Workday Consultant (Professional Services Automation, Projects) - Remote - 4 months+/RATE: £655 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Workday Consultant (Professional Services Automation, Projects). Clearance required: BPSS Please find some details below: IR35 Status: PAYE via Umbrella company only Job Description: Primary Skills: Workday Professional Services Automation (PSA) or "Workday Projects" module. Senior consultant with extensive experience in this area. Main 3 Competence Needed in Primary Skills :*Workday Professional Services Automation (PSA) or "Workday Projects" module. Certified in Workday PSA or Workday Projects module. Excellent communication skills for customer facing role JD Work as part of implementation team and then into operations team (AMS) Project Scope & Tasks: Participate in the build and testing of Workday Projects/PSA module, and then ongoing support once it is live Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
18/08/2026
Contractor
Workday Consultant (Professional Services Automation, Projects) - Remote - 4 months+/RATE: £655 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Workday Consultant (Professional Services Automation, Projects). Clearance required: BPSS Please find some details below: IR35 Status: PAYE via Umbrella company only Job Description: Primary Skills: Workday Professional Services Automation (PSA) or "Workday Projects" module. Senior consultant with extensive experience in this area. Main 3 Competence Needed in Primary Skills :*Workday Professional Services Automation (PSA) or "Workday Projects" module. Certified in Workday PSA or Workday Projects module. Excellent communication skills for customer facing role JD Work as part of implementation team and then into operations team (AMS) Project Scope & Tasks: Participate in the build and testing of Workday Projects/PSA module, and then ongoing support once it is live Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
DataStage Developer - Manchester and remote - 4 months+/RATE: £300 per day inside IR35 One of our Blue Chip Clients is urgently looking for a DataStage Developer. Please find some details below: CONTRACTOR MUST BE ELIGIBLE FOR BPSS Days on site: 2-3 MUST BE PAYE THROUGH UMBRELLA Role Description: Role Overview As a DataStage Developer, you will be responsible for designing, developing, enhancing, and supporting ETL solutions using IBM DataStage. You will work closely with business analysts, data architects, and downstream consumers to deliver reliable, scalable, and high-quality data integration solutions in a regulated banking environment. Key Responsibilities Design, develop, and maintain ETL jobs and sequences using IBM DataStage Develop end-to-end data pipelines from source systems to data warehouse/downstream platforms Create and maintain ETL design documents, mapping specifications, and technical documentation Perform data profiling, validation, and reconciliation to ensure data quality Optimize DataStage jobs for performance, scalability, and reliability Troubleshoot and resolve ETL failures, data issues, and production incidents Work closely with DBAs, Unix teams, schedulers (TWS/IWS), and application teams Support batch schedules, deployments, and controlled releases across environments Adhere to banking controls, SDLC, and change management processes Mandatory Skills IBM DataStage (11.x preferred) - strong hands-on development experience ETL/Data Warehousing concepts UNIX/Shell Scripting SQL/PL/SQL Strong understanding of data models and relational databases DataStage Technical Expertise Hands-on experience with: DataStage Parallel Jobs Lookups, Change Capture, Transformer Sequential File, Data Sets Column Generator Database connectors (eg, Oracle/Teradata/DB2) Job parameterization, shared containers, and reusable components Good to Have Banking or Financial Services domain experience Experience with production support and on-call rotations Exposure to TWS/IWS scheduling Experience with DataStage upgrades or migrations (eg, 8.x 11.x) Knowledge of data reconciliation and audit controls Soft Skills Strong analytical and problem-solving skills Ability to work independently in a delivery environment Good communication skills for stakeholder and offshore/onshore collaboration Documentation and attention to detail (bank-grade) UK - Senior DataStage Developer: Lead ETL design and review Mentor junior developers Own complex data domains and critical batch flows Support architectural decisions and performance tuning Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
18/08/2026
Contractor
DataStage Developer - Manchester and remote - 4 months+/RATE: £300 per day inside IR35 One of our Blue Chip Clients is urgently looking for a DataStage Developer. Please find some details below: CONTRACTOR MUST BE ELIGIBLE FOR BPSS Days on site: 2-3 MUST BE PAYE THROUGH UMBRELLA Role Description: Role Overview As a DataStage Developer, you will be responsible for designing, developing, enhancing, and supporting ETL solutions using IBM DataStage. You will work closely with business analysts, data architects, and downstream consumers to deliver reliable, scalable, and high-quality data integration solutions in a regulated banking environment. Key Responsibilities Design, develop, and maintain ETL jobs and sequences using IBM DataStage Develop end-to-end data pipelines from source systems to data warehouse/downstream platforms Create and maintain ETL design documents, mapping specifications, and technical documentation Perform data profiling, validation, and reconciliation to ensure data quality Optimize DataStage jobs for performance, scalability, and reliability Troubleshoot and resolve ETL failures, data issues, and production incidents Work closely with DBAs, Unix teams, schedulers (TWS/IWS), and application teams Support batch schedules, deployments, and controlled releases across environments Adhere to banking controls, SDLC, and change management processes Mandatory Skills IBM DataStage (11.x preferred) - strong hands-on development experience ETL/Data Warehousing concepts UNIX/Shell Scripting SQL/PL/SQL Strong understanding of data models and relational databases DataStage Technical Expertise Hands-on experience with: DataStage Parallel Jobs Lookups, Change Capture, Transformer Sequential File, Data Sets Column Generator Database connectors (eg, Oracle/Teradata/DB2) Job parameterization, shared containers, and reusable components Good to Have Banking or Financial Services domain experience Experience with production support and on-call rotations Exposure to TWS/IWS scheduling Experience with DataStage upgrades or migrations (eg, 8.x 11.x) Knowledge of data reconciliation and audit controls Soft Skills Strong analytical and problem-solving skills Ability to work independently in a delivery environment Good communication skills for stakeholder and offshore/onshore collaboration Documentation and attention to detail (bank-grade) UK - Senior DataStage Developer: Lead ETL design and review Mentor junior developers Own complex data domains and critical batch flows Support architectural decisions and performance tuning Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
SAS Viya Engineer (CRS, FATCA) - Manchester and remote - 4 months+/RATE: £300 per day inside IR35 One of our Blue Chip Clients is urgently looking for a SAS Viya Engineer. Please find some details below: CONTRACTOR MUST BE ELIGIBLE FOR BPSS Days on site: 2-3 MUST BE PAYE THROUGH UMBRELLA Role Description: We are seeking a skilled.*SAS Viya Engineer* with experience in.*CRS (Common Reporting Standard)* and.*FATCA (Foreign Account Tax Compliance Act)* regulatory reporting. The ideal candidate will be responsible for designing, developing, and supporting SAS Viya-based solutions for data management, regulatory reporting, data integration, and analytics. The role requires strong technical expertise in SAS technologies along with a solid understanding of financial regulatory compliance frameworks. Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
18/08/2026
Contractor
SAS Viya Engineer (CRS, FATCA) - Manchester and remote - 4 months+/RATE: £300 per day inside IR35 One of our Blue Chip Clients is urgently looking for a SAS Viya Engineer. Please find some details below: CONTRACTOR MUST BE ELIGIBLE FOR BPSS Days on site: 2-3 MUST BE PAYE THROUGH UMBRELLA Role Description: We are seeking a skilled.*SAS Viya Engineer* with experience in.*CRS (Common Reporting Standard)* and.*FATCA (Foreign Account Tax Compliance Act)* regulatory reporting. The ideal candidate will be responsible for designing, developing, and supporting SAS Viya-based solutions for data management, regulatory reporting, data integration, and analytics. The role requires strong technical expertise in SAS technologies along with a solid understanding of financial regulatory compliance frameworks. Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Workday Consultant - Manchester or Inverness - 6 months+/RATE: £700 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Workday Consultant. Please find some details below: Onsite Manchester or Inverness - 5 days per week mandatory Modules in scope Core HCM Workday Integration Learning Talent and Performance Absence Compensation (inc. Advanced Compensation) Talent Acquisition/Recruiting Peakon Journeys Extend Your Role As a Senior Workday Consultant, you will act as a trusted advisor to our clients, leading the design, implementation, and optimization of Workday solutions across key HR processes. You will take ownership of complex functional and technical topics, guide junior consultants, and drive continuous improvements within Workday environments. In this role, you will collaborate closely with stakeholders, lead workshops, and ensure high-quality delivery across all project stages. Your Project Become a part of a team of over 300 Workday specialists. We combine deep technological expertise with strategic business consulting, delivering innovative solutions to global enterprises, including Fortune 500 companies. Working across diverse industries, we support our clients in achieving their business transformation goals. Your Tasks Provide guidance on the Workday platform and lead key implementation and enhancement initiatives. Prepare, lead, and facilitate advanced workshops with business and technical stakeholders. Configure, test, validate, and document Workday solutions across multiple functional areas. Analyze clients' HR processes, propose optimization strategies, and design scalable Workday improvements. Conduct training sessions for end-users and internal teams, ensuring knowledge transfer. Identify and resolve complex technical and functional issues in collaboration with the team. Act as a mentor for junior consultants, supporting their development and reviewing their work. Manage incidents, service requests, and changes through ServiceNow or other ITIL-aligned service management platforms. Your Profile Minimum of 3 years of experience as a Workday Consultant, with expertise in modules such as HRIS, LMS, or Performance Appraisal. Mandatory: Workday Core HCM certification (additional Workday certifications are highly desirable). Deep understanding of HR processes and HR systems, with hands-on experience in Workday configuration. Strong analytical and problem-solving abilities, with capability to handle complex requirements. Experience leading workshops, managing stakeholders, and driving solution design. Ability to work independently while providing guidance to junior colleagues. Excellent communication skills in English. Availability to work onsite in Manchester or Inverness. Hour of service are 07:00 to 19:00 and team will operate separate shifts to cover this period. On-call support for P1 incidents will be shared across the support team. Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
13/08/2026
Contractor
Workday Consultant - Manchester or Inverness - 6 months+/RATE: £700 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Workday Consultant. Please find some details below: Onsite Manchester or Inverness - 5 days per week mandatory Modules in scope Core HCM Workday Integration Learning Talent and Performance Absence Compensation (inc. Advanced Compensation) Talent Acquisition/Recruiting Peakon Journeys Extend Your Role As a Senior Workday Consultant, you will act as a trusted advisor to our clients, leading the design, implementation, and optimization of Workday solutions across key HR processes. You will take ownership of complex functional and technical topics, guide junior consultants, and drive continuous improvements within Workday environments. In this role, you will collaborate closely with stakeholders, lead workshops, and ensure high-quality delivery across all project stages. Your Project Become a part of a team of over 300 Workday specialists. We combine deep technological expertise with strategic business consulting, delivering innovative solutions to global enterprises, including Fortune 500 companies. Working across diverse industries, we support our clients in achieving their business transformation goals. Your Tasks Provide guidance on the Workday platform and lead key implementation and enhancement initiatives. Prepare, lead, and facilitate advanced workshops with business and technical stakeholders. Configure, test, validate, and document Workday solutions across multiple functional areas. Analyze clients' HR processes, propose optimization strategies, and design scalable Workday improvements. Conduct training sessions for end-users and internal teams, ensuring knowledge transfer. Identify and resolve complex technical and functional issues in collaboration with the team. Act as a mentor for junior consultants, supporting their development and reviewing their work. Manage incidents, service requests, and changes through ServiceNow or other ITIL-aligned service management platforms. Your Profile Minimum of 3 years of experience as a Workday Consultant, with expertise in modules such as HRIS, LMS, or Performance Appraisal. Mandatory: Workday Core HCM certification (additional Workday certifications are highly desirable). Deep understanding of HR processes and HR systems, with hands-on experience in Workday configuration. Strong analytical and problem-solving abilities, with capability to handle complex requirements. Experience leading workshops, managing stakeholders, and driving solution design. Ability to work independently while providing guidance to junior colleagues. Excellent communication skills in English. Availability to work onsite in Manchester or Inverness. Hour of service are 07:00 to 19:00 and team will operate separate shifts to cover this period. On-call support for P1 incidents will be shared across the support team. Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Security Incident & Vulnerability Management Consultant - MUST HAVE MOD SC CLEARANCE - Preston/London/Birmingham and remote - 6 months+/RATE: £585 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Security Incident & Vulnerability Management Consultant. Please find some details below: CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL The candidates MOD SC must have been actively used within the last 12 months The candidate must have 3 months left on their SC clearance to allow time for interview, offer and transfer of clearance Location: Hybrid - 30% office (Preston, London or Birmingham), 70% home MUST BE PAYE THROUGH UMBRELLA Role Description: Security Incident & Vulnerability Management Consultant (Operational Integrator/SIAM - Transition Role) UK Sole National ONLY Security Clearance required Role Summary The Security Incident & Vulnerability Management Consultant operates within the Operational Integrator (OI) function to support the transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported by appropriate evidence. The outcome is a coherent, evidence-driven view of security risk, covering both active incidents and underlying vulnerabilities, with processes standardised and ready for BAU handover. This is a governance and coordination role, not a hands-on SOC, incident response, or vulnerability remediation function. Key Responsibilities Governance & Process Alignment Review and align existing supplier processes for: o High-severity incident management (S3/S4) o Vulnerability management, across suppliers from existing processes Ensure processes are: o Consistent across suppliers o Aligned to client policy and regulatory requirements Establish and govern: o Incident severity classification and escalation thresholds o Vulnerability prioritisation approaches (eg CVSS, KEV, EPSS) o Exception and risk acceptance processes Supplier Coordination (SIAM Model) Coordinate multiple suppliers to ensure consistent handling of incidents and vulnerabilities Act as the integration point across suppliers, aligning outputs without redesigning underlying processes into a common model Identify and manage gaps in process maturity, coverage, data quality and Compliance with standards Incident Management (S3/S4 Focus) Govern the life cycle of high-severity incidents, including escalation, coordination, communication and reporting Ensure suppliers: o Detect and escalate incidents appropriately o Meet defined escalation and communication expectations o Maintain structured incident records Define and agree the required level of visibility from SOC outputs, without requiring direct tooling access Vulnerability Management (SOC-led) Oversee the vulnerability life cycle from identification through to closure Ensure vulnerabilities are: o Prioritised consistently using agreed Client approaches o Tracked through remediation or formal risk acceptance Validate, track and monitor: o Remediation timelines and SLA adherence o Handling of high risk vulnerabilities, exceptions and waivers Identify risks relating to: o Incomplete asset coverage o Obsolescent, Legacy or non-patchable systems Evidence & Assurance Define and align evidence requirements for both: o Incident management (event, escalation, response, closure) o Vulnerability management (identify, track, remediate, validate) Ensure outputs are: o Consistent across suppliers o Traceable to risks and controls o Audit ready Provide assurance that both domains align with ISMS and control requirements Reporting & Transition Support Support domain-specific reporting for: o Major incidents (S3/S4) o Vulnerability risk and remediation status Support governance forums with clear, evidence-based reporting Establish a transition baseline that enables a clean handover of processes to BAU without redesign Key Skills & Experience Essential Experience in security incident management, vulnerability management, or cyber governance roles Strong understanding of: o Incident management life cycle (detect, respond, recover) o Vulnerability life cycle (identify, prioritise, remediate, validate) Experience working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment Key Deliverables Standardised and aligned incident and vulnerability management processes Consistent supplier reporting and life cycle governance Evidence models supporting audit and assurance Established transition baseline for BAU handover Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
13/08/2026
Contractor
Security Incident & Vulnerability Management Consultant - MUST HAVE MOD SC CLEARANCE - Preston/London/Birmingham and remote - 6 months+/RATE: £585 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Security Incident & Vulnerability Management Consultant. Please find some details below: CONTRACTOR MUST BE MOD SC CLEARED AND BE A SOLE UK NATIONAL The candidates MOD SC must have been actively used within the last 12 months The candidate must have 3 months left on their SC clearance to allow time for interview, offer and transfer of clearance Location: Hybrid - 30% office (Preston, London or Birmingham), 70% home MUST BE PAYE THROUGH UMBRELLA Role Description: Security Incident & Vulnerability Management Consultant (Operational Integrator/SIAM - Transition Role) UK Sole National ONLY Security Clearance required Role Summary The Security Incident & Vulnerability Management Consultant operates within the Operational Integrator (OI) function to support the transition to a multi-supplier (SIAM) model within a Defence environment. The role focuses on understanding, aligning and governing existing high-severity security incident management (S3/S4) and vulnerability management processes across suppliers. Ensuring a consistent, risk-based approach in line with client policy and regulatory requirements, supported by appropriate evidence. The outcome is a coherent, evidence-driven view of security risk, covering both active incidents and underlying vulnerabilities, with processes standardised and ready for BAU handover. This is a governance and coordination role, not a hands-on SOC, incident response, or vulnerability remediation function. Key Responsibilities Governance & Process Alignment Review and align existing supplier processes for: o High-severity incident management (S3/S4) o Vulnerability management, across suppliers from existing processes Ensure processes are: o Consistent across suppliers o Aligned to client policy and regulatory requirements Establish and govern: o Incident severity classification and escalation thresholds o Vulnerability prioritisation approaches (eg CVSS, KEV, EPSS) o Exception and risk acceptance processes Supplier Coordination (SIAM Model) Coordinate multiple suppliers to ensure consistent handling of incidents and vulnerabilities Act as the integration point across suppliers, aligning outputs without redesigning underlying processes into a common model Identify and manage gaps in process maturity, coverage, data quality and Compliance with standards Incident Management (S3/S4 Focus) Govern the life cycle of high-severity incidents, including escalation, coordination, communication and reporting Ensure suppliers: o Detect and escalate incidents appropriately o Meet defined escalation and communication expectations o Maintain structured incident records Define and agree the required level of visibility from SOC outputs, without requiring direct tooling access Vulnerability Management (SOC-led) Oversee the vulnerability life cycle from identification through to closure Ensure vulnerabilities are: o Prioritised consistently using agreed Client approaches o Tracked through remediation or formal risk acceptance Validate, track and monitor: o Remediation timelines and SLA adherence o Handling of high risk vulnerabilities, exceptions and waivers Identify risks relating to: o Incomplete asset coverage o Obsolescent, Legacy or non-patchable systems Evidence & Assurance Define and align evidence requirements for both: o Incident management (event, escalation, response, closure) o Vulnerability management (identify, track, remediate, validate) Ensure outputs are: o Consistent across suppliers o Traceable to risks and controls o Audit ready Provide assurance that both domains align with ISMS and control requirements Reporting & Transition Support Support domain-specific reporting for: o Major incidents (S3/S4) o Vulnerability risk and remediation status Support governance forums with clear, evidence-based reporting Establish a transition baseline that enables a clean handover of processes to BAU without redesign Key Skills & Experience Essential Experience in security incident management, vulnerability management, or cyber governance roles Strong understanding of: o Incident management life cycle (detect, respond, recover) o Vulnerability life cycle (identify, prioritise, remediate, validate) Experience working in multi-supplier or SIAM environments Ability to interpret outputs from SOC and vulnerability tooling without direct ownership Desirable Familiarity with NIST CSF, NCSC or UK Government security guidance Experience in Defence sector or highly regulated environments Exposure to audit, assurance or ISMS processes ITIL alignment Key Deliverables Standardised and aligned incident and vulnerability management processes Consistent supplier reporting and life cycle governance Evidence models supporting audit and assurance Established transition baseline for BAU handover Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Security Operations Lead - MUST HAVE SC CLEARANCE - Inverness or Preston - 6 months+ One of our Blue Chip Clients is urgently looking for a Security Operations Lead. Please note this role is to start end of September/early October. Please find some details below: The candidate hasn't been outside the UK for more than 28 consecutive days during the last 5 years Location: Inverness or Preston | 5 days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents consistently, effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management life cycle. This is a governance, assurance, and supplier management role and does not perform SOC monitoring, incident investigation, forensic analysis, or operational response activities. Key Responsibilities: Security Incident Governance Own and govern the security incident management framework across suppliers Define and maintain: Incident classification criteria Escalation models Reporting standards Major incident governance processes Ensure alignment to client policies, regulatory obligations, and security controls Supplier Governance & Performance Management Act as the primary OI lead for security incident governance Challenge, validate, and assure supplier incident management processes Drive consistency in reporting, escalation, communications, and evidence standards Manage escalations relating to significant or recurring incidents Incident Risk & Executive Oversight Maintain visibility of security incident exposure across all suppliers Ensure major incidents receive appropriate governance attention Support risk-based decision making through accurate incident reporting Provide oversight of supplier corrective and preventative actions Reporting & Executive Visibility Produce consolidated security incident reporting across suppliers Provide insight into: Incident trends Response performance SLA adherence Recurring root causes Risk exposure Support governance boards, service review meetings, and client security leadership Assurance & Evidence Management Define incident management evidence requirements Ensure traceability across: Detection Escalation Investigation outcomes Recovery activities Closure decisions Support audits, assurance reviews, and regulatory inspections Post-Incident Review & Continuous Improvement Coordinate governance of Post Incident Reviews (PIRs) Ensure suppliers provide: Root cause analysis Corrective actions Improvement activities Identify opportunities to improve incident governance, reporting, and operational effectiveness Your skills and experience Essential Significant experience in Security Incident Management, Cyber Governance, Service Management, or GRC roles Strong understanding of: Security incident life cycles Major incident management Security reporting and governance Experience working within complex multi-supplier environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security Incident Management Framework Consolidated supplier incident reporting Executive incident dashboards Governance and assurance reporting packs Post Incident Review governance outputs Continuous improvement roadmap Role Definition The role governs and assures security incident management across suppliers, ensuring incidents are consistently escalated, evidenced, reviewed, and reported to the client through a controlled and audit-ready process, without performing operational security response activities. What This Role Does/Does Not Do Does Govern, assure, challenge and coordinate Provide enterprise-wide incident visibility Drive supplier accountability Support risk-informed operational decision making Lead incident governance and reporting Does Not Operate SOC tooling Perform forensic investigations Respond to incidents directly Own technical remediation activities Conduct security monitoring or threat hunting Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
13/08/2026
Contractor
Security Operations Lead - MUST HAVE SC CLEARANCE - Inverness or Preston - 6 months+ One of our Blue Chip Clients is urgently looking for a Security Operations Lead. Please note this role is to start end of September/early October. Please find some details below: The candidate hasn't been outside the UK for more than 28 consecutive days during the last 5 years Location: Inverness or Preston | 5 days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of security incident management across a complex multi-supplier environment. The role is responsible for ensuring suppliers manage security incidents consistently, effectively, and in accordance with client policy, regulatory obligations, and operational risk requirements. Acting as the primary OI lead for incident governance, the consultant provides a consolidated view of incident risk, drives supplier accountability, and supports continual improvement across the incident management life cycle. This is a governance, assurance, and supplier management role and does not perform SOC monitoring, incident investigation, forensic analysis, or operational response activities. Key Responsibilities: Security Incident Governance Own and govern the security incident management framework across suppliers Define and maintain: Incident classification criteria Escalation models Reporting standards Major incident governance processes Ensure alignment to client policies, regulatory obligations, and security controls Supplier Governance & Performance Management Act as the primary OI lead for security incident governance Challenge, validate, and assure supplier incident management processes Drive consistency in reporting, escalation, communications, and evidence standards Manage escalations relating to significant or recurring incidents Incident Risk & Executive Oversight Maintain visibility of security incident exposure across all suppliers Ensure major incidents receive appropriate governance attention Support risk-based decision making through accurate incident reporting Provide oversight of supplier corrective and preventative actions Reporting & Executive Visibility Produce consolidated security incident reporting across suppliers Provide insight into: Incident trends Response performance SLA adherence Recurring root causes Risk exposure Support governance boards, service review meetings, and client security leadership Assurance & Evidence Management Define incident management evidence requirements Ensure traceability across: Detection Escalation Investigation outcomes Recovery activities Closure decisions Support audits, assurance reviews, and regulatory inspections Post-Incident Review & Continuous Improvement Coordinate governance of Post Incident Reviews (PIRs) Ensure suppliers provide: Root cause analysis Corrective actions Improvement activities Identify opportunities to improve incident governance, reporting, and operational effectiveness Your skills and experience Essential Significant experience in Security Incident Management, Cyber Governance, Service Management, or GRC roles Strong understanding of: Security incident life cycles Major incident management Security reporting and governance Experience working within complex multi-supplier environments Strong stakeholder engagement and supplier management skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security Incident Management Framework Consolidated supplier incident reporting Executive incident dashboards Governance and assurance reporting packs Post Incident Review governance outputs Continuous improvement roadmap Role Definition The role governs and assures security incident management across suppliers, ensuring incidents are consistently escalated, evidenced, reviewed, and reported to the client through a controlled and audit-ready process, without performing operational security response activities. What This Role Does/Does Not Do Does Govern, assure, challenge and coordinate Provide enterprise-wide incident visibility Drive supplier accountability Support risk-informed operational decision making Lead incident governance and reporting Does Not Operate SOC tooling Perform forensic investigations Respond to incidents directly Own technical remediation activities Conduct security monitoring or threat hunting Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
Vulnerability Management Consultant - MUST HAVE SC CLEARANCE - Inverness or Preston - 6 months+/RATE: £565 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Vulnerability Management Consultant. Please note this role is to start end of September/early October. Please find some details below: Description: CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the last 5 years Role Title: Vulnerability Management Consultant (x3 seats) Location: Inverness or Preston, 5 days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: About the role you're considering The Vulnerability Management Consultant operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of vulnerability management activities across suppliers. The role assists in ensuring vulnerabilities are identified, tracked, prioritised, and reported in accordance with client policies and agreed remediation timelines. Working with suppliers, service teams and security stakeholders, the consultant provides visibility of vulnerability status and supports the maintenance of accurate reporting and audit evidence. This is a governance and coordination role and does not perform vulnerability scanning, security testing, patch deployment, or technical remediation activities. Key Responsibilities: Vulnerability Tracking & Coordination Support the monitoring of vulnerabilities from identification through to closure Ensure vulnerability records are maintained and updated by suppliers Assist in tracking remediation progress against agreed service levels Escalate overdue or high-risk vulnerabilities through agreed governance channels Supplier Engagement (SIAM Model) Coordinate with suppliers to obtain vulnerability status updates Support the collection and validation of supplier vulnerability reports Ensure reporting formats and data standards are applied consistently Identify gaps in vulnerability information, ownership, or reporting Vulnerability Reporting & Visibility Produce routine vulnerability management reports Support development of dashboards and metrics Assist in identifying: Aging vulnerabilities Recurring issues SLA breaches Emerging vulnerability trends Governance & Process Compliance Support adherence to agreed vulnerability management processes Ensure supplier activities align with client policies and standards Assist with documenting risk acceptance and exception processes Maintain evidence required for audits and assurance activities Assurance & Evidence Support Collect and organise vulnerability management evidence Support compliance and assurance reviews Maintain audit-ready documentation and reporting records Assist in demonstrating process effectiveness to stakeholders Your skills and experience Essential Experience in cyber security, information security, service management, or governance roles Understanding of vulnerability management principles Knowledge of basic vulnerability risk concepts including: CVSS, KEV etc Risk ratings Remediation tracking Strong analytical and reporting skills Experience working with multiple stakeholders Desirable Exposure to SIAM or multi-supplier environments Familiarity with vulnerability management tooling and reporting outputs Understanding of cyber security governance and assurance Experience in regulated or defence environments Key Deliverables Vulnerability reporting packs Vulnerability status and remediation tracking Supplier vulnerability performance metrics Audit-ready evidence and reporting records Governance inputs to security forums Role Definition The role supports the governance and visibility of vulnerability management activities across suppliers, ensuring risks are tracked, reported, and evidenced consistently without performing technical vulnerability remediation. What This Role Does/Does Not Do Does Track and coordinate vulnerabilities Support reporting and governance activities Validate supplier information Maintain visibility of remediation progress Does Not Perform vulnerability scanning Deploy patches or fixes Conduct penetration testing Own technical remediation activities Please send CV for full details and immediate interviews. We are a preferred supplier to the client.
13/08/2026
Contractor
Vulnerability Management Consultant - MUST HAVE SC CLEARANCE - Inverness or Preston - 6 months+/RATE: £565 per day inside IR35 One of our Blue Chip Clients is urgently looking for a Vulnerability Management Consultant. Please note this role is to start end of September/early October. Please find some details below: Description: CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the last 5 years Role Title: Vulnerability Management Consultant (x3 seats) Location: Inverness or Preston, 5 days onsite MUST BE PAYE THROUGH UMBRELLA Role Description: About the role you're considering The Vulnerability Management Consultant operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of vulnerability management activities across suppliers. The role assists in ensuring vulnerabilities are identified, tracked, prioritised, and reported in accordance with client policies and agreed remediation timelines. Working with suppliers, service teams and security stakeholders, the consultant provides visibility of vulnerability status and supports the maintenance of accurate reporting and audit evidence. This is a governance and coordination role and does not perform vulnerability scanning, security testing, patch deployment, or technical remediation activities. Key Responsibilities: Vulnerability Tracking & Coordination Support the monitoring of vulnerabilities from identification through to closure Ensure vulnerability records are maintained and updated by suppliers Assist in tracking remediation progress against agreed service levels Escalate overdue or high-risk vulnerabilities through agreed governance channels Supplier Engagement (SIAM Model) Coordinate with suppliers to obtain vulnerability status updates Support the collection and validation of supplier vulnerability reports Ensure reporting formats and data standards are applied consistently Identify gaps in vulnerability information, ownership, or reporting Vulnerability Reporting & Visibility Produce routine vulnerability management reports Support development of dashboards and metrics Assist in identifying: Aging vulnerabilities Recurring issues SLA breaches Emerging vulnerability trends Governance & Process Compliance Support adherence to agreed vulnerability management processes Ensure supplier activities align with client policies and standards Assist with documenting risk acceptance and exception processes Maintain evidence required for audits and assurance activities Assurance & Evidence Support Collect and organise vulnerability management evidence Support compliance and assurance reviews Maintain audit-ready documentation and reporting records Assist in demonstrating process effectiveness to stakeholders Your skills and experience Essential Experience in cyber security, information security, service management, or governance roles Understanding of vulnerability management principles Knowledge of basic vulnerability risk concepts including: CVSS, KEV etc Risk ratings Remediation tracking Strong analytical and reporting skills Experience working with multiple stakeholders Desirable Exposure to SIAM or multi-supplier environments Familiarity with vulnerability management tooling and reporting outputs Understanding of cyber security governance and assurance Experience in regulated or defence environments Key Deliverables Vulnerability reporting packs Vulnerability status and remediation tracking Supplier vulnerability performance metrics Audit-ready evidence and reporting records Governance inputs to security forums Role Definition The role supports the governance and visibility of vulnerability management activities across suppliers, ensuring risks are tracked, reported, and evidenced consistently without performing technical vulnerability remediation. What This Role Does/Does Not Do Does Track and coordinate vulnerabilities Support reporting and governance activities Validate supplier information Maintain visibility of remediation progress Does Not Perform vulnerability scanning Deploy patches or fixes Conduct penetration testing Own technical remediation activities Please send CV for full details and immediate interviews. We are a preferred supplier to the client.