Enterprise Cybersecurity Analytics Engineer Join a leading Cybersecurity Science & Analytics team building advanced data-driven solutions to tackle evolving cyber threats. You'll work with cybersecurity specialists, data scientists, and engineers to develop innovative analytics, AI/ML models, and scalable data platforms. Role Overview A senior technical position focused on designing and delivering advanced analytics solutions for cybersecurity. You'll contribute to rapid prototyping, production engineering, and innovation across data, AI, and security domains. Key Responsibilities Build and optimise data pipelines, datasets, and analytics platforms Develop AI/ML models, detections, and security automations Support cloud platforms and production environments Conduct R&D on emerging technologies and cyber threats Collaborate with teams to deliver data-driven cybersecurity solutions Respond to urgent security threats and vulnerabilities Skills & Experience Strong background in data engineering, analytics, or software development Experience with cloud platforms (Azure preferred), big data tools (eg Spark, Databricks), and Python Knowledge of cybersecurity domains (eg network, cloud, threat detection, incident response) Experience in AI/ML, data science, or advanced analytics Ability to build scalable data products and security applications Requirements Degree in Computer Science, Data Science, Engineering, or related STEM field (or equivalent experience) Strong problem-solving skills and eagerness to learn
Apr 27, 2026
Contractor
Enterprise Cybersecurity Analytics Engineer Join a leading Cybersecurity Science & Analytics team building advanced data-driven solutions to tackle evolving cyber threats. You'll work with cybersecurity specialists, data scientists, and engineers to develop innovative analytics, AI/ML models, and scalable data platforms. Role Overview A senior technical position focused on designing and delivering advanced analytics solutions for cybersecurity. You'll contribute to rapid prototyping, production engineering, and innovation across data, AI, and security domains. Key Responsibilities Build and optimise data pipelines, datasets, and analytics platforms Develop AI/ML models, detections, and security automations Support cloud platforms and production environments Conduct R&D on emerging technologies and cyber threats Collaborate with teams to deliver data-driven cybersecurity solutions Respond to urgent security threats and vulnerabilities Skills & Experience Strong background in data engineering, analytics, or software development Experience with cloud platforms (Azure preferred), big data tools (eg Spark, Databricks), and Python Knowledge of cybersecurity domains (eg network, cloud, threat detection, incident response) Experience in AI/ML, data science, or advanced analytics Ability to build scalable data products and security applications Requirements Degree in Computer Science, Data Science, Engineering, or related STEM field (or equivalent experience) Strong problem-solving skills and eagerness to learn
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fuelled by the goal of helping our clients thrive and enabling them to make the world a better place. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do We are looking for an Senior IT Consultant with experience in delivering technology transformation programmes, particularly within the UK public sector (NHS, Government, MOD, MOJ, Local or Central Government). You will bring hands-on expertise in systems implementation, functional & technical design, testing, and data migration, with a focus on Oracle Cloud HCM modules such as Core HR, Payroll, Talent Management, Recruiting as well as Oracle ME and other relevant foundational technologies and frameworks. The role will enable you to be part of a team driving meaningful change across the UK public sector. As part of our Public Sector Transformation team, you'll work at the intersection of strategy, technology, and impact - helping to deliver mission-critical programmes that shape the future of services like healthcare, central government, and beyond. You'll be solving complex challenges, from leading Oracle HCM transformations to managing complex data migrations, systems testing or managing full-scale implementations - you'll tackle the challenges that matter. Working alongside passionate experts and forward-thinking public sector leaders, you'll help design the digital foundations of tomorrow's healthcare, government, and public sector services. You will deploy customized IT strategies, digital platforms and architecture in order to leverage the digital potential of our customers with state of the art tools such as cloud computing, AI, blockchain, microservices and containerization. You will be responsible for specific parts of the project and will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. You'll develop ground-breaking projects by enabling our clients to effectively use agile methods and modern approaches in the context of strategic IT implementation. You will work on a variety of technology topics, applying your technical consulting skills to strategic technology questions. You will also be supported by an extensive training curriculum, plus technology-specific training and mentoring to help build upon you technical skills. You will also help guide junior members of the team, help with project proposals, client care, building relationships with peers and identifying new business opportunities. Finally, as an Senior IT Consultant you will contribute to the Practice Area development and help to build the BCG brand as a key member of the case team. What You'll Bring We're looking for exceptional talent with experience of working in the consulting industry to join us. You will typically have: • 6-10 years' experience in delivering technology transformation programmes, particularly within the UK public sector (NHS, Government , MOD, MOJ, Local Gov, or Central Government) • Previous Consulting experience is a must (focused on technology, digital initiatives, large-scale transformations) • You will bring hands-on expertise in delivering large-scale systems implementation from functional and technical perspective, incl. testing, and data migration, with a focus on Oracle HCM modules such as Core HR, Payroll, Talent Management and Recruiting. • Strong understanding of public sector delivery frameworks, especially in NHS or central government. • Background in technology consulting and client delivery in Agile or hybrid environments. • A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment. • Experience in the organisation of workshops at peer level and facilitating in client meetings. • Strong business acumen; can frame complex problems in appropriate business contexts. • Familiarity with technological foundation of Oracle Cloud / Fusion HCM as well as adjacent relevant technologies such as Oracle DWH and Oracle ME • Excellent communication and client-facing skills. • Willingness to travel within the UK. • A University degree with above average academic performance in a Computer Science or IT related degree. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Apr 27, 2026
Full time
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fuelled by the goal of helping our clients thrive and enabling them to make the world a better place. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do We are looking for an Senior IT Consultant with experience in delivering technology transformation programmes, particularly within the UK public sector (NHS, Government, MOD, MOJ, Local or Central Government). You will bring hands-on expertise in systems implementation, functional & technical design, testing, and data migration, with a focus on Oracle Cloud HCM modules such as Core HR, Payroll, Talent Management, Recruiting as well as Oracle ME and other relevant foundational technologies and frameworks. The role will enable you to be part of a team driving meaningful change across the UK public sector. As part of our Public Sector Transformation team, you'll work at the intersection of strategy, technology, and impact - helping to deliver mission-critical programmes that shape the future of services like healthcare, central government, and beyond. You'll be solving complex challenges, from leading Oracle HCM transformations to managing complex data migrations, systems testing or managing full-scale implementations - you'll tackle the challenges that matter. Working alongside passionate experts and forward-thinking public sector leaders, you'll help design the digital foundations of tomorrow's healthcare, government, and public sector services. You will deploy customized IT strategies, digital platforms and architecture in order to leverage the digital potential of our customers with state of the art tools such as cloud computing, AI, blockchain, microservices and containerization. You will be responsible for specific parts of the project and will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. You'll develop ground-breaking projects by enabling our clients to effectively use agile methods and modern approaches in the context of strategic IT implementation. You will work on a variety of technology topics, applying your technical consulting skills to strategic technology questions. You will also be supported by an extensive training curriculum, plus technology-specific training and mentoring to help build upon you technical skills. You will also help guide junior members of the team, help with project proposals, client care, building relationships with peers and identifying new business opportunities. Finally, as an Senior IT Consultant you will contribute to the Practice Area development and help to build the BCG brand as a key member of the case team. What You'll Bring We're looking for exceptional talent with experience of working in the consulting industry to join us. You will typically have: • 6-10 years' experience in delivering technology transformation programmes, particularly within the UK public sector (NHS, Government , MOD, MOJ, Local Gov, or Central Government) • Previous Consulting experience is a must (focused on technology, digital initiatives, large-scale transformations) • You will bring hands-on expertise in delivering large-scale systems implementation from functional and technical perspective, incl. testing, and data migration, with a focus on Oracle HCM modules such as Core HR, Payroll, Talent Management and Recruiting. • Strong understanding of public sector delivery frameworks, especially in NHS or central government. • Background in technology consulting and client delivery in Agile or hybrid environments. • A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment. • Experience in the organisation of workshops at peer level and facilitating in client meetings. • Strong business acumen; can frame complex problems in appropriate business contexts. • Familiarity with technological foundation of Oracle Cloud / Fusion HCM as well as adjacent relevant technologies such as Oracle DWH and Oracle ME • Excellent communication and client-facing skills. • Willingness to travel within the UK. • A University degree with above average academic performance in a Computer Science or IT related degree. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
PAM Engineer - MUST HAVE SC CLEARANCE - Wokingham and remote - 6 months+/RATE: £595 per day inside IR35 One of our Blue Chip Clients is urgently looking for a PAM Engineer. Please find some details below: CONTRACTOR MUST HOLD ACTIVE SC CLEARANCE MUST BE PAYE THROUGH UMBRELLA Role Description: Qualifications - Relevant certifications (eg, CyberArk Defender, CISSP, CISM) - Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures - Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities - Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) - Implement least privilege access models and enforce secure credential management - Monitor and audit privileged access activities across systems and applications - Integrate PAM tools with SIEM, IAM, and other security platforms - Develop and maintain policies, procedures, and documentation for PAM operations - Conduct regular access reviews, privilege audits, and risk assessments - Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration - Provide technical support and troubleshooting for PAM-related issues - Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications - Experience in PAM engineering or cybersecurity roles - Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea - Strong understanding of Active Directory, LDAP, and authentication protocols - Experience with Scripting (PowerShell, Python) for automation and reporting - Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) - Excellent problem-solving, communication, and documentation skills Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Apr 27, 2026
Contractor
PAM Engineer - MUST HAVE SC CLEARANCE - Wokingham and remote - 6 months+/RATE: £595 per day inside IR35 One of our Blue Chip Clients is urgently looking for a PAM Engineer. Please find some details below: CONTRACTOR MUST HOLD ACTIVE SC CLEARANCE MUST BE PAYE THROUGH UMBRELLA Role Description: Qualifications - Relevant certifications (eg, CyberArk Defender, CISSP, CISM) - Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures - Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities - Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) - Implement least privilege access models and enforce secure credential management - Monitor and audit privileged access activities across systems and applications - Integrate PAM tools with SIEM, IAM, and other security platforms - Develop and maintain policies, procedures, and documentation for PAM operations - Conduct regular access reviews, privilege audits, and risk assessments - Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration - Provide technical support and troubleshooting for PAM-related issues - Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications - Experience in PAM engineering or cybersecurity roles - Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea - Strong understanding of Active Directory, LDAP, and authentication protocols - Experience with Scripting (PowerShell, Python) for automation and reporting - Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) - Excellent problem-solving, communication, and documentation skills Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Smart Solutions Engineer Alecto Recruitment works closely with a UK leading building management systems provider who has been established for over 20 years. They are specialists within building controls along with having a dedicated master system integrator division to their business. Due to continued growth, they are looking to hire an experienced Systems architect / Smart Solutions Engineer. Role Overview As a Smart Solutions Engineer, you'll play a pivotal role in designing and implementing integrated smart building solutions for large-scale commercial projects. You'll collaborate with clients, vendors, and internal teams to ensure seamless integration across various building systems, delivering solutions that are secure, scalable, and aligned with our clients' objectives. Key Responsibilities Integrated Systems Design: Develop and oversee the design of integrated solutions encompassing BMS, lighting, HVAC, and other building systems using protocols such as BACnet, Modbus, DALI, OPC, and MQTT. Device Qualification: Conduct rigorous testing of system devices, ensuring compliance with cybersecurity standards and verifying robust network capabilities. Asset Naming Conventions: Ensure adherence to asset naming standards, such as Building Device Naming Standards (BDNS) across all projects. Building Information Modelling: Implement and manage semantic building data models using standards like Software Solutions Collaboration: Work closely with our internal software engineering team to define requirements for integrations, data management and enhanced capabilities. Essential Qualifications & Experience Minimum 5 years experience in Smart Buildings Industry. Strong understanding of Building Systems such as BMS, Lighting Controls, Access Control, etc. Proficiency with open protocols such as BACnet and Modbus. Good understanding of IT/OT networks and network cybersecurity principles. Experience with semantic building data modelling standards (BRICK, Haystack, DBO). Hands-on experience with controller systems, preferably Tridium Niagara. Salary / Benefits: 55,000 - 65,000 Car Allowance 25 Days Holiday + Bank Holidays Pension Private Healthcare INDBMS
Apr 27, 2026
Full time
Smart Solutions Engineer Alecto Recruitment works closely with a UK leading building management systems provider who has been established for over 20 years. They are specialists within building controls along with having a dedicated master system integrator division to their business. Due to continued growth, they are looking to hire an experienced Systems architect / Smart Solutions Engineer. Role Overview As a Smart Solutions Engineer, you'll play a pivotal role in designing and implementing integrated smart building solutions for large-scale commercial projects. You'll collaborate with clients, vendors, and internal teams to ensure seamless integration across various building systems, delivering solutions that are secure, scalable, and aligned with our clients' objectives. Key Responsibilities Integrated Systems Design: Develop and oversee the design of integrated solutions encompassing BMS, lighting, HVAC, and other building systems using protocols such as BACnet, Modbus, DALI, OPC, and MQTT. Device Qualification: Conduct rigorous testing of system devices, ensuring compliance with cybersecurity standards and verifying robust network capabilities. Asset Naming Conventions: Ensure adherence to asset naming standards, such as Building Device Naming Standards (BDNS) across all projects. Building Information Modelling: Implement and manage semantic building data models using standards like Software Solutions Collaboration: Work closely with our internal software engineering team to define requirements for integrations, data management and enhanced capabilities. Essential Qualifications & Experience Minimum 5 years experience in Smart Buildings Industry. Strong understanding of Building Systems such as BMS, Lighting Controls, Access Control, etc. Proficiency with open protocols such as BACnet and Modbus. Good understanding of IT/OT networks and network cybersecurity principles. Experience with semantic building data modelling standards (BRICK, Haystack, DBO). Hands-on experience with controller systems, preferably Tridium Niagara. Salary / Benefits: 55,000 - 65,000 Car Allowance 25 Days Holiday + Bank Holidays Pension Private Healthcare INDBMS
Technical Lead Engineer (Full Stack Java / Vue.js) Our client based in Manchester City Centre is currently looking for an experienced Java Technical Lead Engineer to join our growing team, helping to shape and deliver high-quality, end-to-end solutions across their platform. This is a key role where you ll act as the bridge between our Java/Spring backend and Vue.js frontend, taking ownership of feature development from concept through to delivery. You ll play a central part in ensuring seamless integration across the stack, maintaining architectural consistency, and driving best practices across the engineering team. Alongside hands-on development, you ll mentor junior engineers and help elevate the overall technical capability of the team. What you ll be doing: You ll be working across the full stack, leading the design and delivery of new features while ensuring performance, scalability, and reliability. The role requires someone who can take high-level requirements and translate them into clear technical solutions, working closely with both product and engineering teams. Technical environment You ll bring deep expertise in Vue.js and modern frontend development, paired with strong backend experience in Java and the Spring Boot ecosystem (including Data, Security, and MVC). A solid understanding of RESTful API design, SQL/database design, CI/CD pipelines, and AWS is essential. What we re looking for We re looking for someone with 8+ years of experience in software engineering who has a proven track record of leading technical initiatives and mentoring others. You ll be a strong problem-solver and critical thinker, comfortable working from broad requirements and shaping them into robust, scalable solutions. A security-first mindset would be highly beneficial, and any background in cybersecurity would be a significant advantage given the nature of our work. Location & flexibility Preference for candidates based in the North West, but we re open to fully remote candidates. The role includes one week per quarter in our Manchester office to collaborate with the wider team. Benefits: Flexible working Potential share options Interested? Please Click Apply Now! Technical Lead Engineer (Full Stack Java / Vue.js)
Apr 27, 2026
Full time
Technical Lead Engineer (Full Stack Java / Vue.js) Our client based in Manchester City Centre is currently looking for an experienced Java Technical Lead Engineer to join our growing team, helping to shape and deliver high-quality, end-to-end solutions across their platform. This is a key role where you ll act as the bridge between our Java/Spring backend and Vue.js frontend, taking ownership of feature development from concept through to delivery. You ll play a central part in ensuring seamless integration across the stack, maintaining architectural consistency, and driving best practices across the engineering team. Alongside hands-on development, you ll mentor junior engineers and help elevate the overall technical capability of the team. What you ll be doing: You ll be working across the full stack, leading the design and delivery of new features while ensuring performance, scalability, and reliability. The role requires someone who can take high-level requirements and translate them into clear technical solutions, working closely with both product and engineering teams. Technical environment You ll bring deep expertise in Vue.js and modern frontend development, paired with strong backend experience in Java and the Spring Boot ecosystem (including Data, Security, and MVC). A solid understanding of RESTful API design, SQL/database design, CI/CD pipelines, and AWS is essential. What we re looking for We re looking for someone with 8+ years of experience in software engineering who has a proven track record of leading technical initiatives and mentoring others. You ll be a strong problem-solver and critical thinker, comfortable working from broad requirements and shaping them into robust, scalable solutions. A security-first mindset would be highly beneficial, and any background in cybersecurity would be a significant advantage given the nature of our work. Location & flexibility Preference for candidates based in the North West, but we re open to fully remote candidates. The role includes one week per quarter in our Manchester office to collaborate with the wider team. Benefits: Flexible working Potential share options Interested? Please Click Apply Now! Technical Lead Engineer (Full Stack Java / Vue.js)
Who we are GlobalData is a specialist information services business helping clients decode the future, make better decisions and reach more customers. Through our data, expert analysis and innovative solutions, we provide intelligence across the world s largest industries to companies, governments and industry professionals. Formed in 2016 through the combination of multiple specialist firms, we are now a fully integrated global platform with 3,500+ colleagues across 20+ industries, supporting over 5,000 customers worldwide. Why join GlobalData? We are at a pivotal stage of growth, supported by recent investment and ambitious plans. It s a fast-paced, entrepreneurial environment where collaboration drives success, and where curious, ambitious individuals can make a real impact as we work towards becoming the world s most trusted source of strategic industry intelligence. The role As Information Security Manager, you will lead the strategy and delivery of initiatives that strengthen GlobalData s cybersecurity posture across global operations. You ll ensure our people, systems and infrastructure remain secure, resilient and able to support continued growth. Reporting to the Chief Information Security Officer, you will lead a team of security professionals, drive key security programmes, and work closely with stakeholders across technology and business teams to improve cyber governance, data security and operational resilience. This role requires strong expertise in information security, AI and data governance, alongside experience in vendor management and third-party risk. What you ll be doing Lead and deliver the information security strategy aligned to business goals Develop and maintain security frameworks, policies and standards Oversee risk management, threat assessment and vulnerability programmes Ensure compliance with ISO 27001, ISO 42001, GDPR and other relevant frameworks Manage security operations including incident response, monitoring and investigations Partner with IT, engineering, legal and business teams to embed security best practice Lead internal/external audits, assessments and remediation plans Manage third-party and vendor security risk programmes Build, mentor and lead a high-performing security team Provide executive reporting on security risks, metrics and improvement plans Monitor emerging threats, technologies and regulations What we re looking for 8+ years experience in senior cybersecurity or information security roles Leadership experience within a complex, multinational business Experience managing global teams across multiple regions Strong knowledge of ISO 27001, NIST, CIS Controls or similar frameworks Proven experience in security operations, risk management and compliance Experience handling security incidents and crisis management Strong commercial awareness and budget management experience Excellent communication and stakeholder management skills, including senior leadership exposure Strong understanding of IT infrastructure, cloud technologies and enterprise systems Experience managing third-party vendors and technology partners Preferred Certifications CISM or similar ISO 27001 Lead Implementer / Lead Auditor ISO 42001 (desirable) Technical Skills Security architecture and cloud security (AWS) SIEM, EDR and SOC tools ISO 27001 / ISO 42001 implementation Vulnerability management and penetration testing oversight Data protection, encryption and privacy controls Third-party risk management tools and processes Leadership & Competencies Inspiring leader who develops teams and delegates effectively Strategic thinker with strong decision-making skills Able to influence senior stakeholders and collaborate cross-functionally Hands-on and comfortable operating at all levels Calm under pressure with strong prioritisation skills Able to translate technical risk into clear business impact Highly organised with strong attention to detail In addition to a rewarding career, we support our GlobalData colleagues with a range of benefits across health, finances, fitness, travel, tech and more. To find out more about the roles and benefits on offer in your region, visit (url removed) GlobalData believes strongly in the value of diversity and creating supportive, inclusive environments where our colleagues can succeed. As such, we are proud to be an Equal Opportunity Employer. GlobalData is determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable.
Apr 27, 2026
Full time
Who we are GlobalData is a specialist information services business helping clients decode the future, make better decisions and reach more customers. Through our data, expert analysis and innovative solutions, we provide intelligence across the world s largest industries to companies, governments and industry professionals. Formed in 2016 through the combination of multiple specialist firms, we are now a fully integrated global platform with 3,500+ colleagues across 20+ industries, supporting over 5,000 customers worldwide. Why join GlobalData? We are at a pivotal stage of growth, supported by recent investment and ambitious plans. It s a fast-paced, entrepreneurial environment where collaboration drives success, and where curious, ambitious individuals can make a real impact as we work towards becoming the world s most trusted source of strategic industry intelligence. The role As Information Security Manager, you will lead the strategy and delivery of initiatives that strengthen GlobalData s cybersecurity posture across global operations. You ll ensure our people, systems and infrastructure remain secure, resilient and able to support continued growth. Reporting to the Chief Information Security Officer, you will lead a team of security professionals, drive key security programmes, and work closely with stakeholders across technology and business teams to improve cyber governance, data security and operational resilience. This role requires strong expertise in information security, AI and data governance, alongside experience in vendor management and third-party risk. What you ll be doing Lead and deliver the information security strategy aligned to business goals Develop and maintain security frameworks, policies and standards Oversee risk management, threat assessment and vulnerability programmes Ensure compliance with ISO 27001, ISO 42001, GDPR and other relevant frameworks Manage security operations including incident response, monitoring and investigations Partner with IT, engineering, legal and business teams to embed security best practice Lead internal/external audits, assessments and remediation plans Manage third-party and vendor security risk programmes Build, mentor and lead a high-performing security team Provide executive reporting on security risks, metrics and improvement plans Monitor emerging threats, technologies and regulations What we re looking for 8+ years experience in senior cybersecurity or information security roles Leadership experience within a complex, multinational business Experience managing global teams across multiple regions Strong knowledge of ISO 27001, NIST, CIS Controls or similar frameworks Proven experience in security operations, risk management and compliance Experience handling security incidents and crisis management Strong commercial awareness and budget management experience Excellent communication and stakeholder management skills, including senior leadership exposure Strong understanding of IT infrastructure, cloud technologies and enterprise systems Experience managing third-party vendors and technology partners Preferred Certifications CISM or similar ISO 27001 Lead Implementer / Lead Auditor ISO 42001 (desirable) Technical Skills Security architecture and cloud security (AWS) SIEM, EDR and SOC tools ISO 27001 / ISO 42001 implementation Vulnerability management and penetration testing oversight Data protection, encryption and privacy controls Third-party risk management tools and processes Leadership & Competencies Inspiring leader who develops teams and delegates effectively Strategic thinker with strong decision-making skills Able to influence senior stakeholders and collaborate cross-functionally Hands-on and comfortable operating at all levels Calm under pressure with strong prioritisation skills Able to translate technical risk into clear business impact Highly organised with strong attention to detail In addition to a rewarding career, we support our GlobalData colleagues with a range of benefits across health, finances, fitness, travel, tech and more. To find out more about the roles and benefits on offer in your region, visit (url removed) GlobalData believes strongly in the value of diversity and creating supportive, inclusive environments where our colleagues can succeed. As such, we are proud to be an Equal Opportunity Employer. GlobalData is determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable.
Our Mission TryHackMe makes learning cybersecurity accessible, practical, and engaging for everyone. With more than 6 million learners worldwide, we're transforming how cybersecurity is taught - from school and university classrooms to professional training programmes. This role sits at the heart of that mission. You'll own the success of a portfolio of our education customers - the universities, high schools, and cybersecurity training providers using TryHackMe to build the next generation of cyber professionals. The Role This role will cover 2 Education client segments - and that distinction matters. A portion of your portfolio will need genuine relationship management: EBRs, strategic conversations, expansion discussions, day-to-day support and human judgement calls. These are the accounts where personal engagement creates real value and commercial outcomes. The majority, however, are high-volume, lower-ARR accounts that cannot - and should not - be managed through 1:1 effort. For these customers, the experience needs to be excellent without being manual. That means automated onboarding journeys, lifecycle signals, health scoring, and self-serve resources that keep customers engaged, adopting, and renewing without a CSM touching every account individually. You will own both. You are the relationship manager and the systems builder. The best candidates for this role are equally comfortable running a strategic EBR and building the automation that means 120 other accounts never need one. This role also sits at the centre of how TryHackMe scales its CS motion. Done well, what you build here unlocks capacity across the entire CS organisation and turns an operational challenge into a repeatable, predictable system. Key Responsibilities Relationship Management - Where It Counts Run EBRs, define and deliver on success metrics with accounts where engagement depth drives commercial outcomes - even at lower ACV, these conversations regularly unlock licence growth Build and maintain relationships with instructors, programme leads, and training coordinators across your strategic tier Identify the right stakeholder map per account - the platform user, the budget holder, and the renewal champion are often three different people Ensure customers in this tier understand the learning outcomes students are achieving and feel confident renewing ️ Digital Motion - Build the System That Scales This is the other half of the role, and it is equally important. The majority of your portfolio should be managed through signals, journeys, and automation - not individual conversations. Onboarding & Adoption Design and maintain structured onboarding journeys (30-90 day paths) that drive fast time-to-value without requiring manual CSM involvement Define clear success milestones and adoption benchmarks so customers know what good looks like and can get there independently Ensure customers graduate into self-sufficiency with confidence, rather than disengaging silently Lifecycle Automation Implement adoption nudges, churn-prevention triggers, and renewal workflows that scale across hundreds of accounts Surface expansion opportunities and identify where a CSM is required to drive these Define health scoring logic, trigger conditions, and the exception paths that determine when a human needs to step in Continuously analyse the performance of automation and iterate quickly - this role expects hands-on ownership, not passive administration of existing flows Renewal by Default Build renewal health and prediction models based on usage, engagement, and lifecycle signals Surface renewal risk months in advance, not at expiry Create clear exception handling for high-risk or high-potential accounts that warrant personal outreach The goal is renewals by default, supported by strong systems rather than manual chasing Self-Serve Experience Help define what a great no-CSM customer experience looks like for this segment Develop self-serve resources - guides, FAQs, video walkthroughs - that reduce repetitive inbound queries and keep customers moving independently The ambition: customers remain engaged, adopting, and renewing with minimal human touch because the system works Day-to-day support Education clients generate a constant flow of day-to-day queries - platform issues, access problems, licence questions - and they often need fast answers because they are standing in front of a live classroom. Respond quickly, accurately, and empathetically across email, Slack, and other async channels Triage intelligently - know the difference between a configuration issue, user error, and a genuine platform bug Escalate to support, product or engineering effectively without bouncing the customer back unnecessarily for information you can find yourself Use patterns in inbound queries to inform self-serve content that reduces the same question arriving again Technical Triage & Cross-Functional Escalation Understand platform-level issues well enough to describe them accurately to both customers and internal teams Build strong working relationships with product, engineering and support so escalations move quickly Follow through on open issues and keep customers updated without being chased Expansion Identification Identify when institutions are growing their use of TryHackMe or adding new cohorts Surface clear expansion signals to the Account Manager with relevant context Use EBRs on strategically interesting accounts to deepen relationships and uncover growth potential Operational Excellence Run this portfolio like a product, not a list of contacts. Monitor dashboards daily for health, adoption, churn risk, and renewal performance Analyse trends across hundreds of accounts to identify systemic improvements - not just individual account issues Document and iterate on playbooks so what works becomes repeatable and transferable Maintain clean, accurate CRM and CS platform hygiene - forecasting accuracy is non-negotiable What Success Looks Like First 90 days: Full portfolio reviewed, tiered, and risks flagged First automated touchpoints built and running Inbound query patterns documented and being addressed systematically Initial EBRs booked with accounts showing expansion or strategic potential Ongoing: 90%+ Gross Revenue Retention across the portfolio NRR tracking toward 110-125%+ No renewal missed or deprioritised due to volume A progressively more automated and self-serve-ready portfolio, with human effort concentrated where it creates the most value Clean, accurate CRM - HubSpot up to date at all times About You Essential Proven experience managing large, high-volume portfolios - 100+ accounts - with clear renewal and retention results Demonstrated experience personally building automated onboarding, adoption, and renewal journeys - not just using existing flows, but designing and owning them Strong support instincts: fast, accurate, empathetic responses to a constant flow of client queries Technical literacy sufficient to triage platform issues and communicate clearly to both customers and engineering High data literacy - you use health scores, usage signals, and engagement metrics to make decisions, not gut feel Highly organised, with demonstrable systems for tracking renewals, flagging risks, and managing a large portfolio without accounts slipping Proactive communicator - in a remote company, over-communication is a feature, not a flaw Cross-functional and resourceful - comfortable working across support, engineering, product, and sales without needing to be managed step by step Strong async written communication across email, Slack, and whatever channels clients use When asked about your experience, strong candidates can clearly articulate: Digital CS systems they personally built - not maintained, built How automation directly improved renewal or retention outcomes Where something didn't work and how they iterated What changed for customers because of the systems they designed Highly Desirable Experience working with education institutions - understanding of semester cycles, academic procurement, and the cultural dynamics of working with lecturers and administrators Hands-on experience with CS platforms such as HubSpot, ChurnZero, Customer.io, or similar Exposure to token or licence models with non-standard renewal complexity Familiarity with cybersecurity, technical learning platforms, or EdTech This Role Is Probably Not Right For You If You Prefer traditional, relationship-heavy account management as your primary lever Have not personally built automation or lifecycle journeys from scratch Rely on manual outreach as the default response to retention risk Need significant direction to identify problems and build solutions independently The Kind of Person Who Thrives Here You're energised by breadth, not intimidated by it. You see a portfolio of 165 accounts and your first instinct is to design the system that serves them well - and then identify the 15 that need a real conversation. You don't wait to be told what to do. You see the gap, design the solution . click apply for full job details
Apr 26, 2026
Full time
Our Mission TryHackMe makes learning cybersecurity accessible, practical, and engaging for everyone. With more than 6 million learners worldwide, we're transforming how cybersecurity is taught - from school and university classrooms to professional training programmes. This role sits at the heart of that mission. You'll own the success of a portfolio of our education customers - the universities, high schools, and cybersecurity training providers using TryHackMe to build the next generation of cyber professionals. The Role This role will cover 2 Education client segments - and that distinction matters. A portion of your portfolio will need genuine relationship management: EBRs, strategic conversations, expansion discussions, day-to-day support and human judgement calls. These are the accounts where personal engagement creates real value and commercial outcomes. The majority, however, are high-volume, lower-ARR accounts that cannot - and should not - be managed through 1:1 effort. For these customers, the experience needs to be excellent without being manual. That means automated onboarding journeys, lifecycle signals, health scoring, and self-serve resources that keep customers engaged, adopting, and renewing without a CSM touching every account individually. You will own both. You are the relationship manager and the systems builder. The best candidates for this role are equally comfortable running a strategic EBR and building the automation that means 120 other accounts never need one. This role also sits at the centre of how TryHackMe scales its CS motion. Done well, what you build here unlocks capacity across the entire CS organisation and turns an operational challenge into a repeatable, predictable system. Key Responsibilities Relationship Management - Where It Counts Run EBRs, define and deliver on success metrics with accounts where engagement depth drives commercial outcomes - even at lower ACV, these conversations regularly unlock licence growth Build and maintain relationships with instructors, programme leads, and training coordinators across your strategic tier Identify the right stakeholder map per account - the platform user, the budget holder, and the renewal champion are often three different people Ensure customers in this tier understand the learning outcomes students are achieving and feel confident renewing ️ Digital Motion - Build the System That Scales This is the other half of the role, and it is equally important. The majority of your portfolio should be managed through signals, journeys, and automation - not individual conversations. Onboarding & Adoption Design and maintain structured onboarding journeys (30-90 day paths) that drive fast time-to-value without requiring manual CSM involvement Define clear success milestones and adoption benchmarks so customers know what good looks like and can get there independently Ensure customers graduate into self-sufficiency with confidence, rather than disengaging silently Lifecycle Automation Implement adoption nudges, churn-prevention triggers, and renewal workflows that scale across hundreds of accounts Surface expansion opportunities and identify where a CSM is required to drive these Define health scoring logic, trigger conditions, and the exception paths that determine when a human needs to step in Continuously analyse the performance of automation and iterate quickly - this role expects hands-on ownership, not passive administration of existing flows Renewal by Default Build renewal health and prediction models based on usage, engagement, and lifecycle signals Surface renewal risk months in advance, not at expiry Create clear exception handling for high-risk or high-potential accounts that warrant personal outreach The goal is renewals by default, supported by strong systems rather than manual chasing Self-Serve Experience Help define what a great no-CSM customer experience looks like for this segment Develop self-serve resources - guides, FAQs, video walkthroughs - that reduce repetitive inbound queries and keep customers moving independently The ambition: customers remain engaged, adopting, and renewing with minimal human touch because the system works Day-to-day support Education clients generate a constant flow of day-to-day queries - platform issues, access problems, licence questions - and they often need fast answers because they are standing in front of a live classroom. Respond quickly, accurately, and empathetically across email, Slack, and other async channels Triage intelligently - know the difference between a configuration issue, user error, and a genuine platform bug Escalate to support, product or engineering effectively without bouncing the customer back unnecessarily for information you can find yourself Use patterns in inbound queries to inform self-serve content that reduces the same question arriving again Technical Triage & Cross-Functional Escalation Understand platform-level issues well enough to describe them accurately to both customers and internal teams Build strong working relationships with product, engineering and support so escalations move quickly Follow through on open issues and keep customers updated without being chased Expansion Identification Identify when institutions are growing their use of TryHackMe or adding new cohorts Surface clear expansion signals to the Account Manager with relevant context Use EBRs on strategically interesting accounts to deepen relationships and uncover growth potential Operational Excellence Run this portfolio like a product, not a list of contacts. Monitor dashboards daily for health, adoption, churn risk, and renewal performance Analyse trends across hundreds of accounts to identify systemic improvements - not just individual account issues Document and iterate on playbooks so what works becomes repeatable and transferable Maintain clean, accurate CRM and CS platform hygiene - forecasting accuracy is non-negotiable What Success Looks Like First 90 days: Full portfolio reviewed, tiered, and risks flagged First automated touchpoints built and running Inbound query patterns documented and being addressed systematically Initial EBRs booked with accounts showing expansion or strategic potential Ongoing: 90%+ Gross Revenue Retention across the portfolio NRR tracking toward 110-125%+ No renewal missed or deprioritised due to volume A progressively more automated and self-serve-ready portfolio, with human effort concentrated where it creates the most value Clean, accurate CRM - HubSpot up to date at all times About You Essential Proven experience managing large, high-volume portfolios - 100+ accounts - with clear renewal and retention results Demonstrated experience personally building automated onboarding, adoption, and renewal journeys - not just using existing flows, but designing and owning them Strong support instincts: fast, accurate, empathetic responses to a constant flow of client queries Technical literacy sufficient to triage platform issues and communicate clearly to both customers and engineering High data literacy - you use health scores, usage signals, and engagement metrics to make decisions, not gut feel Highly organised, with demonstrable systems for tracking renewals, flagging risks, and managing a large portfolio without accounts slipping Proactive communicator - in a remote company, over-communication is a feature, not a flaw Cross-functional and resourceful - comfortable working across support, engineering, product, and sales without needing to be managed step by step Strong async written communication across email, Slack, and whatever channels clients use When asked about your experience, strong candidates can clearly articulate: Digital CS systems they personally built - not maintained, built How automation directly improved renewal or retention outcomes Where something didn't work and how they iterated What changed for customers because of the systems they designed Highly Desirable Experience working with education institutions - understanding of semester cycles, academic procurement, and the cultural dynamics of working with lecturers and administrators Hands-on experience with CS platforms such as HubSpot, ChurnZero, Customer.io, or similar Exposure to token or licence models with non-standard renewal complexity Familiarity with cybersecurity, technical learning platforms, or EdTech This Role Is Probably Not Right For You If You Prefer traditional, relationship-heavy account management as your primary lever Have not personally built automation or lifecycle journeys from scratch Rely on manual outreach as the default response to retention risk Need significant direction to identify problems and build solutions independently The Kind of Person Who Thrives Here You're energised by breadth, not intimidated by it. You see a portfolio of 165 accounts and your first instinct is to design the system that serves them well - and then identify the 15 that need a real conversation. You don't wait to be told what to do. You see the gap, design the solution . click apply for full job details
Locations : Amsterdam Brussels London Who We Are The Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do As a seamlessly integrated part of the BCG network, we provide consulting services focused on the development and implementation of business-critical IT architecture and digital solutions. We create technology platforms and deliver exceptionally customized solutions of the future for our clients, from data strategies to next-generation customer journey solutions and transformational business models. We solve the most daunting challenges that companies face today and envision for tomorrow. Our style is entrepreneurial - nimble and innovative, with multifaceted, cross-functional teams and completely vendor-independent. Our unique selling proposition is technology expertise and delivery. As a Manager, you will work closely with our client's leadership teams to understand their key challenges, define IT strategies, win buy-in for your recommendations and lead BCG case team members to transform client potential into performance. You will deploy customized IT strategies, digital platforms and architecture to leverage the digital potential of our customers with state-of-the-art tools such as cloud computing, AI, blockchain, microservices and containerization. You will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. Besides giving direction on the functional, execution and management of the project you will be given end-to-end responsibility for larger, highly technical and more complex modules within the project and begin to develop specialized knowledge to help you solve our clients problems. Together with our clients you will develop convincing IT strategies, concepts and solutions, applying your sound technical know-how along with your analytical and conceptual skills. You will start to take on team lead responsibilities and demonstrate intellectual leadership directing diverse teams of consulting talent. Your role will also be to help team members flourish through thought leadership, team mentoring, knowledge sharing, giving frequent feedback and creating opportunities for team members to learn and grow. You will also personally develop and grow by being exposed to new and complex challenges daily. Finally, as a Manager you will contribute to the Practice Area development and help to build the BCG brand as a digital leader. What You'll Bring 10 to 15 years' experience in Tech strategy and consulting or IT project management. You will have relevant experience from a top consulting firm (focused on technology, digital initiatives) and have led the design and management of IT implementation and strategy projects. A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment Outstanding analytical and conceptual skills, strong customer focus and mental agility with a results orientation Experience in the Insurance or finance industries, with strong technical expertise in banking or insurance platforms. Strong expertise working with Data and Cloud technologies. Ability to balance dogmatism and pragmatism to guide decision making. Able to present different architecture models to clients, develop MVP architecture and IT landscape modernisation roadmaps. Deep expertise with modern toolsets in Agile environments, legacy modernization and modern approaches to technology. Know-how to drive operational and client service excellence, presenting project results to C-Level. Have experience with, and understand how to lead, legacy integration and remediation (facades, strangler approaches, et. al.). Ability to work under pressure and willingness to travel to clients world-wide. University degree with above-average academic performance in a mathematical-scientific field, information technology, engineering, or business administration. For candidates based in London: Fluent in English. For candidates based in The Netherlands: Fluent in English; Dutch is highly desirable. For candidates based in Belgium: Fluent in English, with French or Flemish as an additional requirement. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Apr 26, 2026
Full time
Locations : Amsterdam Brussels London Who We Are The Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do As a seamlessly integrated part of the BCG network, we provide consulting services focused on the development and implementation of business-critical IT architecture and digital solutions. We create technology platforms and deliver exceptionally customized solutions of the future for our clients, from data strategies to next-generation customer journey solutions and transformational business models. We solve the most daunting challenges that companies face today and envision for tomorrow. Our style is entrepreneurial - nimble and innovative, with multifaceted, cross-functional teams and completely vendor-independent. Our unique selling proposition is technology expertise and delivery. As a Manager, you will work closely with our client's leadership teams to understand their key challenges, define IT strategies, win buy-in for your recommendations and lead BCG case team members to transform client potential into performance. You will deploy customized IT strategies, digital platforms and architecture to leverage the digital potential of our customers with state-of-the-art tools such as cloud computing, AI, blockchain, microservices and containerization. You will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. Besides giving direction on the functional, execution and management of the project you will be given end-to-end responsibility for larger, highly technical and more complex modules within the project and begin to develop specialized knowledge to help you solve our clients problems. Together with our clients you will develop convincing IT strategies, concepts and solutions, applying your sound technical know-how along with your analytical and conceptual skills. You will start to take on team lead responsibilities and demonstrate intellectual leadership directing diverse teams of consulting talent. Your role will also be to help team members flourish through thought leadership, team mentoring, knowledge sharing, giving frequent feedback and creating opportunities for team members to learn and grow. You will also personally develop and grow by being exposed to new and complex challenges daily. Finally, as a Manager you will contribute to the Practice Area development and help to build the BCG brand as a digital leader. What You'll Bring 10 to 15 years' experience in Tech strategy and consulting or IT project management. You will have relevant experience from a top consulting firm (focused on technology, digital initiatives) and have led the design and management of IT implementation and strategy projects. A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment Outstanding analytical and conceptual skills, strong customer focus and mental agility with a results orientation Experience in the Insurance or finance industries, with strong technical expertise in banking or insurance platforms. Strong expertise working with Data and Cloud technologies. Ability to balance dogmatism and pragmatism to guide decision making. Able to present different architecture models to clients, develop MVP architecture and IT landscape modernisation roadmaps. Deep expertise with modern toolsets in Agile environments, legacy modernization and modern approaches to technology. Know-how to drive operational and client service excellence, presenting project results to C-Level. Have experience with, and understand how to lead, legacy integration and remediation (facades, strangler approaches, et. al.). Ability to work under pressure and willingness to travel to clients world-wide. University degree with above-average academic performance in a mathematical-scientific field, information technology, engineering, or business administration. For candidates based in London: Fluent in English. For candidates based in The Netherlands: Fluent in English; Dutch is highly desirable. For candidates based in Belgium: Fluent in English, with French or Flemish as an additional requirement. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Locations : Amsterdam Brussels London Who We Are The Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do As a seamlessly integrated part of the BCG network, we provide consulting services focused on the development and implementation of business-critical IT architecture and digital solutions. We create technology platforms and deliver exceptionally customized solutions of the future for our clients, from data strategies to next-generation customer journey solutions and transformational business models. We solve the most daunting challenges that companies face today and envision for tomorrow. Our style is entrepreneurial - nimble and innovative, with multifaceted, cross-functional teams and completely vendor-independent. Our unique selling proposition is technology expertise and delivery. As a Manager, you will work closely with our client's leadership teams to understand their key challenges, define IT strategies, win buy-in for your recommendations and lead BCG case team members to transform client potential into performance. You will deploy customized IT strategies, digital platforms and architecture to leverage the digital potential of our customers with state-of-the-art tools such as cloud computing, AI, blockchain, microservices and containerization. You will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. Besides giving direction on the functional, execution and management of the project you will be given end-to-end responsibility for larger, highly technical and more complex modules within the project and begin to develop specialized knowledge to help you solve our clients problems. Together with our clients you will develop convincing IT strategies, concepts and solutions, applying your sound technical know-how along with your analytical and conceptual skills. You will start to take on team lead responsibilities and demonstrate intellectual leadership directing diverse teams of consulting talent. Your role will also be to help team members flourish through thought leadership, team mentoring, knowledge sharing, giving frequent feedback and creating opportunities for team members to learn and grow. You will also personally develop and grow by being exposed to new and complex challenges daily. Finally, as a Manager you will contribute to the Practice Area development and help to build the BCG brand as a digital leader. What You'll Bring 10 to 15 years' experience in Tech strategy and consulting or IT project management. You will have relevant experience from a top consulting firm (focused on technology, digital initiatives) and have led the design and management of IT implementation and strategy projects. A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment Outstanding analytical and conceptual skills, strong customer focus and mental agility with a results orientation Experience in the Insurance or finance industries, with strong technical expertise in banking or insurance platforms. Strong expertise working with Data and Cloud technologies. Ability to balance dogmatism and pragmatism to guide decision making. Able to present different architecture models to clients, develop MVP architecture and IT landscape modernisation roadmaps. Deep expertise with modern toolsets in Agile environments, legacy modernization and modern approaches to technology. Know-how to drive operational and client service excellence, presenting project results to C-Level. Have experience with, and understand how to lead, legacy integration and remediation (facades, strangler approaches, et. al.). Ability to work under pressure and willingness to travel to clients world-wide. University degree with above-average academic performance in a mathematical-scientific field, information technology, engineering, or business administration. For candidates based in London: Fluent in English. For candidates based in The Netherlands: Fluent in English; Dutch is highly desirable. For candidates based in Belgium: Fluent in English, with French or Flemish as an additional requirement. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Apr 26, 2026
Full time
Locations : Amsterdam Brussels London Who We Are The Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. Practice Area BCG Platinion launched in Germany in 2000 to add deep technical expertise to the Boston Consulting Group's existing capabilities. Today, our presence spans across the globe, with offices in Asia, Europe, and South and North America. Our New York-based North American team began in 2014 and in 2017 acquired MAYA Design, a Pittsburgh-based digital design and innovation lab, to grow our capabilities around technology and design. We support our clients' total digital transformation through technology, design, cybersecurity, and risk management & financial engineering capabilities. And together with BCG, BCG Platinion's interdisciplinary team of technical experts enable customized technical solutions and accelerate delivery value through new business platforms, application consolidations, and major system implementations. What You'll Do As a seamlessly integrated part of the BCG network, we provide consulting services focused on the development and implementation of business-critical IT architecture and digital solutions. We create technology platforms and deliver exceptionally customized solutions of the future for our clients, from data strategies to next-generation customer journey solutions and transformational business models. We solve the most daunting challenges that companies face today and envision for tomorrow. Our style is entrepreneurial - nimble and innovative, with multifaceted, cross-functional teams and completely vendor-independent. Our unique selling proposition is technology expertise and delivery. As a Manager, you will work closely with our client's leadership teams to understand their key challenges, define IT strategies, win buy-in for your recommendations and lead BCG case team members to transform client potential into performance. You will deploy customized IT strategies, digital platforms and architecture to leverage the digital potential of our customers with state-of-the-art tools such as cloud computing, AI, blockchain, microservices and containerization. You will evaluate and coach our clients' technology teams, manage quality and risk while maintaining client expectations and escalations. Besides giving direction on the functional, execution and management of the project you will be given end-to-end responsibility for larger, highly technical and more complex modules within the project and begin to develop specialized knowledge to help you solve our clients problems. Together with our clients you will develop convincing IT strategies, concepts and solutions, applying your sound technical know-how along with your analytical and conceptual skills. You will start to take on team lead responsibilities and demonstrate intellectual leadership directing diverse teams of consulting talent. Your role will also be to help team members flourish through thought leadership, team mentoring, knowledge sharing, giving frequent feedback and creating opportunities for team members to learn and grow. You will also personally develop and grow by being exposed to new and complex challenges daily. Finally, as a Manager you will contribute to the Practice Area development and help to build the BCG brand as a digital leader. What You'll Bring 10 to 15 years' experience in Tech strategy and consulting or IT project management. You will have relevant experience from a top consulting firm (focused on technology, digital initiatives) and have led the design and management of IT implementation and strategy projects. A strategic thinker, entrepreneurial, able to work creatively and analytically in a problem-solving environment Outstanding analytical and conceptual skills, strong customer focus and mental agility with a results orientation Experience in the Insurance or finance industries, with strong technical expertise in banking or insurance platforms. Strong expertise working with Data and Cloud technologies. Ability to balance dogmatism and pragmatism to guide decision making. Able to present different architecture models to clients, develop MVP architecture and IT landscape modernisation roadmaps. Deep expertise with modern toolsets in Agile environments, legacy modernization and modern approaches to technology. Know-how to drive operational and client service excellence, presenting project results to C-Level. Have experience with, and understand how to lead, legacy integration and remediation (facades, strangler approaches, et. al.). Ability to work under pressure and willingness to travel to clients world-wide. University degree with above-average academic performance in a mathematical-scientific field, information technology, engineering, or business administration. For candidates based in London: Fluent in English. For candidates based in The Netherlands: Fluent in English; Dutch is highly desirable. For candidates based in Belgium: Fluent in English, with French or Flemish as an additional requirement. Additional info Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
PAM Engineer Location: Wokingham Hybrid - 50/50 Duration: role starts with a 6 months contract Rate to SSC Rate - 625 SC CLEARED INSIDE IR35 Role Description: Qualifications Relevant certifications (e.g., CyberArk Defender, CISSP, CISM) Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities Design, deploy, and manage PAM solutions (e.g., CyberArk, BeyondTrust, Delinea) Implement least privilege access models and enforce secure credential management Monitor and audit privileged access activities across systems and applications Integrate PAM tools with SIEM, IAM, and other security platforms Develop and maintain policies, procedures, and documentation for PAM operations Conduct regular access reviews, privilege audits, and risk assessments Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration Provide technical support and troubleshooting for PAMrelated issues Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications Experience in PAM engineering or cybersecurity roles Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea Strong understanding of Active Directory, LDAP, and authentication protocols Experience with scripting (PowerShell, Python) for automation and reporting Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) Excellent problemsolving, communication, and documentation skills
Apr 25, 2026
Contractor
PAM Engineer Location: Wokingham Hybrid - 50/50 Duration: role starts with a 6 months contract Rate to SSC Rate - 625 SC CLEARED INSIDE IR35 Role Description: Qualifications Relevant certifications (e.g., CyberArk Defender, CISSP, CISM) Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities Design, deploy, and manage PAM solutions (e.g., CyberArk, BeyondTrust, Delinea) Implement least privilege access models and enforce secure credential management Monitor and audit privileged access activities across systems and applications Integrate PAM tools with SIEM, IAM, and other security platforms Develop and maintain policies, procedures, and documentation for PAM operations Conduct regular access reviews, privilege audits, and risk assessments Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration Provide technical support and troubleshooting for PAMrelated issues Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications Experience in PAM engineering or cybersecurity roles Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea Strong understanding of Active Directory, LDAP, and authentication protocols Experience with scripting (PowerShell, Python) for automation and reporting Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) Excellent problemsolving, communication, and documentation skills
Senior Cyber Security Engineer (Contract) Hybrid 6-Month Contract Start: ASAP Day Rate: 500p/d inside The Opportunity We're looking for a Senior Cyber Security Engineer to join a forward-thinking public sector environment at a critical point in its cyber maturity journey. With a newly implemented outsourced Security Operations Centre (SOC) powered by Splunk and CrowdStrike , this role is key to maximising both investment and capability. You'll act as the senior technical lead-optimising tooling, strengthening detection and response, and upskilling the internal team. This is a hands-on, high-impact role suited to someone who can hit the ground running and elevate an evolving security function. Key Responsibilities Endpoint Security Leadership: Own deployment, configuration, and optimisation of CrowdStrike Falcon SIEM Optimisation: Partner with the SOC to enhance Splunk dashboards, alerts, and data models Incident Response: Act as escalation point for high-priority incidents, driving rapid containment Threat Hunting: Proactively identify hidden threats using advanced queries and telemetry Automation (SOAR): Build workflows to streamline response and reduce manual effort Capability Building: Upskill internal teams across CrowdStrike, Splunk, and security analysis Required Experience 5+ years in Cyber Security Engineering or SOC (Tier 3 level) Deep hands-on experience with CrowdStrike Falcon (Prevent, Insight, Discover) Strong Splunk expertise, including SPL and Enterprise Security (ES) Solid understanding of: Network protocols Cloud security (AWS/Azure) MITRE ATT&CK framework Additional desirable experience: Vulnerability Assessment tools Penetration Testing / Web Application Testing exposure Security policy and standards development Certifications (Desirable) Cyber Security: CompTIA Security+, Network+, CySA+, GSEC CISSP, GCIH, GCIA, CCSP CrowdStrike (ideally 2+): CCFA (Falcon Administrator) CCFR (Falcon Responder) CCSE (SIEM Engineer) Splunk: Splunk Certified Cybersecurity Defense Engineer (preferred) Why Apply? Shape and optimise a modern SOC capability Work with best-in-class tools (CrowdStrike & Splunk) High-impact role with visibility across the organisation Opportunity to leave a lasting legacy through capability uplift and knowledge transfer If you're a senior cyber specialist who thrives in hands-on, technically challenging environments and enjoys building capability as well as solving problems, this is worth a conversation Eden Brown Synergy is an equal opportunities employer. Eden Brown Limited is a limited company registered in England and Wales with registered number (phone number removed). Our registered address is 5th floor 4 Coleman Street, London, EC2R 5AR, part of nGAGE Specialist Recruitment Limited T/A nGAGE Talent. Please consider the environment before printing this e-mail. This message is intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. We take reasonable precautions to ensure no viruses are present in this email but cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free.
Apr 25, 2026
Contractor
Senior Cyber Security Engineer (Contract) Hybrid 6-Month Contract Start: ASAP Day Rate: 500p/d inside The Opportunity We're looking for a Senior Cyber Security Engineer to join a forward-thinking public sector environment at a critical point in its cyber maturity journey. With a newly implemented outsourced Security Operations Centre (SOC) powered by Splunk and CrowdStrike , this role is key to maximising both investment and capability. You'll act as the senior technical lead-optimising tooling, strengthening detection and response, and upskilling the internal team. This is a hands-on, high-impact role suited to someone who can hit the ground running and elevate an evolving security function. Key Responsibilities Endpoint Security Leadership: Own deployment, configuration, and optimisation of CrowdStrike Falcon SIEM Optimisation: Partner with the SOC to enhance Splunk dashboards, alerts, and data models Incident Response: Act as escalation point for high-priority incidents, driving rapid containment Threat Hunting: Proactively identify hidden threats using advanced queries and telemetry Automation (SOAR): Build workflows to streamline response and reduce manual effort Capability Building: Upskill internal teams across CrowdStrike, Splunk, and security analysis Required Experience 5+ years in Cyber Security Engineering or SOC (Tier 3 level) Deep hands-on experience with CrowdStrike Falcon (Prevent, Insight, Discover) Strong Splunk expertise, including SPL and Enterprise Security (ES) Solid understanding of: Network protocols Cloud security (AWS/Azure) MITRE ATT&CK framework Additional desirable experience: Vulnerability Assessment tools Penetration Testing / Web Application Testing exposure Security policy and standards development Certifications (Desirable) Cyber Security: CompTIA Security+, Network+, CySA+, GSEC CISSP, GCIH, GCIA, CCSP CrowdStrike (ideally 2+): CCFA (Falcon Administrator) CCFR (Falcon Responder) CCSE (SIEM Engineer) Splunk: Splunk Certified Cybersecurity Defense Engineer (preferred) Why Apply? Shape and optimise a modern SOC capability Work with best-in-class tools (CrowdStrike & Splunk) High-impact role with visibility across the organisation Opportunity to leave a lasting legacy through capability uplift and knowledge transfer If you're a senior cyber specialist who thrives in hands-on, technically challenging environments and enjoys building capability as well as solving problems, this is worth a conversation Eden Brown Synergy is an equal opportunities employer. Eden Brown Limited is a limited company registered in England and Wales with registered number (phone number removed). Our registered address is 5th floor 4 Coleman Street, London, EC2R 5AR, part of nGAGE Specialist Recruitment Limited T/A nGAGE Talent. Please consider the environment before printing this e-mail. This message is intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. We take reasonable precautions to ensure no viruses are present in this email but cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free.
Job Title: IT & Security Manager Location: Stroud Salary: Up to 65,000 DOE About KO2's Client KO2's client is an ambitious and rapidly growing engineering startup entering an exciting phase of scale. With innovation at its core, the business is building a robust, secure, and future-proof technology environment to support expansion. They are now looking for an experienced IT & Security Manager to take ownership of their IT infrastructure and security strategy from the ground up. The Role This is a hands-on and strategic role where you will design, build, and manage the company's IT function while ensuring best-in-class security practices. You will play a key role in shaping internal infrastructure, supporting business growth, and embedding a strong security culture across the organisation. Key Responsibilities Design, implement, and manage scalable IT infrastructure across Linux, Mac, and Windows environments Lead the development and enforcement of IT security policies, procedures, and controls Own and drive ISO 27001 compliance, including audits, risk assessments, and continuous improvement Manage networks, cloud services, endpoints, and internal systems Ensure system reliability, performance, and security across all platforms Oversee user access, identity management, and endpoint security Act as the primary point of contact for all IT and information security matters Support and scale IT operations in line with company growth Manage third-party vendors and service providers where required About You Proven experience in an IT Manager, IT Lead, or similar role within a fast-paced environment Strong hands-on experience with Linux, macOS, and Windows systems Demonstrable experience implementing and maintaining ISO 27001 standards Solid understanding of cybersecurity principles, risk management, and compliance Experience with cloud platforms (e.g. AWS, Azure, or GCP) Ability to build IT systems and processes from scratch in a growing organisation Strong problem-solving skills and a proactive mindset Excellent communication skills, with the ability to work across technical and non-technical teams Desirable Skills Experience in a startup or scaling business Knowledge of DevOps practices and automation tools What KO2's Client Offers Opportunity to shape and lead IT and security strategy in a growing company A collaborative, innovative, and flexible working environment How to Apply If you're excited by the challenge of building and securing IT systems in a high-growth startup, please apply with your CV and a brief cover note outlining your experience and interest in the role.
Apr 25, 2026
Full time
Job Title: IT & Security Manager Location: Stroud Salary: Up to 65,000 DOE About KO2's Client KO2's client is an ambitious and rapidly growing engineering startup entering an exciting phase of scale. With innovation at its core, the business is building a robust, secure, and future-proof technology environment to support expansion. They are now looking for an experienced IT & Security Manager to take ownership of their IT infrastructure and security strategy from the ground up. The Role This is a hands-on and strategic role where you will design, build, and manage the company's IT function while ensuring best-in-class security practices. You will play a key role in shaping internal infrastructure, supporting business growth, and embedding a strong security culture across the organisation. Key Responsibilities Design, implement, and manage scalable IT infrastructure across Linux, Mac, and Windows environments Lead the development and enforcement of IT security policies, procedures, and controls Own and drive ISO 27001 compliance, including audits, risk assessments, and continuous improvement Manage networks, cloud services, endpoints, and internal systems Ensure system reliability, performance, and security across all platforms Oversee user access, identity management, and endpoint security Act as the primary point of contact for all IT and information security matters Support and scale IT operations in line with company growth Manage third-party vendors and service providers where required About You Proven experience in an IT Manager, IT Lead, or similar role within a fast-paced environment Strong hands-on experience with Linux, macOS, and Windows systems Demonstrable experience implementing and maintaining ISO 27001 standards Solid understanding of cybersecurity principles, risk management, and compliance Experience with cloud platforms (e.g. AWS, Azure, or GCP) Ability to build IT systems and processes from scratch in a growing organisation Strong problem-solving skills and a proactive mindset Excellent communication skills, with the ability to work across technical and non-technical teams Desirable Skills Experience in a startup or scaling business Knowledge of DevOps practices and automation tools What KO2's Client Offers Opportunity to shape and lead IT and security strategy in a growing company A collaborative, innovative, and flexible working environment How to Apply If you're excited by the challenge of building and securing IT systems in a high-growth startup, please apply with your CV and a brief cover note outlining your experience and interest in the role.
White Collar Factory (95009), United Kingdom, London, London Director of Software Engineering About this role We are looking for a Director of Software Engineering to lead a team of 100+ engineers. We're looking for someone who is results-oriented, able to partner with business leaders and go toe-to-toe with the best engineers on technical rigour. You'll be responsible for all the technologists within a series of our 'outcome teams': established to drive forward business outcomes. You'll be an excellent leader of people and communicator. You'll be able to seamlessly switch from executive-level progress conversations, to diving deep into solutions, to contributing to strategic discussions around roadmaps. You'll be able to provide clear thinking and direction to cut through ambiguity. You'll be able to partner well with the local business leadership team and with enterprise stakeholders; providing objective assessments of the likely cost and risk trade-offs for different solutions, and clear paths forward. What you'll do Leadership of a team of 100+ technologists (Software Engineers and Architects): operating engineering at scale within a complex regulated environment Work together with Product and Design teams on the overall product roadmap for key business capabilities and goals Elevate great talent and ensure you have a clear agenda for development in the team. Actively manage performance across the team to develop talent over time Drive for effective delivery with pace and precision across the different outcome teams Liaising with and managing enterprise stakeholders primarily based in the US, who often have deep expertise on particular domains Manage a team with a blend of associates and third party engineers, and ensure effective oversight of the relevant third parties within the domain. Seek and share the context of the wider organisation, its purpose, commitments and opportunities to enable and engage your team with customer and organisational outcomes Stay up to date with the latest relevant changes in regulation and enterprise process Maintain broad knowledge and awareness of the latest relevant technologies and engineering practices Be a key voice in technical design reviews - ensuring a clear and consistent approach to engineering practices Support the career growth and development of the team What we're looking for You'll have a clear track record of leading large software engineering teams, and a proven track record of driving high performance You'll be able to solve complex challenges across people, process and technology. A high level of intellectual curiosity and comfort with ambiguity is essential. You will have the ability to deep dive on different technology options quickly and provide recommendations on a path forward. You will have excellent critical thinking skills and be able to provide thoughtful and effective counsel to leaders across the business You're passionate about recruiting and developing great engineering talent You'll be able to drive results quickly individually, whilst enabling others through the establishing of clear patterns and practices for engineering teams. You'll possess excellent communication skills, with an ability to adapt and communicate compellingly and with authenticity to any audience (including internal and external stakeholders) You'll be aware of the latest native developments within AWS and have real world experience You'll have an understanding of the latest cybersecurity trends and how they impact engineering practice You'll be able to work within enterprise policies/guidelines while customising to fit the UK to strike the right balance You're comfortable in reaching pragmatic outcomes between short-term and long-term business needs Knowledge of the UK / US regulatory, consumer lending and technology landscapes (preferred) Where and how you'll work This is a permanent position based in our London offices. We have a hybrid working model which gives you flexibility to work from our offices and from home. We're big on collaboration and connection, so you'll be based in our London office 3 days a week on Tuesdays, Wednesdays and Thursdays. What's in it for you Bring us all this - and you'll be well rewarded with a role contributing to the roadmap of an organisation committed to transformation We offer high performers strong and diverse career progression, investing heavily in developing great people through our Capital One University training programmes (and appropriate external providers) Immediate access to our core benefits including pension scheme, bonus, generous holiday entitlement and private medical insurance - with flexible benefits available including season-ticket loans, cycle to work scheme and enhanced parental leave Open-plan workspaces and accessible facilities designed to inspire and support you. Our Nottingham head-office has a fully-serviced gym, subsidised restaurant, mindfulness and music rooms. In London, you can heighten your mood with a run on our rooftop running track or an espresso at the Workshop Coffee café What you should know about how we recruit We pride ourselves on hiring the best people, not the same people. Building diverse and inclusive teams is the right thing to do and the smart thing to do. We want to work with top talent: whoever you are, whatever you look like, wherever you come from. We know it's about what you do, not just what you say. That's why we make our recruitment process fair and accessible. And we offer benefits that attract people at all ages and stages. We also partner with organisations including the Women in Finance and Race At Work Charters, Stonewall and upReach to find people from every walk of life and help them thrive with us. We have a whole host of internal networks and support groups you could be involved in, to name a few: REACH - Race Equality and Culture Heritage group focuses on representation, retention and engagement for associates from minority ethnic groups and allies OutFront - to provide LGBTQ+ support for all associates Mind Your Mind - signposting support and promoting positive mental wellbeing for all Women in Tech - promoting an inclusive environment in tech EmpowHER - network of female associates and allies focusing on developing future leaders, particularly for female talent in our industry Enabled - focused on supporting associates with disabilities and neurodiversity Capital One is committed to diversity in the workplace. If you require a reasonable adjustment, please contact All information will be kept confidential and will only be used for the purpose of applying a reasonable adjustment. For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC). Who We Are At Capital One, we're building a leading information-based technology company. Still founder-led by Chairman and Chief Executive Officer Richard Fairbank, Capital One is on a mission to help our customers succeed by bringing ingenuity, simplicity, and humanity to banking. We measure our efforts by the success our customers enjoy and the advocacy they exhibit. We are succeeding because they are succeeding. Guided by our shared values, we thrive in an environment where collaboration and openness are valued. We believe that innovation is powered by perspective and that teamwork and respect for each other lead to superior results. We elevate each other and obsess about doing the right thing. Our associates serve with humility and a deep respect for their responsibility in helping our customers achieve their goals and realize their dreams. Together, we are on a quest to change banking for good.
Apr 24, 2026
Full time
White Collar Factory (95009), United Kingdom, London, London Director of Software Engineering About this role We are looking for a Director of Software Engineering to lead a team of 100+ engineers. We're looking for someone who is results-oriented, able to partner with business leaders and go toe-to-toe with the best engineers on technical rigour. You'll be responsible for all the technologists within a series of our 'outcome teams': established to drive forward business outcomes. You'll be an excellent leader of people and communicator. You'll be able to seamlessly switch from executive-level progress conversations, to diving deep into solutions, to contributing to strategic discussions around roadmaps. You'll be able to provide clear thinking and direction to cut through ambiguity. You'll be able to partner well with the local business leadership team and with enterprise stakeholders; providing objective assessments of the likely cost and risk trade-offs for different solutions, and clear paths forward. What you'll do Leadership of a team of 100+ technologists (Software Engineers and Architects): operating engineering at scale within a complex regulated environment Work together with Product and Design teams on the overall product roadmap for key business capabilities and goals Elevate great talent and ensure you have a clear agenda for development in the team. Actively manage performance across the team to develop talent over time Drive for effective delivery with pace and precision across the different outcome teams Liaising with and managing enterprise stakeholders primarily based in the US, who often have deep expertise on particular domains Manage a team with a blend of associates and third party engineers, and ensure effective oversight of the relevant third parties within the domain. Seek and share the context of the wider organisation, its purpose, commitments and opportunities to enable and engage your team with customer and organisational outcomes Stay up to date with the latest relevant changes in regulation and enterprise process Maintain broad knowledge and awareness of the latest relevant technologies and engineering practices Be a key voice in technical design reviews - ensuring a clear and consistent approach to engineering practices Support the career growth and development of the team What we're looking for You'll have a clear track record of leading large software engineering teams, and a proven track record of driving high performance You'll be able to solve complex challenges across people, process and technology. A high level of intellectual curiosity and comfort with ambiguity is essential. You will have the ability to deep dive on different technology options quickly and provide recommendations on a path forward. You will have excellent critical thinking skills and be able to provide thoughtful and effective counsel to leaders across the business You're passionate about recruiting and developing great engineering talent You'll be able to drive results quickly individually, whilst enabling others through the establishing of clear patterns and practices for engineering teams. You'll possess excellent communication skills, with an ability to adapt and communicate compellingly and with authenticity to any audience (including internal and external stakeholders) You'll be aware of the latest native developments within AWS and have real world experience You'll have an understanding of the latest cybersecurity trends and how they impact engineering practice You'll be able to work within enterprise policies/guidelines while customising to fit the UK to strike the right balance You're comfortable in reaching pragmatic outcomes between short-term and long-term business needs Knowledge of the UK / US regulatory, consumer lending and technology landscapes (preferred) Where and how you'll work This is a permanent position based in our London offices. We have a hybrid working model which gives you flexibility to work from our offices and from home. We're big on collaboration and connection, so you'll be based in our London office 3 days a week on Tuesdays, Wednesdays and Thursdays. What's in it for you Bring us all this - and you'll be well rewarded with a role contributing to the roadmap of an organisation committed to transformation We offer high performers strong and diverse career progression, investing heavily in developing great people through our Capital One University training programmes (and appropriate external providers) Immediate access to our core benefits including pension scheme, bonus, generous holiday entitlement and private medical insurance - with flexible benefits available including season-ticket loans, cycle to work scheme and enhanced parental leave Open-plan workspaces and accessible facilities designed to inspire and support you. Our Nottingham head-office has a fully-serviced gym, subsidised restaurant, mindfulness and music rooms. In London, you can heighten your mood with a run on our rooftop running track or an espresso at the Workshop Coffee café What you should know about how we recruit We pride ourselves on hiring the best people, not the same people. Building diverse and inclusive teams is the right thing to do and the smart thing to do. We want to work with top talent: whoever you are, whatever you look like, wherever you come from. We know it's about what you do, not just what you say. That's why we make our recruitment process fair and accessible. And we offer benefits that attract people at all ages and stages. We also partner with organisations including the Women in Finance and Race At Work Charters, Stonewall and upReach to find people from every walk of life and help them thrive with us. We have a whole host of internal networks and support groups you could be involved in, to name a few: REACH - Race Equality and Culture Heritage group focuses on representation, retention and engagement for associates from minority ethnic groups and allies OutFront - to provide LGBTQ+ support for all associates Mind Your Mind - signposting support and promoting positive mental wellbeing for all Women in Tech - promoting an inclusive environment in tech EmpowHER - network of female associates and allies focusing on developing future leaders, particularly for female talent in our industry Enabled - focused on supporting associates with disabilities and neurodiversity Capital One is committed to diversity in the workplace. If you require a reasonable adjustment, please contact All information will be kept confidential and will only be used for the purpose of applying a reasonable adjustment. For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC). Who We Are At Capital One, we're building a leading information-based technology company. Still founder-led by Chairman and Chief Executive Officer Richard Fairbank, Capital One is on a mission to help our customers succeed by bringing ingenuity, simplicity, and humanity to banking. We measure our efforts by the success our customers enjoy and the advocacy they exhibit. We are succeeding because they are succeeding. Guided by our shared values, we thrive in an environment where collaboration and openness are valued. We believe that innovation is powered by perspective and that teamwork and respect for each other lead to superior results. We elevate each other and obsess about doing the right thing. Our associates serve with humility and a deep respect for their responsibility in helping our customers achieve their goals and realize their dreams. Together, we are on a quest to change banking for good.
UTA seeks a Security Engineer to help build and strengthen our security operations programs-safeguarding our brand, our people, and our digital assets. In this role, you will design and implement security solutions across physical, virtual, and cloud environments. By leveraging your expertise in cybersecurity and knowledge of common attack vectors, you will enhance visibility, threat correlation, and incident response capabilities throughout our technology landscape. As a key contributor to our cloud first strategy, you will play a critical role in shaping and advancing our overall security posture. What You Will Do Investigate and contextualize security events from numerous data sources Help detect, respond to, and remediate security events and incidents Create automated data correlation and triage processes to reduce alert to fix time Develop remediation and orchestration efficiencies across the security stack, including endpoint, network, identity, and application Perform e discovery tasks in support of Legal and HR investigations Respond to user requests for security related issues and concerns Improve current visibility by configuring existing logging and alerting policies Evaluate and select additional tools and services Contribute to SIEM tuning for reliable alerting Perform vulnerability triage and assignment Engage in proactive threat hunting to identify risks not automatically captured by scans Have a meaningful and positive impact on the security of colleagues and clients Be challenged to identify, build, test, and deploy solutions in real life, not just in theory Be encouraged to innovate and take ownership Be given the opportunity to rapidly accelerate security, technology, and management skills Have the freedom to experiment with novel problem solving approaches Contribute to all security related initiatives-both tactical and strategic Be exposed to emerging security and business technologies Have access to best in class tooling and people Grow and learn on the job every day Serve as a subject matter expert on information security related escalations Maintain awareness of trends in various security domains Collaborate with other teams to improve security posture, risk remediation, and threat awareness What You Will Need Bachelor's degree in Cybersecurity, Engineering, or a related field; or equivalent experience 5+ years of experience in Security Engineering or Security Operations Experience with incident response, security event triage, investigations, forensics, and fluency with endpoint operating systems (Windows/Mac/Linux) and command line tools Experience with log analysis, event aggregation, security event data management, SIEM tuning, and Microsoft Sentinel Experience with security automation and orchestration and threat intelligence utilization Experience with e discovery tools and processes Experience responding to phishing, scam, and imposter campaigns Experience with endpoint security tooling and MDM solutions Network engineering, secure architecture, and network operations (firewalls, switches, etc.) Cloud infrastructure operations and architecture (Azure a plus) Identity management and authentication protocols Remediation strategies, system hardening, and vulnerability management Experience with enterprise information technology, including Active Directory/Azure AD, Exchange, Office 365, servers (Windows, SQL/DB, Linux, VM, Citrix, App, Web), device/asset management, and ServiceNow Experience with posture and threat management of third party SaaS platforms Technical understanding of enterprise EDR tools What You Will Get The unique and exciting opportunity to work at one of a leading global entertainment companies Access to the tools, leadership, and resources you will need to create and drive a center of excellence The opportunity to do the best work of your career Work in an inclusive and diverse company culture Competitive programs to support your well being Experience working in a collaborative environment with room to grow UTA and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers.
Apr 24, 2026
Full time
UTA seeks a Security Engineer to help build and strengthen our security operations programs-safeguarding our brand, our people, and our digital assets. In this role, you will design and implement security solutions across physical, virtual, and cloud environments. By leveraging your expertise in cybersecurity and knowledge of common attack vectors, you will enhance visibility, threat correlation, and incident response capabilities throughout our technology landscape. As a key contributor to our cloud first strategy, you will play a critical role in shaping and advancing our overall security posture. What You Will Do Investigate and contextualize security events from numerous data sources Help detect, respond to, and remediate security events and incidents Create automated data correlation and triage processes to reduce alert to fix time Develop remediation and orchestration efficiencies across the security stack, including endpoint, network, identity, and application Perform e discovery tasks in support of Legal and HR investigations Respond to user requests for security related issues and concerns Improve current visibility by configuring existing logging and alerting policies Evaluate and select additional tools and services Contribute to SIEM tuning for reliable alerting Perform vulnerability triage and assignment Engage in proactive threat hunting to identify risks not automatically captured by scans Have a meaningful and positive impact on the security of colleagues and clients Be challenged to identify, build, test, and deploy solutions in real life, not just in theory Be encouraged to innovate and take ownership Be given the opportunity to rapidly accelerate security, technology, and management skills Have the freedom to experiment with novel problem solving approaches Contribute to all security related initiatives-both tactical and strategic Be exposed to emerging security and business technologies Have access to best in class tooling and people Grow and learn on the job every day Serve as a subject matter expert on information security related escalations Maintain awareness of trends in various security domains Collaborate with other teams to improve security posture, risk remediation, and threat awareness What You Will Need Bachelor's degree in Cybersecurity, Engineering, or a related field; or equivalent experience 5+ years of experience in Security Engineering or Security Operations Experience with incident response, security event triage, investigations, forensics, and fluency with endpoint operating systems (Windows/Mac/Linux) and command line tools Experience with log analysis, event aggregation, security event data management, SIEM tuning, and Microsoft Sentinel Experience with security automation and orchestration and threat intelligence utilization Experience with e discovery tools and processes Experience responding to phishing, scam, and imposter campaigns Experience with endpoint security tooling and MDM solutions Network engineering, secure architecture, and network operations (firewalls, switches, etc.) Cloud infrastructure operations and architecture (Azure a plus) Identity management and authentication protocols Remediation strategies, system hardening, and vulnerability management Experience with enterprise information technology, including Active Directory/Azure AD, Exchange, Office 365, servers (Windows, SQL/DB, Linux, VM, Citrix, App, Web), device/asset management, and ServiceNow Experience with posture and threat management of third party SaaS platforms Technical understanding of enterprise EDR tools What You Will Get The unique and exciting opportunity to work at one of a leading global entertainment companies Access to the tools, leadership, and resources you will need to create and drive a center of excellence The opportunity to do the best work of your career Work in an inclusive and diverse company culture Competitive programs to support your well being Experience working in a collaborative environment with room to grow UTA and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers.
LA International Computer Consultants Ltd
Wokingham, Berkshire
*INSIDE IR35*.*SC CLEARED*.*HYBRID WORKING* Qualifications - Relevant certifications (eg, CyberArk Defender, CISSP, CISM) - Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures - Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities - Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) - Implement least privilege access models and enforce secure credential management - Monitor and audit privileged access activities across systems and applications - Integrate PAM tools with SIEM, IAM, and other security platforms - Develop and maintain policies, procedures, and documentation for PAM operations - Conduct regular access reviews, privilege audits, and risk assessments - Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration - Provide technical support and troubleshooting for PAM-related issues - Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications - Experience in PAM engineering or cybersecurity roles - Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea - Strong understanding of Active Directory, LDAP, and authentication protocols - Experience with Scripting (PowerShell, Python) for automation and reporting - Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) - Excellent problem-solving, communication, and documentation skills Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.
Apr 23, 2026
Contractor
*INSIDE IR35*.*SC CLEARED*.*HYBRID WORKING* Qualifications - Relevant certifications (eg, CyberArk Defender, CISSP, CISM) - Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures - Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities - Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) - Implement least privilege access models and enforce secure credential management - Monitor and audit privileged access activities across systems and applications - Integrate PAM tools with SIEM, IAM, and other security platforms - Develop and maintain policies, procedures, and documentation for PAM operations - Conduct regular access reviews, privilege audits, and risk assessments - Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration - Provide technical support and troubleshooting for PAM-related issues - Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications - Experience in PAM engineering or cybersecurity roles - Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea - Strong understanding of Active Directory, LDAP, and authentication protocols - Experience with Scripting (PowerShell, Python) for automation and reporting - Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) - Excellent problem-solving, communication, and documentation skills Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.
Lynx Recruitment are partnered with a leading global consultancy to source an experienced Cloud Security Engineer to join a high-performing cloud and cybersecurity team. This is an exciting opportunity to work on enterprise-scale cloud environments, driving security best practices and implementing cutting-edge cloud-native application protection solutions. The Role You will play a key role in designing, implementing, and managing cloud security controls across large-scale AWS environments, with a strong focus on policy-as-code and automation. Key Responsibilities Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation Develop and maintain policy-as-code frameworks using OPA/Rego Integrate security controls into Infrastructure-as-Code (IaC) workflows using Terraform Collaborate closely with DevOps and Cyber Security teams to remediate non-compliant resources Monitor and enhance cloud governance and policy effectiveness Embed security into the SDLC through CI/CD pipelines (eg GitLab Runners), including vulnerability scanning and compliance checks Key Requirements Strong experience with AWS (essential) Hands-on experience with Wiz (including custom rule development, graph rules, or configuration policies) Expertise in OPA/Rego for policy-as-code Proven experience with Terraform for infrastructure and security automation Scripting experience (Python, Bash, or PowerShell) Experience working within DevSecOps environments and implementing shift-left security Degree in an IT or technology-related subject with a minimum of a 2:1 (or equivalent)
Apr 23, 2026
Full time
Lynx Recruitment are partnered with a leading global consultancy to source an experienced Cloud Security Engineer to join a high-performing cloud and cybersecurity team. This is an exciting opportunity to work on enterprise-scale cloud environments, driving security best practices and implementing cutting-edge cloud-native application protection solutions. The Role You will play a key role in designing, implementing, and managing cloud security controls across large-scale AWS environments, with a strong focus on policy-as-code and automation. Key Responsibilities Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation Develop and maintain policy-as-code frameworks using OPA/Rego Integrate security controls into Infrastructure-as-Code (IaC) workflows using Terraform Collaborate closely with DevOps and Cyber Security teams to remediate non-compliant resources Monitor and enhance cloud governance and policy effectiveness Embed security into the SDLC through CI/CD pipelines (eg GitLab Runners), including vulnerability scanning and compliance checks Key Requirements Strong experience with AWS (essential) Hands-on experience with Wiz (including custom rule development, graph rules, or configuration policies) Expertise in OPA/Rego for policy-as-code Proven experience with Terraform for infrastructure and security automation Scripting experience (Python, Bash, or PowerShell) Experience working within DevSecOps environments and implementing shift-left security Degree in an IT or technology-related subject with a minimum of a 2:1 (or equivalent)
PAM Engineer Location: Wokingham Hybrid - 50/50 Duration: role starts with a 6 months contract Rate to SSC Rate - £625 SC CLEARED INSIDE IR35 Role Description: Qualifications Relevant certifications (eg, CyberArk Defender, CISSP, CISM) Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) Implement least privilege access models and enforce secure credential management Monitor and audit privileged access activities across systems and applications Integrate PAM tools with SIEM, IAM, and other security platforms Develop and maintain policies, procedures, and documentation for PAM operations Conduct regular access reviews, privilege audits, and risk assessments Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration Provide technical support and troubleshooting for PAMrelated issues Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications Experience in PAM engineering or cybersecurity roles Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea Strong understanding of Active Directory, LDAP, and authentication protocols Experience with Scripting (PowerShell, Python) for automation and reporting Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) Excellent problemsolving, communication, and documentation skills
Apr 23, 2026
Contractor
PAM Engineer Location: Wokingham Hybrid - 50/50 Duration: role starts with a 6 months contract Rate to SSC Rate - £625 SC CLEARED INSIDE IR35 Role Description: Qualifications Relevant certifications (eg, CyberArk Defender, CISSP, CISM) Experience in cloud environments (AWS, Azure, GCP) and hybrid infrastructures Knowledge of DevSecOps practices and CI/CD pipeline integration Key Responsibilities Design, deploy, and manage PAM solutions (eg, CyberArk, BeyondTrust, Delinea) Implement least privilege access models and enforce secure credential management Monitor and audit privileged access activities across systems and applications Integrate PAM tools with SIEM, IAM, and other security platforms Develop and maintain policies, procedures, and documentation for PAM operations Conduct regular access reviews, privilege audits, and risk assessments Collaborate with IT, DevOps, and Security teams to ensure seamless PAM integration Provide technical support and troubleshooting for PAMrelated issues Stay current with industry trends, threats, and best practices in access management Required Skills & Qualifications Experience in PAM engineering or cybersecurity roles Proficiency with PAM tools such as CyberArk, BeyondTrust, or Delinea Strong understanding of Active Directory, LDAP, and authentication protocols Experience with Scripting (PowerShell, Python) for automation and reporting Familiarity with compliance frameworks (ISO 27001, NIST, GDPR) Excellent problemsolving, communication, and documentation skills
The role Uppingham School is seeking a Senior IT Systems Engineer to play a key role in maintaining and enhancing the School's IT services and infrastructure. Working at the heart of our IT team, you will provide third-line technical support for the School's IT infrastructure while acting as the lead technical specialist on infrastructure and systems-related issues.You will deliver a reliable and secure operational service, ensuring systems are effectively automated, monitored and maintained in line with best practice. You will also be responsible for proactively identifying and resolving issues, developing operational procedures and collaborating with your development colleagues to support advanced automation and service delivery. In addition to your operational responsibilities, this role offers significant involvement in project work, including the design and implementation of major infrastructure projects such as cloud migrations, system upgrades and security. You will lead the technical delivery of new systems and oversee the deployment, configuration and security of end-user hardware and software across the School. Whether you are solving complex technical challenges or supporting colleagues and students across the School, you will be part of a collaborative and people-centred IT team that plays a vital role in ensuring the smooth and effective running of the wider school environment. About you You will need strong technical expertise across a range of technical tools and technologies, including PowerShell automation, Microsoft cloud services, Windows operating systems and servers, Active Directory, Group Policy, DNS/DHCP and Layer 2/3 networking. Experience with firewalls, wireless infrastructure, Veeam and virtualisation platform such as Hyper-V is essential. A high level of proficiency in Microsoft Intune, RMM patch management and security posture monitoring is also required. This is a fully technical role with no line management responsibilities, offering you the opportunity to further your skills and expertise in cloud technologies, cybersecurity and device management. You will demonstrate a proactive approach to technical learning, strong analytical skills and the ability to interpret and refine complex requirements, while working collaboratively within a supportive and service-focused environment. What we offer: When you join us, you become part of a community that appreciates and supports its team members. You will enjoy a range of benefits that reflects our appreciation: 50% contribution to premiums for the School's private health scheme Free Westfield Healthcare Free membership of dual-use Sports Centre (£25 annual joining fee) Free staff lunches in term-time School fee discount for children of Uppingham staff (pro-rated for part-time staff) Retail, gym, supermarket, cinema and restaurant discounts Cycle to work scheme Employee Assistance Programme Occupational Health Services Free annual flu jabs Recognised as a "Disability Confident" employer Recognised as a "Mindful" employer Favourable rates and terms with local nursery Complimentary staff ticket to selected School performances Discount at local coffee shop for Uppingham staff. For further details and to apply please click the apply button. Closing date: 1 st May 2026. We reserve the right to close this vacancy early once we have received an adequate number of applications. We therefore encourage early submissions. Uppingham School is committed to safeguarding and promoting the welfare of children. Successful candidates must be willing to undergo full screening in accordance with Keeping Children Safe in Education (KCSiE), including an Enhanced Disclosure and Barring Service check. Issues relating to safeguarding and promoting the welfare of pupils will be explored at interview .
Apr 23, 2026
Full time
The role Uppingham School is seeking a Senior IT Systems Engineer to play a key role in maintaining and enhancing the School's IT services and infrastructure. Working at the heart of our IT team, you will provide third-line technical support for the School's IT infrastructure while acting as the lead technical specialist on infrastructure and systems-related issues.You will deliver a reliable and secure operational service, ensuring systems are effectively automated, monitored and maintained in line with best practice. You will also be responsible for proactively identifying and resolving issues, developing operational procedures and collaborating with your development colleagues to support advanced automation and service delivery. In addition to your operational responsibilities, this role offers significant involvement in project work, including the design and implementation of major infrastructure projects such as cloud migrations, system upgrades and security. You will lead the technical delivery of new systems and oversee the deployment, configuration and security of end-user hardware and software across the School. Whether you are solving complex technical challenges or supporting colleagues and students across the School, you will be part of a collaborative and people-centred IT team that plays a vital role in ensuring the smooth and effective running of the wider school environment. About you You will need strong technical expertise across a range of technical tools and technologies, including PowerShell automation, Microsoft cloud services, Windows operating systems and servers, Active Directory, Group Policy, DNS/DHCP and Layer 2/3 networking. Experience with firewalls, wireless infrastructure, Veeam and virtualisation platform such as Hyper-V is essential. A high level of proficiency in Microsoft Intune, RMM patch management and security posture monitoring is also required. This is a fully technical role with no line management responsibilities, offering you the opportunity to further your skills and expertise in cloud technologies, cybersecurity and device management. You will demonstrate a proactive approach to technical learning, strong analytical skills and the ability to interpret and refine complex requirements, while working collaboratively within a supportive and service-focused environment. What we offer: When you join us, you become part of a community that appreciates and supports its team members. You will enjoy a range of benefits that reflects our appreciation: 50% contribution to premiums for the School's private health scheme Free Westfield Healthcare Free membership of dual-use Sports Centre (£25 annual joining fee) Free staff lunches in term-time School fee discount for children of Uppingham staff (pro-rated for part-time staff) Retail, gym, supermarket, cinema and restaurant discounts Cycle to work scheme Employee Assistance Programme Occupational Health Services Free annual flu jabs Recognised as a "Disability Confident" employer Recognised as a "Mindful" employer Favourable rates and terms with local nursery Complimentary staff ticket to selected School performances Discount at local coffee shop for Uppingham staff. For further details and to apply please click the apply button. Closing date: 1 st May 2026. We reserve the right to close this vacancy early once we have received an adequate number of applications. We therefore encourage early submissions. Uppingham School is committed to safeguarding and promoting the welfare of children. Successful candidates must be willing to undergo full screening in accordance with Keeping Children Safe in Education (KCSiE), including an Enhanced Disclosure and Barring Service check. Issues relating to safeguarding and promoting the welfare of pupils will be explored at interview .
United Kingdom Job Description Posted Wednesday 25 March 2026 at 01:00 Position Title Reports to Microsoft Technical Support Manager Team Department Support Services PURPOSE OF JOB We are seeking an experienced and highly skilled Microsoft Azure 3rd Line Support Engineer to join our dynamic IT support team. The ideal candidate will be responsible for providing advanced technical support for Azure-based solutions, handling complex issues that elevate from the 1st and 2nd line support teams, and ensuring high availability and performance of our cloud infrastructure. Bytes are looking to expand their customer facing Microsoft Support Desk after yet another year of impressive growth. Bytes' collaborative and solution led approach means that our customers look to us to help them deliver and achieve. The Microsoft support team is integral to this approach and our success. Key to success will be to work as part of a close-knit team, with a customer centric service focus. You will be working closely with customers by providing day-to-day technical support, assisting, and contributing to overall technical governance and leadership, technical excellence, and continual service improvement. Communication and collaboration are paramount to this role, you will work closely with a variety of internal and external business and will be continually engaged and collaborating with our clients. KEY RESPONSIBILITIES Take ownership of request raised by Bytes CSP clients or CSP resellers related to their Azure environment affecting any/all azure services and manage until a resolution has been found. Provide prompt and accurate feedback to customers or CSP resellers and assure the client feels included throughout the lifecycle of the ticket by maintaining contact via phone/email/Teams. Provide direct 3rd line escalation for Bytes VIP customers, Bytes CSP Expert customers, and Azure Managed Services customers. Follow standard procedures for proper escalation of unresolved issues to the appropriate internal teams. Able to manage and prioritize Open and Unresolved Azure tickets liaising with all 3 rd parties. Troubleshoot and resolve complex incidents and service requests that have been escalated from 1st and 2nd line support teams. Analyse and diagnose issues related to Azure infrastructure and services. Maintain up-to-date documentation on Azure configurations, incident resolutions, and standard operating procedures. Following standard procedures for proper escalation of unresolved issues to the appropriate internal teams. Work closely with other IT teams and stakeholders to ensure smooth operations and integration of Azure services. Collaborate with Microsoft Azure support for escalated issues that require vendor intervention. Stay current with Azure updates, new features, and industry best practices. Participate in continuous improvement initiatives to enhance support processes and service delivery. QUALIFICATIONS, EXPERIENCE, & SKILLS Professional Qualifications Microsoft Data Fundamentals (DP-900) Microsoft Azure Security Engineer (AZ-500) DESIRABLE Micro Microsoft Cybersecurity Architect (SC-100) REQUIRED EXPERIENCE, & SKILLS 6+ years working in a Technical Support team dealing with Microsoft Cloud services Knowledge of Microsoft Azure services, including but not limited to Azure Virtual Machines, Azure Entra, Azure Networking (Vnets, VPNs, ExpressRoute), Azure Storage, Azure SQL Database, Azure App Services, and Azure Kubernetes Service (AKS). Understanding of Azure networking concepts, including Virtual Networks, Network Security Groups, Azure Load Balancer, Azure Application Gateway, and Azure Firewall. Ability to advise clients of Azure Solutions that would meet requirements Ability to troubleshoot and resolve complex networking issues and understand connectivity between on-premises environments and Azure. Knowledge of Azure security features such as Azure Security Centre, Azure Key Vault, Azure Policy, and role-based access control (RBAC). Expertise in implementing and managing Azure Backup and Azure Site Recovery solutions. Strong communication skills to effectively interact with customers, gather requirements, and provide technical guidance. Experience in working in a Microsoft Partner Centre and Lighthouse Knowledge of Azure Entra, Azure Information Protection, Information Rights Management, single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security) Ability to create detailed technical documentation, including incident reports, troubleshooting guides, and knowledge base articles. Previous experience automation manual tasks using ARM templates & JSON Knowledge on Hyper-V, VMware and On-prem servers Good understanding of Microsoft 365 Admin Portal and O365 Services Previous experience being part of a team dealing with Out of Hours requests CORE COMPETENCIES & SKILLS - BASED ON POSITION AND GRADE Ability to work proactively, independently and in an agile manner to achieve desired outcomes. Ability to work both independently and as a team player and enjoy working in an environment that requires continuous learning and development. Excellent written and Verbal Communication skills, and capable of communicating with senior stakeholders across the business as well as Client Infrastructure teams. Generate innovative approaches and solutions whilst achieving SLAs. Excellent organizational skills and ability to manage multiple demands whilst staying on top of deadlines. Ability to take ownership of tasks and drive the team objective forward. Provide advice and support to members in different departments within Bytes around Azure services. Driven to find out solutions to reoccurring issues and automate for team understanding/future implementation. Detailed note keeping within tickets to ensure all issues are properly logged with clear plan of future actions. Motivated to utilize training resource available to increase knowledge about Azure and collaboration across the wider team.
Apr 23, 2026
Full time
United Kingdom Job Description Posted Wednesday 25 March 2026 at 01:00 Position Title Reports to Microsoft Technical Support Manager Team Department Support Services PURPOSE OF JOB We are seeking an experienced and highly skilled Microsoft Azure 3rd Line Support Engineer to join our dynamic IT support team. The ideal candidate will be responsible for providing advanced technical support for Azure-based solutions, handling complex issues that elevate from the 1st and 2nd line support teams, and ensuring high availability and performance of our cloud infrastructure. Bytes are looking to expand their customer facing Microsoft Support Desk after yet another year of impressive growth. Bytes' collaborative and solution led approach means that our customers look to us to help them deliver and achieve. The Microsoft support team is integral to this approach and our success. Key to success will be to work as part of a close-knit team, with a customer centric service focus. You will be working closely with customers by providing day-to-day technical support, assisting, and contributing to overall technical governance and leadership, technical excellence, and continual service improvement. Communication and collaboration are paramount to this role, you will work closely with a variety of internal and external business and will be continually engaged and collaborating with our clients. KEY RESPONSIBILITIES Take ownership of request raised by Bytes CSP clients or CSP resellers related to their Azure environment affecting any/all azure services and manage until a resolution has been found. Provide prompt and accurate feedback to customers or CSP resellers and assure the client feels included throughout the lifecycle of the ticket by maintaining contact via phone/email/Teams. Provide direct 3rd line escalation for Bytes VIP customers, Bytes CSP Expert customers, and Azure Managed Services customers. Follow standard procedures for proper escalation of unresolved issues to the appropriate internal teams. Able to manage and prioritize Open and Unresolved Azure tickets liaising with all 3 rd parties. Troubleshoot and resolve complex incidents and service requests that have been escalated from 1st and 2nd line support teams. Analyse and diagnose issues related to Azure infrastructure and services. Maintain up-to-date documentation on Azure configurations, incident resolutions, and standard operating procedures. Following standard procedures for proper escalation of unresolved issues to the appropriate internal teams. Work closely with other IT teams and stakeholders to ensure smooth operations and integration of Azure services. Collaborate with Microsoft Azure support for escalated issues that require vendor intervention. Stay current with Azure updates, new features, and industry best practices. Participate in continuous improvement initiatives to enhance support processes and service delivery. QUALIFICATIONS, EXPERIENCE, & SKILLS Professional Qualifications Microsoft Data Fundamentals (DP-900) Microsoft Azure Security Engineer (AZ-500) DESIRABLE Micro Microsoft Cybersecurity Architect (SC-100) REQUIRED EXPERIENCE, & SKILLS 6+ years working in a Technical Support team dealing with Microsoft Cloud services Knowledge of Microsoft Azure services, including but not limited to Azure Virtual Machines, Azure Entra, Azure Networking (Vnets, VPNs, ExpressRoute), Azure Storage, Azure SQL Database, Azure App Services, and Azure Kubernetes Service (AKS). Understanding of Azure networking concepts, including Virtual Networks, Network Security Groups, Azure Load Balancer, Azure Application Gateway, and Azure Firewall. Ability to advise clients of Azure Solutions that would meet requirements Ability to troubleshoot and resolve complex networking issues and understand connectivity between on-premises environments and Azure. Knowledge of Azure security features such as Azure Security Centre, Azure Key Vault, Azure Policy, and role-based access control (RBAC). Expertise in implementing and managing Azure Backup and Azure Site Recovery solutions. Strong communication skills to effectively interact with customers, gather requirements, and provide technical guidance. Experience in working in a Microsoft Partner Centre and Lighthouse Knowledge of Azure Entra, Azure Information Protection, Information Rights Management, single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security) Ability to create detailed technical documentation, including incident reports, troubleshooting guides, and knowledge base articles. Previous experience automation manual tasks using ARM templates & JSON Knowledge on Hyper-V, VMware and On-prem servers Good understanding of Microsoft 365 Admin Portal and O365 Services Previous experience being part of a team dealing with Out of Hours requests CORE COMPETENCIES & SKILLS - BASED ON POSITION AND GRADE Ability to work proactively, independently and in an agile manner to achieve desired outcomes. Ability to work both independently and as a team player and enjoy working in an environment that requires continuous learning and development. Excellent written and Verbal Communication skills, and capable of communicating with senior stakeholders across the business as well as Client Infrastructure teams. Generate innovative approaches and solutions whilst achieving SLAs. Excellent organizational skills and ability to manage multiple demands whilst staying on top of deadlines. Ability to take ownership of tasks and drive the team objective forward. Provide advice and support to members in different departments within Bytes around Azure services. Driven to find out solutions to reoccurring issues and automate for team understanding/future implementation. Detailed note keeping within tickets to ensure all issues are properly logged with clear plan of future actions. Motivated to utilize training resource available to increase knowledge about Azure and collaboration across the wider team.
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
Apr 22, 2026
Contractor
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
