8 jobs found

IT Security Manager 37.5 hours per week Hybrid - 2 days in our Toddington office or out visiting sites Ready to take ownership of security for one of the UK's biggest motorway service operators? At Moto, we're committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business. This is a hands-on role where you'll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance. Why Join Us? Bonus: Up to 20% bonus Time off: 25 days holiday Exclusive discounts: Up to 60% off for you, your partner, and loved ones Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance Career development: Fantastic training opportunities, including funding for qualifications Your Responsibilities Lead and continuously improve Moto's cyber security strategy, policies and controls. Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems. Own security incident response activities, from investigation through to remediation. Manage vulnerability assessments and penetration testing programmes. Lead our Tier 1 PCI-DSS compliance programme and annual audit process. Act as the key contact for auditors and assessors. Maintain security documentation, evidence and compliance records. Conduct risk assessments and manage the security risk register. Deliver security awareness initiatives across the business. Manage relationships with third-party suppliers, auditors and security partners. What You'll Bring We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business. You'll have: Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance. Strong knowledge of security frameworks and controls. Experience managing security incidents, vulnerabilities and remediation programmes. Confidence working with senior stakeholders and external auditors. The ability to work independently and take ownership of a broad security remit. A practical, solutions-focused approach to managing risk while enabling business objectives. It Would Be Great If You Also Have: CISSP, CISM, CISA or similar security certifications. Experience within retail, hospitality or payments environments. Knowledge of cloud security technologies and modern security monitoring tools. Why Moto? Moto is the UK's leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently. Joining Moto means becoming part of a business that's investing in technology, security and innovation. You'll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.

Cyber Security Auditor +Permanent opportunity +Hybrid working - Corsham / West Country +SC / DV clearance is essential We are looking for Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already operating within NCSC-aligned frameworks, with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification (or equivalent) Chartered Auditor and Assessor accreditation Active presence on the NCSC Assured Service Provider / Auditor register Proven experience delivering NCSC-aligned audits The Role You will lead the delivery of cyber security audits across frameworks such as CAF, DCC, and GovAssure, supporting government-led cyber resilience initiatives. Key responsibilities include: Leading end-to-end cyber security audits across client environments Assessing compliance against frameworks such as CAF (v3.2 / v4.0) and GovAssure Producing high-quality audit reports with clear, actionable recommendations Engaging with stakeholders to support remediation and continuous improvement Maintaining audit documentation and evidencing to regulatory standards Staying current with evolving NCSC guidance, standards, and best practice What We're Looking For Minimum 3+ years' experience in cyber auditing, compliance, or risk (Public Sector / Defence preferred) Strong working knowledge of NCSC CAF frameworks Experience leading audit engagements and managing audit teams Excellent stakeholder engagement and report writing skills Ability to operate independently in client-facing environments Due to the nature of the roles, applicants must be UK sole nationals and hold UK Security Clearance to SC level, or preferably DV.

Moto is hiring an IT Security Manager to own and shape the security landscape across its UK operations. The role is hybrid, with 2 days in the Toddington office or visiting sites, and offers a fast-paced environment with a strong emphasis on PCI-DSS compliance and risk management. You will lead security strategy, manage audits with external assessors, and collaborate with senior stakeholders to embed security across the business.

IT Security Manager 37.5 hours per week Hybrid - 2 days in our Toddington office or out visiting sites Ready to take ownership of security for one of the UK's biggest motorway service operators? At Moto, we're committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business. This is a hands-on role where you'll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance. Why Join Us? Bonus: Up to 20% bonus Time off: 25 days holiday Exclusive discounts: Up to 60% off for you, your partner, and loved ones Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance Career development: Fantastic training opportunities, including funding for qualifications Your Responsibilities Lead and continuously improve Moto's cyber security strategy, policies and controls. Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems. Own security incident response activities, from investigation through to remediation. Manage vulnerability assessments and penetration testing programmes. Lead our Tier 1 PCI-DSS compliance programme and annual audit process. Act as the key contact for auditors and assessors. Maintain security documentation, evidence and compliance records. Conduct risk assessments and manage the security risk register. Deliver security awareness initiatives across the business. Manage relationships with third-party suppliers, auditors and security partners. What You'll Bring We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business. You'll have: Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance. Strong knowledge of security frameworks and controls. Experience managing security incidents, vulnerabilities and remediation programmes. Confidence working with senior stakeholders and external auditors. The ability to work independently and take ownership of a broad security remit. A practical, solutions-focused approach to managing risk while enabling business objectives. It Would Be Great If You Also Have: CISSP, CISM, CISA or similar security certifications. Experience within retail, hospitality or payments environments. Knowledge of cloud security technologies and modern security monitoring tools. Why Moto? Moto is the UK's leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently. Joining Moto means becoming part of a business that's investing in technology, security and innovation. You'll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.

Head of Security page is loaded Head of Securitylocations: United Kingdom - Swindontime type: Kokopäiväinenposted on: Julkaistu tänäänjob requisition id: JR019614Ota askel eteenpäin ja anna Edenredin yllättää sinut.Toimitamme joka päivä innovatiivisia ratkaisuja, jotka parantavat miljoonien ihmisten elämää ja yhdistävät työntekijät, yritykset ja kauppiaat ympäri maailmaa.Tiedämme, että sinulla on sata tapaa kasvaa. Meillä voit laajentaa taitojasi monikulttuurisessa, haastavassa ja dynaamisessa ympäristössä. Uskalla liittyä Edenrediin ja valmistaudu kukoistamaan globaalissa yrityksessä, joka tarjoaa sinulle loputtomasti mahdollisuuksia. Edenredissä on kyse meritokratiasta. Tulet sellaisena kuin olet ja annat panoksesi. Edenred-konserni tunnustaa, rekrytoi ja kehittää kaikkia kykyjä ja erityispiirteitä.Olemme sitoutuneet estämään kaikenlaisen syrjinnän ja tarjoamaan kaikille hakijoillemme yhtäläiset mahdollisuudet sukupuolesta ja sukupuolen ilmaisusta, vammaisuudesta, alkuperästä, uskonnollisesta vakaumuksesta ja seksuaalisesta suuntautumisesta tai muista kriteereistä riippumatta. Head of Information Security - PayTech Location: Swindon/London Type: Full-time, Senior Leadership Role About PayTech: Join PayTech, a leading FinTech company within the Edenred group, committed to securing innovative payment technologies and protecting critical customer and company data. We are looking for an experienced and strategic Head of Information Security to lead and advance our security posture in a fast-evolving technological and regulatory landscape. Role Overview: As the Head of Information Security, you will be a senior leader responsible for defining, implementing, and maintaining PayTech's information security strategy. You will protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements. Key Responsibilities: Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management strategy. Develop and enhance security policies, standards, and procedures across the organisation. Manage the information security risk program, maintaining a comprehensive risk register. Oversee AI/ML security risk management, including the development of policies for generative AI technologies. Collaborate with Financial Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime. Manage third-party security risk due diligence programs. Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed a security-aware culture. Manage security incident response planning and coordinate with Security Operations Centre (SOC). Report regularly to PayTech Executive Leadership and Edenred Group CISO on security program status and risks. Lead a team of approximately 6 security professionals. Qualifications & Experience: Solid experience senior information security leadership roles. Proven hands-on experience managing PCI DSS and other compliance programs. Experience in complex corporate structures with multi-stakeholder compliance demands. Strong background in developing security governance frameworks and policies. Experience with financial services, FinTech, or payments sector preferred. Familiarity working with financial crime, fraud, and AML functions. Experience managing risks associated with emerging technologies like AI/ML. Desired Certifications: CISSP (Certified Information Systems Security Professional) - highly desired CISM, PCIP, ISA, or QSA qualifications are advantageous. Skills: Strong leadership and mentoring capabilities. Deep technical knowledge in network security, cryptography, IAM, and cloud security (AWS, Azure, GCP). Excellent communication skills, able to convey complex security topics to non-technical stakeholders. Pragmatic, calm, and resilient under pressure during incident management.Be part of a dynamic and strategic security leadership team within a pioneering FinTech environment. Influence the protection of critical technologies and data, contribute to innovative AI risk frameworks, and help shape the future of PayTech's secure growth. Apply now and Vibe with Us! (blob:)

Nxera Pharma is seeking an Associate Director, Cybersecurity to lead and continuously improve cybersecurity across a globally distributed biopharmaceutical environment. This is a senior, hands on leadership role responsible for protecting Nxera's most valuable digital assets, including research data, intellectual property, scientific platforms, regulated information, corporate systems and commercially sensitive data. Reporting to the Head of IT Infrastructure, Support Services and Security, the role will act as Nxera's cybersecurity lead, working closely with internal IT teams, business stakeholders and specialist external partners/vendors. The successful candidate will combine strategic cyber risk leadership with practical technical judgement across Microsoft 365, Microsoft Entra ID, Azure, identity, endpoint, cloud, SaaS, data protection and security operations. The role will partner closely with IT, R&D, Legal, Compliance, Quality and business teams to ensure cybersecurity enables Nxera's mission while reducing risk to the company's data, operations, partners and reputation. Key responsibilities Define, maintain and execute Nxera's cybersecurity strategy, roadmap and operating model, aligned to business priorities and the protection of research data, intellectual property, regulated systems and corporate platforms. Own the cybersecurity risk register and act as IT Risk Champion within the company's broader risk management framework, providing clear reporting, metrics and recommendations to IT leadership and senior stakeholders. Establish and maintain cybersecurity standards across Microsoft 365, Microsoft Entra ID, Azure, endpoint, network, SaaS, collaboration, identity and cloud services. Lead the improvement of core security controls, including multi factor authentication, Conditional Access, privileged access, endpoint protection, vulnerability management, secure configuration, data loss prevention, encryption, logging and monitoring. Provide cybersecurity input into IT projects, infrastructure changes, new SaaS platforms, cloud services and business transformation initiatives, ensuring security controls are practical, supportable and proportionate to risk. Partner with R&D, IT, Legal, Compliance, Quality, Privacy and business teams to protect research data, intellectual property, scientific platforms, regulated data and contract bound information. Own and continuously improve Nxera's cyber incident response capability, including playbooks, escalation routes, tabletop exercises, communication protocols and post incident reviews. Manage the relationship and operational effectiveness of external cybersecurity partners/vendors, including SOC/MDR providers, penetration testing providers, security assessors and awareness/training providers. Lead vulnerability and exposure management across endpoints, servers, cloud, SaaS, identity, network and externally exposed services. Lead proportionate cybersecurity due diligence for key technology suppliers, research partners, SaaS providers, cloud services and outsourced security providers. Establish practical cybersecurity guardrails for the safe adoption of AI, machine learning and emerging technologies, particularly where sensitive data, research information or intellectual property may be involved. Own, maintain and improve cybersecurity policies, SOPs and control evidence in line with Nxera's compliance framework and applicable obligations. Build a pragmatic security culture through targeted awareness, phishing resilience, executive briefings and role specific guidance for higher risk groups. Drive continuous improvement through lessons learned from incidents, audits, penetration tests, risk assessments and technology changes. Required qualifications and experience Bachelor's or Master's degree in Computer Science, Information Security, Life Sciences or a related discipline, or equivalent professional experience. At least seven years' experience in cybersecurity, infrastructure security, security operations or IT risk, including responsibility for security controls across a cloud first or hybrid enterprise environment. Strong working knowledge of Microsoft security technologies, including Microsoft 365, Microsoft Entra ID, Azure security, Intune, Microsoft Defender, Conditional Access, endpoint protection, data loss prevention, logging and monitoring. Experience with cybersecurity governance, risk management, incident response, vulnerability management, third party security assurance and security control improvement. Experience managing external cybersecurity partners/vendors, such as SOC/MDR providers, penetration testing providers, security assessors or awareness/training providers. Ability to translate technical cybersecurity risks into business impact, pragmatic recommendations and prioritised action plans. Excellent communication, stakeholder management and influencing skills, with the ability to work effectively across technical and non technical teams. Strong analytical, planning and delivery skills, with the ability to operate independently as the cybersecurity lead while collaborating across IT and the wider business. Fluent English. Desirable experience Experience in biopharma, life sciences, healthcare, R&D or another regulated environment. Familiarity with GxP, GLP, GDPR, validated systems, data integrity, research collaborations or contractual partner obligations. Experience with recognised cybersecurity frameworks and standards such as NIST CSF, ISO 27001, Cyber Essentials Plus or equivalent. Relevant professional certifications such as CISSP, CISM, CCSP, ISO27001 Lead Implementer/Lead Auditor or equivalent. Conversational Japanese would be advantageous. Personal attributes Strategic and pragmatic, with the ability to balance risk management, business enablement and operational practicality. Comfortable operating in a hands on leadership role, moving between strategy, governance, technical detail and incident response as required. Confident engaging with both technical and non technical stakeholders. Able to influence without direct authority and build strong relationships across functions and external partners. Proactive, self motivated and able to prioritise effectively in a dynamic environment. Strong judgement, discretion and professionalism when handling sensitive information and cybersecurity incidents. What's in it for you? State of the art R&D centre located in the heart of the Cambridge science cluster. Competitive compensation package including discretionary cash bonuses. 26 days annual leave in addition to public holidays plus the option to purchase an additional 5 days each year. Employer contribution to pension. Private Medical Insurance for employees and family and a cash plan for dental and optical reimbursement. Health and wellbeing benefits including a subsidised individual gym membership. Income protection to cover long term absences due to ill health. Group Death in Service equal to 4 basic annual salary. Opportunity This is an opportunity to shape and lead cybersecurity across a science led, globally distributed biopharmaceutical company. The successful candidate will play a critical role in protecting Nxera's research, intellectual property, digital platforms and business operations, while enabling secure collaboration, innovation and growth. About Nxera Pharma Nxera Pharma is a technology powered biopharma company in pursuit of new specialty medicines to improve the lives of patients with unmet needs in Japan and globally. The Company has built an agile, new generation commercial business in Japan to develop and commercialise innovative medicines, including several launched products, to address this high value, large and growing market and those in the broader APAC region. In addition, the Company is advancing an extensive pipeline internally and in partnership with leading pharma and biotech companies powered by its unique NxWave GPCR structure based drug discovery platform. Nxera Pharma operates at key locations in Tokyo and Osaka (Japan), London and Cambridge (UK), Basel (Switzerland) and Seoul (South Korea) and is listed on the Tokyo Stock Exchange (ticker: 4565). Nxera Pharma is a technology powered biopharma company, in pursuit of new specialty medicines to improve the lives of patients with unmet needs in Japan and globally. Our mission is to accelerate the development of life changing medicines, by investing in science and technology. Our vision is to lead the next era of medicine. From Japan, for Japan, and by extension, to the world. We are proud to offer a collaborative, diverse and inclusive working environment that considers your individual needs and believes in maintaining a sustainable work life balance. You will be welcomed by a team of colleagues with decades of accumulated experience in their areas of expertise, happy to help you develop your own skills in a highly collaborative environment and who are keen to provide guidance and support in your personal and career development plans.