Talent Smart

DevSecOps Consultant Sheffield (3 days per week onsite) Inside IR35 We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture/design and advisory, while still retaining strong technical depth. Key Responsibilities: Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments) Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines Develop and embed DevSecOps best practices, including secure pipeline design and automated controls Establish and enforce security baselines using policy-as-code Build and deliver security roadmaps, prioritising risk and regulatory requirements Partner with engineering and platform teams to remediate vulnerabilities and improve security posture Act as a trusted advisor to senior stakeholders, translating technical risks into business impact Key Requirements: Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Relevant certifications (eg CISSP, CISM, CCSP) This is a key role focused on shaping and embedding secure-by-design engineering practices across a complex, enterprise environment, with strong influence across both technology and security functions. More details available on successful application.

Data Risk & Controls Manager Sheffield or Birmingham Hybrid (3-days onsite) We're partnering with a leading financial services client who are looking for a Data Risk & Controls Manager to join their global team responsible for strengthening data risk governance and control frameworks across the organisation. This is an initial 8-month contract inside IR35 . The Role This position plays a key role in ensuring that global data control frameworks align with UK regulatory requirements, acting as the UK representative within an international team. You will support risk and control owners, challenge existing risk assessments, and drive continuous improvement across the organisation's data control environment. Key Responsibilities Act as the UK representative within a global data risk and controls team Support risk and control owners in strengthening control frameworks Develop and drive action plans to address control gaps Assess the effectiveness and sustainability of data controls Challenge whether risks have been appropriately identified and mitigated Influence improvements and next steps across the control environment Confidently engage with senior stakeholders and leadership Provide constructive challenge within governance and risk discussions Focus Areas: Data privacy Data storage and retention Data usage and governance Metadata management Data movement between applications Requirements: 5+ years of experience within financial services and in operational risk, non-financial risk, or data risk. Hands-on experience with data control frameworks (1st, 2nd or 3rd Line of Defence) Strong knowledge of data privacy and regulatory requirements (UK experience beneficial) Experience working across Data, IT, Risk, or Audit functions Proven ability to influence, challenge and engage stakeholders Experience identifying control gaps and driving process improvements Ability to present complex issues clearly to senior non-technical stakeholders Experience working within financial services or another highly regulated industry preferred Exposure to automation initiatives is advantageous Experience engaging with regulatory bodies is beneficial Relevant industry certifications are a plus More details available on successful application.

Contract Inside IR35, Remote Software Licensing Specialist (Developer Background) Financial Services Client Excellent opportunity with a leading financial services client who are looking for a Software Asset Management Consultant to join the business. We re specifically looking for someone with a strong background in software development or programming, to support governance, processes, and controls around the use and contribution of Free and Open Source Software (FOSS). The role is ideally suited to someone who has previously built or maintained software and has developed a strong understanding of software licensing from a developer s perspective including how licensing impacts code usage, distribution, and integration. Key Responsibilities Provide practical, developer-focused guidance to engineering teams on the implications of FOSS licensing within their applications and codebases. Analyse licensing and copyright considerations for new open-source software requests, with an understanding of real-world development use cases. Use FOSS scanning and composition analysis tools to identify licensing risks and coordinate remediation with engineering teams. Contribute to the enhancement of FOSS governance frameworks, policies, and control processes. Review, interpret, and categorise open-source licences, including edge cases not recognised by automated tools. Support training and awareness initiatives, translating legal/licensing concepts into developer-friendly guidance. Mentor and support FOSS licensing analysts, particularly in understanding licensing in the context of software development. Assist in the evaluation and improvement of licence analysis and scanning tooling. Essential Experience Previous experience as a software developer, engineer, or programmer (hands-on coding background required). Strong understanding of open-source licences and obligations from a development and code usage perspective. Experience working with open-source components in real-world applications and understanding their licensing implications. Hands-on experience with at least one FOSS or software composition analysis tool. Solid understanding of software licensing terms and how they apply to code integration, distribution, and reuse. Experience collaborating with Legal teams to interpret and apply licence requirements in engineering contexts. Strong communication skills, with the ability to bridge the gap between technical and legal stakeholders. Familiarity with tools such as Confluence, JIRA, and SharePoint. Desirable Experience working closely with both Engineering and Legal stakeholders in a commercial environment. Understanding of the software development lifecycle and DevSecOps practices. Experience in Agile delivery environments. Exposure to tools such as Sonatype, Nexus IQ Server, FOSSology, or similar. Any legal or copyright training would be beneficial. More details available upon successful application.

Data Anonymisation Specialist We are looking for a Data Anonymisation Specialist to join a financial services client based in Sheffield. The team are looking to hire a data anonymisation specialist who can be an integral part of helping the business to manage and mitigate any risks associated with third-party data sharing, across several short, medium and long-term planned activities. The Role We are specifically looking for someone with experience in supporting data anonymisation processes and an understanding of data types, structures and schemas. Applying your skills while considering the importance and impact of data security as a whole in a highly regulated environment is crucial. This is a great opportunity to be part of a developing service where your input is valued and can help drive its maturity and efficiencies for the future. Key Responsibilities: Advise application teams on Creation of data dictionaries Identifying sensitive data Define suitable anonymisation approaches Assign column level masking algorithms Operate the data masking service Support the data masking service Working with software vendor support and consultation services Some out-of-hours work supporting the masking service is required Experienced required: Proven experience with Structured data Data anonymisation analysis Data masking techniques Experience working with masking technology platforms Technical troubleshooting Working with stakeholders and building relationships Excellent verbal and written communication skills Immediate start (within 4 weeks) Desirable: Experience with writing and supporting Python code Experience with Delphix data masking or similar tooling Experience working in Azure or other cloud environment Experience in Financial Services or similar regulated sectors More details available on successful application.