GRC Analyst Location: Manchester, Hybrid 80% remote, 20% onsite Duration: 31/10/2031 Rate - 480 - 520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years MUST BE PAYE THROUGH UMBRELLA Role Description: Maintain oversight of cyber security risks across suppliers Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately Govern risk acceptance and exception management processes Support risk-based prioritisation across security disciplines Coordinate supplier compliance activities within the SIAM framework Validate supplier adherence to agreed security requirements Monitor security performance against contractual obligations Drive accountability for control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings Present governance information to client stakeholders and governance forums Support strategic planning and risk-informed decision making Drive security governance maturity improvements across the supplier landscape Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness Security governance practices Support continuous improvement programmes across the cyber security operating model Facilitate cross-supplier resolution of governance issues If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Aug 11, 2026
Contractor
GRC Analyst Location: Manchester, Hybrid 80% remote, 20% onsite Duration: 31/10/2031 Rate - 480 - 520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years MUST BE PAYE THROUGH UMBRELLA Role Description: Maintain oversight of cyber security risks across suppliers Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately Govern risk acceptance and exception management processes Support risk-based prioritisation across security disciplines Coordinate supplier compliance activities within the SIAM framework Validate supplier adherence to agreed security requirements Monitor security performance against contractual obligations Drive accountability for control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings Present governance information to client stakeholders and governance forums Support strategic planning and risk-informed decision making Drive security governance maturity improvements across the supplier landscape Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness Security governance practices Support continuous improvement programmes across the cyber security operating model Facilitate cross-supplier resolution of governance issues If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Position Summary As a SOC Shift Lead, you build on your solid experience as a SOC Analyst by supervising and guiding a team of SOC Analysts during your assigned shift. You ensure quality and consistency across all alerts and incidents handled by the team while serving as the primary point of escalation. In this role, you support team development, drive process improvements, and maintain clear, customer-centric communication with all stakeholders. You also lead quality assurance efforts and ensure that service-level agreements (SLAs) are met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination - You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams (including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation - You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards Quality Assurance and Documentation - You conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency Collaboration and Mentorship - You mentor SOC Analysts in your team by offering regular, constructive feedback on triage processes and best practices. You encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement - You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive improvements that reflect our commitment to transparent and reliable performance Required Qualifications & Experience You may be required to hold or obtain UK Non-Police Personnel Vetting (NPPV) and/or a Security Check (SC) clearance as part of this role Willingness to work towards or obtain intermediate cybersecurity certifications (e.g. SBT BTL2, CREST Registered Intrusion Analyst) Proficiency with SIEM platforms, endpoint security tools, and ticketing systems, with an ability to make clear, data-driven decisions under pressure Critical Competencies - Technical Fit Operating Systems - Possess detailed knowledge of Windows and Linux system architectures, with a clear understanding of how event logs (e.g., Windows Event Viewer, Syslog) reflect system security posture Networking and Protocols - Have a comprehensive understanding of TCP/IP, DNS, DCHP, VPNs, SSL/TLS, and network forensics concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including alert correlation, the design of automated detection rules, and the interpretation of aggregated security data Incident Triage - Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence - how feeds are sourced, what constitutes actionable information, and how malware indicators are defined Scripting and Automation - Understand the concepts behind using scripting for automating regular data extraction and log analysis, and the benefits such tools being to maintaining consistency in alert handling Benefits At Claranet, we go the extra mile with our people-because we believe in building a workplace where everyone feels valued and supported. What makes us unique is Team Claranet , our internal community that supports causes close to our employees' hearts. We offer paid charity leave, support local charities across our offices, and host annual fundraising events, all backed by a dedicated committee. We're proud founding members of TC4RE (Technology Community for Racial Equality) working collectively to build a more diverse and inclusive tech industry. About Claranet Founded at the beginning of the dot com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries. Equal Opportunities Statement Diversity, equity and inclusion are at the heart of what we value as an organisation. Claranet is an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, age, disability or any other status protected by law. Our recruitment team are happy to support any reasonable adjustments that are needed within the recruitment process. Ready to take the next step in your career with Claranet? Click 'apply' - we can't wait to meet you! To view full job description please visit our careers page
Aug 10, 2026
Full time
Position Summary As a SOC Shift Lead, you build on your solid experience as a SOC Analyst by supervising and guiding a team of SOC Analysts during your assigned shift. You ensure quality and consistency across all alerts and incidents handled by the team while serving as the primary point of escalation. In this role, you support team development, drive process improvements, and maintain clear, customer-centric communication with all stakeholders. You also lead quality assurance efforts and ensure that service-level agreements (SLAs) are met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination - You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams (including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation - You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards Quality Assurance and Documentation - You conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency Collaboration and Mentorship - You mentor SOC Analysts in your team by offering regular, constructive feedback on triage processes and best practices. You encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement - You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive improvements that reflect our commitment to transparent and reliable performance Required Qualifications & Experience You may be required to hold or obtain UK Non-Police Personnel Vetting (NPPV) and/or a Security Check (SC) clearance as part of this role Willingness to work towards or obtain intermediate cybersecurity certifications (e.g. SBT BTL2, CREST Registered Intrusion Analyst) Proficiency with SIEM platforms, endpoint security tools, and ticketing systems, with an ability to make clear, data-driven decisions under pressure Critical Competencies - Technical Fit Operating Systems - Possess detailed knowledge of Windows and Linux system architectures, with a clear understanding of how event logs (e.g., Windows Event Viewer, Syslog) reflect system security posture Networking and Protocols - Have a comprehensive understanding of TCP/IP, DNS, DCHP, VPNs, SSL/TLS, and network forensics concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including alert correlation, the design of automated detection rules, and the interpretation of aggregated security data Incident Triage - Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence - how feeds are sourced, what constitutes actionable information, and how malware indicators are defined Scripting and Automation - Understand the concepts behind using scripting for automating regular data extraction and log analysis, and the benefits such tools being to maintaining consistency in alert handling Benefits At Claranet, we go the extra mile with our people-because we believe in building a workplace where everyone feels valued and supported. What makes us unique is Team Claranet , our internal community that supports causes close to our employees' hearts. We offer paid charity leave, support local charities across our offices, and host annual fundraising events, all backed by a dedicated committee. We're proud founding members of TC4RE (Technology Community for Racial Equality) working collectively to build a more diverse and inclusive tech industry. About Claranet Founded at the beginning of the dot com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries. Equal Opportunities Statement Diversity, equity and inclusion are at the heart of what we value as an organisation. Claranet is an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, age, disability or any other status protected by law. Our recruitment team are happy to support any reasonable adjustments that are needed within the recruitment process. Ready to take the next step in your career with Claranet? Click 'apply' - we can't wait to meet you! To view full job description please visit our careers page
Lead the architecture, design, and implementation of SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC) solutions across enterprise environments. Define and implement Identity Governance & Administration (IGA) capabilities including Joiner-Mover-Leaver (JML), access requests, certifications, segregation of duties (SoD), and policy management. Design end-to-end identity life cycle processes and integrate SailPoint with enterprise applications, directories, cloud platforms, HR systems, and ITSM tools such as ServiceNow. Develop target-state IAM architecture, security standards, design patterns, and implementation roadmaps aligned to business and compliance requirements. Lead application onboarding activities and design connector strategies using out-of-the-box and custom integrations (REST, SOAP, SCIM, JDBC, Active Directory, SAP, Salesforce, etc.). Provide technical leadership for custom workflows, rules, forms, reports, approval processes, provisioning, and role-based access control (RBAC) implementations. Conduct requirements workshops, assess IAM maturity, identify security gaps, and recommend SailPoint-based solutions to improve governance and compliance. Ensure SailPoint solutions comply with regulatory and security frameworks such as ISO 27001, SOX, GDPR, NIST, and industry-specific governance requirements. Support capacity planning, scalability, high availability, disaster recovery, and performance optimization of SailPoint platforms. Provide governance and technical oversight throughout project delivery, including design reviews, code reviews, solution assurance, and production readiness assessments. Mentor developers, engineers, and IAM analysts while acting as the technical escalation point for complex SailPoint issues and enhancements. Collaborate with security, infrastructure, cloud, audit, and business stakeholders to develop IAM roadmaps and support strategic identity transformation initiatives. Desired Skills and Experience level: 10 - 12 years' experience primarily around IAM background and strong Sailpoint experience covering below. SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC) IAM, IGA, JML, RBAC, ABAC REST, SOAP, SCIM APIs Active Directory, Azure AD/Entra ID, LDAP Java, BeanShell, PowerShell ServiceNow integration Cloud platforms (Azure, AWS, GCP) CyberArk, Okta, Ping, ForgeRock (desirable) Security and compliance frameworks (ISO 27001, NIST, SOX, GDPR)
Aug 10, 2026
Contractor
Lead the architecture, design, and implementation of SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC) solutions across enterprise environments. Define and implement Identity Governance & Administration (IGA) capabilities including Joiner-Mover-Leaver (JML), access requests, certifications, segregation of duties (SoD), and policy management. Design end-to-end identity life cycle processes and integrate SailPoint with enterprise applications, directories, cloud platforms, HR systems, and ITSM tools such as ServiceNow. Develop target-state IAM architecture, security standards, design patterns, and implementation roadmaps aligned to business and compliance requirements. Lead application onboarding activities and design connector strategies using out-of-the-box and custom integrations (REST, SOAP, SCIM, JDBC, Active Directory, SAP, Salesforce, etc.). Provide technical leadership for custom workflows, rules, forms, reports, approval processes, provisioning, and role-based access control (RBAC) implementations. Conduct requirements workshops, assess IAM maturity, identify security gaps, and recommend SailPoint-based solutions to improve governance and compliance. Ensure SailPoint solutions comply with regulatory and security frameworks such as ISO 27001, SOX, GDPR, NIST, and industry-specific governance requirements. Support capacity planning, scalability, high availability, disaster recovery, and performance optimization of SailPoint platforms. Provide governance and technical oversight throughout project delivery, including design reviews, code reviews, solution assurance, and production readiness assessments. Mentor developers, engineers, and IAM analysts while acting as the technical escalation point for complex SailPoint issues and enhancements. Collaborate with security, infrastructure, cloud, audit, and business stakeholders to develop IAM roadmaps and support strategic identity transformation initiatives. Desired Skills and Experience level: 10 - 12 years' experience primarily around IAM background and strong Sailpoint experience covering below. SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC) IAM, IGA, JML, RBAC, ABAC REST, SOAP, SCIM APIs Active Directory, Azure AD/Entra ID, LDAP Java, BeanShell, PowerShell ServiceNow integration Cloud platforms (Azure, AWS, GCP) CyberArk, Okta, Ping, ForgeRock (desirable) Security and compliance frameworks (ISO 27001, NIST, SOX, GDPR)
Summary: As our SCADA Systems Analyst, you will be responsible for ensuring the continuous availability, integrity, and evolution of our Prism SCADA infrastructure. Serving as a crucial technical bridge between operational requirements and system performance, you'll drive the full lifecycle of our SCADA environment-from GUI development and database configuration to researching emerging outstation communication protocols. By delivering expert troubleshooting and collaborating with cross-functional engineering teams, you will minimize system downtime and ensure critical data flows seamlessly between field assets and corporate systems. Main Responsibilities Develop and maintain the Prism SCADA Graphical User Interface (GUI), enhancing operator visibility and system usability. Administer Enterprise SCADA database servers and outstation programs, ensuring all configurations remained strictly compliant with SCADA Specification Documents. Minimise system downtime by providing rapid-response troubleshooting for GUI and outstation software. Maintain patching regimes for Enterprise SCADA servers in line with IT Security requirements. Act as a key technical liaison for the Engineering department and third-party contractors, managing complex interfaces between Enterprise SCADA and corporate IT systems. Conduct research and development into next-generation outstation interfaces and data gathering techniques to improve operational efficiency and system reach. Provide multi-site technical leadership, supporting SCADA team members with remote diagnostic assistance across the company's operational area. Manage third-party support contracts and maintain proactive reporting lines to the Systems Manager to mitigate potential infrastructure risks. Contribute to activities relating to the companies NIS CAF submission, including evidence gathering and alignment with industry standards. Skills/Qualifications/Experience Demonstrable ability to perform under pressure. Competency in diagnosing hardware-to-software interface issues. Proficiency in maintaining and optimising high-availability SCADA database servers. Experienced in SCADA GUI development, database configuration, and outstation / PLC programming in line with technical specifications. Expert in managing live operational SCADA database servers, maintaining corporate system interfaces, and researching new communication/data gathering protocols. Experienced in providing technical hardware/software interfaces for Engineering departments and managing third-party contractor integrations. Proven ability to minimise system downtime through rapid troubleshooting, software modification. Substantial experience in the lifecycle management of SCADA systems, including GUI design, database hierarchy, and real-time data visualisation. Proven track record in configuring and commissioning outstation/RTU programming and developing robust communication interfaces for remote data acquisition. Experience bridging the gap between Operational Technology (OT) and Corporate IT/Enterprise systems to ensure seamless data flow across the organisation. Extensive experience working to formal SCADA Specification Documents and maintaining rigorous documentation standards. Experience supervising third-party contractors and providing technical consultancy to internal Engineering departments. Knowledge of NIS Cyber Security Legislation and how it impact the industry practices. Skilled in providing on-site technical assistance and remote diagnostics. Collaborative partner to internal departments and vendors, with a focus on timely risk reporting and project alignment. Platforms/Hardware/Processes Prism SCADA, Outstation/RTU Programming. Industrial Database Servers, Electrical Control Systems, Communication Interfaces. System Integration, Technical Specification Alignment, Incident Management. Grow a career with a meaningful purpose. We know the communities we serve are diverse. We recognise creativity comes from diversity not similarity. That's why we are enthusiastic about creating inclusion across age, race, gender, ethnicity, religion and identity. You will experience our dedication to equal opportunities and fair treatment for all: through your recruitment, employment and career progression with South East Water. Benefits package: Excellent Stakeholder pension scheme, up to 10% employer contribution. 5 weeks holiday plus bank holidays per annum, increasing to 6 weeks with length of service. Flexible annual leave policy to buy or sell holiday leave. Paid volunteering days. Cycle to work scheme. Health cash plan. Life assurance. Wellbeing related benefits. What can you expect from your recruitment? To apply for this position, please submit your CV on our career's website. It is necessary for you to have the legal right to work in the UK when you begin employment with South East Water. Additionally, as part of the employment offer, you will need to pass background, identity, and employment referencing checks. If this sounds like the opportunity you've been looking for, apply now! South East Water kindly asks that recruitment agencies refrain from submitting CVs to our employees or associates without explicit invitation from our HR Resourcing team. CVs sent on a speculative basis will not be acknowledged and will not assume any responsibility for fees or commissions in the event that we hire a candidate who applied directly or subsequently introduced by an instructed agency. Compensation package: £35,000 - £45,000p.a. (dependent on experience)
Aug 07, 2026
Full time
Summary: As our SCADA Systems Analyst, you will be responsible for ensuring the continuous availability, integrity, and evolution of our Prism SCADA infrastructure. Serving as a crucial technical bridge between operational requirements and system performance, you'll drive the full lifecycle of our SCADA environment-from GUI development and database configuration to researching emerging outstation communication protocols. By delivering expert troubleshooting and collaborating with cross-functional engineering teams, you will minimize system downtime and ensure critical data flows seamlessly between field assets and corporate systems. Main Responsibilities Develop and maintain the Prism SCADA Graphical User Interface (GUI), enhancing operator visibility and system usability. Administer Enterprise SCADA database servers and outstation programs, ensuring all configurations remained strictly compliant with SCADA Specification Documents. Minimise system downtime by providing rapid-response troubleshooting for GUI and outstation software. Maintain patching regimes for Enterprise SCADA servers in line with IT Security requirements. Act as a key technical liaison for the Engineering department and third-party contractors, managing complex interfaces between Enterprise SCADA and corporate IT systems. Conduct research and development into next-generation outstation interfaces and data gathering techniques to improve operational efficiency and system reach. Provide multi-site technical leadership, supporting SCADA team members with remote diagnostic assistance across the company's operational area. Manage third-party support contracts and maintain proactive reporting lines to the Systems Manager to mitigate potential infrastructure risks. Contribute to activities relating to the companies NIS CAF submission, including evidence gathering and alignment with industry standards. Skills/Qualifications/Experience Demonstrable ability to perform under pressure. Competency in diagnosing hardware-to-software interface issues. Proficiency in maintaining and optimising high-availability SCADA database servers. Experienced in SCADA GUI development, database configuration, and outstation / PLC programming in line with technical specifications. Expert in managing live operational SCADA database servers, maintaining corporate system interfaces, and researching new communication/data gathering protocols. Experienced in providing technical hardware/software interfaces for Engineering departments and managing third-party contractor integrations. Proven ability to minimise system downtime through rapid troubleshooting, software modification. Substantial experience in the lifecycle management of SCADA systems, including GUI design, database hierarchy, and real-time data visualisation. Proven track record in configuring and commissioning outstation/RTU programming and developing robust communication interfaces for remote data acquisition. Experience bridging the gap between Operational Technology (OT) and Corporate IT/Enterprise systems to ensure seamless data flow across the organisation. Extensive experience working to formal SCADA Specification Documents and maintaining rigorous documentation standards. Experience supervising third-party contractors and providing technical consultancy to internal Engineering departments. Knowledge of NIS Cyber Security Legislation and how it impact the industry practices. Skilled in providing on-site technical assistance and remote diagnostics. Collaborative partner to internal departments and vendors, with a focus on timely risk reporting and project alignment. Platforms/Hardware/Processes Prism SCADA, Outstation/RTU Programming. Industrial Database Servers, Electrical Control Systems, Communication Interfaces. System Integration, Technical Specification Alignment, Incident Management. Grow a career with a meaningful purpose. We know the communities we serve are diverse. We recognise creativity comes from diversity not similarity. That's why we are enthusiastic about creating inclusion across age, race, gender, ethnicity, religion and identity. You will experience our dedication to equal opportunities and fair treatment for all: through your recruitment, employment and career progression with South East Water. Benefits package: Excellent Stakeholder pension scheme, up to 10% employer contribution. 5 weeks holiday plus bank holidays per annum, increasing to 6 weeks with length of service. Flexible annual leave policy to buy or sell holiday leave. Paid volunteering days. Cycle to work scheme. Health cash plan. Life assurance. Wellbeing related benefits. What can you expect from your recruitment? To apply for this position, please submit your CV on our career's website. It is necessary for you to have the legal right to work in the UK when you begin employment with South East Water. Additionally, as part of the employment offer, you will need to pass background, identity, and employment referencing checks. If this sounds like the opportunity you've been looking for, apply now! South East Water kindly asks that recruitment agencies refrain from submitting CVs to our employees or associates without explicit invitation from our HR Resourcing team. CVs sent on a speculative basis will not be acknowledged and will not assume any responsibility for fees or commissions in the event that we hire a candidate who applied directly or subsequently introduced by an instructed agency. Compensation package: £35,000 - £45,000p.a. (dependent on experience)
Information Security Lead / Cyber Security Lead Hybrid 60,000 - 70,000 + Excellent Benefits Immediate Start Avvailable Infrastructure Security Network Security Cyber Security ISO 27001 Are you an experienced Infrastructure, Network or Cyber Security professional looking to take the next step in your career? We're looking for a technically strong Information Security Lead to join a growing technology business, taking ownership of information security, governance and compliance while remaining closely involved with infrastructure and cyber security. This is an ideal opportunity for someone who has progressed through Infrastructure Engineering, Network Security, Cyber Security Engineering or Technical Security and is ready to move into a broader Information Security leadership role. Working closely with Infrastructure, IT Operations, Engineering and senior stakeholders, you'll help shape the organisation's security posture, ensuring security is embedded across networks, cloud platforms, servers and business systems. You'll combine hands-on technical knowledge with information security governance, helping drive continual improvement across the Information Security Management System (ISMS), security controls and compliance activities. You'll lead security risk assessments, coordinate vulnerability management and remediation programmes, support penetration testing, oversee supplier security assurance, manage information security incidents and contribute to Business Continuity and Disaster Recovery planning. You'll also play a key role in maintaining ISO 27001 certification, supporting customer audits and promoting a strong security culture throughout the organisation. We're looking for someone with a solid technical background who understands how infrastructure is designed, secured and supported. Experience working with technologies such as network security, firewalls, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, identity and access management (IAM), vulnerability management, patch management and infrastructure hardening will be highly beneficial. Alongside your technical expertise, you'll have exposure to ISO 27001, information security frameworks, security audits, governance, risk management and compliance. Experience working with Cyber Essentials, supplier assurance, security policies and incident response would also be advantageous. Whether you're currently a Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead or Information Security Lead, we'd love to hear from you. This is an opportunity to step into a highly visible role where you'll influence security strategy, work with modern technologies and help shape the future direction of information security within the organisation, while continuing to build on your technical expertise. Key Skills: Information Security Lead, Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead, Infrastructure Security, Network Security, Cyber Security, Information Security, ISO 27001, ISMS, Azure Security, Microsoft 365 Security, Active Directory, Firewalls, Vulnerability Management, Patch Management, Endpoint Security, IAM, Security Assurance, Governance, Risk & Compliance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials.
Aug 07, 2026
Full time
Information Security Lead / Cyber Security Lead Hybrid 60,000 - 70,000 + Excellent Benefits Immediate Start Avvailable Infrastructure Security Network Security Cyber Security ISO 27001 Are you an experienced Infrastructure, Network or Cyber Security professional looking to take the next step in your career? We're looking for a technically strong Information Security Lead to join a growing technology business, taking ownership of information security, governance and compliance while remaining closely involved with infrastructure and cyber security. This is an ideal opportunity for someone who has progressed through Infrastructure Engineering, Network Security, Cyber Security Engineering or Technical Security and is ready to move into a broader Information Security leadership role. Working closely with Infrastructure, IT Operations, Engineering and senior stakeholders, you'll help shape the organisation's security posture, ensuring security is embedded across networks, cloud platforms, servers and business systems. You'll combine hands-on technical knowledge with information security governance, helping drive continual improvement across the Information Security Management System (ISMS), security controls and compliance activities. You'll lead security risk assessments, coordinate vulnerability management and remediation programmes, support penetration testing, oversee supplier security assurance, manage information security incidents and contribute to Business Continuity and Disaster Recovery planning. You'll also play a key role in maintaining ISO 27001 certification, supporting customer audits and promoting a strong security culture throughout the organisation. We're looking for someone with a solid technical background who understands how infrastructure is designed, secured and supported. Experience working with technologies such as network security, firewalls, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, identity and access management (IAM), vulnerability management, patch management and infrastructure hardening will be highly beneficial. Alongside your technical expertise, you'll have exposure to ISO 27001, information security frameworks, security audits, governance, risk management and compliance. Experience working with Cyber Essentials, supplier assurance, security policies and incident response would also be advantageous. Whether you're currently a Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead or Information Security Lead, we'd love to hear from you. This is an opportunity to step into a highly visible role where you'll influence security strategy, work with modern technologies and help shape the future direction of information security within the organisation, while continuing to build on your technical expertise. Key Skills: Information Security Lead, Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead, Infrastructure Security, Network Security, Cyber Security, Information Security, ISO 27001, ISMS, Azure Security, Microsoft 365 Security, Active Directory, Firewalls, Vulnerability Management, Patch Management, Endpoint Security, IAM, Security Assurance, Governance, Risk & Compliance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials.
Power Platform Developer 3 months initially - extensions London - hybrid 495 per day inside IR35 - Umbrella only Hold active or eligible for SC security clearance The Power Platform Developer / Engineer will design, configure, build, test and support digital solutions using the Microsoft Power Platform. The role will help transform manual, paper-based or inefficient business processes into secure, user-centred and maintainable digital services. The postholder will work with product managers, business analysts, service owners, architects, testers, data specialists, security teams and end users to develop solutions that meet business needs, comply with government standards, and support wider digital transformation. This role combines low-code configuration, pro-code development, integration, automation, data modelling, testing, support and platform governance. Key Responsibilities 1. Solution Design and Development Design, configure and develop solutions using Power Apps , Power Automate , Dataverse , Power Pages , Copilot Studio and related Microsoft 365 services. Build canvas apps, model-driven apps, automated workflows, approvals, forms, dashboards and lightweight business applications. Translate user needs and business requirements into effective digital solutions. Apply modern development standards, including reusable components, documented configuration, secure design and structured deployment. Use Power Platform development tools such as solutions, environments, connection references, environment variables and pipelines. 2. Configuration Engineering Configure Power Platform components in line with agreed design patterns and governance standards. Manage Dataverse tables, columns, views, forms, business rules, security roles and application lifecycle settings. Configure Power Automate flows for business process automation, notifications, approvals and integrations. Configure Power Pages where external-facing or self-service user experiences are required. Support configuration of connectors, gateways, service accounts and data connections in line with organisational policies. 3. Integration and Data Integrate Power Platform solutions with Microsoft 365 services such as SharePoint, Teams, Outlook, Excel, OneDrive and Power BI. Support integration with enterprise platforms such as CLIO Operate, ServiceNow, Azure services or line-of-business systems where required. Design simple and effective data models using Dataverse, SharePoint Lists or approved data sources. Ensure data is structured, secure, accessible and aligned with information governance requirements. Work with data teams to support reporting, analytics and data quality requirements. 4. Testing and Quality Assurance Develop and execute unit, system and user acceptance testing for Power Platform solutions. Support test planning, defect triage and release readiness activity. Ensure solutions are reliable, accessible, performant and supportable. Apply version control, peer review and deployment practices where appropriate. Document test outcomes and support service acceptance into live operation. 5. Security, Compliance and Governance Build solutions that comply with organisational security, data protection, records management and accessibility requirements. Apply role-based access controls, data loss prevention policies, environment strategy and connector governance. Work with cyber security, information governance and architecture teams to ensure solutions are secure by design. Support DPIAs, risk assessments, technical documentation and service assurance activities where required. Ensure solutions follow government and departmental standards for secure, accessible and maintainable digital services. 6. Service Support and Continuous Improvement Support live Power Platform services, including incident investigation, defect resolution and minor enhancements. Monitor performance, usage, failures and flow runs. Maintain documentation for support teams, service owners and users. Identify opportunities to simplify, automate or improve existing processes. Contribute to continuous improvement of Power Platform standards, reusable components and delivery methods. 7. Collaboration and User-Centred Delivery Work in multidisciplinary teams with product, delivery, technical, data and business colleagues. Engage with users to understand needs, pain points and service outcomes. Contribute to discovery, alpha, beta and live phases of digital service delivery. Communicate technical information clearly to non-technical stakeholders. Support knowledge sharing, community of practice activity and upskilling of citizen developers where appropriate. Essential Skills and Experience Technical Skills The successful candidate will be able to demonstrate experience in: Developing and configuring solutions using Microsoft Power Platform . Building Power Apps , including canvas apps and model-driven apps. Creating and maintaining Power Automate cloud flows. Working with Dataverse , including tables, relationships, forms, views and security roles. Using Microsoft 365 data sources such as SharePoint Lists, Excel, Outlook and Teams. Managing Power Platform solutions across development, test and production environments. Understanding Power Platform environment strategy, connectors, DLP policies and governance. Applying testing, documentation and deployment practices. Troubleshooting issues across apps, flows, data sources and permissions. Understanding accessibility, security and data protection considerations. Development and Engineering Skills The postholder will: Design, build, test, correct and document applications or configurations. Apply modern development standards and reusable design patterns. Write clean, maintainable and secure configuration or code. Use structured testing and release methods. Support services through development, transition and live operation. Work collaboratively in an agile, multidisciplinary environment. Desirable Skills and Experience Desirable experience may include: Experience with Power Pages . Experience with Copilot Studio . Experience with Power BI integration and reporting. Experience with Azure DevOps , GitHub or Microsoft Power Platform pipelines. Experience with Azure Logic Apps , Azure Functions or API integrations. Experience of working in a UK government, public sector or regulated environment.yea Understanding of the GDS Service Standard , accessibility requirements and government digital delivery phases. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Aug 07, 2026
Contractor
Power Platform Developer 3 months initially - extensions London - hybrid 495 per day inside IR35 - Umbrella only Hold active or eligible for SC security clearance The Power Platform Developer / Engineer will design, configure, build, test and support digital solutions using the Microsoft Power Platform. The role will help transform manual, paper-based or inefficient business processes into secure, user-centred and maintainable digital services. The postholder will work with product managers, business analysts, service owners, architects, testers, data specialists, security teams and end users to develop solutions that meet business needs, comply with government standards, and support wider digital transformation. This role combines low-code configuration, pro-code development, integration, automation, data modelling, testing, support and platform governance. Key Responsibilities 1. Solution Design and Development Design, configure and develop solutions using Power Apps , Power Automate , Dataverse , Power Pages , Copilot Studio and related Microsoft 365 services. Build canvas apps, model-driven apps, automated workflows, approvals, forms, dashboards and lightweight business applications. Translate user needs and business requirements into effective digital solutions. Apply modern development standards, including reusable components, documented configuration, secure design and structured deployment. Use Power Platform development tools such as solutions, environments, connection references, environment variables and pipelines. 2. Configuration Engineering Configure Power Platform components in line with agreed design patterns and governance standards. Manage Dataverse tables, columns, views, forms, business rules, security roles and application lifecycle settings. Configure Power Automate flows for business process automation, notifications, approvals and integrations. Configure Power Pages where external-facing or self-service user experiences are required. Support configuration of connectors, gateways, service accounts and data connections in line with organisational policies. 3. Integration and Data Integrate Power Platform solutions with Microsoft 365 services such as SharePoint, Teams, Outlook, Excel, OneDrive and Power BI. Support integration with enterprise platforms such as CLIO Operate, ServiceNow, Azure services or line-of-business systems where required. Design simple and effective data models using Dataverse, SharePoint Lists or approved data sources. Ensure data is structured, secure, accessible and aligned with information governance requirements. Work with data teams to support reporting, analytics and data quality requirements. 4. Testing and Quality Assurance Develop and execute unit, system and user acceptance testing for Power Platform solutions. Support test planning, defect triage and release readiness activity. Ensure solutions are reliable, accessible, performant and supportable. Apply version control, peer review and deployment practices where appropriate. Document test outcomes and support service acceptance into live operation. 5. Security, Compliance and Governance Build solutions that comply with organisational security, data protection, records management and accessibility requirements. Apply role-based access controls, data loss prevention policies, environment strategy and connector governance. Work with cyber security, information governance and architecture teams to ensure solutions are secure by design. Support DPIAs, risk assessments, technical documentation and service assurance activities where required. Ensure solutions follow government and departmental standards for secure, accessible and maintainable digital services. 6. Service Support and Continuous Improvement Support live Power Platform services, including incident investigation, defect resolution and minor enhancements. Monitor performance, usage, failures and flow runs. Maintain documentation for support teams, service owners and users. Identify opportunities to simplify, automate or improve existing processes. Contribute to continuous improvement of Power Platform standards, reusable components and delivery methods. 7. Collaboration and User-Centred Delivery Work in multidisciplinary teams with product, delivery, technical, data and business colleagues. Engage with users to understand needs, pain points and service outcomes. Contribute to discovery, alpha, beta and live phases of digital service delivery. Communicate technical information clearly to non-technical stakeholders. Support knowledge sharing, community of practice activity and upskilling of citizen developers where appropriate. Essential Skills and Experience Technical Skills The successful candidate will be able to demonstrate experience in: Developing and configuring solutions using Microsoft Power Platform . Building Power Apps , including canvas apps and model-driven apps. Creating and maintaining Power Automate cloud flows. Working with Dataverse , including tables, relationships, forms, views and security roles. Using Microsoft 365 data sources such as SharePoint Lists, Excel, Outlook and Teams. Managing Power Platform solutions across development, test and production environments. Understanding Power Platform environment strategy, connectors, DLP policies and governance. Applying testing, documentation and deployment practices. Troubleshooting issues across apps, flows, data sources and permissions. Understanding accessibility, security and data protection considerations. Development and Engineering Skills The postholder will: Design, build, test, correct and document applications or configurations. Apply modern development standards and reusable design patterns. Write clean, maintainable and secure configuration or code. Use structured testing and release methods. Support services through development, transition and live operation. Work collaboratively in an agile, multidisciplinary environment. Desirable Skills and Experience Desirable experience may include: Experience with Power Pages . Experience with Copilot Studio . Experience with Power BI integration and reporting. Experience with Azure DevOps , GitHub or Microsoft Power Platform pipelines. Experience with Azure Logic Apps , Azure Functions or API integrations. Experience of working in a UK government, public sector or regulated environment.yea Understanding of the GDS Service Standard , accessibility requirements and government digital delivery phases. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Regulatory Analyst - DORA Hybrid Our client, a leading financial services organisation, is seeking a Regulatory Analyst with strong expertise in Digital Operational Resilience (DORA) and European cyber regulations. As a subject matter expert, you will drive DORA implementation, collaborate with operational resilience teams, and influence policies, controls, and risk frameworks to safeguard critical business services. Key Responsibilities Regulatory Assurance (DORA): Lead gap analyses and implement solutions to ensure full DORA compliance . Embed DORA's six pillars: ICT Risk Management, Incident Reporting, Resilience Testing, Information Sharing, Third Party Risk, and Governance . Collaborate with operational resilience and business continuity teams. Design and execute testing initiatives to measure cyber and digital resilience. Assess third-party resilience as part of TPRM efforts. Partner with IT and Risk stakeholders on cross-functional initiatives. Act as a subject matter expert and champion of digital resilience. Policies & Standards: Develop and evolve policies to align with both local and enterprise-wide regulatory requirements. Contribute to the information security policy framework . Governance & Controls: Support ongoing control maintenance and internal audits. Work with stakeholders to assess risk and strengthen mitigation strategies . Build deep expertise around regulated business services . What You Bring Expertise & Education: Degree in IT, Information Security, Risk Management or a related field. Strong knowledge of DORA, NIS2, and UK/EU cyber regulations . Familiarity with frameworks: ISO27001, NIST, COBIT, CAF . Recognised certifications such as CISSP, CISM, CISA, CRISC, CTPRP . Experience with European financial regulations (BaFin, AMF, etc.). Proven background in information security, audit, or risk management . Skills & Traits: Financial services experience with strong awareness of cybersecurity trends . Proactive problem solver with excellent analytical skills . Collaborative with strong stakeholder management abilities .
Sep 23, 2025
Full time
Regulatory Analyst - DORA Hybrid Our client, a leading financial services organisation, is seeking a Regulatory Analyst with strong expertise in Digital Operational Resilience (DORA) and European cyber regulations. As a subject matter expert, you will drive DORA implementation, collaborate with operational resilience teams, and influence policies, controls, and risk frameworks to safeguard critical business services. Key Responsibilities Regulatory Assurance (DORA): Lead gap analyses and implement solutions to ensure full DORA compliance . Embed DORA's six pillars: ICT Risk Management, Incident Reporting, Resilience Testing, Information Sharing, Third Party Risk, and Governance . Collaborate with operational resilience and business continuity teams. Design and execute testing initiatives to measure cyber and digital resilience. Assess third-party resilience as part of TPRM efforts. Partner with IT and Risk stakeholders on cross-functional initiatives. Act as a subject matter expert and champion of digital resilience. Policies & Standards: Develop and evolve policies to align with both local and enterprise-wide regulatory requirements. Contribute to the information security policy framework . Governance & Controls: Support ongoing control maintenance and internal audits. Work with stakeholders to assess risk and strengthen mitigation strategies . Build deep expertise around regulated business services . What You Bring Expertise & Education: Degree in IT, Information Security, Risk Management or a related field. Strong knowledge of DORA, NIS2, and UK/EU cyber regulations . Familiarity with frameworks: ISO27001, NIST, COBIT, CAF . Recognised certifications such as CISSP, CISM, CISA, CRISC, CTPRP . Experience with European financial regulations (BaFin, AMF, etc.). Proven background in information security, audit, or risk management . Skills & Traits: Financial services experience with strong awareness of cybersecurity trends . Proactive problem solver with excellent analytical skills . Collaborative with strong stakeholder management abilities .
