6 jobs found

IAM Technology Analyst Location: Manchester Role Type: Permanent Work Setup: Hybrid - 3 days in the office (Tuesday to Thursday) Who We Are Vanguard is one of the world's leading investment firms, dedicated to helping clients achieve lasting financial success. Established in 1975, its unique ownership structure-where funds own the company and investors own the funds-ensures all efforts are focused on client outcomes. Known for integrity, innovation, and low-cost investing, fosters an inclusive and collaborative culture that empowers employees to make a meaningful impact globally. What You'll Do Support the design, implementation and ongoing enhancement of Identity and Access Management and Privileged Access Management controls across privileged accounts, service accounts, administrative access paths, enterprise platforms and critical applications. Work closely with security, infrastructure, application and IAM/PAM teams to ensure solutions meet security standards, business requirements and strategic objectives. Assist with the onboarding of applications, accounts and platforms into the IAM and PAM environment, ensuring secure, compliant access controls are established. Troubleshoot and resolve complex IAM/PAM issues across multiple technologies and environments, including privileged access failures, vaulting, password rotation, session management and temporary access processes. Conduct access and privileged access risk assessments, identifying security risks, control gaps and practical remediation actions. Develop and maintain technical documentation, standards and procedures to support operational governance, audit readiness and control monitoring. Contribute to automation, root-cause analysis, continuous improvement and broader cybersecurity or transformation initiatives to strengthen service stability, control effectiveness and security posture. What You Bring Experience in Information Security, Identity and Access Management, Privileged Access Management, Network Administration or a closely related IT discipline. Strong understanding of identity life cycle management, authentication, authorisation, access controls, least privilege, privileged account life cycle management and secure administration practices. Experience supporting enterprise technology platforms and resolving complex technical issues, particularly those involving privileged access, administrative accounts, access controls or security tooling. Strong analytical and problem-solving skills, with the ability to assess access and privileged access risks and recommend practical solutions. Excellent communication and stakeholder management skills, with the ability to collaborate effectively across technical and non-technical teams, including security, infrastructure, application, audit and business stakeholders. Degree-qualified in Information Technology, Computer Science, Cybersecurity or a related subject, or equivalent relevant experience. Preferred experience with IAM and PAM tools, along with AWS Secrets Manager, SSO, MFA, Active Directory, LDAP, automation, Scripting and workflow tools. What's Next If you are ready to take the next step, apply now! Successful applicants will be contacted directly by a recruiter to discuss the role more. We are committed to creating an inclusive recruitment experience. If you require support or adjustments to the recruitment process, our Adjustment Concierge Service is here to help. Please feel free to contact us at (see below) to discuss how we can support you. This position is being recruited on behalf of our client through our Outsourcing service line. Resource Solutions Limited, trading as Robert Walters, acts as an employment business and agency, partnering with top organizations to help them find the best talent. We welcome applications from all candidates and are committed to providing equal opportunities.

Principal Identity & Access Lead London or Milton Keynes (2 days on site) 75 - 85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.

Lead the architecture, design, and implementation of SailPoint IdentityIQ (IIQ) or SailPoint Identity Security Cloud (ISC) solutions across enterprise environments. Define and implement Identity Governance & Administration (IGA) capabilities including Joiner-Mover-Leaver (JML), access requests, certifications, segregation of duties (SoD), and policy management. Design end-to-end identity life cycle processes and integrate SailPoint with enterprise applications, directories, cloud platforms, HR systems, and ITSM tools such as ServiceNow. Develop target-state IAM architecture, security standards, design patterns, and implementation roadmaps aligned to business and compliance requirements. Lead application onboarding activities and design connector strategies using out-of-the-box and custom integrations (REST, SOAP, SCIM, JDBC, Active Directory, SAP, Salesforce, etc.). Provide technical leadership for custom workflows, rules, forms, reports, approval processes, provisioning, and role-based access control (RBAC) implementations. Conduct requirements workshops, assess IAM maturity, identify security gaps, and recommend SailPoint-based solutions to improve governance and compliance. Ensure SailPoint solutions comply with regulatory and security frameworks such as ISO 27001, SOX, GDPR, NIST, and industry-specific governance requirements. Support capacity planning, scalability, high availability, disaster recovery, and performance optimization of SailPoint platforms. Provide governance and technical oversight throughout project delivery, including design reviews, code reviews, solution assurance, and production readiness assessments. Mentor developers, engineers, and IAM analysts while acting as the technical escalation point for complex SailPoint issues and enhancements. Collaborate with security, infrastructure, cloud, audit, and business stakeholders to develop IAM roadmaps and support strategic identity transformation initiatives. Desired Skills and Experience level: 10 - 12 years' experience primarily around IAM background and strong Sailpoint experience covering below. SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC) IAM, IGA, JML, RBAC, ABAC REST, SOAP, SCIM APIs Active Directory, Azure AD/Entra ID, LDAP Java, BeanShell, PowerShell ServiceNow integration Cloud platforms (Azure, AWS, GCP) CyberArk, Okta, Ping, ForgeRock (desirable) Security and compliance frameworks (ISO 27001, NIST, SOX, GDPR)

Information Security Lead / Cyber Security Lead Hybrid 60,000 - 70,000 + Excellent Benefits Immediate Start Avvailable Infrastructure Security Network Security Cyber Security ISO 27001 Are you an experienced Infrastructure, Network or Cyber Security professional looking to take the next step in your career? We're looking for a technically strong Information Security Lead to join a growing technology business, taking ownership of information security, governance and compliance while remaining closely involved with infrastructure and cyber security. This is an ideal opportunity for someone who has progressed through Infrastructure Engineering, Network Security, Cyber Security Engineering or Technical Security and is ready to move into a broader Information Security leadership role. Working closely with Infrastructure, IT Operations, Engineering and senior stakeholders, you'll help shape the organisation's security posture, ensuring security is embedded across networks, cloud platforms, servers and business systems. You'll combine hands-on technical knowledge with information security governance, helping drive continual improvement across the Information Security Management System (ISMS), security controls and compliance activities. You'll lead security risk assessments, coordinate vulnerability management and remediation programmes, support penetration testing, oversee supplier security assurance, manage information security incidents and contribute to Business Continuity and Disaster Recovery planning. You'll also play a key role in maintaining ISO 27001 certification, supporting customer audits and promoting a strong security culture throughout the organisation. We're looking for someone with a solid technical background who understands how infrastructure is designed, secured and supported. Experience working with technologies such as network security, firewalls, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, identity and access management (IAM), vulnerability management, patch management and infrastructure hardening will be highly beneficial. Alongside your technical expertise, you'll have exposure to ISO 27001, information security frameworks, security audits, governance, risk management and compliance. Experience working with Cyber Essentials, supplier assurance, security policies and incident response would also be advantageous. Whether you're currently a Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead or Information Security Lead, we'd love to hear from you. This is an opportunity to step into a highly visible role where you'll influence security strategy, work with modern technologies and help shape the future direction of information security within the organisation, while continuing to build on your technical expertise. Key Skills: Information Security Lead, Senior Information Security Analyst, Senior Cyber Security Analyst, Security Engineer, Infrastructure Security Engineer, Network Security Engineer, Technical Security Lead, Infrastructure Security, Network Security, Cyber Security, Information Security, ISO 27001, ISMS, Azure Security, Microsoft 365 Security, Active Directory, Firewalls, Vulnerability Management, Patch Management, Endpoint Security, IAM, Security Assurance, Governance, Risk & Compliance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials.

SOC Manager 6 Month contract initially Based: Hybrid/Leamington & Gaydon - Hybrid as per business need Rate: £Market rates p/d (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a SOC Manager to join the team. As SOC Manager you will: * Oversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicators * Lead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possible * Lead these efforts by establishing clear incident response procedures and protocols and conveying them to the team * Analyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defences * Serve as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies. * Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents. Key Responsibilities: * Manage service and process improvements of SOC, auditing SOC incidents, identifying new use cases and automations * POC for SOC engineering team, threat intelligence analyst and Threat exposure management * Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques * Act as the lead coordinator to individual information security incidents * Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre. * Document incidents from initial detection through final resolution * Ensure threat management, threat modelling, identify threat vectors and develop use cases for security monitoring * Create reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. * Act as focal point for any investigations involving security; to prepare reports and note follow up action * Participate in the role of Incident Manager during any incidents and emergencies * Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date * Coordinate with IT teams on escalations, tracking, performance issues, and outages Key skills & experience: * Strong knowledge in Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) and SOC advancements such as EDR and SOAR * Good knowledge of SIEM technologies, like Google Chronicle, Splunk ES or QRadar * In-depth familiarity with security policies based on industry standards and best practices * Experienced within the information security field, with emphasis on security operations, incident management, intrusion analysis, security device installations, configuration, and troubleshooting (e. g., Firewall, IDS, etc.) * Experience in Log source integration and in Developing new correlation rules & Parser writing * Experienced in SOC automation development, cloud operations (e. g. AWS), Designing, building security operations centers and Regulatory Compliance * Ability to lead and communicate efficiently within a team environment along with Incident management process development and/or incident management experience * Solid understanding of information technology and information security required * Excellent communication and presentation skills with demonstrated skill in presenting analytical data effectively to varied audiences (including executives) * Ability to work well under pressure with differing levels of Management This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.

SOC Manager Whitehall Resources are looking for a SOC Manager. This role is hybrid working with 2-3 days per week onsite in Warwickshire, and the remainder remote working, for an initial 6-month contract. *Inside IR35* Job Description: Establish goals and priorities by working closely with your team to identify the most critical focus areas. These include: Improving incident response times Reducing false positives and other extraneous alerts Enhancing threat detection capabilities Oversee your staff's activities and ensure they focus on the right priorities Oversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicators Lead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possible Lead these efforts by establishing clear incident response procedures and protocols and conveying them to the team Analyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defences Serve as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies. Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents. Report to the Customer about security operations. This means that you must keep the CISO and Head of security operations informed about everything that's happening in the operations centre. You can do this by preparing clear and concise reports that highlight key findings, and recommendations about the operations. Your reports will help the customer make informed decisions about security investments and strategies that align with the company's goals. Your responsibilities: Manage service and process improvements of SOC, auditing SOC incidents, identifying new use cases and automations POC for SOC engineering team, threat intelligence analyst and Threat exposure management Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques Act as the lead coordinator to individual information security incidents Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre. Document incidents from initial detection through final resolution Ensure threat management, threat modelling, identify threat vectors and develop use cases for security monitoring Create reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. Act as focal point for any investigations involving security; to prepare reports and note follow up action Participate in the role of Incident Manager during any incidents and emergencies Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date Coordinate with IT teams on escalations, tracking, performance issues, and outages Essential skills and experience: Strong knowledge in Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) and SOC advancements such as EDR and SOAR Good knowledge of SIEM technologies, like Google Chronicle, Splunk ES or QRadar In-depth familiarity with security policies based on industry standards and best practices Experienced within the information security field, with emphasis on security operations, incident management, intrusion analysis, security device installations, configuration, and troubleshooting (e. g., Firewall, IDS, etc.) Experience in Log source integration and in Developing new correlation rules & Parser writing Experienced in SOC automation development, cloud operations (e. g. AWS), Designing, building security operations centers and Regulatory Compliance Ability to lead and communicate efficiently within a team environment along with Incident management process development and/or incident management experience Solid understanding of information technology and information security required Excellent communication and presentation skills with demonstrated skill in presenting analytical data effectively to varied audiences (including executives) Ability to work well under pressure with differing levels of Management Desirable skills and experience: Experience of Agile ways of working. All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description. Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.