16 jobs found

We'll inspire and empower you to deliver your best work so you can evolve, grow and succeed - today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities. People are our greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you'd expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations. About the Opportunity: Amentum is growing its OT cyber security consulting team in Scotland. We are looking for capable, commercially minded consultants who can take ownership of client work, solve problems pragmatically, and help us build lasting client relationships. The role is initially focused on the Energy sector, with potential opportunities to work across other market verticals including Critical National Infrastructure, National Security, Defence and Nuclear. You will support clients across IT and OT environments, helping them understand cyber risk, improve resilience and deliver secure change. This is a consulting role for people who can get things done. You will work with clients, delivery teams and senior stakeholders to define what needs to happen, produce high-quality outputs, and move work forward with minimal day-to-day support. You will combine technical credibility with strong client handling, clear communication and a focus on delivery. You will also contribute to business development by identifying opportunities, shaping proposals and helping grow our client accounts. Ability to obtain SC clearance (if not currently held) is essential for this role. Key Responsibilities: Lead and deliver OT cyber security assignments, taking ownership of scope, outputs, timelines and client expectations. Build trusted relationships with clients and stakeholders, acting as a credible advisor on OT cyber security and resilience. Assess cyber risks across OT and connected IT environments and turn findings into clear, practical recommendations. Develop security requirements, architectures and approaches for complex OT systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps, requirements and proposals. Contribute to account growth, bids and new business opportunities through technical input, client insight and relationship building. Work collaboratively across Amentum teams while being comfortable operating independently. Here's What You'll Need: We are interested in consultants who are proactive, dependable and comfortable in client-facing roles. You do not need to tick every box, but you should be able to demonstrate: Experience delivering cyber security consulting, security engineering, assurance or risk work, ideally with a significant focus on OT, industrial control systems or critical infrastructure. Strong understanding of OT environments, operational safety, resilience and availability considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work with limited supervision, make sensible decisions, and keep clients and internal teams informed. Strong written and verbal communication, with the ability to explain technical issues in a clear, commercial and practical way. A willingness to travel to client sites when required. Desirable: Experience in the Energy sector or wider Critical National Infrastructure. Understanding of Ofgem cyber resilience plans and price control submissions. Familiarity with IEC 62351, IEC 61850 or IEC 60870-5-104. Relevant certifications such as CISSP, GICSP or similar. Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees. We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we're more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you're pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity. We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role. Your application experience is important to us and we're keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.

Location: Newbury+ Hybrid Salary: Excellent basic salary plus bonus and Vodafone benefits Working hours: Full time 37.5 hours per week - Monday to Friday Hybrid We believe that through collaboration and connection with our colleagues we can achieve great things. Our hybrid working approach allows our people to work both in the office and at home, providing the flexibility and resources you need to succeed in your role. We don't require you to be in on specific days; instead, we ask people to come into the office 2-3 days each week, for at least 8 days per month. You should work with your line manager to understand what their expectations are for you, your specific role and your team. Who We Are We're here to build a network the UK can count on - one that connects people, places and potential. Because no matter where you live, what your background is, or how you get online - we think everyone deserves the same chance to stay connected, and with VodafoneThree, that future's being built - today. We're creating more than the UK's best network. We're helping close the digital divide, empower communities and drive meaningful progress. We believe that everyone should feel they belong. Whoever you are and whatever your story, there's space for you here. We're building a workplace where different perspectives are welcomed, voices are heard, and everyone feels safe to show up as themselves. You'll join a team that genuinely cares - about each other, about our customers, and about the future we're building. From day one, you'll be welcomed, valued and encouraged to bring your whole self to work. Why VodafoneThree Join us and you'll be at the heart of change. That means building responsibly, investing sustainably and creating opportunities that last. We're not just expanding connectivity; we're reimagining what a connected nation looks like. With £11bn invested in 5G and digital infrastructure, your work will directly power businesses, services, and communities across the country. You'll work on real challenges, with real impact, across every corner of the country. Wherever you join us, whatever your role, you'll be helping to build a future that works better for everyone. We move at pace, because what we're building matters - and we're learning as we go. We're proud of the progress we've made, but we're just getting started. Join our IT teams, which is at the core of our digital future, analysing and operating all our internal and customer-facing systems, with the aim of delivering the best customer experience. None of it would be possible without our innovative teams, creating a connected future with technologies like Cloud, AI and big data. What you'll do In this role you will carry out the Secure by Design assessments and provide guidance to projects and BAU activities across the following UK business functions: Consumer & Business: Your focus will be to ensure we deliver secure products and services to our customers across Consumer & Business markets, as defined by VodafoneThree's Consumer & Business functions. Internal: Your focus will be to ensure we deliver secure solutions to support VodafoneThree's internal business functions. These internal business functions include Technology, Finance, HR, Corporate & External Affairs and Business Intelligence. You will engage with the business functions to understand their future roadmaps and will ensure that appropriate Cyber Security engagement takes place to support these roadmaps. You will also be responsible for providing technical leadership and task direction to other Secure by Design managers, Specialists as well as Cyber Security Champions across Technology and other business functions. You will work with project teams to produce solutions that comply with internal security policies, standards and the security architecture. The projects and "business as usual" changes you will be working on will encompass the full range of IT & Digital technologies encompassing: Online & Digital including Mobile Applications Customer Management & Billing Systems Business Intelligence and Big Data Business Support Systems Cloud Infrastructure & SaaS Automation Solutions End user computing / BYOD. Key responsibilities: Embed effective security practices into IT & Digital processes (Agile, DevSecOps, CI/CD etc) Provide Cyber Security guidance, design input and design review/assessment Review and approve end to end connectivity across VodafoneThree networks Specify security testing, and ensure that identified vulnerabilities are remediated Identify Cyber Security risks and ensure that these are managed effectively Lead relevant Regulatory and Compliance initiatives for Secure by Design. Ensure that projects integrate with security baseline controls such as IPS/IDS, WAF, Firewall Change Management, Identity & Access Management, SIEM and Vulnerability Management Ensure internal customers, external suppliers and delivery partners are aware of security standards and future strategy to influence development roadmaps Who you are Please note: Enhanced vetting may be carried out for this role Competent in understanding network designs and equipment configurations used to deliver a wide range of IT and telecommunications solutions Competent in applying security policies and principles defined in security architecture to real world scenarios Understands and applies risk management principles Effective communication skills to influence stakeholders and explain complex security requirements in simple terms Stakeholder Management - established as the go-to person for any project issues impacting on Corporate & External Affairs teams. Worried that you don't meet all the desired criteria exactly? We know that everyone is unique, with multiple aspects to their identity and different experiences behind them. We are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you're excited about this role but your experience doesn't align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in. What we offer We care about our people's success by offering great pay, bonuses, up to 28 days off plus bank holidays, and paid time for charity work. You can personalise our benefits for you and your family, like discounts, vouchers, a pension plan and loads more. We help with your career through our amazing learning tools and top-notch parental leave policies. Need to Know We are regulated by the Financial Conduct Authority and all offers of employment for this role are subject to background checks, including criminal (DBS) and financial checks to meet the regulators standards. If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, a sign language interpreter, or assistive technology, please refer to the Accessibility section of our Careers website ( ) for guidance. We use AI in different parts of our business to boost innovation, improve efficiency, and create new opportunities. We know many candidates use AI to fine-tune their CVs or prepare for interviews, but what we really care about is your unique experiences and achievements. During the interview, we want you to rely on your own knowledge and skills to show us who you really are-your personality, creativity, and abilities. Above all, we're looking for authenticity and can't wait to get to know the real you.

Turn analytical thinking into real-world security solutions. Join Tetra Tech's growing Security team and develop your career alongside experienced security professionals, working on complex built-environment projects where engineering, technology, data and security come together. Purpose & Scope of the Role As an Assistant Security Consultant, you'll help design, develop, implement and assess physical, technical, personnel and personal security solutions, including their increasing convergence with cyber security. This is a broad, hands-on development role for someone curious about how security challenges can be solved through engineering, analytical thinking and technology. You'll work across live projects, applying data and modelling techniques, developing assessment methodologies and helping turn security requirements into practical, proportionate solutions. Your Impact in this position You'll contribute to prestigious projects across the UK, working alongside security specialists, engineers and multidisciplinary project teams. From assessing threats, vulnerabilities and risks to exploring innovative technologies and improving security processes, you'll help clients make informed decisions that protect people, places and assets. With structured development and support from senior security professionals, you'll build technical capability across multiple security disciplines while working towards professional recognition. 5 Core Capabilities Security Risk & Analysis Undertake threat, vulnerability and risk assessments, critically evaluating information and challenging assumptions to support robust decisions. Technical & Data-Led Problem Solving Apply modelling, data and analytical techniques to real-world security problems, with opportunities to develop skills in Python, data science, machine learning and emerging technologies. Security Design & Implementation Support security strategies, technical designs and guidance, identifying creative and proportionate solutions to complex engineering challenges. Collaboration & Communication Build effective relationships with technical and non-technical stakeholders, communicating complex information clearly and contributing confidently within multidisciplinary teams. Continuous Improvement & Innovation Help develop methodologies, processes, templates and tools while bringing curiosity, attention to detail and fresh thinking to evolving security challenges. Training, Qualifications & Experience You'll ideally hold a relevant degree or equivalent technical qualification in security, engineering or another built-environment discipline. Previous experience across every security area isn't expected: our graduate training programme provides structured development, professional mentoring and support towards recognised professional membership and chartered status. You'll need strong analytical and communication skills, confidence using Microsoft Office and the ability to manage priorities while maintaining technical quality. UK Government Developed Vetting is required. You must therefore be a sole UK national and have been resident in the UK for at least the previous 10 years. Working Environment You'll initially be based within the M25 in North-West London, working from the office a minimum of four days per week. The role includes regular visits to client sites across South-East England and occasional travel to client, supplier and Tetra Tech locations elsewhere in the UK. The working pattern is predominantly office and project-site based due to the security requirements and collaborative nature of the role, with limited scope for hybrid or remote working where project and security requirements allow. You must have a full UK driving license and access to a car as the project sites are not easily accessible by public transport. Why Join Tetra Tech? Tetra Tech is a leading provider of consulting and engineering services working across the full project lifecycle worldwide. We have a wide range of expertise across our teams, providing a global support network with a personalised approach to client relationships to better understand where we can add value. We provide a collaborative environment that supports individual performance, innovation, and creativity. We support public and private sector clients on local, national, and international projects to deliver sustainable and resilient solutions. Our operations in the UK, Ireland, and the Netherlands include more than 6,000 employees who are Leading with Science to solve our clients' most complex problems. In alignment with the Equality Act 2010, we will make reasonable adjustments to support candidates and employees requiring additional arrangements. This could include adaptations to work schedules, training approaches, or the physical workspace. Please inform us if you need any accommodations during the recruitment process or in your day-to-day role

We'll inspire and empower you to deliver your best work so you can evolve, grow and succeed - today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities. People are our greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you'd expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations. About the Opportunity: Amentum are offering an exciting opportunity to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure, National Security, Defence and Nuclear market sectors. Our team is growing and are we looking for proactive and collaborative Cyber Security Professionals to work within our Nuclear market, providing a range of security services. With our deep technical, commercial, and strategic nuclear expertise we develop solutions that address our client's critical challenges supporting digitalisation and security. As part of our team, you will support across the full spectrum of security engineering activities in support of the design, development, integration, delivery, and in-service support of complex technical projects. You will collaborate with the team to deliver cyber security solutions, address risks, and support secure and resilient digital transformation across the information and operational technology environments. Amentum is a "relationship" focused company and the building and developing of these relationships with our clients is a significant and important part of this role. Although this role is initially Nuclear focused, you will have the opportunity to work across multiple market sectors to suit your interests and career aspirations under a hybrid working arrangement that best suit each client's needs. Training and development opportunities specific to the project needs and those of your own career plan will be available and supported. Reporting to the Head of Nuclear. Key Responsibilities: Develop security requirements, architecture, and design for complex OT systems. Develop cyber security assessment approaches. Specify and implement a robust security risk management process. Support accreditation activities with the client and regulating authorities. Conduct security reviews and risk assessments in accordance with IEC 62443. Provide technical assistance to business development. Maintain familiarity with legislation and regulations of relevance. Build and maintain relationships with internal and external stakeholders. Here's What You'll Need: Experience in similar roles or transferable skills within a similar role. Certified Information Systems Security Professional (CISSP) or Certified Information Security Management (CISM) qualification. SANS Global Industrial Cyber Security Professional (GICSP) would be a plus. Able to travel to the client site on a semi-regular basis, averaging two to three days per week. We have a strong team culture at Amentum where every member strengthens the team with their own experience, so even if you feel you don't have experience in everything listed below, we'd still like to hear from you. Cyber Security work experience (with a significant focus on Operational Technology during that time). Practical experience of IT and OT cyber security risk/threat assessment approaches Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments. Working knowledge and hands-on experience in a variety of operating systems and Operational Technology environments. Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments. Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols. Certifications - Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ - MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP). Standards, frameworks, and regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees. We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we're more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you're pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity. We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role. Your application experience is important to us and we're keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.

Contract Duration: 6 Months Location: Remote with ad hoc travel to London/Birmingham Job Type: Contract - Outside IR35 Join our leading digital transformation consultancy as a Cyber Assurance Lead! This role provides senior leadership across a live digital and cloud portfolio, owning security assurance strategy, prioritisation, and decision-making. It is crucial for ensuring security risk is managed and documented pragmatically across the organisation in a fast-paced digital environment. Day-to-day of the role: Own and lead cross-project cyber security assurance across a complex multi-system digital portfolio. Act as the senior security decision-maker, providing clear risk-based recommendations and approvals. Prioritise assurance activity across multiple live projects and services. Challenge senior delivery, digital, and technical stakeholders constructively on risk, architecture, and control gaps. Ensure consistent assurance artefacts, risk registers, control mapping, and decisions are produced and maintained. Oversee and quality-assure the work of senior and mid-level security consultants. Support compliance and assurance activity in regulated/audited environments. Provide assurance input across cloud, SaaS, integration, and OT adjacent initiatives. Lead remediation activities arising from security reviews, ensuring actions are agreed, tracked, evidenced, and closed. Review and challenge security architecture decisions across cloud, SaaS, and integration-led services. Produce and present portfolio-level risk positions, security decision papers, and assurance updates to senior stakeholders. Drive consistency of assurance approaches, control assessments, and risk management practices across multiple projects and services. Required Skills & Qualifications: Extensive experience leading security assurance and risk management across live digital environments. Strong background in cloud and SaaS environments (AWS preferred). Experience with integration-heavy estates, APIs, and third-party platforms. Excellent stakeholder management skills, with confidence engaging at CISO and senior leadership level. Pragmatic, delivery-focused mindset - able to balance pace with control. Ability to make and defend risk-based security decisions in complex delivery environments. Experience reviewing security architecture and cloud design decisions. Proven experience producing assurance artefacts, risk assessments, decision papers, and executive reporting. Experience supporting the remediation and closure of security findings, risks, and control gaps. Desirable: Exposure to GovAssure or central government assurance models. Experience with OT, IoT, smart-building, or property technology environments. Familiarity with Salesforce, ServiceNow, Planon, or similar SaaS platforms. Experience operating within central government assurance frameworks, including GovAssure. Experience providing assurance across operational technology (OT), smart-building, and PropTech environments. Additional Information: BPSS and active Security Clearance required. To apply for this Cyber Assurance Lead position, please submit your CV and one of our RPS consultants will get in contact with you.

Lead OT Cyber Security Consultants / Architects NCSC-CAF UK-based Hybrid working Competitive salary and benefits I'm working with a leading UK consultancy who are expanding their OT Cyber-security team following continued demand from organisations operating complex, safety-critical environments. We are looking for an experienced OT Cyber Security Consultants and Architects to design secure operational environments and advise clients undertaking major technology and infrastructure programmes. We are looking for people who have worked in the Utilities sector - power transmission, generation or distribution, Water, Civil Nuclear or wider Critical National Infrastructure (CNI). The role You will: Design target-state security architectures across OT, ICS and SCADA environments. Define network segmentation, zoning and secure IT/OT integration patterns. Develop secure remote-access, identity, monitoring and asset-visibility solutions. Translate cyber risks into architecture requirements, controls and delivery roadmaps. Lead OT security workstreams from initial assessment through to implementation. Review technical designs and provide architecture assurance. Advise engineering, operational, security and senior business stakeholders. Support technology selection while balancing security, safety and operational continuity. Lead technical workshops and collaborate with multidisciplinary delivery teams. Experience required You should have: Strong experience designing and delivering OT security architecture. Knowledge of industrial control systems, SCADA, PLCs, RTUs and OT networks. Experience within complex, regulated or safety-critical operational environments. Practical knowledge of segmentation, zones and conduits, secure remote access, monitoring and IT/OT convergence. Experience producing target-state architectures, high-level designs, detailed designs and implementation roadmaps. Knowledge of recognised OT security standards and regulatory frameworks. Experience with OT asset-discovery, monitoring or threat-detection technologies. The ability to explain complex technical risks to engineering and senior business stakeholders. Previous consultancy, advisory or client-facing delivery experience. The position offers varied work across major operational-security programmes, alongside a competitive salary, bonus and benefits package. Hybrid working is available, although some client assignments will require regular on-site attendance. Applicants must be able to complete the required employment screening, with additional checks potentially required for certain client assignments. Recruiting at all levels from Consultant to Architect Salary: £55,000 - £105,000 + bonus + good benefits Location: Work from any of their offices across the UK.

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, 4/1 Hybrid. c.£100k +Benefits Head of Information Security / CISO / Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation. The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you. Key Responsibilities: Define and deliver the Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee third-party security, supplier assurance and client audits. Recruit, mentor, lead and develop the Information Security team. As such we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess: CISSP, CISM or equivalent security certification. Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance. Experience developing security strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing. This is an outstanding opportunity to join a forward-thinking medium sized global organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies. Location is commutable from West London, Middlesex, East Berkshire, North Surrey, South West London and parts of South London (Croydon etc). Accessible via District Line (West) and some mainline services.

Job Title: Cyber Security Specialist Location : Doncaster Salary: £70,000 - £75,000 per year Job Type: Full Time, 12 Month Fixed Term Contract At DB Cargo UK, we keep the UK moving. As the UK's leading rail freight operator, we provide safe, reliable and sustainable rail logistics services that support businesses, communities and the wider economy. We are investing in our technology, resilience and cyber security capability and are looking for an experienced Cyber Security Specialist to join us on a 12 month fixed term contract. This is a key role within our IT Governance & Security function. Acting as DB Cargo UK's cyber security subject matter expert, you will lead cyber security governance, operations, compliance and resilience activities across a diverse portfolio of business-critical applications, cloud services and operational railway systems. You will help ensure cyber security enables business performance, supports innovation and protects our people, customers and operations. Please note that successful candidates will need to go through national security vetting. What You Will Be Doing: Lead and continually improve cyber security governance, risk, compliance and resilience activities across the organisation. Own and maintain the Information Security Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information protection, DLP, retention, eDiscovery and security assurance activities. Support customer assurance, procurement reviews, supplier risk assessments and tender submissions. Provide cyber security leadership for ERTMS and ETCS transformation programmes. Deliver cyber awareness initiatives and senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft environments. Excellent stakeholder engagement and communication skills. Ability to balance security, operational requirements and commercial priorities. Degree in IT, Cyber Security or a related field is desirable. CISSP, CISM, ISO27001 or Microsoft Security certifications are advantageous. Why Join Us? You will have the opportunity to shape cyber security strategy and influence decision making across a critical national infrastructure organisation. We are looking for someone who combines strong technical expertise with sound commercial awareness, recognising that the best cyber security solutions protect people, support operational delivery and enable long-term business success. What's In It For You? Defined Contribution Pension Scheme with employer contributions of up to 10%. Health Cash Plan Scheme. Employee Benefits Portal with discounts across a wide range of retailers and services. Annual Leave Purchase Scheme. Cycle to Work Scheme. Charge & Go EV Vehicle Scheme. Employee Recognition Programme. Access to learning, development and career progression opportunities. Our Commitment: DB Cargo UK is committed to creating an inclusive workplace where everyone is valued, respected and able to thrive. We welcome applications from candidates of all backgrounds and are committed to building a diverse workforce that reflects the communities we serve. Please click APPLY to send your CV for this role. Candidates with experience of: Cyber Security Specialist, Cybersecurity Specialist, Information Security Specialist, Cyber Security Analyst, Senior Cyber Security Analyst, Information Security Analyst, Senior Information Security Analyst, Cyber Security Engineer, Information Security Engineer, Cyber Security Consultant, Information Security Consultant, Cyber Security Manager, Information Security Manager, Cyber Security Governance Specialist, Information Security Governance Analyst, Cyber Security Risk Analyst, may also be considered for this role.

Senior Design Engineers Bristol or Runcorn Hybrid Working 12-Month Contract Inside IR35 Help shape the future of defence aviation. Belcan is seeking experienced Senior Design Engineers, to support Design in Catia V5 for long term defence aircraft platforms in-Service repair projects. This is based on repair of aircraft metallic and/or composite structure to structural sizing, interface and project requirements, on an Initial 12 month Contract, from either our Bristol or Runcorn offices, with either Hybrid or potentially remote working dependent upon experience. The Senior Design Engineers will be working as part of a multidisciplinary engineering team, on a prestigious combat aircraft programme where your expertise will make a tangible impact while further developing your technical and professional capabilities, to potential Signatory level. What the Senior Design Engineer will be doing: CAD support on parametric model generation and update CAD support on 2d drawing generation for detail parts and installations Understanding of BAE modelling methodologies and processes Interpretation of client stress sizing data and project requirements to support CAD design solutions Interface management between aircraft structural components and systems Gaining higher level engineering knowledge and experience with the aim to achieve delegated signatory authority on BAE F-35 within 6-12 months. What we're looking for: Degree in Aerospace, Mechanical Engineering or a related discipline Awareness of manufacturing and installation processes for consideration in design solutions Knowledge of BAE/Lockheed-Martin repair processes & procedures Microsoft office applications - excel, ppt etc Experience with Catia V5, PLM - Teamcenter Desirable Experience: BAE Military aerospace programmes Inservice fleet repair Signatory delegation for design and/or repairs on Military Aircraft Platforms Repair project experience Aircraft metallic and/or composite structure design/repair solutions Successful applicants must meet eligibility requirements to obtain UK Security Clearance Why join Belcan? Join a team supporting a flagship defence programme, working on technically challenging engineering projects that contribute directly to the safety, performance and availability of a world-leading combat aircraft. Apply now and take your engineering career to new heights with Belcan. About Us Belcan, a Cognizant company, is a global force in technical services and engineering consultancy. Our legacy is built on delivering high-quality outputs and our unwavering commitment to developing the next generation of technical consultants and specialist engineers. Our expertise is vast, spanning across various engineering industries including aerospace, defence, marine, nuclear, automotive, and cyber security. This vacancy is being advertised by Belcan

MERITUS are recruiting for a Cloud Solutions Delivery Lead to join a leading Technology Consultancy, delivering secure cloud and digital transformation programmes across Central Government and Defence customers. LEAD CLOUD CONSULTANT - £80,000-£90,000 - REMOTE IN THE UK - ELIGIBLE FOR SC CLEARANCE We're seeking an experienced Cloud Solutions Delivery Lead to provide technical leadership, governance and architectural assurance across large-scale cloud, infrastructure and digital transformation programmes. This is a senior leadership role focused on cloud strategy, solution governance, architecture review and design authority activities across Azure, AWS and hybrid cloud environments. You'll work closely with engineering, security, architecture, delivery and commercial teams to ensure cloud solutions are secure, scalable, resilient and aligned to both customer and business objectives. Responsibilities: Lead and chair Design Authority reviews across cloud, infrastructure, platform and security solutions. Review and approve High-Level Designs (HLDs), Low-Level Designs (LLDs) and key architectural decisions. Define and govern cloud architecture standards across Microsoft Azure, AWS, Microsoft 365 and hybrid environments. Provide technical leadership for cloud migration, modernisation and transformation programmes. Ensure solutions meet security, compliance, resilience, operational and commercial requirements. Establish and maintain reusable reference architectures, design patterns and governance frameworks. Support bids, tenders, technical proposals and customer workshops. Provide architectural guidance on Infrastructure as Code, automation, platform engineering and cloud-native technologies. Act as the senior escalation point for complex technical decisions and delivery challenges. Mentor architects, technical leads and engineering teams while driving engineering best practice. Skills & Experience Essential: Strong experience operating within a Design Authority, Architecture Governance or Technical Assurance function. Expert knowledge of Microsoft Azure architecture, governance and landing zone principles. Strong understanding of AWS, Microsoft 365 and hybrid cloud environments. Experience producing and reviewing HLDs and LLDs within enterprise-scale environments. Knowledge of Infrastructure as Code using Terraform, Bicep or similar tooling. Strong understanding of enterprise networking, identity, security and cloud infrastructure. Experience influencing senior technical, operational and business stakeholders. Knowledge of resilience, disaster recovery, backup, continuity and FinOps practices. Excellent communication, governance and decision-making skills. Ability to translate complex technical concepts into clear business outcomes and recommendations. Desirable: Experience delivering solutions into Central Government, Defence or highly regulated environments. Knowledge of Cyber Essentials Plus, ISO27001 and NCSC guidance. Experience with container platforms, platform engineering and CI/CD tooling. Exposure to OFFICIAL and OFFICIAL-SENSITIVE government workloads. Cloud certifications across Microsoft Azure and/or AWS. Experience supporting bids, presales activities and customer solution workshops. Benefits: 25 days annual leave plus bank holidays. Option to purchase up to 10 additional days annual leave. Up to 3 paid volunteering days. 5% matched pension contribution. Private Medical Insurance. This is an excellent opportunity for an experienced Cloud Architect, Azure Solutions Architect, Technical Design Authority Lead, Enterprise Architect or Cloud Governance Lead to influence cloud strategy and architecture across critical Government and Defence programmes while working with modern Azure, AWS and hybrid cloud technologies at enterprise scale.

AI Security Consultant - OWASP / NIS - Cyber Security with LLMs Organisations are rolling out AI faster than they can secure it. LLM integrations, internal copilots and agents that can call APIs are going live, and the security teams responsible for them are still working out what "good" looks like. This role sits right in that gap. I'm working with a major UK consultancy to find an AI Security Consultant. You'll be a Cyber Security Consultant first, with a focus on how to secure the use of AI in organisations. Day to day, that means advising clients on core security across cloud, identity, applications, data and governance, while also helping them get to grips with the new risks AI brings in. Think prompt injection, excessive agency, data leakage, insecure tool use and weak human oversight. What you'll be doing You'll run security assessments and architecture reviews, then turn the findings into clear, prioritised advice that makes sense to both engineers and senior stakeholders. On the AI side, you'll threat model agentic workflows, review LLM-based applications, and help clients put sensible guardrails in place around permissions, sandboxing, logging and human-in-the-loop controls. You'll also help them set up governance and assurance for AI systems, from early experimentation through to production. You'll help security teams use AI safely in their own operations, whether that's alert triage, threat intel enrichment, incident summarisation, detection engineering or vulnerability prioritisation. What we're looking for A solid background in cyber security consulting, security architecture, risk management or security operations Good grounding across IAM, cloud security, AppSec, data protection, vulnerability management and incident response A working understanding of how GenAI and LLM-enabled systems handle data, prompts, APIs and tools, and awareness of the main AI risks (prompt injection, data poisoning, insecure output handling, vector/embedding weaknesses, AI supply chain) Experience threat modelling complex systems, ideally including agentic workflows Strong communication skills, and the ability to explain emerging risks in plain terms to a CISO or a board Nice to have: experience with AI governance or model risk, familiarity with NIST AI RMF, OWASP LLM and Agentic guidance, MITRE ATLAS, ISO 27001 or NIST CSF, hands-on SOC/SIEM/SOAR exposure, and certifications like CISSP, CISM, CCSP or GIAC. APPLY NOW FOR IMMEDIATE CONSIDERATION Location - work from any of their UK offices - London, Cambridge, Bristol, Manchester, Edinburgh or Belfast. Salary: £60,000 - £100,000 + bonus + good benefits Duration: Permanent. N.B. They do NOT offer visa sponsorship and you will be required to pass BPSS background checks.

Senior Security Engineering Consultant (Detection Engineering / Microsoft Sentinel) Remote 80% £80,000 + performance bonus About the role Our client, a well-established cybersecurity services provider, is growing its UK Professional Services team and needs a Senior Security Engineering Consultant to lead detection engineering and automation for its customers. This is a hands-on, customer-facing role. You'll design and deliver detection and response capabilities across SIEM, XDR and SOAR platforms, working alongside a dedicated SOC engineering team. You'll also own a "detection as code" approach, so detections and automations are built consistently and at scale. What you'll do Build and tune detection rulesets in KQL (or equivalent) across SIEM and XDR platforms Design use cases aligned to MITRE ATT&CK and assess coverage against customer log sources Develop SOAR automations, integrations and incident response playbooks Deliver detection as code pipelines with structured versioning Lead customer workshops on detection strategy and SOC maturity Produce clear deliverables such as detection strategies, use case catalogues and coverage assessments What you'll bring Strong SIEM engineering experience, ideally Microsoft Sentinel Proven KQL detection writing SOAR experience (Logic Apps, Cortex XSOAR or similar) Python or PowerShell scripting, including API integration XDR/EDR experience (Defender, CrowdStrike, Cortex or similar) Azure security telemetry knowledge Consultancy or customer-facing background, with excellent communication skills Nice to have: XSIAM, SentinelOne, NDR tools (Vectra, Corelight), threat intelligence enrichment. What's on offer £70k-£80k plus performance-based bonus Hybrid working, Mon-Fri 9:00-5:30, no on-call Varied customer work and exposure to real-world threats Industry-leading benefits To apply: Send your CV to Fazer Recruitment via Reed. Right to work in the UK is required as is a Full driving Licence

Account Manager - IT Managed Services Warwickshire (Hybrid 1-2 days in the office, 3-4 from home/meeting customers) £35,000 - £40,000 Basic + Uncapped Commission + Benefits Looking for an Account Management role where you can genuinely grow existing clients, uncover new opportunities and significantly increase your earnings? We're working with a well-established and growing technology solutions provider that's investing heavily in its sales team. Due to continued growth, they're looking to appoint a sales focused Account Manager to manage and develop a portfolio of existing clients while identifying new business opportunities across the IT and Managed Services market. This is an ideal opportunity for someone with experience selling IT Managed Services, Cybersecurity, Cloud, Telecoms, Hardware or Infrastructure solutions who enjoys building long-term relationships and delivering consultative solutions. The Role You'll take ownership of an existing customer base, helping clients maximise their technology investment while identifying opportunities to introduce additional products and services. Alongside managing existing relationships, you'll focus on building pipeline and working closely with SMEs to deliver tailored IT solutions. Key Responsibilities Develop and grow an existing portfolio of business accounts Cross-sell and upsell a broad portfolio of IT, Managed Services and Cybersecurity solutions Build relationships with decision-makers including IT Managers, Directors and CEOs Generate and maintain a healthy sales pipeline through proactive account management Work collaboratively with technical consultants to scope and deliver customer solutions Consistently achieve and exceed monthly GP and revenue targets About You You'll be a driven sales professional who enjoys developing long-term customer relationships while identifying commercial opportunities. You'll ideally have: Experience selling IT Managed Services, MSP, Cybersecurity, Cloud, Telecoms or Technology solutions Strong business development and account management skills Experience engaging senior decision-makers Excellent relationship-building ability A target-driven mindset with a passion for delivering exceptional customer service Experience using CRM systems to manage pipeline and forecasts What's on Offer? £35,000 - £40,000 basic salary Uncapped commission with excellent earning potential Hybrid working Supportive, collaborative sales culture Opportunity to work with market-leading IT, Managed Services and Cybersecurity solutions If you're an Account Manager looking to join a business that genuinely invests in its people and rewards success, we'd love to hear from you. Apply today for a confidential conversation.

Data Protection Manager - FTC Up to £50K-£55K Ashford Are you an experienced Data Protection professional looking for an opportunity to make a real impact within a values-driven organisation? We're recruiting for a Data Protection Manager to lead the delivery of data protection and information governance across a well-established healthcare organisation. This is an excellent opportunity for someone with strong UK GDPR knowledge who enjoys working collaboratively with senior stakeholders while driving compliance, best practice and continuous improvement. Reporting into the Director of Clinical Governance, you'll take ownership of the organisation's operational data protection and information governance activities. Working closely with senior leaders and the external Data Protection Officer, you'll ensure compliance with UK GDPR and wider information governance requirements while providing expert advice across the business. This is a varied role where you'll influence policy, improve processes and support teams in maintaining the highest standards of data security and regulatory compliance. Duties include: Lead the organisation's data protection and information governance activities. Manage Subject Access Requests (SARs), Freedom of Information (FOI) requests and Data Protection Impact Assessments (DPIAs). Develop, review and maintain information governance policies and procedures. Provide expert advice on data protection legislation and information governance matters. Support compliance with the Data Security and Protection Toolkit (DSPT). Work closely with IT teams to support cyber security initiatives and incident response. Deliver training and raise awareness of data protection and information governance across the organisation. Conduct audits, monitor compliance and implement continuous improvement initiatives. Build strong relationships with internal stakeholders and external partners. To be successful you must have/be: Previous experience in a Data Protection, Information Governance or Compliance role. Strong working knowledge of UK GDPR, Data Protection legislation and Information Governance. Experience managing SARs, FOI requests, DPIAs and data breach processes. Excellent communication skills with the ability to influence stakeholders at all levels. Strong organisational skills with exceptional attention to detail. The ability to interpret legislation and provide practical, commercially focused advice. A proactive, solutions-focused approach with excellent problem-solving skills. A relevant Data Protection or Information Governance qualification (or currently working towards one) would be highly advantageous. Experience within healthcare or the NHS would be beneficial but is not essential. If you're passionate about data protection, enjoy working in a collaborative environment and are looking for a role where you can genuinely influence best practice, we'd love to hear from you. Apply now! This role is being handled by Chloe Wadhams & Holly Ensoll, Business Support Consultant for Pearson Whiffin Recruitment. Not quite the right role but still looking? Whether you are entry or Executive level, our team of experienced Recruitment specialists can help you with your career. We are Kent's leading independent consultancy and pride ourselves on delivering an exceptional service to both candidates and clients. Find us on and By working with us, you will be helping support charities across