Society. You can also visit our Working for Us pages, which give you more information about what it's like to be an employee at the Society.
Job Title Level 3 Security Analyst - Incident Response & Vulnerability Management Department Service Delivery / Security Reporting To Security Lead / Service Delivery Manager Operates under the direction of the Incident Manager during security incidents Location UK (Hybrid) Office in Cardiff 1-2 days per week, regular client site travel. Working Pattern Monday to Friday with participation in the on-call Security and Major Incident rota as required Role Purpose The Level 3 Security Analyst is responsible for the technical investigation, containment, remediation, and resolution of IT security incidents and vulnerabilities across a complex, multi-site customer estate supported by "the MSP". The role acts as a senior technical authority for security incidents, working alongside Incident Management, Infrastructure, Network, and Application teams to ensure security issues are resolved end-to-end, correctly documented, and do not reoccur. Key Accountabilities - Security Incident Investigation & Response Act as the technical lead for the investigation of security incidents across supported platforms. Investigate malware, ransomware, account compromise, unauthorised access, suspicious activity, and security misconfiguration. Perform detailed root cause analysis across endpoint, identity, network, and application layers. Advise the Incident Manager on incident scope, impact, containment, eradication strategy, and recovery validation. Drive incidents through to full technical resolution, not temporary mitigation. Key Accountabilities - Vulnerability Management Investigate vulnerabilities identified via scanning platforms, endpoint and cloud tooling, supplier disclosures, and audit activity. Assess risk based on exploitability, exposure, and operational impact. Own remediation actions end-to-end, coordinating with Infrastructure, Network, and third-party suppliers. Validate remediation and ensure appropriate evidence is captured for assurance and audit. Platforms & Technology Scope End-user devices including Windows, macOS, tablets, and peripherals. Microsoft 365 including Entra ID, Exchange, SharePoint, Defender, and endpoint protection. Identity and Access Management including privileged and service accounts. On-premises and cloud-hosted servers. Network infrastructure including firewalls, switches, wireless, and WAN connectivity. Cloud-hosted and supplier-managed applications. Documentation, Audit & Continuous Improvement Produce clear, technically accurate documentation covering incidents, root cause analysis, and corrective actions. Support governance, customer assurance, and audit requirements. Contribute to post-incident reviews and lessons learned. Identify recurring issues and recommend long-term improvements. Ensure incidents and vulnerabilities are correctly logged and tracked within ITSM systems. Collaboration & Escalation Work closely with Incident Managers, Security specialists, and Level 3 Infrastructure and Network teams. Act as a senior escalation point for Level 1 and Level 2 teams. Engage third-party suppliers to progress investigation and remediation. Participate in out-of-hours response as required. Knowledge, Skills & Experience - Essential Proven experience in a Level 3 or Senior Security Analyst or Incident Response role. Hands-on experience investigating and resolving incidents across endpoints, identity platforms, networks, and cloud services. Strong understanding of malware and ransomware response, identity compromise, and vulnerability remediation. Experience working within formal Security Incident and Major Incident processes. Strong written documentation and stakeholder communication skills. Knowledge, Skills & Experience - Desirable Experience supporting multi-site or operationally sensitive environments. Familiarity with Defender, SIEM, EDR, and vulnerability management tools. Understanding of regulated or PCI-adjacent environments. Relevant security certifications or equivalent experience. Behavioural Competencies Takes ownership from detection through to resolution. Investigates thoroughly and challenges incomplete fixes. Calm, methodical, and decisive during live incidents. Understands operational and business impact. Professional and confident when engaging customers and suppliers. Decision Making & Authority Makes technical decisions relating to investigation, containment, and remediation of security incidents. Escalates risk and decision points appropriately to Incident Management and Service Delivery leadership. Key Interfaces Incident Management Security Operations Infrastructure and Network Services Third-party suppliers Customer stakeholders via structured incident communications
May 13, 2026
Full time
Job Title Level 3 Security Analyst - Incident Response & Vulnerability Management Department Service Delivery / Security Reporting To Security Lead / Service Delivery Manager Operates under the direction of the Incident Manager during security incidents Location UK (Hybrid) Office in Cardiff 1-2 days per week, regular client site travel. Working Pattern Monday to Friday with participation in the on-call Security and Major Incident rota as required Role Purpose The Level 3 Security Analyst is responsible for the technical investigation, containment, remediation, and resolution of IT security incidents and vulnerabilities across a complex, multi-site customer estate supported by "the MSP". The role acts as a senior technical authority for security incidents, working alongside Incident Management, Infrastructure, Network, and Application teams to ensure security issues are resolved end-to-end, correctly documented, and do not reoccur. Key Accountabilities - Security Incident Investigation & Response Act as the technical lead for the investigation of security incidents across supported platforms. Investigate malware, ransomware, account compromise, unauthorised access, suspicious activity, and security misconfiguration. Perform detailed root cause analysis across endpoint, identity, network, and application layers. Advise the Incident Manager on incident scope, impact, containment, eradication strategy, and recovery validation. Drive incidents through to full technical resolution, not temporary mitigation. Key Accountabilities - Vulnerability Management Investigate vulnerabilities identified via scanning platforms, endpoint and cloud tooling, supplier disclosures, and audit activity. Assess risk based on exploitability, exposure, and operational impact. Own remediation actions end-to-end, coordinating with Infrastructure, Network, and third-party suppliers. Validate remediation and ensure appropriate evidence is captured for assurance and audit. Platforms & Technology Scope End-user devices including Windows, macOS, tablets, and peripherals. Microsoft 365 including Entra ID, Exchange, SharePoint, Defender, and endpoint protection. Identity and Access Management including privileged and service accounts. On-premises and cloud-hosted servers. Network infrastructure including firewalls, switches, wireless, and WAN connectivity. Cloud-hosted and supplier-managed applications. Documentation, Audit & Continuous Improvement Produce clear, technically accurate documentation covering incidents, root cause analysis, and corrective actions. Support governance, customer assurance, and audit requirements. Contribute to post-incident reviews and lessons learned. Identify recurring issues and recommend long-term improvements. Ensure incidents and vulnerabilities are correctly logged and tracked within ITSM systems. Collaboration & Escalation Work closely with Incident Managers, Security specialists, and Level 3 Infrastructure and Network teams. Act as a senior escalation point for Level 1 and Level 2 teams. Engage third-party suppliers to progress investigation and remediation. Participate in out-of-hours response as required. Knowledge, Skills & Experience - Essential Proven experience in a Level 3 or Senior Security Analyst or Incident Response role. Hands-on experience investigating and resolving incidents across endpoints, identity platforms, networks, and cloud services. Strong understanding of malware and ransomware response, identity compromise, and vulnerability remediation. Experience working within formal Security Incident and Major Incident processes. Strong written documentation and stakeholder communication skills. Knowledge, Skills & Experience - Desirable Experience supporting multi-site or operationally sensitive environments. Familiarity with Defender, SIEM, EDR, and vulnerability management tools. Understanding of regulated or PCI-adjacent environments. Relevant security certifications or equivalent experience. Behavioural Competencies Takes ownership from detection through to resolution. Investigates thoroughly and challenges incomplete fixes. Calm, methodical, and decisive during live incidents. Understands operational and business impact. Professional and confident when engaging customers and suppliers. Decision Making & Authority Makes technical decisions relating to investigation, containment, and remediation of security incidents. Escalates risk and decision points appropriately to Incident Management and Service Delivery leadership. Key Interfaces Incident Management Security Operations Infrastructure and Network Services Third-party suppliers Customer stakeholders via structured incident communications
Who we are GlobalData is a specialist information services business helping clients decode the future, make better decisions and reach more customers. Through our data, expert analysis and innovative solutions, we provide intelligence across the world s largest industries to companies, governments and industry professionals. Formed in 2016 through the combination of multiple specialist firms, we are now a fully integrated global platform with 3,500+ colleagues across 20+ industries, supporting over 5,000 customers worldwide. Why join GlobalData? We are at a pivotal stage of growth, supported by recent investment and ambitious plans. It s a fast-paced, entrepreneurial environment where collaboration drives success, and where curious, ambitious individuals can make a real impact as we work towards becoming the world s most trusted source of strategic industry intelligence. The role As Information Security Manager, you will lead the strategy and delivery of initiatives that strengthen GlobalData s cybersecurity posture across global operations. You ll ensure our people, systems and infrastructure remain secure, resilient and able to support continued growth. Reporting to the Chief Information Security Officer, you will lead a team of security professionals, drive key security programmes, and work closely with stakeholders across technology and business teams to improve cyber governance, data security and operational resilience. This role requires strong expertise in information security, AI and data governance, alongside experience in vendor management and third-party risk. What you ll be doing Lead and deliver the information security strategy aligned to business goals Develop and maintain security frameworks, policies and standards Oversee risk management, threat assessment and vulnerability programmes Ensure compliance with ISO 27001, ISO 42001, GDPR and other relevant frameworks Manage security operations including incident response, monitoring and investigations Partner with IT, engineering, legal and business teams to embed security best practice Lead internal/external audits, assessments and remediation plans Manage third-party and vendor security risk programmes Build, mentor and lead a high-performing security team Provide executive reporting on security risks, metrics and improvement plans Monitor emerging threats, technologies and regulations What we re looking for 8+ years experience in senior cybersecurity or information security roles Leadership experience within a complex, multinational business Experience managing global teams across multiple regions Strong knowledge of ISO 27001, NIST, CIS Controls or similar frameworks Proven experience in security operations, risk management and compliance Experience handling security incidents and crisis management Strong commercial awareness and budget management experience Excellent communication and stakeholder management skills, including senior leadership exposure Strong understanding of IT infrastructure, cloud technologies and enterprise systems Experience managing third-party vendors and technology partners Preferred Certifications CISM or similar ISO 27001 Lead Implementer / Lead Auditor ISO 42001 (desirable) Technical Skills Security architecture and cloud security (AWS) SIEM, EDR and SOC tools ISO 27001 / ISO 42001 implementation Vulnerability management and penetration testing oversight Data protection, encryption and privacy controls Third-party risk management tools and processes Leadership & Competencies Inspiring leader who develops teams and delegates effectively Strategic thinker with strong decision-making skills Able to influence senior stakeholders and collaborate cross-functionally Hands-on and comfortable operating at all levels Calm under pressure with strong prioritisation skills Able to translate technical risk into clear business impact Highly organised with strong attention to detail In addition to a rewarding career, we support our GlobalData colleagues with a range of benefits across health, finances, fitness, travel, tech and more. To find out more about the roles and benefits on offer in your region, visit (url removed) GlobalData believes strongly in the value of diversity and creating supportive, inclusive environments where our colleagues can succeed. As such, we are proud to be an Equal Opportunity Employer. GlobalData is determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable.
Apr 30, 2026
Full time
Who we are GlobalData is a specialist information services business helping clients decode the future, make better decisions and reach more customers. Through our data, expert analysis and innovative solutions, we provide intelligence across the world s largest industries to companies, governments and industry professionals. Formed in 2016 through the combination of multiple specialist firms, we are now a fully integrated global platform with 3,500+ colleagues across 20+ industries, supporting over 5,000 customers worldwide. Why join GlobalData? We are at a pivotal stage of growth, supported by recent investment and ambitious plans. It s a fast-paced, entrepreneurial environment where collaboration drives success, and where curious, ambitious individuals can make a real impact as we work towards becoming the world s most trusted source of strategic industry intelligence. The role As Information Security Manager, you will lead the strategy and delivery of initiatives that strengthen GlobalData s cybersecurity posture across global operations. You ll ensure our people, systems and infrastructure remain secure, resilient and able to support continued growth. Reporting to the Chief Information Security Officer, you will lead a team of security professionals, drive key security programmes, and work closely with stakeholders across technology and business teams to improve cyber governance, data security and operational resilience. This role requires strong expertise in information security, AI and data governance, alongside experience in vendor management and third-party risk. What you ll be doing Lead and deliver the information security strategy aligned to business goals Develop and maintain security frameworks, policies and standards Oversee risk management, threat assessment and vulnerability programmes Ensure compliance with ISO 27001, ISO 42001, GDPR and other relevant frameworks Manage security operations including incident response, monitoring and investigations Partner with IT, engineering, legal and business teams to embed security best practice Lead internal/external audits, assessments and remediation plans Manage third-party and vendor security risk programmes Build, mentor and lead a high-performing security team Provide executive reporting on security risks, metrics and improvement plans Monitor emerging threats, technologies and regulations What we re looking for 8+ years experience in senior cybersecurity or information security roles Leadership experience within a complex, multinational business Experience managing global teams across multiple regions Strong knowledge of ISO 27001, NIST, CIS Controls or similar frameworks Proven experience in security operations, risk management and compliance Experience handling security incidents and crisis management Strong commercial awareness and budget management experience Excellent communication and stakeholder management skills, including senior leadership exposure Strong understanding of IT infrastructure, cloud technologies and enterprise systems Experience managing third-party vendors and technology partners Preferred Certifications CISM or similar ISO 27001 Lead Implementer / Lead Auditor ISO 42001 (desirable) Technical Skills Security architecture and cloud security (AWS) SIEM, EDR and SOC tools ISO 27001 / ISO 42001 implementation Vulnerability management and penetration testing oversight Data protection, encryption and privacy controls Third-party risk management tools and processes Leadership & Competencies Inspiring leader who develops teams and delegates effectively Strategic thinker with strong decision-making skills Able to influence senior stakeholders and collaborate cross-functionally Hands-on and comfortable operating at all levels Calm under pressure with strong prioritisation skills Able to translate technical risk into clear business impact Highly organised with strong attention to detail In addition to a rewarding career, we support our GlobalData colleagues with a range of benefits across health, finances, fitness, travel, tech and more. To find out more about the roles and benefits on offer in your region, visit (url removed) GlobalData believes strongly in the value of diversity and creating supportive, inclusive environments where our colleagues can succeed. As such, we are proud to be an Equal Opportunity Employer. GlobalData is determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable.
