Vix Technology in Manchester is seeking a Cyber Security Analyst to join a growing global security team. You will work across multiple security domains, from vulnerability management to incident response, reporting, and governance, helping customers and internal teams improve security posture. With 1-2 years of cyber security experience, you'll contribute to security operations, reporting, and risk management while learning from skilled professionals in a collaborative environment.
26/07/2026
Full time
Vix Technology in Manchester is seeking a Cyber Security Analyst to join a growing global security team. You will work across multiple security domains, from vulnerability management to incident response, reporting, and governance, helping customers and internal teams improve security posture. With 1-2 years of cyber security experience, you'll contribute to security operations, reporting, and risk management while learning from skilled professionals in a collaborative environment.
Make the Connection. At Vix Technology, we're helping millions of people move through cities every day. Globally, our technology powers public transport networks in more than 200 cities worldwide. For over 35 years we've been delivering smarter fare collection, passenger information and transit solutions that make travelling easier. Now we're looking for a Cyber Security Analyst to join our growing global security team. If you've already gained a year or two of experience in cyber security-or recently completed a degree or apprenticeship with some hands on industry exposure-and you're looking for a role where you can learn fast, take ownership and work alongside experienced security professionals, we'd love to hear from you. This isn't a role where you'll be pigeonholed into one area of cyber security. You'll get exposure to vulnerability management, customer security reporting, governance, compliance, incident response, bid support and security operations, giving you a broad foundation to build an exciting career. Working from our Manchester office (three days a week), you'll collaborate with colleagues across the UK, France and the USA, helping to protect systems that support public transport networks across the globe. What you'll be doing You'll become a key member of our Security-as-a-Service team, helping customers understand and improve their security posture while supporting our internal teams to deliver secure, resilient solutions. One day you might be analysing vulnerabilities and helping engineering teams prioritise remediation. The next, you'll be producing customer-facing security reports, supporting an audit, contributing to a security bid or working with colleagues across engineering, cloud and IT to embed security best practice. You'll translate technical information into practical advice, help improve the way we manage security across the business and play an important role in building a positive security culture at Vix. No two days are quite the same-which makes this an ideal opportunity for someone who enjoys variety, solving problems and continually learning. About you You're naturally curious and enjoy understanding how things work. You ask good questions, communicate confidently with different people and like solving problems rather than simply identifying them. You've already developed a solid understanding of cyber security fundamentals through your degree, apprenticeship or your first role, and you're now looking for an environment where you can broaden your experience across multiple areas of security. You'll probably have around 1-2 years' experience in cyber security or IT, along with a good understanding of topics such as vulnerability management, security risk, secure configuration and incident response. Just as importantly, you'll be organised, collaborative and comfortable explaining technical concepts in a way that makes sense to different audiences. We'd especially like to hear from you if you have experience or exposure to: Cyber Security, Computer Science or IT through a degree, apprenticeship or commercial role Security reporting, vulnerability management or governance AWS or cloud security fundamentals Security frameworks such as ISO 27001, NIST or CIS Customer facing communication or stakeholder engagement Security certifications such as Security+, CySA+ or similar (or you're working towards one) Don't worry if you don't tick every box-we're much more interested in your potential, curiosity and willingness to learn. Why Vix? Joining Vix means becoming part of a global technology company where your work has real world impact. You'll work with experienced security professionals across three continents, gain exposure to a broad range of technologies and security disciplines, and have genuine opportunities to develop your career. If you're looking for your next step in cyber security-and a role that will help you build the skills and experience to become a well rounded security professional,we'd love to hear from you. What's in it for you? Besides the opportunity to work for a global company that is customer and people focused, we offer: A great team of like minded professionals Private Healthcare Income Protection Scheme Pension Group Life Assurance Cycle to Work Scheme Electric Car Benefit Scheme Employee Assistance Programme Eyecare and Spectacle Vouchers Add your resume and anything else to showcase why you would be a great addition to our team. We regret that this position is only available for UK&I citizens/Residents with indefinite leave to remain in the UK&I, with current full time work rights for the United Kingdom, currently residing in the UK. No recruitment agencies, please! We won't accept any introductions. Vix Technology is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. We are committed to the principle of equal employment opportunity for all people and want to build a workforce as diverse as the community we serve. We aim to have a work environment where everyone feels included and everyone can realise their full potential.
26/07/2026
Full time
Make the Connection. At Vix Technology, we're helping millions of people move through cities every day. Globally, our technology powers public transport networks in more than 200 cities worldwide. For over 35 years we've been delivering smarter fare collection, passenger information and transit solutions that make travelling easier. Now we're looking for a Cyber Security Analyst to join our growing global security team. If you've already gained a year or two of experience in cyber security-or recently completed a degree or apprenticeship with some hands on industry exposure-and you're looking for a role where you can learn fast, take ownership and work alongside experienced security professionals, we'd love to hear from you. This isn't a role where you'll be pigeonholed into one area of cyber security. You'll get exposure to vulnerability management, customer security reporting, governance, compliance, incident response, bid support and security operations, giving you a broad foundation to build an exciting career. Working from our Manchester office (three days a week), you'll collaborate with colleagues across the UK, France and the USA, helping to protect systems that support public transport networks across the globe. What you'll be doing You'll become a key member of our Security-as-a-Service team, helping customers understand and improve their security posture while supporting our internal teams to deliver secure, resilient solutions. One day you might be analysing vulnerabilities and helping engineering teams prioritise remediation. The next, you'll be producing customer-facing security reports, supporting an audit, contributing to a security bid or working with colleagues across engineering, cloud and IT to embed security best practice. You'll translate technical information into practical advice, help improve the way we manage security across the business and play an important role in building a positive security culture at Vix. No two days are quite the same-which makes this an ideal opportunity for someone who enjoys variety, solving problems and continually learning. About you You're naturally curious and enjoy understanding how things work. You ask good questions, communicate confidently with different people and like solving problems rather than simply identifying them. You've already developed a solid understanding of cyber security fundamentals through your degree, apprenticeship or your first role, and you're now looking for an environment where you can broaden your experience across multiple areas of security. You'll probably have around 1-2 years' experience in cyber security or IT, along with a good understanding of topics such as vulnerability management, security risk, secure configuration and incident response. Just as importantly, you'll be organised, collaborative and comfortable explaining technical concepts in a way that makes sense to different audiences. We'd especially like to hear from you if you have experience or exposure to: Cyber Security, Computer Science or IT through a degree, apprenticeship or commercial role Security reporting, vulnerability management or governance AWS or cloud security fundamentals Security frameworks such as ISO 27001, NIST or CIS Customer facing communication or stakeholder engagement Security certifications such as Security+, CySA+ or similar (or you're working towards one) Don't worry if you don't tick every box-we're much more interested in your potential, curiosity and willingness to learn. Why Vix? Joining Vix means becoming part of a global technology company where your work has real world impact. You'll work with experienced security professionals across three continents, gain exposure to a broad range of technologies and security disciplines, and have genuine opportunities to develop your career. If you're looking for your next step in cyber security-and a role that will help you build the skills and experience to become a well rounded security professional,we'd love to hear from you. What's in it for you? Besides the opportunity to work for a global company that is customer and people focused, we offer: A great team of like minded professionals Private Healthcare Income Protection Scheme Pension Group Life Assurance Cycle to Work Scheme Electric Car Benefit Scheme Employee Assistance Programme Eyecare and Spectacle Vouchers Add your resume and anything else to showcase why you would be a great addition to our team. We regret that this position is only available for UK&I citizens/Residents with indefinite leave to remain in the UK&I, with current full time work rights for the United Kingdom, currently residing in the UK. No recruitment agencies, please! We won't accept any introductions. Vix Technology is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. We are committed to the principle of equal employment opportunity for all people and want to build a workforce as diverse as the community we serve. We aim to have a work environment where everyone feels included and everyone can realise their full potential.
Information Security Analyst - Nottingham Vacancy type Experienced hires Scheme Specialist Level Mid Business area Information Technology Duration Permanent Hours Full time Location Nottingham Reference number HCInfoSec Job title Information Security Analyst Team Information Technology - Technical Vacancy owner Helen Collins We're looking for a talented Information Security Analyst to provide dedicated operational support to the Information Security Manager, helping ensure that security risks are identified, monitored, evidenced and managed consistently across the firm. The role Browne Jacobson is trusted with highly confidential client and firm information, making effective information security essential to protecting our clients, colleagues, reputation and regulatory position. As an Information Security Analyst, you'll support the delivery of the firm's information security programme, including governance, technical control oversight, ISO 27001 assurance, supplier security reviews, vulnerability management, incident response support, staff awareness and client due diligence. What you'll be doing Supporting vulnerability management activity by helping track vulnerability assessment results, remediation actions, penetration test findings and progress updates. Supporting the investigation and management of information security incidents, including phishing, malware, suspected data loss, lost or stolen devices and other security concerns. Assisting with the development of the firms approach to Data Leakage Prevention (DLP). Supporting internal information security audits, including preparing audit questions, gathering evidence, documenting findings and tracking remediation actions through to closure. What we're looking for A solid understanding of core information security principles and best practices. Experience supporting information security, IT security, risk, compliance, audit or technology functions. Awareness of common cyber security threats, vulnerabilities and attack techniques. Familiarity with Microsoft security technologies such as Entra ID, Defender, Purview or Sentinel would be beneficial. Why Join Us? We offer a flexible and hybrid working model. Our comprehensive benefits package includes private medical insurance, pension contributions, an employee assistance programme, and a range of wellbeing initiatives. Enhanced parental leave is also available, reflecting our commitment to supporting you through every stage of your career and life. Many of our people work flexibly in some way and we're open to considering how we can accommodate flexible working arrangements alongside role requirements. If this is important to you, please talk to us about it during the recruitment process. We celebrate diversity and welcome applicants from all backgrounds. All qualified applicants will receive consideration for employment without regard to race, colour, national origin, religion, gender, gender identity, sexual orientation, disability, social economic background or age. We're a Disability Confident Employer and will offer an interview to disabled applicants who best meet the minimum/essential criteria for the role. Take a look at our candidate interview pack for information about reasonable adjustments, what you can expect during the interview process, and guidance to help you prepare.
26/07/2026
Full time
Information Security Analyst - Nottingham Vacancy type Experienced hires Scheme Specialist Level Mid Business area Information Technology Duration Permanent Hours Full time Location Nottingham Reference number HCInfoSec Job title Information Security Analyst Team Information Technology - Technical Vacancy owner Helen Collins We're looking for a talented Information Security Analyst to provide dedicated operational support to the Information Security Manager, helping ensure that security risks are identified, monitored, evidenced and managed consistently across the firm. The role Browne Jacobson is trusted with highly confidential client and firm information, making effective information security essential to protecting our clients, colleagues, reputation and regulatory position. As an Information Security Analyst, you'll support the delivery of the firm's information security programme, including governance, technical control oversight, ISO 27001 assurance, supplier security reviews, vulnerability management, incident response support, staff awareness and client due diligence. What you'll be doing Supporting vulnerability management activity by helping track vulnerability assessment results, remediation actions, penetration test findings and progress updates. Supporting the investigation and management of information security incidents, including phishing, malware, suspected data loss, lost or stolen devices and other security concerns. Assisting with the development of the firms approach to Data Leakage Prevention (DLP). Supporting internal information security audits, including preparing audit questions, gathering evidence, documenting findings and tracking remediation actions through to closure. What we're looking for A solid understanding of core information security principles and best practices. Experience supporting information security, IT security, risk, compliance, audit or technology functions. Awareness of common cyber security threats, vulnerabilities and attack techniques. Familiarity with Microsoft security technologies such as Entra ID, Defender, Purview or Sentinel would be beneficial. Why Join Us? We offer a flexible and hybrid working model. Our comprehensive benefits package includes private medical insurance, pension contributions, an employee assistance programme, and a range of wellbeing initiatives. Enhanced parental leave is also available, reflecting our commitment to supporting you through every stage of your career and life. Many of our people work flexibly in some way and we're open to considering how we can accommodate flexible working arrangements alongside role requirements. If this is important to you, please talk to us about it during the recruitment process. We celebrate diversity and welcome applicants from all backgrounds. All qualified applicants will receive consideration for employment without regard to race, colour, national origin, religion, gender, gender identity, sexual orientation, disability, social economic background or age. We're a Disability Confident Employer and will offer an interview to disabled applicants who best meet the minimum/essential criteria for the role. Take a look at our candidate interview pack for information about reasonable adjustments, what you can expect during the interview process, and guidance to help you prepare.
IT Cyber Security Analyst Scunthorpe, North Lincolnshire £45,000 - £55,000 + Training and Development + Great Pension + 27 Days Annual Leave + Bank Holidays + Life Assurance + Health Cash Plan + EAP + Sick Pay Are you a cyber security professional looking to take ownership of patching, threat detection, and incident response in a large-scale enterprise environment while playing a key role in strengthening security maturity? This is a fantastic opportunity to join a well-established organisation undergoing a major cyber transformation, where you will be at the centre of defending critical IT and OT systems. Working closely with internal teams and external SOC/MDR providers, you will contribute to monitoring threats, responding to incidents, and improving overall security posture. In this role, you will take ownership of patching across the IT estate, coordinate remediation on critical systems, and support vulnerability management processes. You will also contribute to threat hunting activities and help continuously enhance detection and response capabilities. The ideal candidate will have hands on cyber security experience, strong knowledge across networks, endpoints, identity, and cloud security, and the ability to work collaboratively across technical teams to drive security improvements. The Role: Monitor, triage, and respond to security incidents alongside SOC/MDR providers Own patching processes across endpoints and servers Coordinate vulnerability management and remediation activities Support threat hunting and detection improvement initiatives Contribute to audits, compliance, and security control implementation The Person: Experience in cyber security, IT support, or OT/engineering environments Strong understanding of security across networks, endpoints, identity, and cloud Experience with patching tools and vulnerability management Knowledge of SOC operations and incident response Excellent problem solving and communication skills Reference Number: BBBH276210 Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.
26/07/2026
Full time
IT Cyber Security Analyst Scunthorpe, North Lincolnshire £45,000 - £55,000 + Training and Development + Great Pension + 27 Days Annual Leave + Bank Holidays + Life Assurance + Health Cash Plan + EAP + Sick Pay Are you a cyber security professional looking to take ownership of patching, threat detection, and incident response in a large-scale enterprise environment while playing a key role in strengthening security maturity? This is a fantastic opportunity to join a well-established organisation undergoing a major cyber transformation, where you will be at the centre of defending critical IT and OT systems. Working closely with internal teams and external SOC/MDR providers, you will contribute to monitoring threats, responding to incidents, and improving overall security posture. In this role, you will take ownership of patching across the IT estate, coordinate remediation on critical systems, and support vulnerability management processes. You will also contribute to threat hunting activities and help continuously enhance detection and response capabilities. The ideal candidate will have hands on cyber security experience, strong knowledge across networks, endpoints, identity, and cloud security, and the ability to work collaboratively across technical teams to drive security improvements. The Role: Monitor, triage, and respond to security incidents alongside SOC/MDR providers Own patching processes across endpoints and servers Coordinate vulnerability management and remediation activities Support threat hunting and detection improvement initiatives Contribute to audits, compliance, and security control implementation The Person: Experience in cyber security, IT support, or OT/engineering environments Strong understanding of security across networks, endpoints, identity, and cloud Experience with patching tools and vulnerability management Knowledge of SOC operations and incident response Excellent problem solving and communication skills Reference Number: BBBH276210 Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.
National Gas Transmission PLC
Warwick, Warwickshire
Select how often (in days) to receive an alert: Vulnerability Analyst/ Cyber Security Data Analyst Warwick, Hybrid flexible working At National Gas, the work we do matters. As Britain's national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we're also helping transform the network for a clean energy future. Join us and help secure Britain's energy. About the role: The Attack Surface Reduction (ASR) team within Cyber Security is responsible for identifying, measuring and reducing security risk across National Gas by proactively testing, assessing and challenging the resilience of our technology and operational environments. The Vulnerability Analyst (or Cyber Security Data Analyst) helps to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses are identified early and accurately. For this role we can consider a strong Data Analyst (MS Excel, Power BI) to manipulate and present data and confidently and clearly manage internal stakeholders. A strong interest and broad knowledge of Cyber Security would be highly regarded. What you'll be doing: Vulnerability Assessment: Conducting regular vulnerability assessments using automated scanning tools, manual testing techniques, and security best practices to identify vulnerabilities in systems, networks, and applications. Vulnerability Reporting: Generating detailed vulnerability assessment reports, including findings, recommendations, and risk assessments, to communicate the status of vulnerabilities to management and stakeholders. Vulnerability Management: Managing the lifecycle of vulnerabilities from discovery to remediation, including vulnerability triage, prioritization, tracking, and reporting. Risk Analysis: Analysing the impact and severity of identified vulnerabilities Remediation Planning: Collaborating with system administrators, developers, and other stakeholders Patch Management: Working closely with IT teams to ensure that security patches and updates are applied promptly Security Awareness: Providing guidance and training to employees. What you'll bring: Strong analytical and investigative skills, using MS Excel and PowerBI confidently Effective communication (written and verbal) and collaboration across different teams. Critical thinking and problem-solving abilities. Prioritisation: working in a rapidly changing environment, you'll need to be able to prioritise multiple activities. Initiative: the ability to work on your own initiative and take responsibility for your and team deliverables. Positive attitude: having a willingness to learn and develop yourself. Relevant University degree in Computer / Cyber Security / Engineering and Security certifications will be an advantage e.g. CISSP, CISM, SEC+, GIAC Security Essentials (GSEC). Knowledge of cybersecurity, physical security, and risk management principles as well as Operational Technology (OT) and Critical National Infrastructure (CNI). Ability to adapt to evolving threat landscapes. Detailed knowledge of the hardware and software systems in use across both IT and OT domains and the architectural arrangements in place to support management and operation of systems. Security Clearance: This role is subject to National Security Vetting (NSV). Candidates must be eligible to obtain and maintain Security Clearance (SC) throughout their employment. For further information, visit (UK Security Vetting: Clearance Levels). What we can offer you: Double-match pension (up to 12% company contribution) Annual performance bonus up to 6% Salary sacrifice car scheme 10x salary life assurance and income protection Flexible benefits including healthcare, dental, and technology options Family-friendly policies, wellbeing support, and professional development opportunities Inclusive recruitment: We're building a workforce that reflects the communities we serve, championing diversity, and creating an inclusive workplace where everyone is valued for their unique contribution. We support reasonable adjustments throughout the recruitment process and beyond. National Gas is a Disability Confident employer and signatory of the Armed Forces Covenant. More Information Advert close: 29th July 2026, with interviews soon after
26/07/2026
Full time
Select how often (in days) to receive an alert: Vulnerability Analyst/ Cyber Security Data Analyst Warwick, Hybrid flexible working At National Gas, the work we do matters. As Britain's national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we're also helping transform the network for a clean energy future. Join us and help secure Britain's energy. About the role: The Attack Surface Reduction (ASR) team within Cyber Security is responsible for identifying, measuring and reducing security risk across National Gas by proactively testing, assessing and challenging the resilience of our technology and operational environments. The Vulnerability Analyst (or Cyber Security Data Analyst) helps to deliver a comprehensive programme of security testing, including vulnerability scanning and security configuration reviews, ensuring weaknesses are identified early and accurately. For this role we can consider a strong Data Analyst (MS Excel, Power BI) to manipulate and present data and confidently and clearly manage internal stakeholders. A strong interest and broad knowledge of Cyber Security would be highly regarded. What you'll be doing: Vulnerability Assessment: Conducting regular vulnerability assessments using automated scanning tools, manual testing techniques, and security best practices to identify vulnerabilities in systems, networks, and applications. Vulnerability Reporting: Generating detailed vulnerability assessment reports, including findings, recommendations, and risk assessments, to communicate the status of vulnerabilities to management and stakeholders. Vulnerability Management: Managing the lifecycle of vulnerabilities from discovery to remediation, including vulnerability triage, prioritization, tracking, and reporting. Risk Analysis: Analysing the impact and severity of identified vulnerabilities Remediation Planning: Collaborating with system administrators, developers, and other stakeholders Patch Management: Working closely with IT teams to ensure that security patches and updates are applied promptly Security Awareness: Providing guidance and training to employees. What you'll bring: Strong analytical and investigative skills, using MS Excel and PowerBI confidently Effective communication (written and verbal) and collaboration across different teams. Critical thinking and problem-solving abilities. Prioritisation: working in a rapidly changing environment, you'll need to be able to prioritise multiple activities. Initiative: the ability to work on your own initiative and take responsibility for your and team deliverables. Positive attitude: having a willingness to learn and develop yourself. Relevant University degree in Computer / Cyber Security / Engineering and Security certifications will be an advantage e.g. CISSP, CISM, SEC+, GIAC Security Essentials (GSEC). Knowledge of cybersecurity, physical security, and risk management principles as well as Operational Technology (OT) and Critical National Infrastructure (CNI). Ability to adapt to evolving threat landscapes. Detailed knowledge of the hardware and software systems in use across both IT and OT domains and the architectural arrangements in place to support management and operation of systems. Security Clearance: This role is subject to National Security Vetting (NSV). Candidates must be eligible to obtain and maintain Security Clearance (SC) throughout their employment. For further information, visit (UK Security Vetting: Clearance Levels). What we can offer you: Double-match pension (up to 12% company contribution) Annual performance bonus up to 6% Salary sacrifice car scheme 10x salary life assurance and income protection Flexible benefits including healthcare, dental, and technology options Family-friendly policies, wellbeing support, and professional development opportunities Inclusive recruitment: We're building a workforce that reflects the communities we serve, championing diversity, and creating an inclusive workplace where everyone is valued for their unique contribution. We support reasonable adjustments throughout the recruitment process and beyond. National Gas is a Disability Confident employer and signatory of the Armed Forces Covenant. More Information Advert close: 29th July 2026, with interviews soon after
Intermediate Data Engineer Department: Insurance Retail Employment Type: Permanent - Full Time Location: North West UK - Hybrid Compensation: £40,000 - £45,000 / year Description We're seeking an Intermediate Data Engineer to join our Insurance Retail department, supporting development squads with reliable, automated and cloud-ready data solutions. This role is suited to someone who can combine strong SQL, scripting and AWS experience with modern DevOps practices to build, maintain and improve data pipelines, data services and supporting infrastructure. AI is a key part of the role. You will be expected to use AI-assisted engineering tools responsibly to accelerate development, improve documentation, support analysis and identify opportunities to automate repeatable data engineering and operational tasks. Working closely with engineers, analysts, architects and stakeholders, you will help turn data requirements into maintainable, observable and secure solutions. You will maintain awareness of industry and technology developments, contribute to technical discussions, and support continuous improvement across data engineering, automation and operational practices. The role includes ownership of work throughout its lifecycle, from development and testing through to production support, incident resolution, continuous improvement and knowledge sharing across the department. About CDL CDL is one of the UK's leading software development houses, employing over 600 people at its campus in Stockport. It has a consistent history in the high-volume retail insurance sector. CDL has spearheaded developments in the aggregator, web and telematics space, including connected home, enrichment and self-service solutions. As a result, the company's robust and innovative technologies have enabled its customers to thrive in the highly competitive UK insurance marketplace. We have built a collaborative and creative culture,leveraging AI-driven solutions to enhance our products, processes and decision-making.We pride ourselves on cultivating an inspiring working environment with our employees at the heart of our company. In a nutshell we are the market leading software house in our industry, creating the software, websites & apps for the Insurance & Finance sector across the UK. If you were to go on a price comparison website, approximately 65% of the companies on there are our clients! What You'll Do Building, testing, monitoring and maintaining data pipelines and infrastructure to support the Data Platform using best practices including CI/CD, IaC and DevOps. Apply security best practices across data pipelines, cloud infrastructure and operational processes, ensuring data is protected through appropriate access controls, encryption, monitoring and secure engineering practices Use AWS services and PostgreSQL/AWS RDS knowledge to design, deliver and support scalable, reliable and secure data solutions, ensuring appropriate governance, resilience and protection of business data. Actively embrace AI-assisted engineering practices and demonstrate a willingness to learn, experiment with and responsibly adopt emerging AI tools such as Kiro, GitHub Copilot or equivalent technologies to improve delivery flow, quality, documentation, analysis and operational efficiency. Develop and maintain automated deployment, testing and operational workflows using GitLab pipelines, version control, Terraform/OpenTofu and scripting. Contribute to data quality, lineage, governance and observability practices to ensure data is trusted, traceable, secure and supportable throughout its lifecycle. Investigate data quality, platform reliability, pipeline performance and operational issues, identifying practical improvements, preventative actions and automation opportunities that enable squads to move faster and more safely. Working with business stakeholders, analysts and architects to understand business and technical requirements, designing data models and data structures that support reporting, analytics and operational use cases. Contribute to database and data platform activities such as upgrades, data migrations, schema updates and platform modernisation initiatives. Documenting processes and products, sharing knowledge across the squad and wider business, and supporting the development of less experienced engineers through mentoring, pairing or technical guidance where appropriate. Contribute significantly to small-to-medium feature deliveries and multi-person initiatives, collaborating with engineers and stakeholders to deliver reliable outcomes. About You Hold, or be willing to obtain, a relevant AWS certification that can be registered against the CDL APN. Proven experience working with AWS services relevant to data engineering and operational support, such as RDS, S3, Lambda, ECS, EC2, VPC, CloudWatch and related services. Experience with MySql and Oracle databases would be advantageous. Strong SQL skills, including PostgreSQL experience, query optimisation awareness and the ability to investigate data or performance issues. Good understanding of security principles including least-privilege access, encryption, secrets management, vulnerability remediation and secure handling of sensitive data. Experience with CI/CD pipelines, automated testing and deployment practices using GitLab or similar tooling. Experience with Infrastructure as Code tools such as Terraform, OpenTofu or CloudFormation. Good understanding of version control workflows, branching strategies and GitLab best practice. Experience of, or a strong willingness to learn, AI-assisted engineering tools such as Kiro, GitHub Copilot or similar technologies to improve engineering effectiveness and delivery outcomes. Familiarity with observability and troubleshooting tooling such as Dynatrace, OpenSearch/Elasticsearch or CloudWatch logs. Ability to communicate clearly, analyse problems, work collaboratively and explain technical concepts to both technical and non-technical stakeholders. Familiarity with Agile methodologies and operational tooling such as Jira and ServiceNow. What You'll Get Salary The salary for the role of Intermediate Data Engineer pays up to £45,000p.a. (Level 4) providing a fantastic opportunity for career progression through CDL's clearly defined career framework Your growth and advancement within CDL are only limited by your own ambition and effort. Benefits Hybrid Working (2 Days a Week in the office - SK4 2HD) Flexible working. 25 days holiday to start, increasing by 1 day per 1 year of service up to 30 days. Top employer for 10th year running Excellent training and development platform Opportunities for career progression Health and Wellbeing Programme Virtual activities, lunch and learns, coffee mornings and meetups. Life and health assurance Electric Vehicle Scheme Established Recognition Award System Great Parental Benefits Diversity and Inclusion network Pension scheme Community projects and volunteer days Refer a friend bonus Campus Benefits: On-site free parking Open plan modern offices Quiet Spaces are also available Shuttle bus to and from the station Subsidised restaurant Games room, pool & table-tennis tables and chill out zone Annual Hackathon & Deep Racer Events Social activities, regular social events through our social group Xtra, including a summer BBQ, competitions, bowling, go-karting, football games, Winter party and much more! Car wash, barber, yoga classes, boot camp and massage services all on site Cycle to work scheme Shower and dry rooms Diversity and inclusion: We're on a journey to keep innovating, that means welcoming new ideas and ways of thinking. CDL recognises that building a diverse workforce is critical to the success of our business. We strongly encourage applications from a diverse talent pool and welcome the opportunity to discuss flexibility requirements and workplace adjustments with all our applicants.
26/07/2026
Full time
Intermediate Data Engineer Department: Insurance Retail Employment Type: Permanent - Full Time Location: North West UK - Hybrid Compensation: £40,000 - £45,000 / year Description We're seeking an Intermediate Data Engineer to join our Insurance Retail department, supporting development squads with reliable, automated and cloud-ready data solutions. This role is suited to someone who can combine strong SQL, scripting and AWS experience with modern DevOps practices to build, maintain and improve data pipelines, data services and supporting infrastructure. AI is a key part of the role. You will be expected to use AI-assisted engineering tools responsibly to accelerate development, improve documentation, support analysis and identify opportunities to automate repeatable data engineering and operational tasks. Working closely with engineers, analysts, architects and stakeholders, you will help turn data requirements into maintainable, observable and secure solutions. You will maintain awareness of industry and technology developments, contribute to technical discussions, and support continuous improvement across data engineering, automation and operational practices. The role includes ownership of work throughout its lifecycle, from development and testing through to production support, incident resolution, continuous improvement and knowledge sharing across the department. About CDL CDL is one of the UK's leading software development houses, employing over 600 people at its campus in Stockport. It has a consistent history in the high-volume retail insurance sector. CDL has spearheaded developments in the aggregator, web and telematics space, including connected home, enrichment and self-service solutions. As a result, the company's robust and innovative technologies have enabled its customers to thrive in the highly competitive UK insurance marketplace. We have built a collaborative and creative culture,leveraging AI-driven solutions to enhance our products, processes and decision-making.We pride ourselves on cultivating an inspiring working environment with our employees at the heart of our company. In a nutshell we are the market leading software house in our industry, creating the software, websites & apps for the Insurance & Finance sector across the UK. If you were to go on a price comparison website, approximately 65% of the companies on there are our clients! What You'll Do Building, testing, monitoring and maintaining data pipelines and infrastructure to support the Data Platform using best practices including CI/CD, IaC and DevOps. Apply security best practices across data pipelines, cloud infrastructure and operational processes, ensuring data is protected through appropriate access controls, encryption, monitoring and secure engineering practices Use AWS services and PostgreSQL/AWS RDS knowledge to design, deliver and support scalable, reliable and secure data solutions, ensuring appropriate governance, resilience and protection of business data. Actively embrace AI-assisted engineering practices and demonstrate a willingness to learn, experiment with and responsibly adopt emerging AI tools such as Kiro, GitHub Copilot or equivalent technologies to improve delivery flow, quality, documentation, analysis and operational efficiency. Develop and maintain automated deployment, testing and operational workflows using GitLab pipelines, version control, Terraform/OpenTofu and scripting. Contribute to data quality, lineage, governance and observability practices to ensure data is trusted, traceable, secure and supportable throughout its lifecycle. Investigate data quality, platform reliability, pipeline performance and operational issues, identifying practical improvements, preventative actions and automation opportunities that enable squads to move faster and more safely. Working with business stakeholders, analysts and architects to understand business and technical requirements, designing data models and data structures that support reporting, analytics and operational use cases. Contribute to database and data platform activities such as upgrades, data migrations, schema updates and platform modernisation initiatives. Documenting processes and products, sharing knowledge across the squad and wider business, and supporting the development of less experienced engineers through mentoring, pairing or technical guidance where appropriate. Contribute significantly to small-to-medium feature deliveries and multi-person initiatives, collaborating with engineers and stakeholders to deliver reliable outcomes. About You Hold, or be willing to obtain, a relevant AWS certification that can be registered against the CDL APN. Proven experience working with AWS services relevant to data engineering and operational support, such as RDS, S3, Lambda, ECS, EC2, VPC, CloudWatch and related services. Experience with MySql and Oracle databases would be advantageous. Strong SQL skills, including PostgreSQL experience, query optimisation awareness and the ability to investigate data or performance issues. Good understanding of security principles including least-privilege access, encryption, secrets management, vulnerability remediation and secure handling of sensitive data. Experience with CI/CD pipelines, automated testing and deployment practices using GitLab or similar tooling. Experience with Infrastructure as Code tools such as Terraform, OpenTofu or CloudFormation. Good understanding of version control workflows, branching strategies and GitLab best practice. Experience of, or a strong willingness to learn, AI-assisted engineering tools such as Kiro, GitHub Copilot or similar technologies to improve engineering effectiveness and delivery outcomes. Familiarity with observability and troubleshooting tooling such as Dynatrace, OpenSearch/Elasticsearch or CloudWatch logs. Ability to communicate clearly, analyse problems, work collaboratively and explain technical concepts to both technical and non-technical stakeholders. Familiarity with Agile methodologies and operational tooling such as Jira and ServiceNow. What You'll Get Salary The salary for the role of Intermediate Data Engineer pays up to £45,000p.a. (Level 4) providing a fantastic opportunity for career progression through CDL's clearly defined career framework Your growth and advancement within CDL are only limited by your own ambition and effort. Benefits Hybrid Working (2 Days a Week in the office - SK4 2HD) Flexible working. 25 days holiday to start, increasing by 1 day per 1 year of service up to 30 days. Top employer for 10th year running Excellent training and development platform Opportunities for career progression Health and Wellbeing Programme Virtual activities, lunch and learns, coffee mornings and meetups. Life and health assurance Electric Vehicle Scheme Established Recognition Award System Great Parental Benefits Diversity and Inclusion network Pension scheme Community projects and volunteer days Refer a friend bonus Campus Benefits: On-site free parking Open plan modern offices Quiet Spaces are also available Shuttle bus to and from the station Subsidised restaurant Games room, pool & table-tennis tables and chill out zone Annual Hackathon & Deep Racer Events Social activities, regular social events through our social group Xtra, including a summer BBQ, competitions, bowling, go-karting, football games, Winter party and much more! Car wash, barber, yoga classes, boot camp and massage services all on site Cycle to work scheme Shower and dry rooms Diversity and inclusion: We're on a journey to keep innovating, that means welcoming new ideas and ways of thinking. CDL recognises that building a diverse workforce is critical to the success of our business. We strongly encourage applications from a diverse talent pool and welcome the opportunity to discuss flexibility requirements and workplace adjustments with all our applicants.
Rise Technical Recruitment Ltd in Scunthorpe is seeking an IT Cyber Security Analyst to own patching, threat detection and incident response in a large-scale enterprise environment. You will defend IT and OT systems with SOC/MDR providers and drive security improvements. The role involves patching across estate, coordinating remediation, supporting vulnerability management, and contributing to threat hunting and audits.
26/07/2026
Full time
Rise Technical Recruitment Ltd in Scunthorpe is seeking an IT Cyber Security Analyst to own patching, threat detection and incident response in a large-scale enterprise environment. You will defend IT and OT systems with SOC/MDR providers and drive security improvements. The role involves patching across estate, coordinating remediation, supporting vulnerability management, and contributing to threat hunting and audits.
Browne Jacobson LLP is seeking an Information Security Analyst in Nottingham to provide operational support to the Information Security Manager. You will help identify, monitor and manage security risks to protect confidential client and firm information. The role covers governance, technical control oversight, ISO 27001 assurance, supplier security reviews, vulnerability management, incident response support, staff awareness and due diligence. A hybrid working model is available.
26/07/2026
Full time
Browne Jacobson LLP is seeking an Information Security Analyst in Nottingham to provide operational support to the Information Security Manager. You will help identify, monitor and manage security risks to protect confidential client and firm information. The role covers governance, technical control oversight, ISO 27001 assurance, supplier security reviews, vulnerability management, incident response support, staff awareness and due diligence. A hybrid working model is available.
Roke, Roke Manor, Romsey, Hampshire, United Kingdom Job Description Great ideas come from different minds. That's why we bring together engineers, scientists, analysts, and creatives from every background - and give them the trust, tools, and freedom to make a difference. What connects us is the mission: solving meaningful problems and building capability that protects what matters most. And as the challenges evolve, so do we - working on the technologies that will shape tomorrow, not just today. The Opportunity Roke are now looking for a passionate DevSecOps Engineer with Software Development experience to become an aggregated part of our Defence Information Advantage team. Innovation is at the core of what we do. You will be encouraged to contribute to Roke's innovation process by devising ideas for products/ techniques, developing other people's ideas & your own. You will belong to a community in which to engage about best practice, emerging technologies & CPD. Your Role In this role you will work with software developers, users, project and project managers, heads of engineering, quality assurance and IT colleagues. You will oversee code releases, deployments, and support operational systems. The role calls for both technical skills and soft skills to communicate effectively with colleagues at different levels in the organization in a collaborative and holistic environment. What you'll bring As a DevSecOps Engineer, you will have a degree level qualification in a STEM subject, or an equivalent level of practical experience. Depending on your level of ability/experience, you will have familiarity, competence or expertise in a subset of these areas: Cloud technologies: AWS Programming languages: Java Python node.js SQL Data technologies: Relational databases (e.g. PostgreSQL) Data streaming (e.g. kafka) Big data (e.g. Hadoop) Cyber security Vulnerability management (e.g. tenable) Static and Dynamic Analysis (e.g. SonarQube) Microservices On premise virtualization Cloud Edge compute Containerisation (e.g. Docker, Podman) APIs (e.g. RESTful) DevSecOps tooling Version control (e.g. Git) Continuous Integration/Deployment (e.g. Gitlab CI/CD) Unit testing (e.g. JUnit) Behaviour Driven Development (e.g. Cucumber) Infrastructure as code (e.g. Terraform, Puppet, Ansible) Beyond your technical skills, you will be proactive and able to communicate effectively with a variety of stakeholders. You will work well alone or as part of a team and grasp opportunities. You will be curious and seek out the best approach/solution/tool for the job at hand. You'll need to be able to draw on previous experiences of DevSecOps roles and be able to demonstrate a clear commitment to Continuous Improvement and Learning from Experience. Experience of successful DevSecOps implementation within the defence industry is a bonus! Roke has a hybrid working policy as does our client base. Collaborative activities are likely to take place in our Woking, Romsey and Gloucester locations as well as client sites in Andover, London, Bristol and Cambridge. Areas of responsibility Join and contribute to agile ceremonies following Scrum, Kanban or SAFe Agile. Coach team members in DevSecOps. Work with product owners and software developers to schedule releases and implement CI/CD pipelines. Work with security architects to ensure the products and services are secure by design. Work with quality engineers to ensure the products and services are of high quality. Effectively implement changes to products and services. Participate and contribute to code reviews. Support operational systems, troubleshoot and resolve issues. The Next Step Roke, Roke Manor, Romsey, Hampshire, United Kingdom
26/07/2026
Full time
Roke, Roke Manor, Romsey, Hampshire, United Kingdom Job Description Great ideas come from different minds. That's why we bring together engineers, scientists, analysts, and creatives from every background - and give them the trust, tools, and freedom to make a difference. What connects us is the mission: solving meaningful problems and building capability that protects what matters most. And as the challenges evolve, so do we - working on the technologies that will shape tomorrow, not just today. The Opportunity Roke are now looking for a passionate DevSecOps Engineer with Software Development experience to become an aggregated part of our Defence Information Advantage team. Innovation is at the core of what we do. You will be encouraged to contribute to Roke's innovation process by devising ideas for products/ techniques, developing other people's ideas & your own. You will belong to a community in which to engage about best practice, emerging technologies & CPD. Your Role In this role you will work with software developers, users, project and project managers, heads of engineering, quality assurance and IT colleagues. You will oversee code releases, deployments, and support operational systems. The role calls for both technical skills and soft skills to communicate effectively with colleagues at different levels in the organization in a collaborative and holistic environment. What you'll bring As a DevSecOps Engineer, you will have a degree level qualification in a STEM subject, or an equivalent level of practical experience. Depending on your level of ability/experience, you will have familiarity, competence or expertise in a subset of these areas: Cloud technologies: AWS Programming languages: Java Python node.js SQL Data technologies: Relational databases (e.g. PostgreSQL) Data streaming (e.g. kafka) Big data (e.g. Hadoop) Cyber security Vulnerability management (e.g. tenable) Static and Dynamic Analysis (e.g. SonarQube) Microservices On premise virtualization Cloud Edge compute Containerisation (e.g. Docker, Podman) APIs (e.g. RESTful) DevSecOps tooling Version control (e.g. Git) Continuous Integration/Deployment (e.g. Gitlab CI/CD) Unit testing (e.g. JUnit) Behaviour Driven Development (e.g. Cucumber) Infrastructure as code (e.g. Terraform, Puppet, Ansible) Beyond your technical skills, you will be proactive and able to communicate effectively with a variety of stakeholders. You will work well alone or as part of a team and grasp opportunities. You will be curious and seek out the best approach/solution/tool for the job at hand. You'll need to be able to draw on previous experiences of DevSecOps roles and be able to demonstrate a clear commitment to Continuous Improvement and Learning from Experience. Experience of successful DevSecOps implementation within the defence industry is a bonus! Roke has a hybrid working policy as does our client base. Collaborative activities are likely to take place in our Woking, Romsey and Gloucester locations as well as client sites in Andover, London, Bristol and Cambridge. Areas of responsibility Join and contribute to agile ceremonies following Scrum, Kanban or SAFe Agile. Coach team members in DevSecOps. Work with product owners and software developers to schedule releases and implement CI/CD pipelines. Work with security architects to ensure the products and services are secure by design. Work with quality engineers to ensure the products and services are of high quality. Effectively implement changes to products and services. Participate and contribute to code reviews. Support operational systems, troubleshoot and resolve issues. The Next Step Roke, Roke Manor, Romsey, Hampshire, United Kingdom
Join Barclays as a Cryptography Operations Technician, where you'll play a key role in monitoring and maintaining our critical technology infrastructure. In this role, you will be part of a global Cryptography team within the Chief Information Security Office, Global Information Security. This team provides critical cryptographic services, including Secure Key Management, Hardware Security Modules, Application Cryptography, Strong Authentication, and PKI & Certificate services to Barclays Group. Your primary responsibility will be to complete operational support activities in Cryptographic technology and security functions to ensure information confidentiality, integrity, and availability while supporting security risk mitigation. This is an excellent opportunity to grow your technical capability in Cryptography within a supportive engineering environment. Please note that while you will work standard UK hours (9 AM-5 PM), you will also be required to perform occasional on-call duty. While weekend on-site attendance is not required, weekend shift coverage may be scheduled. To be successful in this role, you will need the following: Strong working knowledge of Incident, Problem, and Change Management, ideally gained within a regulated environment. Proven experience managing Major Incidents (MIM), including leading and coordinating triage sessions. Background in operational environments, IT Infrastructure, process adherence and creation, technology delivery, service management and monitoring. Unix/Windows operating system knowledge. Knowledge of or experience in Cryptography and Information Security. Strong stakeholder management with the ability to influence and negotiate at all levels. Excellent attention to detail and accuracy. Ability to make informed decisions under tight deadlines and manage multiple priorities effectively. Some other highly valued skills may include: Experience in Key Management. Experience in HSM configuration/installation/support. Certificate management experience. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Expertise in privacy, compliance, and data protection services. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills. The successful candidate will be based in Radbroke Hall, Knutsford. Purpose of the role To manage and monitor the banks cryptographic assets,for all use cases, whilst ensuring the confidentiality, integrity, and authenticity of sensitive data, both through BAU support and On-Call support as part of a 24/7 global team. Accountabilities Collaboration with internal and external customers and stakeholders to understand and identify cryptographic needs across the organisation, sharing best practices including solutions to business applications and processes. Execution of security assessments and penetration testing to identify vulnerabilities in cryptographic implementations and procedures and guide the implementation of mitigation strategies and communicate findings to relevant findings to relevant senior stakeholders. Implementation and monitoring of cryptographic solutions used in various banking applications to ensure they function correctly and meet the Cryptography Standard. Development of training content for colleagues to share expertise on cryptographic concepts, best practice and security procedures in line with Standards and Industry regulations Contribute to the creation of technical documentation and specifications related to cryptographic designs and implementations. Provision of subject matter expertise in cryptography methodologies. To manage and support the service management of cryptography solutions consumed by the Bank globally, in line with Technology Controls and Standards, including but not limited to Incident/Problem/Change/Vulnerability Management. Understanding of industry cryptographic principles including algorithms, protocols and technologies including symmetric and asymmetric keys, digital signatures, key exchange and encryption. Advocate the improvement and implementation of security controls when appropriate. Presentation of complex ideas effectively to technical and non-technical audiences at all levels of Leadership. Analyst Expectations To perform prescribed activities in a timely manner and to a high standard consistently driving continuous improvement. Requires in-depth technical knowledge and experience in their assigned area of expertise Thorough understanding of the underlying principles and concepts within the area of expertise They lead and supervise a team, guiding and supporting professional development, allocating work requirements and coordinating team resources. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they develop technical expertise in work area, acting as an advisor where appropriate. Will have an impact on the work of related teams within the area. Partner with other functions and business areas. Takes responsibility for end results of a team's operational processing and activities. Escalate breaches of policies / procedure appropriately. Take responsibility for embedding new policies/ procedures adopted due to risk mitigation. Advise and influence decision making within own area of expertise. Take ownership for managing risk and strengthening controls in relation to the work you own or contribute to. Deliver your workand areas of responsibility in line with relevant rules, regulation and codes of conduct. Maintain and continually build an understanding of how own sub-function integrates with function, alongside knowledge of the organisations products, services and processes within the function. Demonstrate understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function. Make evaluative judgements based on the analysis of factual information, paying attention to detail. Resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents. Guide and persuade team members and communicate complex / sensitive information. Act as contact point for stakeholders outside of the immediate function, while building a network of contacts outside team and external to the organisation. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
26/07/2026
Full time
Join Barclays as a Cryptography Operations Technician, where you'll play a key role in monitoring and maintaining our critical technology infrastructure. In this role, you will be part of a global Cryptography team within the Chief Information Security Office, Global Information Security. This team provides critical cryptographic services, including Secure Key Management, Hardware Security Modules, Application Cryptography, Strong Authentication, and PKI & Certificate services to Barclays Group. Your primary responsibility will be to complete operational support activities in Cryptographic technology and security functions to ensure information confidentiality, integrity, and availability while supporting security risk mitigation. This is an excellent opportunity to grow your technical capability in Cryptography within a supportive engineering environment. Please note that while you will work standard UK hours (9 AM-5 PM), you will also be required to perform occasional on-call duty. While weekend on-site attendance is not required, weekend shift coverage may be scheduled. To be successful in this role, you will need the following: Strong working knowledge of Incident, Problem, and Change Management, ideally gained within a regulated environment. Proven experience managing Major Incidents (MIM), including leading and coordinating triage sessions. Background in operational environments, IT Infrastructure, process adherence and creation, technology delivery, service management and monitoring. Unix/Windows operating system knowledge. Knowledge of or experience in Cryptography and Information Security. Strong stakeholder management with the ability to influence and negotiate at all levels. Excellent attention to detail and accuracy. Ability to make informed decisions under tight deadlines and manage multiple priorities effectively. Some other highly valued skills may include: Experience in Key Management. Experience in HSM configuration/installation/support. Certificate management experience. Strong documentation skills for operational procedures. Familiarity with SharePoint, Confluence, and JIRA. Expertise in privacy, compliance, and data protection services. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills. The successful candidate will be based in Radbroke Hall, Knutsford. Purpose of the role To manage and monitor the banks cryptographic assets,for all use cases, whilst ensuring the confidentiality, integrity, and authenticity of sensitive data, both through BAU support and On-Call support as part of a 24/7 global team. Accountabilities Collaboration with internal and external customers and stakeholders to understand and identify cryptographic needs across the organisation, sharing best practices including solutions to business applications and processes. Execution of security assessments and penetration testing to identify vulnerabilities in cryptographic implementations and procedures and guide the implementation of mitigation strategies and communicate findings to relevant findings to relevant senior stakeholders. Implementation and monitoring of cryptographic solutions used in various banking applications to ensure they function correctly and meet the Cryptography Standard. Development of training content for colleagues to share expertise on cryptographic concepts, best practice and security procedures in line with Standards and Industry regulations Contribute to the creation of technical documentation and specifications related to cryptographic designs and implementations. Provision of subject matter expertise in cryptography methodologies. To manage and support the service management of cryptography solutions consumed by the Bank globally, in line with Technology Controls and Standards, including but not limited to Incident/Problem/Change/Vulnerability Management. Understanding of industry cryptographic principles including algorithms, protocols and technologies including symmetric and asymmetric keys, digital signatures, key exchange and encryption. Advocate the improvement and implementation of security controls when appropriate. Presentation of complex ideas effectively to technical and non-technical audiences at all levels of Leadership. Analyst Expectations To perform prescribed activities in a timely manner and to a high standard consistently driving continuous improvement. Requires in-depth technical knowledge and experience in their assigned area of expertise Thorough understanding of the underlying principles and concepts within the area of expertise They lead and supervise a team, guiding and supporting professional development, allocating work requirements and coordinating team resources. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they develop technical expertise in work area, acting as an advisor where appropriate. Will have an impact on the work of related teams within the area. Partner with other functions and business areas. Takes responsibility for end results of a team's operational processing and activities. Escalate breaches of policies / procedure appropriately. Take responsibility for embedding new policies/ procedures adopted due to risk mitigation. Advise and influence decision making within own area of expertise. Take ownership for managing risk and strengthening controls in relation to the work you own or contribute to. Deliver your workand areas of responsibility in line with relevant rules, regulation and codes of conduct. Maintain and continually build an understanding of how own sub-function integrates with function, alongside knowledge of the organisations products, services and processes within the function. Demonstrate understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function. Make evaluative judgements based on the analysis of factual information, paying attention to detail. Resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents. Guide and persuade team members and communicate complex / sensitive information. Act as contact point for stakeholders outside of the immediate function, while building a network of contacts outside team and external to the organisation. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
Senior IT Service Desk AnalystApplylocations: London, United Kingdomtime type: Full timeposted on: Posted 12 Days Agojob requisition id: R-100214 About Realty Income Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of 15,600 properties in all 50 U.S. states, the UK and six other countries in Europe, with a gross book value $58bn. We are known as "The Monthly Dividend Company" and have a mission to deliver stockholders dependable monthly dividends that grow over time. Since our founding, we have declared 656 consecutive monthly dividends and are a member of the S&P 500 Dividend Aristocrats index, having increased our dividend for the last 30 consecutive years.You will be joining one of the largest Real Estate Investment Trusts in the world as we rapidly expand into the UK and European markets, including moving into new offices at 3 St. James's Square.The European portfolio, including the UK, has experienced consistent growth quarter-on-quarter since our first international acquisition, a £429m 12-property portfolio from Sainsbury's in 2019. In just five years the portfolio now includes investments of over $11bn, and 483 distinct properties.As part of this growth story, you will work with the latest technology to improve our current processes. This opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst developing and broadening your experience and technical skillsets; with dynamic opportunities for career growth as the company expands. Position Overview: Reporting to the Associate Director of European IT, the Senior IT Service Desk Analyst provides end user support while playing a key role across the Infrastructure and IT Operations functions. The role supports end users, maintains workstations, installs and supports hardware and software, delivers user training, and ensures accurate documentation and ticket management within ServiceNow.The role is responsible for software and hardware asset management and lifecycle planning, task automation using endpoint management, configuration, and scripting tools, and the administration of user accounts, groups, and licensing across enterprise identity and productivity platforms. This includes mobile device configuration and management, supporting vulnerability and patch management activities by coordinating remediation, tracking compliance, and ensuring timely updates in line with IT and Security policies.This is an office based role, Monday to Friday, with working hours of 10:00am - 7:00pm (UK time) to support collaboration with US teams and ensure effective ticket handover, escalation, and operational continuity across time zones. Key Responsibilities: Work globally with the IT Service Desk team to respond to and resolve tickets in accordance with the company's SLAs. Provide primary support to end-users, maintain regular communication throughout the ticket lifecycle, and document resolutions through ServiceNow. Provide effective IT support, including out-of-hours support in critical incidents and participation in on-call support. Troubleshoot hardware and software issues both remotely and in person. Work with third-party vendors as necessary to provide a technical resolution - Liaise with 3rd parties, i.e. vendors. Manage the company's mobile phone devices. Collaborate with People Success to streamline employee transitions, including efficient onboarding, IT setup, credentialing, and secure offboarding processes. Assist with the standard installation of our corporate operating systems. Ensure successful deployment of laptops, both remote and physical. Work within the security and compliance requirements guidelines, including GDPR and CPRA. Proactively identify and address technical issues with the IT team. Create, update, and maintain IT end-user documentation in Confluence. Maintain asset inventory, including regular physical stock checks. Perform IT storage room maintenance, which consists of recycling hardware and ensuring the disposal of redundant equipment according to current EU directives/guidelines. Stay current with the industry to evaluate and propose new technologies as required. Manage the IT onboarding and offboarding of employees. Infrastructure & Operations Key Responsibilities: Support vulnerability and patch management, working closely with the Information Security team to remediate findings using centrally managed security and endpoint management platforms, ensuring compliance with security policies and SLAs. Monitor and respond to network security events, collaborating with the Information Security team to investigate and remediate incidents. Manage Windows endpoints through MDM solutions globally via centralised management platforms. Use PowerShell to execute scripts supporting Windows servers and desktops. Support business operational systems, including Azure and Office 365, covering user administration, Exchange mailboxes and distribution lists, and application assignments. Support vendors use of virtual desktop environments, including onboarding, access configuration, ongoing support, and troubleshooting. Manage company mobile phone devices using enterprise mobile device management platforms, including provisioning, configuration, and lifecycle management. Act as a local technical point of contact for infrastructure and network activities, working closely with US Infrastructure and Network teams to support day to day operations, escalation, and cross region coordination. Assist with network infrastructure operations, including troubleshooting connectivity issues, supporting network optimisation initiatives, and validating changes in collaboration with Infrastructure and Operations teams. Maintain network and infrastructure documentation, ensuring configurations, changes, and operational procedures are accurately captured and kept up to date. Support office relocations and office fit out activities, including IT planning, vendor coordination, and on site support to ensure a successful go live. Assist with physical infrastructure and server room operations, including the installation, relocation, and decommissioning of servers and networking equipment. Support network hardware installations, including switches, firewalls, UPS systems, and structured cabling, ensuring alignment with security, resilience, and operational standards. Candidate Requirements Knowledge, Skills, and Abilities Must have for the role: Suitable direct work experience in an Information Technology Service Desk customer-facing capacity working for an investment, professional or financial services company (or similar fast paced environment) While we do not set upper or lower limits of experience for any of our vacancies, candidates with at least 5+ years' IT Service Desk / Infrastructure experience are likely to have the right level of knowledge and experience for this role; strong candidates outside of this range will be considered. Essential demonstratable experience / knowledge of: Microsoft Windows and Office applications. Experience administering and troubleshooting Apple iOS mobile devices. Windows server operating systems and desktops. TCP/IP networking and technologies: DNS, DHCP, LANs, VLANs, VPNs, and Wi-Fi. Implementing and troubleshooting enterprise identity, messaging, and endpoint management platforms within a Microsoft ecosystem. IT ticketing systems, such as ServiceNow, Jira, or Zendesk. SSO technologies. Mobile Device Management (MDM) solutions. Experience with AV conferencing solutions such as MS Teams Room. Experience with enterprise identity and IT service management platforms preferred Critical thinking and problem-solving skills to provide the best support experience. Excellent time management skills; ability to work in a dynamic office environment. Ability to independently manage and prioritise workload and tasks. Ability to work effectively as part of a team while also being able to take initiative independently. Excellent verbal and written communication and presentation skills. Strong focus on customer service and user experience. Office based Monday - Friday with working hours of 10:00am - 7:00pm (UK time) Very occasional travel to overseas offices Desirable but not essential: Bachelor's degree in Computer Science, Information Systems preferred, or equivalent work experience. A+ Networking certification (preferred) This role is subject to enhanced compliance and disclosure requirements consistent with those of a financial services organization.
26/07/2026
Full time
Senior IT Service Desk AnalystApplylocations: London, United Kingdomtime type: Full timeposted on: Posted 12 Days Agojob requisition id: R-100214 About Realty Income Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of 15,600 properties in all 50 U.S. states, the UK and six other countries in Europe, with a gross book value $58bn. We are known as "The Monthly Dividend Company" and have a mission to deliver stockholders dependable monthly dividends that grow over time. Since our founding, we have declared 656 consecutive monthly dividends and are a member of the S&P 500 Dividend Aristocrats index, having increased our dividend for the last 30 consecutive years.You will be joining one of the largest Real Estate Investment Trusts in the world as we rapidly expand into the UK and European markets, including moving into new offices at 3 St. James's Square.The European portfolio, including the UK, has experienced consistent growth quarter-on-quarter since our first international acquisition, a £429m 12-property portfolio from Sainsbury's in 2019. In just five years the portfolio now includes investments of over $11bn, and 483 distinct properties.As part of this growth story, you will work with the latest technology to improve our current processes. This opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst developing and broadening your experience and technical skillsets; with dynamic opportunities for career growth as the company expands. Position Overview: Reporting to the Associate Director of European IT, the Senior IT Service Desk Analyst provides end user support while playing a key role across the Infrastructure and IT Operations functions. The role supports end users, maintains workstations, installs and supports hardware and software, delivers user training, and ensures accurate documentation and ticket management within ServiceNow.The role is responsible for software and hardware asset management and lifecycle planning, task automation using endpoint management, configuration, and scripting tools, and the administration of user accounts, groups, and licensing across enterprise identity and productivity platforms. This includes mobile device configuration and management, supporting vulnerability and patch management activities by coordinating remediation, tracking compliance, and ensuring timely updates in line with IT and Security policies.This is an office based role, Monday to Friday, with working hours of 10:00am - 7:00pm (UK time) to support collaboration with US teams and ensure effective ticket handover, escalation, and operational continuity across time zones. Key Responsibilities: Work globally with the IT Service Desk team to respond to and resolve tickets in accordance with the company's SLAs. Provide primary support to end-users, maintain regular communication throughout the ticket lifecycle, and document resolutions through ServiceNow. Provide effective IT support, including out-of-hours support in critical incidents and participation in on-call support. Troubleshoot hardware and software issues both remotely and in person. Work with third-party vendors as necessary to provide a technical resolution - Liaise with 3rd parties, i.e. vendors. Manage the company's mobile phone devices. Collaborate with People Success to streamline employee transitions, including efficient onboarding, IT setup, credentialing, and secure offboarding processes. Assist with the standard installation of our corporate operating systems. Ensure successful deployment of laptops, both remote and physical. Work within the security and compliance requirements guidelines, including GDPR and CPRA. Proactively identify and address technical issues with the IT team. Create, update, and maintain IT end-user documentation in Confluence. Maintain asset inventory, including regular physical stock checks. Perform IT storage room maintenance, which consists of recycling hardware and ensuring the disposal of redundant equipment according to current EU directives/guidelines. Stay current with the industry to evaluate and propose new technologies as required. Manage the IT onboarding and offboarding of employees. Infrastructure & Operations Key Responsibilities: Support vulnerability and patch management, working closely with the Information Security team to remediate findings using centrally managed security and endpoint management platforms, ensuring compliance with security policies and SLAs. Monitor and respond to network security events, collaborating with the Information Security team to investigate and remediate incidents. Manage Windows endpoints through MDM solutions globally via centralised management platforms. Use PowerShell to execute scripts supporting Windows servers and desktops. Support business operational systems, including Azure and Office 365, covering user administration, Exchange mailboxes and distribution lists, and application assignments. Support vendors use of virtual desktop environments, including onboarding, access configuration, ongoing support, and troubleshooting. Manage company mobile phone devices using enterprise mobile device management platforms, including provisioning, configuration, and lifecycle management. Act as a local technical point of contact for infrastructure and network activities, working closely with US Infrastructure and Network teams to support day to day operations, escalation, and cross region coordination. Assist with network infrastructure operations, including troubleshooting connectivity issues, supporting network optimisation initiatives, and validating changes in collaboration with Infrastructure and Operations teams. Maintain network and infrastructure documentation, ensuring configurations, changes, and operational procedures are accurately captured and kept up to date. Support office relocations and office fit out activities, including IT planning, vendor coordination, and on site support to ensure a successful go live. Assist with physical infrastructure and server room operations, including the installation, relocation, and decommissioning of servers and networking equipment. Support network hardware installations, including switches, firewalls, UPS systems, and structured cabling, ensuring alignment with security, resilience, and operational standards. Candidate Requirements Knowledge, Skills, and Abilities Must have for the role: Suitable direct work experience in an Information Technology Service Desk customer-facing capacity working for an investment, professional or financial services company (or similar fast paced environment) While we do not set upper or lower limits of experience for any of our vacancies, candidates with at least 5+ years' IT Service Desk / Infrastructure experience are likely to have the right level of knowledge and experience for this role; strong candidates outside of this range will be considered. Essential demonstratable experience / knowledge of: Microsoft Windows and Office applications. Experience administering and troubleshooting Apple iOS mobile devices. Windows server operating systems and desktops. TCP/IP networking and technologies: DNS, DHCP, LANs, VLANs, VPNs, and Wi-Fi. Implementing and troubleshooting enterprise identity, messaging, and endpoint management platforms within a Microsoft ecosystem. IT ticketing systems, such as ServiceNow, Jira, or Zendesk. SSO technologies. Mobile Device Management (MDM) solutions. Experience with AV conferencing solutions such as MS Teams Room. Experience with enterprise identity and IT service management platforms preferred Critical thinking and problem-solving skills to provide the best support experience. Excellent time management skills; ability to work in a dynamic office environment. Ability to independently manage and prioritise workload and tasks. Ability to work effectively as part of a team while also being able to take initiative independently. Excellent verbal and written communication and presentation skills. Strong focus on customer service and user experience. Office based Monday - Friday with working hours of 10:00am - 7:00pm (UK time) Very occasional travel to overseas offices Desirable but not essential: Bachelor's degree in Computer Science, Information Systems preferred, or equivalent work experience. A+ Networking certification (preferred) This role is subject to enhanced compliance and disclosure requirements consistent with those of a financial services organization.
Advantage Resourcing UK Ltd
Stevenage, Hertfordshire
World Class Defence Organisation based in Stevenage, Hertfordshire is currently looking to recruit a SOC Coordinator subcontractor on an initial 6 month contract. Suitable backgrounds may include: SOC Leadership, SOC Manager, Cyber Security governance and assurance, Information Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Rate: £80.00 per hour Location: Stevenage Hybrid / Remote working: 3-4 days a week on site min, 1-2 remote. Contract: 37 Hours per week Overtime: Hours worked over 37 hours per week will be calculated at 'time and a quarter' Duration: 12 Months (initially and then ongoing and long-term thereafter) IR35 status: Inside IR35 (Umbrella) SOC Coordinator Job Description The SOC is undergoing a period of growth and maturity, with a focus on strengthening governance, improving operational resilience, enhancing monitoring capability in accordance with defence specific compliance requirements such as the DCC. The successful applicant will act as the deputy to the SOC Manager and serve as a key operational and governance lead within the team. Whilst SOC Operations contains technical analysts, engineers and security specialists, this role is primarily focussed on leadership, governance, stakeholder engagement and operational effectiveness. Responsibilities demands of countering the Cyber Threat. Support for the operational functions of the UK SOC. To work with other UK SOC members, including the UK InfoSec Team and the IM Domains. The successful candidate will help coordinate the day-to-day operation of the SOC whilst ensuring governance activities, audits, working groups, recruitment, onboarding, documentation and security improvement activities continue to progress effectively. Coordinate the implementation and maturity of Cyber security capability within DEx UK (Digital Excellence is the IT department) Deputise for the SOC Manager as required Deliver the SOC Security Working Groups across DEx and effectively track remediation and actions Responsible for the effective delivery and resilience of the 24x7 SOC shift rota Support the SOC Manager in the recruitment and onboarding process for all SOC resourcing Work in close collaboration with the Cyber Security Capability Manager Responsible for the responses and support to external requests and auditing of DEx within a cyber security context, such as ISO27001 audits, DCC and CE+ requests, GDPR requests, contractual questionnaires from customer or suppliers Coordinate vetting and access requests within the SOC in collaboration with the Cyber Security Capability Manager Responsible for attending the DEx CAB and ensuring that cyber security and compliance due diligence has taken place as well as reporting into SOC any impacting changes Take responsibility for the implementation of the Group cyber security (SOC) strategy within DEx UK, ensuring gaps and development areas are given assigned action owners To be the official interface of DEx cyber security for UK InfoSec, PCSO, GIMS, Personnel Security and National Cyber Procurement Coordinator Responsible for ensuring that DEx projects are informed of ITHC and pentest requirements prior to acceptance into service in line with policies Responsible for the coordination of any CHECK test or ITHC scoping activity which may impact the SOC Responsible for the creation, review and update of UK SOC documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies - France, Italy, Germany, Spain etc) Skillset/experience required Ideally ISO 27001/CE+ Lead/Auditor DCC Assessor would be ideal if possible Suitable backgrounds may include SOC Leadership, Cyber Security governance and assurance, Information Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Knowledge of SOC functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs and defence security policies / Defence assurance Frameworks (DCC)
26/07/2026
Full time
World Class Defence Organisation based in Stevenage, Hertfordshire is currently looking to recruit a SOC Coordinator subcontractor on an initial 6 month contract. Suitable backgrounds may include: SOC Leadership, SOC Manager, Cyber Security governance and assurance, Information Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Rate: £80.00 per hour Location: Stevenage Hybrid / Remote working: 3-4 days a week on site min, 1-2 remote. Contract: 37 Hours per week Overtime: Hours worked over 37 hours per week will be calculated at 'time and a quarter' Duration: 12 Months (initially and then ongoing and long-term thereafter) IR35 status: Inside IR35 (Umbrella) SOC Coordinator Job Description The SOC is undergoing a period of growth and maturity, with a focus on strengthening governance, improving operational resilience, enhancing monitoring capability in accordance with defence specific compliance requirements such as the DCC. The successful applicant will act as the deputy to the SOC Manager and serve as a key operational and governance lead within the team. Whilst SOC Operations contains technical analysts, engineers and security specialists, this role is primarily focussed on leadership, governance, stakeholder engagement and operational effectiveness. Responsibilities demands of countering the Cyber Threat. Support for the operational functions of the UK SOC. To work with other UK SOC members, including the UK InfoSec Team and the IM Domains. The successful candidate will help coordinate the day-to-day operation of the SOC whilst ensuring governance activities, audits, working groups, recruitment, onboarding, documentation and security improvement activities continue to progress effectively. Coordinate the implementation and maturity of Cyber security capability within DEx UK (Digital Excellence is the IT department) Deputise for the SOC Manager as required Deliver the SOC Security Working Groups across DEx and effectively track remediation and actions Responsible for the effective delivery and resilience of the 24x7 SOC shift rota Support the SOC Manager in the recruitment and onboarding process for all SOC resourcing Work in close collaboration with the Cyber Security Capability Manager Responsible for the responses and support to external requests and auditing of DEx within a cyber security context, such as ISO27001 audits, DCC and CE+ requests, GDPR requests, contractual questionnaires from customer or suppliers Coordinate vetting and access requests within the SOC in collaboration with the Cyber Security Capability Manager Responsible for attending the DEx CAB and ensuring that cyber security and compliance due diligence has taken place as well as reporting into SOC any impacting changes Take responsibility for the implementation of the Group cyber security (SOC) strategy within DEx UK, ensuring gaps and development areas are given assigned action owners To be the official interface of DEx cyber security for UK InfoSec, PCSO, GIMS, Personnel Security and National Cyber Procurement Coordinator Responsible for ensuring that DEx projects are informed of ITHC and pentest requirements prior to acceptance into service in line with policies Responsible for the coordination of any CHECK test or ITHC scoping activity which may impact the SOC Responsible for the creation, review and update of UK SOC documentation and support the delivery of Group policy and frameworks To advise and support the SOC and Vulnerability Management teams on flow management policy, incident response plans and playbooks Work in collaboration with CSC DEx in other Natcos (International Group Companies - France, Italy, Germany, Spain etc) Skillset/experience required Ideally ISO 27001/CE+ Lead/Auditor DCC Assessor would be ideal if possible Suitable backgrounds may include SOC Leadership, Cyber Security governance and assurance, Information Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Knowledge of SOC functions and operating models. Knowledge of Vulnerability management principles Risk management and risk treatment process Audit preparation and evidence gathering Awareness of Incident response processes. Security Policy development and implementation Audit preparation and evidence gathering Stakeholder management Security awareness of modern cyber threats and defensive practices JSPs and defence security policies / Defence assurance Frameworks (DCC)
Skill Band: IT Location: London Type: Permanent Date Posted: 27 Mar 2026 About the Job The Technology Risk team, which is part of the IT department, supports a broad range of applications, infrastructure and databases across London, New York and Asia and provides IT Risk and Control Governance, Identity and Access management and Cybersecurity support across the firm. What you'll be doing The IT Risk Analyst role sits within the IT department and supports the delivery of IT risk and control governance services globally. The role provides support in overseeing the control environment across multiple IT teams and assists in assessing technology risks across key applications, systems, and processes. The analyst will help maintain a clear understanding of the key areas of technology risk and contribute to ongoing monitoring and governance activities. Working closely with members of the Technology Risk team, including Cyber Security, and IT teams, the role supports the identification and tracking of remediation actions to address identified risks. The analyst also assists with the operation of risk governance processes and works collaboratively with colleagues in Operational Risk as well as Internal and External Audit. Support the operation of IT risk governance processes across IT teams including control assessments, risk committees, risk acceptances, risk register, risk remediation and action tracking Assist with the identification, capture and ongoing management of IT risks raised by IT teams including risks arising from vulnerabilities, incidents and formal control assessment activities Work in collaboration with IT teams to support the definition, tracking and monitoring of remediation actions addressing control weaknesses, including actions arising from vulnerability scanning or penetration testing Support application and system control reviews as part of periodic control assurance activities Assist in the production of monthly management information and reporting to support activities within IT risk management Support the provision of technology risk and controls advice to IT teams and liaise with relevant control owners across the bank including Information Security and Business Continuity. Work collaboratively with Operational Risk and Internal and External Audit teams to support assurance and governance activities What you'll need to be successful We're looking for the following skills and experience. If you don't have all of these but think you could be a good fit for the role, get in touch. Professional Qualifications CISA/RiskIT/CISM/CISSP/CSSLP (Desirable) Knowledge of technology risk and control taxonomies and the industry standard frameworks (COBIT, ISO27001, ISO/IEC 27034) Experience working in IT with a risk or controls focus or in an internal audit function specialising in IT Understanding of Software Development Lifecycles (SDLC) and IT General Controls (ITGCs) Excellent relationship management and collaboration skills and ability to provide appropriate challenge to IT colleagues on control design and operation and the tracking of any agreed remediation activities Understanding of audit requirements and ability to provide accurate and timely information to requests Why should you join us? ICBC Standard Bank Plc (ICBCS) is a leading financial markets and commodities bank, driven to deliver the right outcomes for our stakeholders, clients, counterparties and markets. We benefit from a unique Chinese and African parentage and an unrivalled global network and expertise. We're headquartered in London, with operations in Shanghai, Singapore and New York. We're a diverse and close-knit global team. We put people first, giving talented, self-driven professionals the flexibility, rewards and freedom to grow their expertise and realise their potential. Our vison statement, "Be Yourself, Succeed Together" underpins our drive for an open and transparent culture which values difference, enabling everyone to thrive whilst being themselves. We have an active E, D&I forum and we're growing other employee network groups, including for women and neurodiversity. We're committed to the principle of equal opportunities. All applicants will be treated equally and will be considered on their merits and skills without discrimination. What's in it for you? Financial market-based pay based on skills and experience, discretionary annual bonus, pension contribution 10% (employee contribution 5%), travel insurance, life assurance and income replacement insurance. Hybrid working the option to work remotely up to two days per week, depending on the role. Family - 6 months fully paid maternity leave and enhanced shared parental leave. Coaching for family leave returners and access to emergency care via My Family Care. Miscarriage and menopause policies. Wellbeing - private medical insurance, Bike2Work scheme, health and fitness subsidy, holiday exchange and an Employee Assistance Programme. Community paid volunteering leave and Give As You Earn scheme. Vibrant CSR and engagement forums and fundraising for our charity partners. Development a suite of opportunities to build the skills you need to excel in your role If you're excited about becoming part of our team, get in touch. We'd love to hear from you! ICBCS has appointed Robert Walters Outsourcing (RWO) to manage its recruitment process and Preferred Supplier List (PSL). Unsolicited CVs sent directly to ICBCS or its staff from non-PSL agencies will not be accepted and no fees will be paid for such submissions.
26/07/2026
Full time
Skill Band: IT Location: London Type: Permanent Date Posted: 27 Mar 2026 About the Job The Technology Risk team, which is part of the IT department, supports a broad range of applications, infrastructure and databases across London, New York and Asia and provides IT Risk and Control Governance, Identity and Access management and Cybersecurity support across the firm. What you'll be doing The IT Risk Analyst role sits within the IT department and supports the delivery of IT risk and control governance services globally. The role provides support in overseeing the control environment across multiple IT teams and assists in assessing technology risks across key applications, systems, and processes. The analyst will help maintain a clear understanding of the key areas of technology risk and contribute to ongoing monitoring and governance activities. Working closely with members of the Technology Risk team, including Cyber Security, and IT teams, the role supports the identification and tracking of remediation actions to address identified risks. The analyst also assists with the operation of risk governance processes and works collaboratively with colleagues in Operational Risk as well as Internal and External Audit. Support the operation of IT risk governance processes across IT teams including control assessments, risk committees, risk acceptances, risk register, risk remediation and action tracking Assist with the identification, capture and ongoing management of IT risks raised by IT teams including risks arising from vulnerabilities, incidents and formal control assessment activities Work in collaboration with IT teams to support the definition, tracking and monitoring of remediation actions addressing control weaknesses, including actions arising from vulnerability scanning or penetration testing Support application and system control reviews as part of periodic control assurance activities Assist in the production of monthly management information and reporting to support activities within IT risk management Support the provision of technology risk and controls advice to IT teams and liaise with relevant control owners across the bank including Information Security and Business Continuity. Work collaboratively with Operational Risk and Internal and External Audit teams to support assurance and governance activities What you'll need to be successful We're looking for the following skills and experience. If you don't have all of these but think you could be a good fit for the role, get in touch. Professional Qualifications CISA/RiskIT/CISM/CISSP/CSSLP (Desirable) Knowledge of technology risk and control taxonomies and the industry standard frameworks (COBIT, ISO27001, ISO/IEC 27034) Experience working in IT with a risk or controls focus or in an internal audit function specialising in IT Understanding of Software Development Lifecycles (SDLC) and IT General Controls (ITGCs) Excellent relationship management and collaboration skills and ability to provide appropriate challenge to IT colleagues on control design and operation and the tracking of any agreed remediation activities Understanding of audit requirements and ability to provide accurate and timely information to requests Why should you join us? ICBC Standard Bank Plc (ICBCS) is a leading financial markets and commodities bank, driven to deliver the right outcomes for our stakeholders, clients, counterparties and markets. We benefit from a unique Chinese and African parentage and an unrivalled global network and expertise. We're headquartered in London, with operations in Shanghai, Singapore and New York. We're a diverse and close-knit global team. We put people first, giving talented, self-driven professionals the flexibility, rewards and freedom to grow their expertise and realise their potential. Our vison statement, "Be Yourself, Succeed Together" underpins our drive for an open and transparent culture which values difference, enabling everyone to thrive whilst being themselves. We have an active E, D&I forum and we're growing other employee network groups, including for women and neurodiversity. We're committed to the principle of equal opportunities. All applicants will be treated equally and will be considered on their merits and skills without discrimination. What's in it for you? Financial market-based pay based on skills and experience, discretionary annual bonus, pension contribution 10% (employee contribution 5%), travel insurance, life assurance and income replacement insurance. Hybrid working the option to work remotely up to two days per week, depending on the role. Family - 6 months fully paid maternity leave and enhanced shared parental leave. Coaching for family leave returners and access to emergency care via My Family Care. Miscarriage and menopause policies. Wellbeing - private medical insurance, Bike2Work scheme, health and fitness subsidy, holiday exchange and an Employee Assistance Programme. Community paid volunteering leave and Give As You Earn scheme. Vibrant CSR and engagement forums and fundraising for our charity partners. Development a suite of opportunities to build the skills you need to excel in your role If you're excited about becoming part of our team, get in touch. We'd love to hear from you! ICBCS has appointed Robert Walters Outsourcing (RWO) to manage its recruitment process and Preferred Supplier List (PSL). Unsolicited CVs sent directly to ICBCS or its staff from non-PSL agencies will not be accepted and no fees will be paid for such submissions.
About the Role We have an exciting opportunity for a Data Networks Security Analyst to join our IT team. This role involves safeguarding the integrity, performance, and security of Harrods' IT infrastructure on behalf of the business and its stakeholders. The Data Networks Security Analyst will work in close collaboration with the IT Technical Design Authority, providing expert technical support across the organization's data network estate, including LAN, WAN, Wireless, Security, and Software Defined Access (SDA) environments. This role includes on call support on a rota basis. Job Responsibilities Configure, manage, and maintain network security controls, including firewalls, VPNs, proxies, and network segmentation. Conduct regular vulnerability scans and security assessments across network devices and infrastructure, proactively identifying risks and planning/deploying upgrades to maintain agreed security and performance standards. Review, optimise, and fine tune network security rulesets to minimise false positives, enhance threat detection accuracy, and improve overall security posture. Design and deliver fit for purpose network solutions, translating business requirements into robust, secure, and scalable technical architectures. Contribute to the ongoing architecture, design, and enhancement of the network infrastructure. Qualifications Previous experience working within security environments, including Cisco Firepower (FMC, IPS), Checkpoint Firewalling, Web filtering & DNS protection, and Cisco ISE. Strong understanding of wireless networking and Cisco software defined access. Strong communication skills to articulate technical concepts effectively. Good understanding of VPN technologies - DMVPN, VPN. Additional Information Time Type: Permanent Department: IT Service Management
25/07/2026
Full time
About the Role We have an exciting opportunity for a Data Networks Security Analyst to join our IT team. This role involves safeguarding the integrity, performance, and security of Harrods' IT infrastructure on behalf of the business and its stakeholders. The Data Networks Security Analyst will work in close collaboration with the IT Technical Design Authority, providing expert technical support across the organization's data network estate, including LAN, WAN, Wireless, Security, and Software Defined Access (SDA) environments. This role includes on call support on a rota basis. Job Responsibilities Configure, manage, and maintain network security controls, including firewalls, VPNs, proxies, and network segmentation. Conduct regular vulnerability scans and security assessments across network devices and infrastructure, proactively identifying risks and planning/deploying upgrades to maintain agreed security and performance standards. Review, optimise, and fine tune network security rulesets to minimise false positives, enhance threat detection accuracy, and improve overall security posture. Design and deliver fit for purpose network solutions, translating business requirements into robust, secure, and scalable technical architectures. Contribute to the ongoing architecture, design, and enhancement of the network infrastructure. Qualifications Previous experience working within security environments, including Cisco Firepower (FMC, IPS), Checkpoint Firewalling, Web filtering & DNS protection, and Cisco ISE. Strong understanding of wireless networking and Cisco software defined access. Strong communication skills to articulate technical concepts effectively. Good understanding of VPN technologies - DMVPN, VPN. Additional Information Time Type: Permanent Department: IT Service Management
Knight Frank Group is looking for a cybersecurity professional to monitor security events and coordinate incident responses. The ideal candidate will have at least 3 years of relevant experience in security operations, with strong analytical and documentation skills. Familiarity with tools like Microsoft Defender and experience in vulnerability management are essential. This is a great opportunity to work in a dynamic environment focusing on continuous improvement and team collaboration.
25/07/2026
Full time
Knight Frank Group is looking for a cybersecurity professional to monitor security events and coordinate incident responses. The ideal candidate will have at least 3 years of relevant experience in security operations, with strong analytical and documentation skills. Familiarity with tools like Microsoft Defender and experience in vulnerability management are essential. This is a great opportunity to work in a dynamic environment focusing on continuous improvement and team collaboration.
Monitor security event identification via the third-party security operations service. Triage, analyse, and investigate incidents to validate potential threats, anomalies, or policy violations. Coordinate incident response activities including containment, evidence collection, documentation, and recovery support. Contribute to threat hunting activities using KQL queries and intelligence-led techniques. Maintain accurate incident records, ensuring actions and outcomes are logged to a high standard. Facilitate security testing and awareness through threat simulations. Support the triage and processing of data subject rights (DSR) requests, including subject access requests (SARs). Conduct data discovery and collection across systems, ensuring completeness and accuracy. Support DPIA processes through data mapping, evidence gathering, and risk assessment input. Help maintain and tune Microsoft Defender, Sentinel, and Purview policies, analytics rules, alerts, and workflows. Support the development, testing, and maintenance of automated playbooks and response actions (e.g., Logic Apps). Verifying compliance with expected practice in the operation of technology services, including security baseline and access right reviews. Support vulnerability management by tracking remediation, validating fixes, and assisting with reporting. Gather and analyse data to help identify trends, gaps, and areas for control improvement. Assist with periodic control reviews, audits, and compliance checks as required. Prepare operational reports, dashboards, and metrics for the Team Lead and wider stakeholders. Develop and maintain playbooks, runbooks, and procedural documentation. Contribute to continuous improvement activities, including identifying opportunities to streamline operations. Ensure all actions adhere to internal policies, regulatory requirements, and industry best practice. 3+ years' experience working in a security operations, IT security, privacy operations, or related technical role. Familiarity with: + Microsoft Defender XDR + Microsoft Sentinel (SIEM/SOAR) + Privacy Management Solutions (e.g. Purview, OneTrust) Basic understanding of key cybersecurity and privacy concepts, such as: + Threat detection and analysis + Incident response lifecycle + Vulnerability and exposure management + Data privacy principles and data subject rights Experience analysing logs, alerts, or data from security tools Strong documentation, investigation, and analytical skills. Hands on experience writing KQL queries, PowerShell, or CLI commands. Exposure to automation or playbooks (Logic Apps, Defender workflows). Knowledge of frameworks such as MITRE ATT&CK or NIST CSF. Relevant certifications such as: + SC 900, SC 200 (or working toward), AZ 900, AZ 500 + CISSP, CIPP/E, CompTIA Security Foundation level data privacy certifications (e.g., BCS Certificate in Data Protection) Strong problem solving ability and attention to detail. Curious and proactive mindset with willingness to learn. Effective communicator able to document findings clearly and concisely. Highly organised and able to manage multiple tasks with competing priorities. Collaborative team player with a commitment to continuous improvement. Monitor security event identification via the third-party security operations service. Triage, analyse, and investigate incidents to validate potential threats, anomalies, or policy violations. Coordinate incident response activities including containment, evidence collection, documentation, and recovery support. Contribute to threat hunting activities using KQL queries and intelligence-led techniques. Maintain accurate incident records, ensuring actions and outcomes are logged to a high standard. Facilitate security testing and awareness through threat simulations. Support the triage and processing of data subject rights (DSR) requests, including subject access requests (SARs). Conduct data discovery and collection across systems, ensuring completeness and accuracy. Support DPIA processes through data mapping, evidence gathering, and risk assessment input. Help maintain and tune Microsoft Defender, Sentinel, and Purview policies, analytics rules, alerts, and workflows. Support the development, testing, and maintenance of automated playbooks and response actions (e.g., Logic Apps). Verifying compliance with expected practice in the operation of technology services, including security baseline and access right reviews. Support vulnerability management by tracking remediation, validating fixes, and assisting with reporting. Gather and analyse data to help identify trends, gaps, and areas for control improvement. Assist with periodic control reviews, audits, and compliance checks as required. Prepare operational reports, dashboards, and metrics for the Team Lead and wider stakeholders. Develop and maintain playbooks, runbooks, and procedural documentation. Contribute to continuous improvement activities, including identifying opportunities to streamline operations. Ensure all actions adhere to internal policies, regulatory requirements, and industry best practice. 3+ years' experience working in a security operations, IT security, privacy operations, or related technical role. Familiarity with: + Microsoft Defender XDR + Microsoft Sentinel (SIEM/SOAR) + Privacy Management Solutions (e.g. Purview, OneTrust) Basic understanding of key cybersecurity and privacy concepts, such as: + Threat detection and analysis + Incident response lifecycle + Vulnerability and exposure management + Data privacy principles and data subject rights Experience analysing logs, alerts, or data from security tools. Strong documentation, investigation, and analytical skills. Hands on experience writing KQL queries, PowerShell, or CLI commands. Exposure to automation or playbooks (Logic Apps, Defender workflows). Knowledge of frameworks such as MITRE ATT&CK or NIST CSF. Relevant certifications such as: + SC 900, SC 200 (or working toward), AZ 900, AZ 500 + CISSP, CIPP/E, CompTIA Security Foundation level data privacy certifications (e.g., BCS Certificate in Data Protection) Strong problem solving ability and attention to detail. Curious and proactive mindset with willingness to learn. Effective communicator able to document findings clearly and concisely. Highly organised and able to manage multiple tasks with competing priorities. Collaborative team player with a commitment to continuous improvement. Ability to work with sensitive data responsibly and confidentially.
25/07/2026
Full time
Monitor security event identification via the third-party security operations service. Triage, analyse, and investigate incidents to validate potential threats, anomalies, or policy violations. Coordinate incident response activities including containment, evidence collection, documentation, and recovery support. Contribute to threat hunting activities using KQL queries and intelligence-led techniques. Maintain accurate incident records, ensuring actions and outcomes are logged to a high standard. Facilitate security testing and awareness through threat simulations. Support the triage and processing of data subject rights (DSR) requests, including subject access requests (SARs). Conduct data discovery and collection across systems, ensuring completeness and accuracy. Support DPIA processes through data mapping, evidence gathering, and risk assessment input. Help maintain and tune Microsoft Defender, Sentinel, and Purview policies, analytics rules, alerts, and workflows. Support the development, testing, and maintenance of automated playbooks and response actions (e.g., Logic Apps). Verifying compliance with expected practice in the operation of technology services, including security baseline and access right reviews. Support vulnerability management by tracking remediation, validating fixes, and assisting with reporting. Gather and analyse data to help identify trends, gaps, and areas for control improvement. Assist with periodic control reviews, audits, and compliance checks as required. Prepare operational reports, dashboards, and metrics for the Team Lead and wider stakeholders. Develop and maintain playbooks, runbooks, and procedural documentation. Contribute to continuous improvement activities, including identifying opportunities to streamline operations. Ensure all actions adhere to internal policies, regulatory requirements, and industry best practice. 3+ years' experience working in a security operations, IT security, privacy operations, or related technical role. Familiarity with: + Microsoft Defender XDR + Microsoft Sentinel (SIEM/SOAR) + Privacy Management Solutions (e.g. Purview, OneTrust) Basic understanding of key cybersecurity and privacy concepts, such as: + Threat detection and analysis + Incident response lifecycle + Vulnerability and exposure management + Data privacy principles and data subject rights Experience analysing logs, alerts, or data from security tools Strong documentation, investigation, and analytical skills. Hands on experience writing KQL queries, PowerShell, or CLI commands. Exposure to automation or playbooks (Logic Apps, Defender workflows). Knowledge of frameworks such as MITRE ATT&CK or NIST CSF. Relevant certifications such as: + SC 900, SC 200 (or working toward), AZ 900, AZ 500 + CISSP, CIPP/E, CompTIA Security Foundation level data privacy certifications (e.g., BCS Certificate in Data Protection) Strong problem solving ability and attention to detail. Curious and proactive mindset with willingness to learn. Effective communicator able to document findings clearly and concisely. Highly organised and able to manage multiple tasks with competing priorities. Collaborative team player with a commitment to continuous improvement. Monitor security event identification via the third-party security operations service. Triage, analyse, and investigate incidents to validate potential threats, anomalies, or policy violations. Coordinate incident response activities including containment, evidence collection, documentation, and recovery support. Contribute to threat hunting activities using KQL queries and intelligence-led techniques. Maintain accurate incident records, ensuring actions and outcomes are logged to a high standard. Facilitate security testing and awareness through threat simulations. Support the triage and processing of data subject rights (DSR) requests, including subject access requests (SARs). Conduct data discovery and collection across systems, ensuring completeness and accuracy. Support DPIA processes through data mapping, evidence gathering, and risk assessment input. Help maintain and tune Microsoft Defender, Sentinel, and Purview policies, analytics rules, alerts, and workflows. Support the development, testing, and maintenance of automated playbooks and response actions (e.g., Logic Apps). Verifying compliance with expected practice in the operation of technology services, including security baseline and access right reviews. Support vulnerability management by tracking remediation, validating fixes, and assisting with reporting. Gather and analyse data to help identify trends, gaps, and areas for control improvement. Assist with periodic control reviews, audits, and compliance checks as required. Prepare operational reports, dashboards, and metrics for the Team Lead and wider stakeholders. Develop and maintain playbooks, runbooks, and procedural documentation. Contribute to continuous improvement activities, including identifying opportunities to streamline operations. Ensure all actions adhere to internal policies, regulatory requirements, and industry best practice. 3+ years' experience working in a security operations, IT security, privacy operations, or related technical role. Familiarity with: + Microsoft Defender XDR + Microsoft Sentinel (SIEM/SOAR) + Privacy Management Solutions (e.g. Purview, OneTrust) Basic understanding of key cybersecurity and privacy concepts, such as: + Threat detection and analysis + Incident response lifecycle + Vulnerability and exposure management + Data privacy principles and data subject rights Experience analysing logs, alerts, or data from security tools. Strong documentation, investigation, and analytical skills. Hands on experience writing KQL queries, PowerShell, or CLI commands. Exposure to automation or playbooks (Logic Apps, Defender workflows). Knowledge of frameworks such as MITRE ATT&CK or NIST CSF. Relevant certifications such as: + SC 900, SC 200 (or working toward), AZ 900, AZ 500 + CISSP, CIPP/E, CompTIA Security Foundation level data privacy certifications (e.g., BCS Certificate in Data Protection) Strong problem solving ability and attention to detail. Curious and proactive mindset with willingness to learn. Effective communicator able to document findings clearly and concisely. Highly organised and able to manage multiple tasks with competing priorities. Collaborative team player with a commitment to continuous improvement. Ability to work with sensitive data responsibly and confidentially.
Yolk Recruitment Ltd is seeking a proactive Security Analyst in Cardiff, offering hybrid working and excellent benefits. The role focuses on protecting a professional services organisation by monitoring threats, investigating incidents and improving security controls with Microsoft security technologies. You'll join a collaborative Technology team, contributing to incident response, vulnerability management and security policy development while staying current with evolving cyber threats and
25/07/2026
Full time
Yolk Recruitment Ltd is seeking a proactive Security Analyst in Cardiff, offering hybrid working and excellent benefits. The role focuses on protecting a professional services organisation by monitoring threats, investigating incidents and improving security controls with Microsoft security technologies. You'll join a collaborative Technology team, contributing to incident response, vulnerability management and security policy development while staying current with evolving cyber threats and
We are looking for a Senior Network & Security Analyst to join our team. With a strong network engineering background, you will also need experience within cyber security, with a strong knowledge of Palo Alto and project based work. An opportunity to fully own your daily duties and tasks, push yourself daily and really be a SME in your field. This role offers a competitive salary and benefits package plus additional payments for operational on-call and overtime opportunities. The role in a nutshell To provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business requirements and objectives. To complete projects on time, within scope and to budget. About the Department The Business Technology Solutions (BTS) department are responsible for delivering end-to-end business technology and change through their four key functions of Governance, Projects & Change, Delivery and Technical Operations. They look after both TFSUK and KINTO UK. The mission of BTS is to Give (giving the business the technology, applications and services it needs), Guide (guiding the business through changes using expertise and experience) and Guard (always protect the business). What you'll be doing Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business. Manage day to day operational cyber security tasks to maintain optimum business security. Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches. Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi Fi ensuring they support the business goals and infrastructure. Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable. Working on cyber security projects or those that require security input, including the rollout of new security measures across the business. Monitor SIEM tools and data feeds for threats and take appropriate action when required. Install and operate firewall and data encryption software to protect sensitive business information. Support the technical implementation of ongoing security requirements, including access control and technical audits. Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security. Analyse and identify potential threats to fine tune the existing security monitoring platforms. Create, maintain, and review security policies and controls across the business, in line with business needs. Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements Research current and developing cyber security products and standards. Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to ensure high levels of security are maintained. Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities. Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business. Create and maintain system documentation including documentation sufficient for someone else to cover in your absence Participate in the development, testing and maintenance of disaster recovery and business continuity plans Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology Effectively manage small works requests in line with defined procedures Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided Provide specialised technical assistance in the planning and development of new projects and systems Ensure that IT equipment inventory information is entered and maintained How you could stretch this role Demonstrate a flexible approach to working hours and travel, and work closely with other members of IT, to meet with support and project deadlines. Participate in IT Strategy reviews as required Suggest improvements to the department's processes and procedures (where appropriate), encouraging a work culture of continuous improvement. Involvement in ad hoc projects. Support, coach and assist other team members and advise on new preventative measures and fixes. Communicate with other teams to resolve escalated issues quickly and efficiently. Identify any potential problem areas and devise methods of prevention Ensure housekeeping and maintenance routines are executed when required Key Experience & Skills Essential Experience Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Attributes & Behaviours Good time management and organisational skills. Strong written and verbal communication, including confidence in presenting. Self motivated and proactive worker. Keen attention to detail. Able to work effectively with all levels of staff and external partners. Professional attitude and motivation by producing quality results Methodical and structured approach to work At Toyota Financial Services (TFS) it is more than just an externally benchmarked salary and bonus, we also offer: Hybrid working pattern is 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (and your family) for Toyota & Lexus cars Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services Employee Assistance Program Eye tests Onsite gym, Sports and Social Club, & flu jabs to keep you healthy Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work Eco HQ, free parking & restaurant Two volunteering days per year Reward gateway voucher discounts Flexible working scheme and we welcome flexible working conversations at interview Regular 121s with your manager, a personal development review (PReview) each quarter A wide range of learning & development opportunities including Linked In Learning courses £250 contribution towards you learning something new outside of work Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! Equal Employment Opportunity We are a Disability Confident Employer and welcome all applicants to request accommodations during the recruitment process.
25/07/2026
Full time
We are looking for a Senior Network & Security Analyst to join our team. With a strong network engineering background, you will also need experience within cyber security, with a strong knowledge of Palo Alto and project based work. An opportunity to fully own your daily duties and tasks, push yourself daily and really be a SME in your field. This role offers a competitive salary and benefits package plus additional payments for operational on-call and overtime opportunities. The role in a nutshell To provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business requirements and objectives. To complete projects on time, within scope and to budget. About the Department The Business Technology Solutions (BTS) department are responsible for delivering end-to-end business technology and change through their four key functions of Governance, Projects & Change, Delivery and Technical Operations. They look after both TFSUK and KINTO UK. The mission of BTS is to Give (giving the business the technology, applications and services it needs), Guide (guiding the business through changes using expertise and experience) and Guard (always protect the business). What you'll be doing Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business. Manage day to day operational cyber security tasks to maintain optimum business security. Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches. Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi Fi ensuring they support the business goals and infrastructure. Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable. Working on cyber security projects or those that require security input, including the rollout of new security measures across the business. Monitor SIEM tools and data feeds for threats and take appropriate action when required. Install and operate firewall and data encryption software to protect sensitive business information. Support the technical implementation of ongoing security requirements, including access control and technical audits. Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security. Analyse and identify potential threats to fine tune the existing security monitoring platforms. Create, maintain, and review security policies and controls across the business, in line with business needs. Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements Research current and developing cyber security products and standards. Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to ensure high levels of security are maintained. Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities. Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business. Create and maintain system documentation including documentation sufficient for someone else to cover in your absence Participate in the development, testing and maintenance of disaster recovery and business continuity plans Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology Effectively manage small works requests in line with defined procedures Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided Provide specialised technical assistance in the planning and development of new projects and systems Ensure that IT equipment inventory information is entered and maintained How you could stretch this role Demonstrate a flexible approach to working hours and travel, and work closely with other members of IT, to meet with support and project deadlines. Participate in IT Strategy reviews as required Suggest improvements to the department's processes and procedures (where appropriate), encouraging a work culture of continuous improvement. Involvement in ad hoc projects. Support, coach and assist other team members and advise on new preventative measures and fixes. Communicate with other teams to resolve escalated issues quickly and efficiently. Identify any potential problem areas and devise methods of prevention Ensure housekeeping and maintenance routines are executed when required Key Experience & Skills Essential Experience Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Attributes & Behaviours Good time management and organisational skills. Strong written and verbal communication, including confidence in presenting. Self motivated and proactive worker. Keen attention to detail. Able to work effectively with all levels of staff and external partners. Professional attitude and motivation by producing quality results Methodical and structured approach to work At Toyota Financial Services (TFS) it is more than just an externally benchmarked salary and bonus, we also offer: Hybrid working pattern is 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (and your family) for Toyota & Lexus cars Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services Employee Assistance Program Eye tests Onsite gym, Sports and Social Club, & flu jabs to keep you healthy Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work Eco HQ, free parking & restaurant Two volunteering days per year Reward gateway voucher discounts Flexible working scheme and we welcome flexible working conversations at interview Regular 121s with your manager, a personal development review (PReview) each quarter A wide range of learning & development opportunities including Linked In Learning courses £250 contribution towards you learning something new outside of work Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! Equal Employment Opportunity We are a Disability Confident Employer and welcome all applicants to request accommodations during the recruitment process.
Role: Technical Assurance Officer Contract: Permanent, Full-time Salary: £40,000 - £48,000 per annum (depending on experience and skills), with a discretionary annual 5% bonus Location: Stockbridge House, Newcastle upon Tyne (NE1 2HJ) Please note: This is a single vacancy available across multiple office locations (Datchet, Newcastle and Swansea). Please submit only one application and select the location that is most convenient for you. Hours: 40 hours per week, Monday to Friday (8:00am-5:00pm or 9:00am-6:00pm) Hybrid working About us In a world where change is constant,ArvatoConnect stands at the forefront of innovation. We partner with forward-thinking organisations to reshape and reinvent how they connect with their customers. By delivering cutting-edge, technology-driven solutions, we create exceptional experiences that foster stronger connections, enhance loyalty, and drive growth. Future shapers. Experience makers About the Role: We're looking for a Technical Assurance Officer to join our Information Security, Assurance and Resilience team. In this role, you'll be responsible for providing operational assurance across technical security controls, helping to ensure our infrastructure, cloud platforms, applications and endpoints remain secure, compliant and resilient. You'll play a key role in maintaining and improving our security posture by identifying risks, vulnerabilities and non-compliance issues, while supporting the effective operation of our Information Security Management System (ISMS). Working closely with technical teams, product owners and security colleagues, you'll help embed security-by-design principles throughout the lifecycle of our products and services. The role also includes oversight of day-to-day SOC activity, supporting incident response, vulnerability management and technical assurance activities. You'll provide evidence-based assurance to support ISO 27001, ISO 27017, Cyber Essentials Plus and client security requirements, while contributing to the continual improvement of our security controls and ways of working. This opportunity is ideal for someone with experience in information security, technical assurance or SOC operations, who can combine strong technical knowledge with excellent stakeholder management skills and a pragmatic, risk-based approach to security. What you'll do: Provide ongoing assurance of technical security controls across infrastructure, cloud platforms, applications and endpoints. Manage and support SOC Analysts, overseeing monitoring, alerting and incident response activities. Act as a technical lead during security incidents and investigations. Support the operation and continual improvement of the Information Security Management System (ISMS). Coordinate vulnerability management activities, including risk assessment, remediation planning and tracking. Conduct threat modelling and use data-driven insights to support security decision-making. Work closely with Design, Infrastructure and Application teams to embed security-by-design principles. Collaborate with Governance, Risk and Compliance teams to implement effective technical controls. Monitor emerging threats and ensure appropriate mitigations are implemented. What you'll bring to the table: Experience in information security, assurance and resilience in BPO or Customer Experience (CX) environments. Proven ownership of controls supporting an ISO 27001, ISO 27017, CE+ certified ISMS and UK regulatory expectations. Strong knowledge of security architecture, SOC operations, and modern security tooling. Experience of incident management frameworks. Excellent stakeholder management and communication skills. Relevant certifications and cloud security and compliance expertise are desirable but on-going training will be provided. Minimum Criteria: Experience in Information Security, Technical Assurance, SOC Operations or a related security discipline. Strong verbal and written communication skills, with the ability to engage with a range of stakeholders Excellent attention to detail and the ability to follow agreed processes to deliver consistent, compliant outcomes Ability to work with integrity, independence and professionalism A flexible approach to working hours and the ability to operate effectively in a fast-paced environment. SC Clearance or willing to undergo national security vetting. Candidates must have resided in the UK for a minimum of 5 years to meet clearance eligibility requirements. Benefits Include: Generous Holiday Entitlement 25 days of annual leave plus 8 bank holidays, with the option to purchase up to 5 additional days. Flexible Enhanced Family Leave Pay - We offer eligible employees the option to spread their enhanced maternity, adoption, or shared parental leave pay evenly across their leave period. This means you can avoid months without pay at the end of your leave, giving you greater financial stability and peace of mind while you focus on your family. Pension Scheme 4% employee contribution matched. Life Insurance Cover of 4 x your basic annual salary. Health and Wellbeing Support Access to a 24/7 online GP, mental health services, fitness programmes and more, available to you and your immediate family. On-site gym & restaurant Exclusive Discounts and Offers Enjoy savings with leading brands via our MyRewards programme, including retailers such as Apple, John Lewis, and M&S. Vodafone Discount Receive up to 15% off pay monthly plans for you and up to five friends or family members. Offers include access to the latest handsets and are available to new Vodafone customers or existing customers at the end of their contract. Security Clearance Requirements: This role is subject to full BPSS (Baseline Personnel Security Standard) screening and Security Check (SC) Clearance. Candidates must either hold SC Clearance or be eligible to obtain it. To meet SC Clearance eligibility requirements, candidates must have resided in the UK continuously for a minimum of 5 years. Diversity & Inclusion Statement: It's our differences that makes our organisation stronger, and we work to ensure that all our colleagues' voices are heard and that their aspirations are nurtured in a culture where people can grow and be 100% themselves every day, no matter their age, sex, gender, disability, ethnicity, sexuality, neurodiversity, or religion. Not only are we a Disability Confident Committed Employer, but we also believe in continuously strengthening our female talent, standing with the LGBTQI+ community and celebrating our multicultural workforce.
25/07/2026
Full time
Role: Technical Assurance Officer Contract: Permanent, Full-time Salary: £40,000 - £48,000 per annum (depending on experience and skills), with a discretionary annual 5% bonus Location: Stockbridge House, Newcastle upon Tyne (NE1 2HJ) Please note: This is a single vacancy available across multiple office locations (Datchet, Newcastle and Swansea). Please submit only one application and select the location that is most convenient for you. Hours: 40 hours per week, Monday to Friday (8:00am-5:00pm or 9:00am-6:00pm) Hybrid working About us In a world where change is constant,ArvatoConnect stands at the forefront of innovation. We partner with forward-thinking organisations to reshape and reinvent how they connect with their customers. By delivering cutting-edge, technology-driven solutions, we create exceptional experiences that foster stronger connections, enhance loyalty, and drive growth. Future shapers. Experience makers About the Role: We're looking for a Technical Assurance Officer to join our Information Security, Assurance and Resilience team. In this role, you'll be responsible for providing operational assurance across technical security controls, helping to ensure our infrastructure, cloud platforms, applications and endpoints remain secure, compliant and resilient. You'll play a key role in maintaining and improving our security posture by identifying risks, vulnerabilities and non-compliance issues, while supporting the effective operation of our Information Security Management System (ISMS). Working closely with technical teams, product owners and security colleagues, you'll help embed security-by-design principles throughout the lifecycle of our products and services. The role also includes oversight of day-to-day SOC activity, supporting incident response, vulnerability management and technical assurance activities. You'll provide evidence-based assurance to support ISO 27001, ISO 27017, Cyber Essentials Plus and client security requirements, while contributing to the continual improvement of our security controls and ways of working. This opportunity is ideal for someone with experience in information security, technical assurance or SOC operations, who can combine strong technical knowledge with excellent stakeholder management skills and a pragmatic, risk-based approach to security. What you'll do: Provide ongoing assurance of technical security controls across infrastructure, cloud platforms, applications and endpoints. Manage and support SOC Analysts, overseeing monitoring, alerting and incident response activities. Act as a technical lead during security incidents and investigations. Support the operation and continual improvement of the Information Security Management System (ISMS). Coordinate vulnerability management activities, including risk assessment, remediation planning and tracking. Conduct threat modelling and use data-driven insights to support security decision-making. Work closely with Design, Infrastructure and Application teams to embed security-by-design principles. Collaborate with Governance, Risk and Compliance teams to implement effective technical controls. Monitor emerging threats and ensure appropriate mitigations are implemented. What you'll bring to the table: Experience in information security, assurance and resilience in BPO or Customer Experience (CX) environments. Proven ownership of controls supporting an ISO 27001, ISO 27017, CE+ certified ISMS and UK regulatory expectations. Strong knowledge of security architecture, SOC operations, and modern security tooling. Experience of incident management frameworks. Excellent stakeholder management and communication skills. Relevant certifications and cloud security and compliance expertise are desirable but on-going training will be provided. Minimum Criteria: Experience in Information Security, Technical Assurance, SOC Operations or a related security discipline. Strong verbal and written communication skills, with the ability to engage with a range of stakeholders Excellent attention to detail and the ability to follow agreed processes to deliver consistent, compliant outcomes Ability to work with integrity, independence and professionalism A flexible approach to working hours and the ability to operate effectively in a fast-paced environment. SC Clearance or willing to undergo national security vetting. Candidates must have resided in the UK for a minimum of 5 years to meet clearance eligibility requirements. Benefits Include: Generous Holiday Entitlement 25 days of annual leave plus 8 bank holidays, with the option to purchase up to 5 additional days. Flexible Enhanced Family Leave Pay - We offer eligible employees the option to spread their enhanced maternity, adoption, or shared parental leave pay evenly across their leave period. This means you can avoid months without pay at the end of your leave, giving you greater financial stability and peace of mind while you focus on your family. Pension Scheme 4% employee contribution matched. Life Insurance Cover of 4 x your basic annual salary. Health and Wellbeing Support Access to a 24/7 online GP, mental health services, fitness programmes and more, available to you and your immediate family. On-site gym & restaurant Exclusive Discounts and Offers Enjoy savings with leading brands via our MyRewards programme, including retailers such as Apple, John Lewis, and M&S. Vodafone Discount Receive up to 15% off pay monthly plans for you and up to five friends or family members. Offers include access to the latest handsets and are available to new Vodafone customers or existing customers at the end of their contract. Security Clearance Requirements: This role is subject to full BPSS (Baseline Personnel Security Standard) screening and Security Check (SC) Clearance. Candidates must either hold SC Clearance or be eligible to obtain it. To meet SC Clearance eligibility requirements, candidates must have resided in the UK continuously for a minimum of 5 years. Diversity & Inclusion Statement: It's our differences that makes our organisation stronger, and we work to ensure that all our colleagues' voices are heard and that their aspirations are nurtured in a culture where people can grow and be 100% themselves every day, no matter their age, sex, gender, disability, ethnicity, sexuality, neurodiversity, or religion. Not only are we a Disability Confident Committed Employer, but we also believe in continuously strengthening our female talent, standing with the LGBTQI+ community and celebrating our multicultural workforce.
About LRQA LRQA stands for dedication to clients, market firsts, and deep expertise in risk management. We've grown to become a leading global assurance provider, bringing together outstanding expertise in certification, customised assurance, cybersecurity, inspection and training. While we're proud of our heritage, it's who we are today that really matters, because that's what shapes who we and our clients can become tomorrow. By staying true to our shared values and combining decades of collective experience, we support our clients in building a safer and more sustainable future. LRQA currently operates across 50 countries, has more than 2,500 colleagues, generates £315m in revenue, and supports more than 60,000 clients across a diverse range of sectors and markets. NOTE: This role is for the LRQA internal team, not part of the LRQA Nettitude Managed Services Team. Position: Cyber Security Analyst We are seeking a Cyber Security Analyst to join our Security Operations team within an expanding and dynamic Information Security function. The successful candidate will report to the Head of Security Operations and monitor our telemetry systems across networks, servers, and endpoints and respond to security threats. At LRQA we use an offensive security mindset. This means we focus on what hackers do, how they do it, and how we can prevent and protect the business. As a security analyst working for LRQA you will be a part of our growing information security team, who all share a passion for technical security challenges. You will work on a variety of different technical assignments within the security domain and work within a team that shares affinity and experience for security technology. Essential Qualifications Experience in operating a Microsoft Defender security tooling stack. Reviewing alerts, vulnerabilities, investigating incidents, and tuning our detection stack for optimal performance. Microsoft SC-200 Certified. Come from a penetration testing or security operations background and understand common attack techniques against Windows AD/AAD environments. A keen eye for detail and making sure that our processes and procedures are documented, appropriate, and practiced. Be calm under pressure and operating as the point of contact for security incidents, collaborating on our response and remediation work. Not be afraid to learn new tooling or technologies. A growth mindset is key to being successful with us. A keen eye for optimising existing security tooling and an aversion to buying unnecessary tools and technologies. A great understanding of attacker Tactics, Techniques, and Procedures (TTPs). You don't need to be a threat intelligence expert, but you should have some background in reviewing and understanding threat intelligence reporting. Be comfortable being a solo contributor, and being able to thrive working either on your own or across our team. Great creativity, imagination, and commitment for reducing security risks. Desirable Qualifications Experience with Microsoft Sentinel and Zscaler security products. Hold Microsoft SC-300, SC-400 and/or SC-900. Experience and/or certifications in offensive security, such as OSCP, eCPPT, or experience on platforms such as HackTheBox or TryHackMe. Strong familiarity with tooling such as EDR, CSPM, PAM, NGFW, vulnerability management, and mail filtering. Location This role is hybrid based within the UK, with a mixture of Home and Office based working for collaboration, team building and workshops. We can support working from across the UK. All applicants will require residence in the UK. Working Pattern This role will require you to work alternating early, mid and late shift patterns of no more than contracted 7.5 hours per day to cover a 12-hour working day across the team.
25/07/2026
Full time
About LRQA LRQA stands for dedication to clients, market firsts, and deep expertise in risk management. We've grown to become a leading global assurance provider, bringing together outstanding expertise in certification, customised assurance, cybersecurity, inspection and training. While we're proud of our heritage, it's who we are today that really matters, because that's what shapes who we and our clients can become tomorrow. By staying true to our shared values and combining decades of collective experience, we support our clients in building a safer and more sustainable future. LRQA currently operates across 50 countries, has more than 2,500 colleagues, generates £315m in revenue, and supports more than 60,000 clients across a diverse range of sectors and markets. NOTE: This role is for the LRQA internal team, not part of the LRQA Nettitude Managed Services Team. Position: Cyber Security Analyst We are seeking a Cyber Security Analyst to join our Security Operations team within an expanding and dynamic Information Security function. The successful candidate will report to the Head of Security Operations and monitor our telemetry systems across networks, servers, and endpoints and respond to security threats. At LRQA we use an offensive security mindset. This means we focus on what hackers do, how they do it, and how we can prevent and protect the business. As a security analyst working for LRQA you will be a part of our growing information security team, who all share a passion for technical security challenges. You will work on a variety of different technical assignments within the security domain and work within a team that shares affinity and experience for security technology. Essential Qualifications Experience in operating a Microsoft Defender security tooling stack. Reviewing alerts, vulnerabilities, investigating incidents, and tuning our detection stack for optimal performance. Microsoft SC-200 Certified. Come from a penetration testing or security operations background and understand common attack techniques against Windows AD/AAD environments. A keen eye for detail and making sure that our processes and procedures are documented, appropriate, and practiced. Be calm under pressure and operating as the point of contact for security incidents, collaborating on our response and remediation work. Not be afraid to learn new tooling or technologies. A growth mindset is key to being successful with us. A keen eye for optimising existing security tooling and an aversion to buying unnecessary tools and technologies. A great understanding of attacker Tactics, Techniques, and Procedures (TTPs). You don't need to be a threat intelligence expert, but you should have some background in reviewing and understanding threat intelligence reporting. Be comfortable being a solo contributor, and being able to thrive working either on your own or across our team. Great creativity, imagination, and commitment for reducing security risks. Desirable Qualifications Experience with Microsoft Sentinel and Zscaler security products. Hold Microsoft SC-300, SC-400 and/or SC-900. Experience and/or certifications in offensive security, such as OSCP, eCPPT, or experience on platforms such as HackTheBox or TryHackMe. Strong familiarity with tooling such as EDR, CSPM, PAM, NGFW, vulnerability management, and mail filtering. Location This role is hybrid based within the UK, with a mixture of Home and Office based working for collaboration, team building and workshops. We can support working from across the UK. All applicants will require residence in the UK. Working Pattern This role will require you to work alternating early, mid and late shift patterns of no more than contracted 7.5 hours per day to cover a 12-hour working day across the team.
