Medaille Trust
Home-Based Physiotherapy Services, London, UK
REMOTE
NO CVS ACCEPTED and STRICTLY NO AGENCIES/RECRUITMENT CONSULTANTS.
This role requires the submission of a completed Medaille Trust Application Form which you can download from the Vacancies page on Medaille Trust website. This is to be uploaded to the 'Other Document Upload' button. Your application will not be considered without an application form as we do not accept CVS.
THE CLOSING DATE FOR THIS ROLE IS 01/05/26 AT 10AM
About the job
We are looking for a Senior IT and Network Technician to lead the technical administration and security of our digital workplace.
In the role you will:
• Bridge the gap between our cloud environment (Microsoft 365/Intune) and our physical infrastructure (Ubiquiti Networking).
• Ensure our staff can work securely from any location while protecting sensitive beneficiary data through robust Conditional Access and VLAN segmentation.
• Act as the 1st line support escalation point for complex technical issues.
• Travel across sites to set up DSE workstations and assist with IT sessions.
What we are looking for:
• A Microsoft 365 Specialist, with proven experience managing a Microsoft 365 tenant with a focus on security and compliance.
• An Intune Expert, with a deep understanding of MDM/MAM, configuration profiles, and packaging applications.
• A Networking Professional with solid experience with Ubiquiti UniFi hardware and software.
• Proven experience of DNS, DHCP, VLAN tagging, and firewall rule logic.
• Experience implementing "Least Privilege" access and Cyber Essentials standards. Interested?
For full details and how to apply please visit https://www.Medaille-trust.org.uk/vacancies
If you have any queries, please contact HR on recruitment@medaille-trust.org.uk
Closing Date: Friday, 1 May 2026 at 10:00am
Interview date: Friday, 8 May 2026
This role is a subject to satisfactory Disclosure & Barring Service checks.
The ability to drive with a valid licence with use of own vehicle insured for business purposes is essential.
Applications will be reviewed as they are received, and we reserve the right to interview/ appoint before the closing date. Early applications are therefore strongly encouraged.
Candidates are asked to complete their own application form without assistance from other external sources such as ChatGPT. Where there is reasonable belief that external support is evident, we regret that application forms will not be accepted for shortlisting.
About Us
About Us Medaille Trust is one of the leading providers of support to survivors of modern slavery and human trafficking in the UK. We are working to provide refuge and freedom for survivors and fighting to see slavery in all its forms become a thing of the past. The need for this work has never been higher, there are more than 50 million estimated victims of modern slavery worldwide, and over 120,000 potential victims in the UK.
We operate ten safe houses and five outreach hubs, staffed round the clock by specialist staff, working with more than 600 men, women and dependent children each year. We work to raise awareness in the UK and to provide preventive work in source countries. Our Pursue work helps survivors to engage with police and within the legal system to seek justice and to secure convictions against their perpetrators.
27/03/2026
Full time
REMOTE
NO CVS ACCEPTED and STRICTLY NO AGENCIES/RECRUITMENT CONSULTANTS.
This role requires the submission of a completed Medaille Trust Application Form which you can download from the Vacancies page on Medaille Trust website. This is to be uploaded to the 'Other Document Upload' button. Your application will not be considered without an application form as we do not accept CVS.
THE CLOSING DATE FOR THIS ROLE IS 01/05/26 AT 10AM
About the job
We are looking for a Senior IT and Network Technician to lead the technical administration and security of our digital workplace.
In the role you will:
• Bridge the gap between our cloud environment (Microsoft 365/Intune) and our physical infrastructure (Ubiquiti Networking).
• Ensure our staff can work securely from any location while protecting sensitive beneficiary data through robust Conditional Access and VLAN segmentation.
• Act as the 1st line support escalation point for complex technical issues.
• Travel across sites to set up DSE workstations and assist with IT sessions.
What we are looking for:
• A Microsoft 365 Specialist, with proven experience managing a Microsoft 365 tenant with a focus on security and compliance.
• An Intune Expert, with a deep understanding of MDM/MAM, configuration profiles, and packaging applications.
• A Networking Professional with solid experience with Ubiquiti UniFi hardware and software.
• Proven experience of DNS, DHCP, VLAN tagging, and firewall rule logic.
• Experience implementing "Least Privilege" access and Cyber Essentials standards. Interested?
For full details and how to apply please visit https://www.Medaille-trust.org.uk/vacancies
If you have any queries, please contact HR on recruitment@medaille-trust.org.uk
Closing Date: Friday, 1 May 2026 at 10:00am
Interview date: Friday, 8 May 2026
This role is a subject to satisfactory Disclosure & Barring Service checks.
The ability to drive with a valid licence with use of own vehicle insured for business purposes is essential.
Applications will be reviewed as they are received, and we reserve the right to interview/ appoint before the closing date. Early applications are therefore strongly encouraged.
Candidates are asked to complete their own application form without assistance from other external sources such as ChatGPT. Where there is reasonable belief that external support is evident, we regret that application forms will not be accepted for shortlisting.
About Us
About Us Medaille Trust is one of the leading providers of support to survivors of modern slavery and human trafficking in the UK. We are working to provide refuge and freedom for survivors and fighting to see slavery in all its forms become a thing of the past. The need for this work has never been higher, there are more than 50 million estimated victims of modern slavery worldwide, and over 120,000 potential victims in the UK.
We operate ten safe houses and five outreach hubs, staffed round the clock by specialist staff, working with more than 600 men, women and dependent children each year. We work to raise awareness in the UK and to provide preventive work in source countries. Our Pursue work helps survivors to engage with police and within the legal system to seek justice and to secure convictions against their perpetrators.
Senior Security & Technology Consultants Location: Warton, UK (On-Site - 5 Days per Week) Clearance Required: Valid MOD DV (Mandatory) Engagement Type: Contract (Inside IR35) Day Rate: 500 - 900 per day (dependent on role and experience) Overview We are seeking experienced Security & Technology Professionals to support critical programmes in a secure defence environment. These roles span architecture, assurance, operations, and technical delivery disciplines and require individuals who can operate effectively within highly regulated, mission-critical settings. All positions are based full-time on-site in Warton (5 days per week) and require candidates to hold a current and valid MOD DV clearance at the time of application. Scope of Opportunities We are hiring across multiple security and technology disciplines, including: Security Architects Security Assurers Information Security Consultants SOC Analysts OT Architects Cross Domain SMEs IT Administrators Service Managers Product Security Managers Penetration Testing Specialists Technical Project / Programme Managers Key Responsibilities (Role Dependent) Security Architecture & Design Define and review secure architectures across enterprise IT and OT environments. Act as technical authority for secure system design and implementation. Lead threat modelling, risk assessments, and security design reviews. Ensure compliance with defence security standards and secure-by-design principles. Security Assurance & Governance Deliver independent security assurance across programmes. Support accreditation activities and compliance reviews. Develop and maintain security documentation, standards, and risk registers. Security Operations & SOC Monitor, analyse, and respond to security events and incidents. Strengthen detection, response, and resilience capabilities. Support vulnerability management and remediation activities. OT & Cross Domain Security Provide expertise in Operational Technology environments. Design and assure secure cross-domain solutions and data transfer mechanisms. Evaluate network segregation and high-assurance controls. Penetration Testing & Vulnerability Management Conduct or oversee penetration testing engagements. Assess vulnerabilities and validate remediation strategies. Support red/blue team activities where required. Service & Product Security Embed security into live service management processes. Act as Product Security lead across development lifecycles. Integrate DevSecOps controls and secure SDLC practices. Technical Delivery & Programme Support Manage security-focused technical workstreams. Provide governance reporting to senior stakeholders. Translate technical risks into business impact and mitigation plans. Essential Requirements Valid and transferable MOD DV clearance (mandatory). Availability to work on-site in Warton, 5 days per week. Strong background in one or more of the listed security disciplines. Experience working in secure, defence, or highly regulated environments. Relevant certifications (e.g., CISSP, CISM, TOGAF, CREST, cloud certifications).
02/04/2026
Contractor
Senior Security & Technology Consultants Location: Warton, UK (On-Site - 5 Days per Week) Clearance Required: Valid MOD DV (Mandatory) Engagement Type: Contract (Inside IR35) Day Rate: 500 - 900 per day (dependent on role and experience) Overview We are seeking experienced Security & Technology Professionals to support critical programmes in a secure defence environment. These roles span architecture, assurance, operations, and technical delivery disciplines and require individuals who can operate effectively within highly regulated, mission-critical settings. All positions are based full-time on-site in Warton (5 days per week) and require candidates to hold a current and valid MOD DV clearance at the time of application. Scope of Opportunities We are hiring across multiple security and technology disciplines, including: Security Architects Security Assurers Information Security Consultants SOC Analysts OT Architects Cross Domain SMEs IT Administrators Service Managers Product Security Managers Penetration Testing Specialists Technical Project / Programme Managers Key Responsibilities (Role Dependent) Security Architecture & Design Define and review secure architectures across enterprise IT and OT environments. Act as technical authority for secure system design and implementation. Lead threat modelling, risk assessments, and security design reviews. Ensure compliance with defence security standards and secure-by-design principles. Security Assurance & Governance Deliver independent security assurance across programmes. Support accreditation activities and compliance reviews. Develop and maintain security documentation, standards, and risk registers. Security Operations & SOC Monitor, analyse, and respond to security events and incidents. Strengthen detection, response, and resilience capabilities. Support vulnerability management and remediation activities. OT & Cross Domain Security Provide expertise in Operational Technology environments. Design and assure secure cross-domain solutions and data transfer mechanisms. Evaluate network segregation and high-assurance controls. Penetration Testing & Vulnerability Management Conduct or oversee penetration testing engagements. Assess vulnerabilities and validate remediation strategies. Support red/blue team activities where required. Service & Product Security Embed security into live service management processes. Act as Product Security lead across development lifecycles. Integrate DevSecOps controls and secure SDLC practices. Technical Delivery & Programme Support Manage security-focused technical workstreams. Provide governance reporting to senior stakeholders. Translate technical risks into business impact and mitigation plans. Essential Requirements Valid and transferable MOD DV clearance (mandatory). Availability to work on-site in Warton, 5 days per week. Strong background in one or more of the listed security disciplines. Experience working in secure, defence, or highly regulated environments. Relevant certifications (e.g., CISSP, CISM, TOGAF, CREST, cloud certifications).
Our client, a leading organisation within the defence and advanced technology sector, is seeking a Product Cyber Security Specialist to support the delivery of secure, mission-critical systems. This role offers the opportunity to work across complex engineering programmes, contributing to the protection and resilience of advanced defence platforms. The Role As a Product Cyber Security Specialist, you will provide cyber security expertise across the full systems engineering lifecycle. Working closely with engineering and delivery teams, you will support the identification, assessment and management of cyber risks, ensuring security is embedded throughout product development. You will also contribute to the ongoing development of product cyber security capabilities, including the use of automation and emerging technologies to enhance assurance processes. Key Responsibilities Support and enhance automation of cyber security risk and vulnerability assessment activities, including the use of advanced technologies Provide cyber security expertise across the product systems engineering lifecycle Maintain and manage cyber security risk artefacts, ensuring accuracy and consistency Provide timely technical guidance to engineering and delivery teams Plan cyber security activities and contribute to project estimates and planning Support delivery of proportionate and effective cyber security approaches across programmes Contribute to the development and continuous improvement of cyber security capability Essential Requirements Degree in Engineering, Computer Science, Cyber Security, or equivalent experience Strong background in cyber security and/or engineering environments Interest in cyber security within industrial control systems or operational technology Experience working with engineering or cyber design data Awareness of industrial control systems environments Knowledge of cyber security frameworks such as NIST CSF Experience in threat modelling using frameworks such as MITRE ATT&CK, DEF3ND or EMB3D Experience in cyber security risk management Familiarity with vulnerability, patch and update management processes Desirable Skills Understanding of Secure by Design principles aligned to UK MOD standards (e.g. DEFSTAN 05-139, DEFSTAN 05-138) Familiarity with ISA/IEC 62443 Experience or certifications relating to operational technology or industrial control systems This is an opportunity to join a well-established organisation delivering advanced solutions within the defence sector. The role offers strong potential for professional development and involvement in high-impact, technically challenging programmes.
01/04/2026
Full time
Our client, a leading organisation within the defence and advanced technology sector, is seeking a Product Cyber Security Specialist to support the delivery of secure, mission-critical systems. This role offers the opportunity to work across complex engineering programmes, contributing to the protection and resilience of advanced defence platforms. The Role As a Product Cyber Security Specialist, you will provide cyber security expertise across the full systems engineering lifecycle. Working closely with engineering and delivery teams, you will support the identification, assessment and management of cyber risks, ensuring security is embedded throughout product development. You will also contribute to the ongoing development of product cyber security capabilities, including the use of automation and emerging technologies to enhance assurance processes. Key Responsibilities Support and enhance automation of cyber security risk and vulnerability assessment activities, including the use of advanced technologies Provide cyber security expertise across the product systems engineering lifecycle Maintain and manage cyber security risk artefacts, ensuring accuracy and consistency Provide timely technical guidance to engineering and delivery teams Plan cyber security activities and contribute to project estimates and planning Support delivery of proportionate and effective cyber security approaches across programmes Contribute to the development and continuous improvement of cyber security capability Essential Requirements Degree in Engineering, Computer Science, Cyber Security, or equivalent experience Strong background in cyber security and/or engineering environments Interest in cyber security within industrial control systems or operational technology Experience working with engineering or cyber design data Awareness of industrial control systems environments Knowledge of cyber security frameworks such as NIST CSF Experience in threat modelling using frameworks such as MITRE ATT&CK, DEF3ND or EMB3D Experience in cyber security risk management Familiarity with vulnerability, patch and update management processes Desirable Skills Understanding of Secure by Design principles aligned to UK MOD standards (e.g. DEFSTAN 05-139, DEFSTAN 05-138) Familiarity with ISA/IEC 62443 Experience or certifications relating to operational technology or industrial control systems This is an opportunity to join a well-established organisation delivering advanced solutions within the defence sector. The role offers strong potential for professional development and involvement in high-impact, technically challenging programmes.
Key Details Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30/09/2026 , with possible extension IR35: In scope Rate: Up to 50-55/hour Environment: Cyber / Public Sector, security-focused What you would be doing Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting , password rotation , and check-in/check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux/Unix and network devices onto PAM platforms Managing privileged accounts in Active Directory Integrating PAM with SIEM for logging, alerting and monitoring Producing clear documentation, runbooks and technical configuration records Troubleshooting connector and session-related issues What the client is looking for Proven, hands-on experience with PAM solutions (implementation and BAU management) Solid knowledge of credential vaulting , password rotation and session monitoring/recording Experience integrating PAM into complex infrastructures (servers, network devices, AD, SIEM) Familiarity with security frameworks such as ISO 27001 and NIST CSF Strong troubleshooting skills and a methodical, security-focused mindset Ability to obtain SC-level national security clearance (BPSS as a minimum) Nice to have (but not essential) Experience with BeyondTrust (Password Safe, Privileged Remote Access, Endpoint Privilege Management) Exposure to other PAM platforms such as CyberArk or Delinea Scripting skills (e.g. PowerShell , Python ) for automation Experience with privileged access for databases (SQL Server, Oracle) Background in public sector , critical national infrastructure or OT/ICS environments Why this might interest you Long-term stability (contract to late 2026 with extension potential) Opportunity to be the go-to PAM specialist in a security-critical setting Hands-on, technically challenging role with real influence on cyber resilience If this aligns with your experience, I would be keen to share more.
01/04/2026
Contractor
Key Details Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30/09/2026 , with possible extension IR35: In scope Rate: Up to 50-55/hour Environment: Cyber / Public Sector, security-focused What you would be doing Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting , password rotation , and check-in/check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux/Unix and network devices onto PAM platforms Managing privileged accounts in Active Directory Integrating PAM with SIEM for logging, alerting and monitoring Producing clear documentation, runbooks and technical configuration records Troubleshooting connector and session-related issues What the client is looking for Proven, hands-on experience with PAM solutions (implementation and BAU management) Solid knowledge of credential vaulting , password rotation and session monitoring/recording Experience integrating PAM into complex infrastructures (servers, network devices, AD, SIEM) Familiarity with security frameworks such as ISO 27001 and NIST CSF Strong troubleshooting skills and a methodical, security-focused mindset Ability to obtain SC-level national security clearance (BPSS as a minimum) Nice to have (but not essential) Experience with BeyondTrust (Password Safe, Privileged Remote Access, Endpoint Privilege Management) Exposure to other PAM platforms such as CyberArk or Delinea Scripting skills (e.g. PowerShell , Python ) for automation Experience with privileged access for databases (SQL Server, Oracle) Background in public sector , critical national infrastructure or OT/ICS environments Why this might interest you Long-term stability (contract to late 2026 with extension potential) Opportunity to be the go-to PAM specialist in a security-critical setting Hands-on, technically challenging role with real influence on cyber resilience If this aligns with your experience, I would be keen to share more.
Role: SC Cleared Network Engineer Location: Farnborough (2 to 3 days per week onsite) Length: 6 months Rate: 750 to 800 via umbrella CANDIDATES MUST HOLD ACTIVE SC CLEARANCE AND BE SOLE UK NATIONALS DUE TO THE NATURE OF THE WORK AND INDUSTRY The Role As a Senior Network Engineer, you will be responsible for delivering engineering excellence across one or more technology domains by providing deep technical insight, drive continuous improvement, and ensure solutions are robust, scalable, and aligned with strategic objectives. Day-to-day, you'll lead the design, implementation and support of complex technology solutions, ensuring high performance, reliability, and security. As the Senior Engineer, you will also act as a technical authority, mentoring junior engineers and collaborating across teams to deliver integrated solutions. Your responsibilities will include: Leading the design, implementation and support of enterprise-grade solutions across one or more technology domains Take ownership of complex technical deliverables, ensuring quality, performance, and alignment with architectural and strategic standards and provide technical leadership and mentoring to Engineers and Associate Engineers, supporting their development and integration into the team Collaborate with principal engineers, architects and capability leads to align engineering outputs with strategic goals Represent engineering in cross-functional discussions, influencing decisions and driving alignment across teams Contribute to technology roadmaps and continuous improvement initiatives Ensure compliance with security, performance and operational standards and proactively identify and mitigate risks across engineering deliverables and service operations Essential experience of the Senior Network Engineer: Experience with large-scale, multi-site enterprise networks across LAN, WAN, datacentre, and hybrid-cloudoud environments Knowledge of routing and switching protocols including BGP, OSPF, VXLAN, EVPN, WI-FI and Network Authentication Protocols (e.g. 802.1x), across Cisco Catalyst/Nexus/WLC, Cisco Meraki, Palo Alto, Dell products. Familiarity with Cisco, Palo Alto, and F5 security solutions, including firewalls, intrusion prevention/detection systems, and network access control solutions Eperience with software defined Networking including virtualization technologies such as VMWare NSX-T Experience in producing detailed network designs and documentation aligned with business and security requirements Has experience with network automation, supported by development teams Essential qualifications for the Senior Network Engineer: CCNP or equivalent industry experience Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience). This role is 37 hours per week based at Farnborough. To cover shift patterns between (Apply online only) GMT you may be asked to work at specific times. As part of a commitment to maintaining high service availability and rapid incident response, this role will be required to participate in an on-call rota. This responsibility reflects the trust placed in the role to act swiftly and decisively when critical systems are impacted. At our Farnborough site exciting work takes place at our state-of-the-art facility, with high-energy laser technologies, our 5m pressurised wind tunnel which has a simulation capability that is unique in the UK and our large research and development projects is a real hub of creativity, research and innovation. Join our talented teams of Engineers, IT & Cyber Specialists, Project Managers, Group Functions Teams and many more to provide future defences in the UK.
01/04/2026
Contractor
Role: SC Cleared Network Engineer Location: Farnborough (2 to 3 days per week onsite) Length: 6 months Rate: 750 to 800 via umbrella CANDIDATES MUST HOLD ACTIVE SC CLEARANCE AND BE SOLE UK NATIONALS DUE TO THE NATURE OF THE WORK AND INDUSTRY The Role As a Senior Network Engineer, you will be responsible for delivering engineering excellence across one or more technology domains by providing deep technical insight, drive continuous improvement, and ensure solutions are robust, scalable, and aligned with strategic objectives. Day-to-day, you'll lead the design, implementation and support of complex technology solutions, ensuring high performance, reliability, and security. As the Senior Engineer, you will also act as a technical authority, mentoring junior engineers and collaborating across teams to deliver integrated solutions. Your responsibilities will include: Leading the design, implementation and support of enterprise-grade solutions across one or more technology domains Take ownership of complex technical deliverables, ensuring quality, performance, and alignment with architectural and strategic standards and provide technical leadership and mentoring to Engineers and Associate Engineers, supporting their development and integration into the team Collaborate with principal engineers, architects and capability leads to align engineering outputs with strategic goals Represent engineering in cross-functional discussions, influencing decisions and driving alignment across teams Contribute to technology roadmaps and continuous improvement initiatives Ensure compliance with security, performance and operational standards and proactively identify and mitigate risks across engineering deliverables and service operations Essential experience of the Senior Network Engineer: Experience with large-scale, multi-site enterprise networks across LAN, WAN, datacentre, and hybrid-cloudoud environments Knowledge of routing and switching protocols including BGP, OSPF, VXLAN, EVPN, WI-FI and Network Authentication Protocols (e.g. 802.1x), across Cisco Catalyst/Nexus/WLC, Cisco Meraki, Palo Alto, Dell products. Familiarity with Cisco, Palo Alto, and F5 security solutions, including firewalls, intrusion prevention/detection systems, and network access control solutions Eperience with software defined Networking including virtualization technologies such as VMWare NSX-T Experience in producing detailed network designs and documentation aligned with business and security requirements Has experience with network automation, supported by development teams Essential qualifications for the Senior Network Engineer: CCNP or equivalent industry experience Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience). This role is 37 hours per week based at Farnborough. To cover shift patterns between (Apply online only) GMT you may be asked to work at specific times. As part of a commitment to maintaining high service availability and rapid incident response, this role will be required to participate in an on-call rota. This responsibility reflects the trust placed in the role to act swiftly and decisively when critical systems are impacted. At our Farnborough site exciting work takes place at our state-of-the-art facility, with high-energy laser technologies, our 5m pressurised wind tunnel which has a simulation capability that is unique in the UK and our large research and development projects is a real hub of creativity, research and innovation. Join our talented teams of Engineers, IT & Cyber Specialists, Project Managers, Group Functions Teams and many more to provide future defences in the UK.
Site Relationship Manager Contract up to the end of 2026 Based in Filton Offering 35ph Inside IR35 Do you have experience working in an industrial/manufacturing environment? Do you have experience building relationships? Do you want to work with an industry-leading company? If your answer to these is yes, then this could be the role for you! As the Site Relationship Manager, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry. You will be involved in: Establish and nurture a strong and trustful relationship with the Filton Plant (OWI and support functions) ensuring attendance to all relevant site routines (SQCDP, plant governance etc.) and report regularly to Plant management on the site's consumption of Digital products and their performance and value Manage Digital Stakeholder Management for the site, being the focal point for all Digital activities, and building a local view of the Digital Strategy Lead a local Digital "Digital4Opeartions" Community with the other Digital domains and Digital leaders in Operations Responsible for building and maintaining the overall Digital roadmap for the site with Plant management Ensure full alignment with the leaders of the other Digital teams supporting the Plant for Digital topics: ERP/SAP, Digital Workplace, Network & Infrastructure and lead the site multifunctional team Implement a consistent Digital Demand Mgmt. process for the plant, respecting site management priorities as well as risks/opportunities for the D Product Service Lines (PSLs) and anticipate ramp-up related support/activities Organises robust crisis management and communication to stakeholders Foster decommissioning of legacy applications for the site in close collaboration with D PSLs/Products Support & develop the ITinOT team to continually improve the cyber security of the Filton plant Coach & develop Digital team members Ensure an effective working relationship between Plant Maintenance, Cyber Security (DS) and IT/OT with a clear, agreed RASCI Monitor service level targets and report regularly to the business. Escalate when service levels are not meeting expectations Contribute to managing suppliers. Specifically the Digital Shopfloor Bundle supplier: challenge incident response time (MTTR), incident quantity (repeat incidents) and quality of support Support the transition to the new Shopfloor Bundle contract and service provider in Filton Contribute to the DOF and Filton Plant Risk and Opportunities management Your skillset may include: Broad knowledge of Digital products, organisation & processes Experience working in an industrial operations environment Knowledge of Digital tools & applications used in Operations Knowledge of cyber security practices Stakeholder management skills & experience Leading and managing If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further! Site Relationship Manager Contract up to the end of 2026 Based in Filton Offering 35ph Inside IR35 Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
01/04/2026
Contractor
Site Relationship Manager Contract up to the end of 2026 Based in Filton Offering 35ph Inside IR35 Do you have experience working in an industrial/manufacturing environment? Do you have experience building relationships? Do you want to work with an industry-leading company? If your answer to these is yes, then this could be the role for you! As the Site Relationship Manager, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry. You will be involved in: Establish and nurture a strong and trustful relationship with the Filton Plant (OWI and support functions) ensuring attendance to all relevant site routines (SQCDP, plant governance etc.) and report regularly to Plant management on the site's consumption of Digital products and their performance and value Manage Digital Stakeholder Management for the site, being the focal point for all Digital activities, and building a local view of the Digital Strategy Lead a local Digital "Digital4Opeartions" Community with the other Digital domains and Digital leaders in Operations Responsible for building and maintaining the overall Digital roadmap for the site with Plant management Ensure full alignment with the leaders of the other Digital teams supporting the Plant for Digital topics: ERP/SAP, Digital Workplace, Network & Infrastructure and lead the site multifunctional team Implement a consistent Digital Demand Mgmt. process for the plant, respecting site management priorities as well as risks/opportunities for the D Product Service Lines (PSLs) and anticipate ramp-up related support/activities Organises robust crisis management and communication to stakeholders Foster decommissioning of legacy applications for the site in close collaboration with D PSLs/Products Support & develop the ITinOT team to continually improve the cyber security of the Filton plant Coach & develop Digital team members Ensure an effective working relationship between Plant Maintenance, Cyber Security (DS) and IT/OT with a clear, agreed RASCI Monitor service level targets and report regularly to the business. Escalate when service levels are not meeting expectations Contribute to managing suppliers. Specifically the Digital Shopfloor Bundle supplier: challenge incident response time (MTTR), incident quantity (repeat incidents) and quality of support Support the transition to the new Shopfloor Bundle contract and service provider in Filton Contribute to the DOF and Filton Plant Risk and Opportunities management Your skillset may include: Broad knowledge of Digital products, organisation & processes Experience working in an industrial operations environment Knowledge of Digital tools & applications used in Operations Knowledge of cyber security practices Stakeholder management skills & experience Leading and managing If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further! Site Relationship Manager Contract up to the end of 2026 Based in Filton Offering 35ph Inside IR35 Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
MERITUS are recruiting for a Digital Site Operations Manager to join our client in supporting IT/OT site relationships and procedures. We are not looking for somone who has specialist hands on IT experience, but someone from an IT background who can be a focal point of digital organising for a leadership team. DIGITAL SITE OPERATIONS MANAGER - INSIDE IR35 - 35 PER HOUR - FILTON, UK - 9 MONTHS - SINGLE STAGE INTERVIEW PROCESS This is a high-impact Digital leadership role embedded within one of the UK's most advanced aerospace manufacturing environments. Based at the Filton Plant - home to A400M wing assembly, A350 gear beam production, Wing Technology Development Centre and Additive Manufacturing capability - you will act as the senior Digital partner to plant leadership. The Opportunity You will own the Digital relationship with Operations. Not as support. As a strategic enabler. You will shape and deliver the plant Digital roadmap, protect operational continuity, drive digitalisation, strengthen OT cybersecurity posture, and ensure Digital investment delivers measurable production value. This is a role for someone who understands that in aerospace manufacturing: Downtime is expensive. Cyber risk is operational risk. Legacy systems slow innovation. Governance matters. Change requires influence. What You Will Own Full Digital stakeholder leadership for the Filton Plant Site-level Digital roadmap aligned to production strategy Demand management and prioritisation Coordination of SAP, infrastructure, digital workplace and shopfloor deployments OT cyber maturity improvement Incident governance (RCA, PPS, MTTR reduction) Supplier performance management Legacy system decommissioning Digital4Operations community leadership You will operate at the intersection of: Operations Maintenance Cyber Security IT/OT Central Digital Product Lines What We're Looking For Strong background in Digital/IT leadership within industrial manufacturing Experience working in live production environments (aerospace preferred) Exposure to IT/OT convergence Understanding of operational cyber risk Proven stakeholder management at senior plant level Ability to challenge status quo and drive change
01/04/2026
Contractor
MERITUS are recruiting for a Digital Site Operations Manager to join our client in supporting IT/OT site relationships and procedures. We are not looking for somone who has specialist hands on IT experience, but someone from an IT background who can be a focal point of digital organising for a leadership team. DIGITAL SITE OPERATIONS MANAGER - INSIDE IR35 - 35 PER HOUR - FILTON, UK - 9 MONTHS - SINGLE STAGE INTERVIEW PROCESS This is a high-impact Digital leadership role embedded within one of the UK's most advanced aerospace manufacturing environments. Based at the Filton Plant - home to A400M wing assembly, A350 gear beam production, Wing Technology Development Centre and Additive Manufacturing capability - you will act as the senior Digital partner to plant leadership. The Opportunity You will own the Digital relationship with Operations. Not as support. As a strategic enabler. You will shape and deliver the plant Digital roadmap, protect operational continuity, drive digitalisation, strengthen OT cybersecurity posture, and ensure Digital investment delivers measurable production value. This is a role for someone who understands that in aerospace manufacturing: Downtime is expensive. Cyber risk is operational risk. Legacy systems slow innovation. Governance matters. Change requires influence. What You Will Own Full Digital stakeholder leadership for the Filton Plant Site-level Digital roadmap aligned to production strategy Demand management and prioritisation Coordination of SAP, infrastructure, digital workplace and shopfloor deployments OT cyber maturity improvement Incident governance (RCA, PPS, MTTR reduction) Supplier performance management Legacy system decommissioning Digital4Operations community leadership You will operate at the intersection of: Operations Maintenance Cyber Security IT/OT Central Digital Product Lines What We're Looking For Strong background in Digital/IT leadership within industrial manufacturing Experience working in live production environments (aerospace preferred) Exposure to IT/OT convergence Understanding of operational cyber risk Proven stakeholder management at senior plant level Ability to challenge status quo and drive change
Job title: IT Manager Location: Bolton (on-site) Job Type: Full-time, Permanent Salary: up to £35k DOE About the Role We are a specialist law firm providing legal services in credit hire and motor claims litigation. With a growing team and modern offices, we are committed to delivering excellent client service while maintaining a secure, efficient, and technologically robust working environment. We are seeking an experienced and proactive IT Manager to oversee IT infrastructure, systems, and security while ensuring smooth day-to-day operations and reliable technical support across the organisation.The ideal candidate will have previous IT management experience within a legal environment and will be comfortable taking ownership of technology systems, driving improvements, and supporting staff with technical issues. Key Responsibilities Manage and maintain IT infrastructure, including hardware, servers, networks, and systems Provide technical support and troubleshooting for staff across the organisation Oversee case management, document management, and legal software systems (Proclaim development experience desirable) Ensure data security, system backups, and disaster recovery procedures are in place Manage user accounts, access permissions, and system security in line with GDPR and company policies Monitor system performance to maintain reliability and minimise downtime Coordinate and manage relationships with external IT service providers and vendors Install, configure, and maintain hardware, software, and networking equipment Develop and implement IT policies, procedures, and best practices Support IT projects, upgrades, and system improvements Ensure compliance with data protection and cybersecurity standards Provide guidance and training to staff on IT systems and security awareness Role Requirements Minimum 2 years' experience in IT management within a legal practice Proven experience managing IT infrastructure, networks, and systems Knowledge of legal case management and document management systems Strong understanding of cybersecurity, data protection, and GDPR compliance Experience supporting Microsoft 365, Windows environments, and cloud-based systems Excellent problem-solving and troubleshooting skills Ability to manage multiple priorities under pressure Strong communication skills with the ability to explain technical issues to non-technical staff Experience managing IT vendors and service providers Relevant IT qualifications or certifications (desirable) What's on Offer Competitive salary Free on-site parking Hybrid working negotiable Monday to Friday, 9am-5pm with 1-hour lunch Opportunities for career development and training Supportive and collaborative working environment Company pension scheme Modern office environment with up-to-date technology Chance to contribute to IT strategy and development If you are interested in this role please APPLY or send your CV to Judge Legal
01/04/2026
Full time
Job title: IT Manager Location: Bolton (on-site) Job Type: Full-time, Permanent Salary: up to £35k DOE About the Role We are a specialist law firm providing legal services in credit hire and motor claims litigation. With a growing team and modern offices, we are committed to delivering excellent client service while maintaining a secure, efficient, and technologically robust working environment. We are seeking an experienced and proactive IT Manager to oversee IT infrastructure, systems, and security while ensuring smooth day-to-day operations and reliable technical support across the organisation.The ideal candidate will have previous IT management experience within a legal environment and will be comfortable taking ownership of technology systems, driving improvements, and supporting staff with technical issues. Key Responsibilities Manage and maintain IT infrastructure, including hardware, servers, networks, and systems Provide technical support and troubleshooting for staff across the organisation Oversee case management, document management, and legal software systems (Proclaim development experience desirable) Ensure data security, system backups, and disaster recovery procedures are in place Manage user accounts, access permissions, and system security in line with GDPR and company policies Monitor system performance to maintain reliability and minimise downtime Coordinate and manage relationships with external IT service providers and vendors Install, configure, and maintain hardware, software, and networking equipment Develop and implement IT policies, procedures, and best practices Support IT projects, upgrades, and system improvements Ensure compliance with data protection and cybersecurity standards Provide guidance and training to staff on IT systems and security awareness Role Requirements Minimum 2 years' experience in IT management within a legal practice Proven experience managing IT infrastructure, networks, and systems Knowledge of legal case management and document management systems Strong understanding of cybersecurity, data protection, and GDPR compliance Experience supporting Microsoft 365, Windows environments, and cloud-based systems Excellent problem-solving and troubleshooting skills Ability to manage multiple priorities under pressure Strong communication skills with the ability to explain technical issues to non-technical staff Experience managing IT vendors and service providers Relevant IT qualifications or certifications (desirable) What's on Offer Competitive salary Free on-site parking Hybrid working negotiable Monday to Friday, 9am-5pm with 1-hour lunch Opportunities for career development and training Supportive and collaborative working environment Company pension scheme Modern office environment with up-to-date technology Chance to contribute to IT strategy and development If you are interested in this role please APPLY or send your CV to Judge Legal
Key Details Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30/09/2026 , with possible extension IR35: In scope Rate: Up to £50-55/hour Environment: Cyber / Public Sector, security-focused What you would be doing Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting , password rotation , and check-in/check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux/Unix and network devices onto PAM platforms Managing privileged accounts in Active Directory Integrating PAM with SIEM for logging, alerting and monitoring Producing clear documentation, runbooks and technical configuration records Troubleshooting connector and session-related issues What the client is looking for Proven, hands-on experience with PAM solutions (implementation and BAU management) Solid knowledge of credential vaulting , password rotation and session monitoring/recording Experience integrating PAM into complex infrastructures (servers, network devices, AD, SIEM) Familiarity with security frameworks such as ISO 27001 and NIST CSF Strong troubleshooting skills and a methodical, security-focused mindset Ability to obtain SC-level national security clearance (BPSS as a minimum) Nice to have (but not essential) Experience with BeyondTrust (Password Safe, Privileged Remote Access, Endpoint Privilege Management) Exposure to other PAM platforms such as CyberArk or Delinea Scripting skills (e.g. PowerShell , Python ) for automation Experience with privileged access for databases (SQL Server, Oracle) Background in public sector , critical national infrastructure or OT/ICS environments Why this might interest you Long-term stability (contract to late 2026 with extension potential) Opportunity to be the go-to PAM specialist in a security-critical setting Hands-on, technically challenging role with real influence on cyber resilience If this aligns with your experience, I would be keen to share more.
01/04/2026
Contractor
Key Details Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30/09/2026 , with possible extension IR35: In scope Rate: Up to £50-55/hour Environment: Cyber / Public Sector, security-focused What you would be doing Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting , password rotation , and check-in/check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux/Unix and network devices onto PAM platforms Managing privileged accounts in Active Directory Integrating PAM with SIEM for logging, alerting and monitoring Producing clear documentation, runbooks and technical configuration records Troubleshooting connector and session-related issues What the client is looking for Proven, hands-on experience with PAM solutions (implementation and BAU management) Solid knowledge of credential vaulting , password rotation and session monitoring/recording Experience integrating PAM into complex infrastructures (servers, network devices, AD, SIEM) Familiarity with security frameworks such as ISO 27001 and NIST CSF Strong troubleshooting skills and a methodical, security-focused mindset Ability to obtain SC-level national security clearance (BPSS as a minimum) Nice to have (but not essential) Experience with BeyondTrust (Password Safe, Privileged Remote Access, Endpoint Privilege Management) Exposure to other PAM platforms such as CyberArk or Delinea Scripting skills (e.g. PowerShell , Python ) for automation Experience with privileged access for databases (SQL Server, Oracle) Background in public sector , critical national infrastructure or OT/ICS environments Why this might interest you Long-term stability (contract to late 2026 with extension potential) Opportunity to be the go-to PAM specialist in a security-critical setting Hands-on, technically challenging role with real influence on cyber resilience If this aligns with your experience, I would be keen to share more.
Salary: £53,496 to £61,686, comprising a basic salary of £50,838 and a concessionary payment of £2,658. The exact salary offered within this range will depend on your skills and experience. An additional Skills Payment is available once your skills level is confirmed, £3,822 for Level 1 or £8,190 for Level 2. Flexible working: We offer a range of working patterns, including full-time, part-time, and compressed hours, with flexible start and finish times to support a healthy work-life balance. While most of our work is carried out on-site due to its sensitive nature, occasional home working may be possible depending on business needs. Find out more about flexible working on our website . GCHQ is an intelligence, cyber and security agency with a mission to keep the UK safe. We use cutting-edge technology, ingenuity and partnerships to identify, analy0se and disrupt threats. Working with our intelligence partners, MI5 and MI6, we protect the UK from terrorism, cyber-attacks and espionage. At GCHQ, you'll do varied and fascinating work in a supportive and inclusive environment that puts the emphasis on teamwork. As an Associate Solutions Architect, you'll join a specialist team delivering technology solutions that underpin some of the UK's most critical national security work. Our work is unique and often cutting-edge, giving you the opportunity to develop deep expertise in an environment unlike any other. Guided by a Senior Solutions Architect, you'll help shape designs, produce architectural artefacts, and support the teams that bring solutions to life. You'll focus on understanding business needs and translating them into solutions, balancing technical constraints, delivery plans, risks and complexity. You'll create designs, documentation and models that align with our architectural standards and strategic direction. As requirements evolve, with the support of your line manager, you'll help answer questions, clarify designs, and adapt solutions to keep projects on track. Occasional travel to sites across the UK will allow you to work closely with colleagues across the organisation. You don't need a degree or specific qualifications to apply; we're interested in your experience and your motivation to support our mission. You'll need a foundational understanding of solution architecture and some experience contributing to the design and delivery of digital or technology solutions. Experience with at least one modern framework, such as TOGAF, NIST or ITIL, is valuable, typically gained through software engineering, infrastructure, or DevOps roles. Effective communication skills and a broad technical foundation will help you explain design decisions to both technical and non-technical audiences, while confidence in influencing and negotiation will help you find solutions that work for everyone. You'll need to think critically and solve problems creatively, as the challenges you encounter here are genuinely unique and rewarding. Adaptability and effective time-management skills are also important, as priorities can shift depending on business needs. When you join us, you'll have a full induction to GCHQ so you can understand who we are and what we do. Once in your role, you'll receive formal and on-the-job training, along with all the support you need to thrive. We're committed to continuous professional development and to providing the space for you to grow, innovate and experiment. Typically, around 20% of your time is dedicated to developing yourself and supporting others. We know that development looks different for everyone, so we'll tailor our support to your learning style, whether that's through books, courses, conferences or stretch assignments. We'll cover the cost of professional qualifications and give you the time and support to achieve them. From day one, you'll have access to mentors and subject-matter experts, and we'll work with you to build a structured development plan aligned with your goals. At GCHQ, diversity and inclusion are critical to our mission. To protect the UK, we need a truly diverse workforce that reflects the society we serve. This includes diversity in every sense of the word: those with different backgrounds, ages, ethnicities, gender identities, sexual orientations, ways of thinking and those with disabilities or neurodivergent conditions. We therefore welcome and encourage applications from everyone, including those from groups that are under-represented in our workforce such as women, those from an ethnic minority background, people with disabilities and those from low socio-economic backgrounds. Find out more about our culture, working environment and diversity on our website . To find out more and apply, please visit our website. To be eligible to apply, you must be a British Citizen. If you hold dual nationality, of which one component is British, you will still be considered. Candidates must normally have been resident in the UK for seven out of the last ten years. This is particularly important if you were born outside the UK. We welcome applications from candidates of all ages, and there is no upper age limit. You can apply at 17; if successful, you will not be offered a start date prior to your 18th birthday. Full eligibility details can be found on our website.
01/04/2026
Full time
Salary: £53,496 to £61,686, comprising a basic salary of £50,838 and a concessionary payment of £2,658. The exact salary offered within this range will depend on your skills and experience. An additional Skills Payment is available once your skills level is confirmed, £3,822 for Level 1 or £8,190 for Level 2. Flexible working: We offer a range of working patterns, including full-time, part-time, and compressed hours, with flexible start and finish times to support a healthy work-life balance. While most of our work is carried out on-site due to its sensitive nature, occasional home working may be possible depending on business needs. Find out more about flexible working on our website . GCHQ is an intelligence, cyber and security agency with a mission to keep the UK safe. We use cutting-edge technology, ingenuity and partnerships to identify, analy0se and disrupt threats. Working with our intelligence partners, MI5 and MI6, we protect the UK from terrorism, cyber-attacks and espionage. At GCHQ, you'll do varied and fascinating work in a supportive and inclusive environment that puts the emphasis on teamwork. As an Associate Solutions Architect, you'll join a specialist team delivering technology solutions that underpin some of the UK's most critical national security work. Our work is unique and often cutting-edge, giving you the opportunity to develop deep expertise in an environment unlike any other. Guided by a Senior Solutions Architect, you'll help shape designs, produce architectural artefacts, and support the teams that bring solutions to life. You'll focus on understanding business needs and translating them into solutions, balancing technical constraints, delivery plans, risks and complexity. You'll create designs, documentation and models that align with our architectural standards and strategic direction. As requirements evolve, with the support of your line manager, you'll help answer questions, clarify designs, and adapt solutions to keep projects on track. Occasional travel to sites across the UK will allow you to work closely with colleagues across the organisation. You don't need a degree or specific qualifications to apply; we're interested in your experience and your motivation to support our mission. You'll need a foundational understanding of solution architecture and some experience contributing to the design and delivery of digital or technology solutions. Experience with at least one modern framework, such as TOGAF, NIST or ITIL, is valuable, typically gained through software engineering, infrastructure, or DevOps roles. Effective communication skills and a broad technical foundation will help you explain design decisions to both technical and non-technical audiences, while confidence in influencing and negotiation will help you find solutions that work for everyone. You'll need to think critically and solve problems creatively, as the challenges you encounter here are genuinely unique and rewarding. Adaptability and effective time-management skills are also important, as priorities can shift depending on business needs. When you join us, you'll have a full induction to GCHQ so you can understand who we are and what we do. Once in your role, you'll receive formal and on-the-job training, along with all the support you need to thrive. We're committed to continuous professional development and to providing the space for you to grow, innovate and experiment. Typically, around 20% of your time is dedicated to developing yourself and supporting others. We know that development looks different for everyone, so we'll tailor our support to your learning style, whether that's through books, courses, conferences or stretch assignments. We'll cover the cost of professional qualifications and give you the time and support to achieve them. From day one, you'll have access to mentors and subject-matter experts, and we'll work with you to build a structured development plan aligned with your goals. At GCHQ, diversity and inclusion are critical to our mission. To protect the UK, we need a truly diverse workforce that reflects the society we serve. This includes diversity in every sense of the word: those with different backgrounds, ages, ethnicities, gender identities, sexual orientations, ways of thinking and those with disabilities or neurodivergent conditions. We therefore welcome and encourage applications from everyone, including those from groups that are under-represented in our workforce such as women, those from an ethnic minority background, people with disabilities and those from low socio-economic backgrounds. Find out more about our culture, working environment and diversity on our website . To find out more and apply, please visit our website. To be eligible to apply, you must be a British Citizen. If you hold dual nationality, of which one component is British, you will still be considered. Candidates must normally have been resident in the UK for seven out of the last ten years. This is particularly important if you were born outside the UK. We welcome applications from candidates of all ages, and there is no upper age limit. You can apply at 17; if successful, you will not be offered a start date prior to your 18th birthday. Full eligibility details can be found on our website.
Cloud Security Architects Position Description At CGI, we empower our clients to secure the future of their digital enterprises and we're trusted to do so at scale. As a Cloud Security Architect, you'll play a pivotal role in designing and delivering robust AWS cloud environments that safeguard critical data and services across industries. You'll help shape innovative security strategies, enhance cloud resilience, and drive transformation across hybrid architectures. In this role, you'll be part of a collaborative global community where your expertise is valued, your ideas are encouraged, and your impact is measurable enabling you to build a career that's both secure and rewarding. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position. Your future duties and responsibilities In this role, you will design and implement secure cloud architectures that protect mission-critical systems and data. You'll collaborate with clients and technical teams to shape security frameworks, embed governance, and deliver secure-by-design solutions that align with business and regulatory requirements. Working within CGI's large and trusted cyber community, you'll take ownership of complex challenges, innovate with new technologies, and be supported by peers who share your drive for excellence. Your day-to-day responsibilities will include: Shape & Lead: Design secure architectures across enterprise and hybrid environments. Advise & Influence: Define and embed cloud security principles aligned with best practices and compliance standards. Develop & Deliver: Collaborate on cloud migration and transformation projects, ensuring security remains at the core. Automate & Optimise: Integrate security controls through DevSecOps practices and infrastructure automation. Guide & Mentor: Support delivery teams and junior specialists in developing CGI's cloud security capabilities. Innovate & Evolve: Contribute to continuous improvement of CGI's cloud security frameworks and client offerings. Required qualifications to be successful in this role You should bring strong technical expertise in cloud security, coupled with the communication and collaboration skills to influence across teams and client environments. Whether you're a hands-on specialist or a strategic design authority, your experience will help strengthen CGI's trusted reputation for cloud security excellence. Essential qualifications and experience include: Proven experience architecting secure cloud environments (multi-account, landing zones, SCPs, GuardDuty, CloudTrail, IAM). Familiarity with cloud security frameworks (NIST, ISO 27017/27018, MoD/HMG standards). Experience with container and serverless security (EKS, ECS, Lambda). Knowledge of SIEM, logging, and monitoring using AWS-native or integrated tools. Proficiency in secure CI/CD and DevSecOps practices (IaC, security scanning pipelines). Understanding of cloud governance, compliance, and risk management in regulated sectors. AWS Certified Security - Specialty (or equivalent) is highly advantageous. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
01/04/2026
Full time
Cloud Security Architects Position Description At CGI, we empower our clients to secure the future of their digital enterprises and we're trusted to do so at scale. As a Cloud Security Architect, you'll play a pivotal role in designing and delivering robust AWS cloud environments that safeguard critical data and services across industries. You'll help shape innovative security strategies, enhance cloud resilience, and drive transformation across hybrid architectures. In this role, you'll be part of a collaborative global community where your expertise is valued, your ideas are encouraged, and your impact is measurable enabling you to build a career that's both secure and rewarding. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position. Your future duties and responsibilities In this role, you will design and implement secure cloud architectures that protect mission-critical systems and data. You'll collaborate with clients and technical teams to shape security frameworks, embed governance, and deliver secure-by-design solutions that align with business and regulatory requirements. Working within CGI's large and trusted cyber community, you'll take ownership of complex challenges, innovate with new technologies, and be supported by peers who share your drive for excellence. Your day-to-day responsibilities will include: Shape & Lead: Design secure architectures across enterprise and hybrid environments. Advise & Influence: Define and embed cloud security principles aligned with best practices and compliance standards. Develop & Deliver: Collaborate on cloud migration and transformation projects, ensuring security remains at the core. Automate & Optimise: Integrate security controls through DevSecOps practices and infrastructure automation. Guide & Mentor: Support delivery teams and junior specialists in developing CGI's cloud security capabilities. Innovate & Evolve: Contribute to continuous improvement of CGI's cloud security frameworks and client offerings. Required qualifications to be successful in this role You should bring strong technical expertise in cloud security, coupled with the communication and collaboration skills to influence across teams and client environments. Whether you're a hands-on specialist or a strategic design authority, your experience will help strengthen CGI's trusted reputation for cloud security excellence. Essential qualifications and experience include: Proven experience architecting secure cloud environments (multi-account, landing zones, SCPs, GuardDuty, CloudTrail, IAM). Familiarity with cloud security frameworks (NIST, ISO 27017/27018, MoD/HMG standards). Experience with container and serverless security (EKS, ECS, Lambda). Knowledge of SIEM, logging, and monitoring using AWS-native or integrated tools. Proficiency in secure CI/CD and DevSecOps practices (IaC, security scanning pipelines). Understanding of cloud governance, compliance, and risk management in regulated sectors. AWS Certified Security - Specialty (or equivalent) is highly advantageous. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
SOC Analyst Position Description At CGI, we deliver secure, high-impact technology solutions that help our clients operate with confidence in an evolving threat landscape. As a Senior SOC Analyst, you will play a critical role in protecting vital services within a joint Microsoft and CGI security team supporting the ASH programme. Working in a collaborative, high-trust environment, you will take ownership of security monitoring, incident response, and continuous service improvement while helping strengthen cyber resilience for a critical client. This role offers the opportunity to apply your expertise, contribute innovative thinking to evolving threats, and work alongside experienced specialists who support your professional growth while delivering meaningful outcomes for complex, mission-critical environments. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. This is an on-site role based in Chippenham, operating on a 24/7 shift rotation. There may be opportunities for future on-call shifts, which would include an additional salary uplift. We welcome applicants who already hold Security Clearance, particularly those willing to progress to higher levels of clearance. Your future duties and responsibilities In this role, you will play a key part in safeguarding critical services by performing advanced security monitoring, investigation, and incident response activities within a joint Microsoft and CGI Security Operations Centre. You will take ownership of analysing alerts, responding to threats, and strengthening detection capabilities while contributing to the continuous improvement of SOC processes, tooling, and automation. Working within a collaborative delivery team, you will help ensure services meet strict operational and security standards. You will support the transition of security capabilities into live service environments, apply creative problem-solving to emerging threats, and work closely with colleagues and client stakeholders to maintain resilient and secure operations. Key responsibilities Monitor & Respond - Investigate and resolve security alerts and incidents across the SOC environment Analyse & Protect - Conduct threat analysis and security monitoring using SIEM/SOAR platforms Develop & Improve - Contribute to detection rule development and SOC tooling enhancements Automate & Optimise - Support automation and configuration improvements within the SOC Test & Assure - Assist with security testing, assurance activities, and vulnerability management Collaborate & Deliver - Work closely with CGI, Microsoft, and client teams to maintain secure service delivery Support & Transition - Help transition security capabilities from project delivery into operational service Required qualifications to be successful in this role To succeed in this role, you should bring experience in SOC environments with strong analytical and investigative skills, along with a solid understanding of security monitoring, incident response, and secure service delivery. You will be comfortable working in regulated environments and motivated to continuously improve detection capabilities and operational resilience. Essential qualifications You should have hands-on experience working within a Security Operations Centre (SOC) Strong experience in security monitoring, alert investigation, and incident response Proven experience working with SIEM and/or SOAR platforms including log analysis and event monitoring Experience with Microsoft server technologies and Azure environments Familiarity with vulnerability management tools and security testing practices Understanding of information assurance principles and secure operational processes Experience working in secure, defence, or highly regulated environments Strong analytical, troubleshooting, and problem-solving skills Ability to collaborate effectively within client and consultancy delivery teams Experience with Huntsman platform or willingness to learn emerging technologies such as MASH (desirable) Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
01/04/2026
Full time
SOC Analyst Position Description At CGI, we deliver secure, high-impact technology solutions that help our clients operate with confidence in an evolving threat landscape. As a Senior SOC Analyst, you will play a critical role in protecting vital services within a joint Microsoft and CGI security team supporting the ASH programme. Working in a collaborative, high-trust environment, you will take ownership of security monitoring, incident response, and continuous service improvement while helping strengthen cyber resilience for a critical client. This role offers the opportunity to apply your expertise, contribute innovative thinking to evolving threats, and work alongside experienced specialists who support your professional growth while delivering meaningful outcomes for complex, mission-critical environments. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. This is an on-site role based in Chippenham, operating on a 24/7 shift rotation. There may be opportunities for future on-call shifts, which would include an additional salary uplift. We welcome applicants who already hold Security Clearance, particularly those willing to progress to higher levels of clearance. Your future duties and responsibilities In this role, you will play a key part in safeguarding critical services by performing advanced security monitoring, investigation, and incident response activities within a joint Microsoft and CGI Security Operations Centre. You will take ownership of analysing alerts, responding to threats, and strengthening detection capabilities while contributing to the continuous improvement of SOC processes, tooling, and automation. Working within a collaborative delivery team, you will help ensure services meet strict operational and security standards. You will support the transition of security capabilities into live service environments, apply creative problem-solving to emerging threats, and work closely with colleagues and client stakeholders to maintain resilient and secure operations. Key responsibilities Monitor & Respond - Investigate and resolve security alerts and incidents across the SOC environment Analyse & Protect - Conduct threat analysis and security monitoring using SIEM/SOAR platforms Develop & Improve - Contribute to detection rule development and SOC tooling enhancements Automate & Optimise - Support automation and configuration improvements within the SOC Test & Assure - Assist with security testing, assurance activities, and vulnerability management Collaborate & Deliver - Work closely with CGI, Microsoft, and client teams to maintain secure service delivery Support & Transition - Help transition security capabilities from project delivery into operational service Required qualifications to be successful in this role To succeed in this role, you should bring experience in SOC environments with strong analytical and investigative skills, along with a solid understanding of security monitoring, incident response, and secure service delivery. You will be comfortable working in regulated environments and motivated to continuously improve detection capabilities and operational resilience. Essential qualifications You should have hands-on experience working within a Security Operations Centre (SOC) Strong experience in security monitoring, alert investigation, and incident response Proven experience working with SIEM and/or SOAR platforms including log analysis and event monitoring Experience with Microsoft server technologies and Azure environments Familiarity with vulnerability management tools and security testing practices Understanding of information assurance principles and secure operational processes Experience working in secure, defence, or highly regulated environments Strong analytical, troubleshooting, and problem-solving skills Ability to collaborate effectively within client and consultancy delivery teams Experience with Huntsman platform or willingness to learn emerging technologies such as MASH (desirable) Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
Penetration Tester Position Description CGI Cyber Security Team in the UK is one of the largest Cyber consultancies in the UK with around 300 members. The UK Cyber team works across a variety of domains including: Government, Defence, Critical Infrastructure, Healthcare, Utilities, Banking and Financial Services and Many more. At CGI you will get the opportunity to work across a number of domains and work in all areas of Cyber Security allowing you to grow and develop your career. We offer full 360-degree services to our clients from initial consulting on a range of areas including Risk Assessments, Vulnerability Management, Accreditations (ISO27001, GDPR), GRC (Governance, Risk, Compliance), Security Architecture Design and Build (technical and Non-technical), Incident Response, Protective Monitoring Services, Penetration Testing and much more. We take clients through a journey to improve their overall security posture and maturity to ensure they feel reassured in the Security control, measures and systems we have put in place in line with their requirements. At CGI training and development is very important not only do we give you training to keep you up to date with the latest trends within an ever-changing landscape, but we also combine that training with your career ambitions, so we support you in taking your career anywhere you want it to go. Our roles are only available if you hold or fulfil the criteria to obtain a UK Security Clearance. Your future duties and responsibilities An opportunity for an experienced penetration testers has become available due to growth, joining the CGI Cyber Security business unit, one of the largest groups of cyber security specialists in the UK. CGI has a long established reputation in this area, undertaking rigorous testing for a variety of commercial and public sector clients for over 30 years. Experience of the assessment of bespoke applications, cloud technologies and mobile applications (on diverse mobile platforms) would be of an advantage. You would join our established team of penetration testers with the possibility of progressing to team leader or principal tester positions. You would be able to work flexibly, undertaking work at home and at client sites across the UK. Required qualifications to be successful in this role - CHECK Team Leader (CTL) - CHECK Team Member (CTM) - CREST Certified Simulated Attack Specialist (CCSAS) - CREST Certified Tester (CCT). Sometimes known as CREST Certified Infrastructure Tester (CCT Inf) or CREST Certified Web Application Tester (CCT App) - Cyber Scheme Team Leader (CSTL) - TigerScheme Qualified Security Team Leader (QSTL) - Crest Registered Tester (CRT) - Cyber Scheme Team Member (CSTM) - TigerScheme Qualified Security Team Member (QSTM) - CREST Practitioner Security Analyst (CPSA) - Offensive Security Certified Professional (OSCP) Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
01/04/2026
Full time
Penetration Tester Position Description CGI Cyber Security Team in the UK is one of the largest Cyber consultancies in the UK with around 300 members. The UK Cyber team works across a variety of domains including: Government, Defence, Critical Infrastructure, Healthcare, Utilities, Banking and Financial Services and Many more. At CGI you will get the opportunity to work across a number of domains and work in all areas of Cyber Security allowing you to grow and develop your career. We offer full 360-degree services to our clients from initial consulting on a range of areas including Risk Assessments, Vulnerability Management, Accreditations (ISO27001, GDPR), GRC (Governance, Risk, Compliance), Security Architecture Design and Build (technical and Non-technical), Incident Response, Protective Monitoring Services, Penetration Testing and much more. We take clients through a journey to improve their overall security posture and maturity to ensure they feel reassured in the Security control, measures and systems we have put in place in line with their requirements. At CGI training and development is very important not only do we give you training to keep you up to date with the latest trends within an ever-changing landscape, but we also combine that training with your career ambitions, so we support you in taking your career anywhere you want it to go. Our roles are only available if you hold or fulfil the criteria to obtain a UK Security Clearance. Your future duties and responsibilities An opportunity for an experienced penetration testers has become available due to growth, joining the CGI Cyber Security business unit, one of the largest groups of cyber security specialists in the UK. CGI has a long established reputation in this area, undertaking rigorous testing for a variety of commercial and public sector clients for over 30 years. Experience of the assessment of bespoke applications, cloud technologies and mobile applications (on diverse mobile platforms) would be of an advantage. You would join our established team of penetration testers with the possibility of progressing to team leader or principal tester positions. You would be able to work flexibly, undertaking work at home and at client sites across the UK. Required qualifications to be successful in this role - CHECK Team Leader (CTL) - CHECK Team Member (CTM) - CREST Certified Simulated Attack Specialist (CCSAS) - CREST Certified Tester (CCT). Sometimes known as CREST Certified Infrastructure Tester (CCT Inf) or CREST Certified Web Application Tester (CCT App) - Cyber Scheme Team Leader (CSTL) - TigerScheme Qualified Security Team Leader (QSTL) - Crest Registered Tester (CRT) - Cyber Scheme Team Member (CSTM) - TigerScheme Qualified Security Team Member (QSTM) - CREST Practitioner Security Analyst (CPSA) - Offensive Security Certified Professional (OSCP) Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application.
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application.
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
Junior Penetration Tester Position Description CGI Cyber Security Team in the UK is one of the largest Cyber consultancies in the UK with around 1700 members. The UK Cyber team works across a variety of domains including: Government, Defence, Critical Infrastructure, Healthcare, Utilities, Banking and Financial Services and many more. At CGI you will get the opportunity to work across a number of domains and work in all areas of Cyber Security allowing you to grow and develop your career. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. An opportunity for a CHECK Team Member or Infrastructure CHECK Team Leader is available at CGI, joining the Cyber Security business unit, one of the largest groups of cyber security specialists in the UK. CGI has a long established reputation in this area, undertaking rigorous testing for a variety of commercial and public sector clients for over 30 years. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. Your future duties and responsibilities • Deliver end to end penetration testing engagements across web applications and infrastructure domains, from initial client engagement and scoping through to reporting and client aftercare. • Participate in client interactions including scoping discussions, requirements gathering, and contribution to proposals and statements of work. • Conduct penetration tests using structured methodologies and industry recognised approaches. • Deliver engagements as part of a collaborative team rather than individually, leveraging shared expertise to enhance assessment quality and support continuous learning. • Produce high quality technical documents (including reports and technical proposals), covering detailed technical content and executive level summaries, in line with internal standards. • Engage with the internal QA process to support report quality and ongoing development. • Maintain strong communication throughout engagements, including client calls, progress updates, and formal debrief sessions. Required qualifications to be successful in this role Essential: • Hack the Box Certified Penetration Testing Specialist (CPTS) or OffSec Certified Professional (OSCP) • Commitment to working towards NCSC CHECK Team Member (CTM) status Desirable: • CREST Practitioner Security Analyst (CPSA) • CREST Registered Penetration Tester (CRT) • Cyber Scheme Team Member (CSTM) • Certified Red Team Operator (CRTO) • Practitioner Cyber Security Professional (PraCSP) • Previous penetration testing experience is advantageous but not mandatory. Structured training and mentoring will be provided. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
01/04/2026
Full time
Junior Penetration Tester Position Description CGI Cyber Security Team in the UK is one of the largest Cyber consultancies in the UK with around 1700 members. The UK Cyber team works across a variety of domains including: Government, Defence, Critical Infrastructure, Healthcare, Utilities, Banking and Financial Services and many more. At CGI you will get the opportunity to work across a number of domains and work in all areas of Cyber Security allowing you to grow and develop your career. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. An opportunity for a CHECK Team Member or Infrastructure CHECK Team Leader is available at CGI, joining the Cyber Security business unit, one of the largest groups of cyber security specialists in the UK. CGI has a long established reputation in this area, undertaking rigorous testing for a variety of commercial and public sector clients for over 30 years. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. Your future duties and responsibilities • Deliver end to end penetration testing engagements across web applications and infrastructure domains, from initial client engagement and scoping through to reporting and client aftercare. • Participate in client interactions including scoping discussions, requirements gathering, and contribution to proposals and statements of work. • Conduct penetration tests using structured methodologies and industry recognised approaches. • Deliver engagements as part of a collaborative team rather than individually, leveraging shared expertise to enhance assessment quality and support continuous learning. • Produce high quality technical documents (including reports and technical proposals), covering detailed technical content and executive level summaries, in line with internal standards. • Engage with the internal QA process to support report quality and ongoing development. • Maintain strong communication throughout engagements, including client calls, progress updates, and formal debrief sessions. Required qualifications to be successful in this role Essential: • Hack the Box Certified Penetration Testing Specialist (CPTS) or OffSec Certified Professional (OSCP) • Commitment to working towards NCSC CHECK Team Member (CTM) status Desirable: • CREST Practitioner Security Analyst (CPSA) • CREST Registered Penetration Tester (CRT) • Cyber Scheme Team Member (CSTM) • Certified Red Team Operator (CRTO) • Practitioner Cyber Security Professional (PraCSP) • Previous penetration testing experience is advantageous but not mandatory. Structured training and mentoring will be provided. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
01/04/2026
Full time
DWP. Digital with Purpose. Join DWP as a Senior Cyber Security Risk Manager and help shape how we protect and secure some of the UK's largest digital services. Our DWP Digital teams use fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. What skills, knowledge and experience will you need? A broad platform knowledge and ability to conduct cyber security assessments from a multi-platform perspective. Research, evaluate and assess known/emerging security risks and controls to ensure expert advice is provided Extensive knowledge and experience of working with security principles and technologies for cloud hosted services. Advanced understanding of threat intelligence and threat assessment principles and concepts and leads threat intelligence and assessment activities. Demonstrable experience of working on complex IT infrastructures and across a multi-domain model, with specific experience working in a Cyber Security Risk management role as part of a cybersecurity capability. Please note this role requires you to pass Security Check clearance. You and your role As a Senior Cyber Security Risk Manager, you will lead first line cyber risk activity across DWP Digital, giving teams a clear view of security risks to support confident, risk informed decisions. Identifying, assessing and guiding the treatment of cyber risks through a controls driven approach, you'll ensure alignment with organisational standards and an evolving threat landscape. Working alongside delivery teams, technical specialists and senior stakeholders, you'll analyse the effectiveness of our controls and translate any technical vulnerabilities into clear, business focused insight. You'll also support design, testing and monitoring activities, and offer constructive challenge to keep us on a path of strategic alignment and good practice. You'll give trusted advice to business managers and senior leaders, and oversee the cyber risk lifecycle, recommending controls, collaborating widely and assessing business processes against emerging threats to deliver high quality, practical security guidance. Details. Wages. Perks. Hybrid Working: We work a hybrid model - you'll spend some time working at home (40%) and some time collaborating face to face in a hub (60%). Pay: We offer competitive pay for this role of up to £78,205. Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth over £16,786 per year. Holidays: A generous leave package starting at 26 days rising to 31 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable, so our application and selection process is just three stages: Apply: complete your application on Civil Service Jobs. Interview: A single stage interview online. CLICK APPLY for more information and to start your application
