166 jobs found

About the opportunity Launch your cyber security career with Netcom Training s government-funded Cyber Security course. Gain practical skills in threat intelligence, vulnerability testing and incident response, developing the technical knowledge needed to protect IT systems and prepare for security roles. Earn a Level 3 NCFE Certificate in Cyber Security Practices through practical online workshops. Course Details Duration: 14 weeks Format: Online, practical workshops Schedule: Monday-Thursday, 6-9pm Qualification: NCFE Certificate in Cyber Security Practices (Level 3) What you ll learn Cyber Principles: Understand core frameworks and cyber security principles. Threat Intelligence: Identify risks and analyse threats to IT systems. Vulnerability Testing: Conduct security testing, identify vulnerabilities and implement controls. Incident Response: Learn how to prepare for and respond to cyber security incidents. Ethics & Law: Understand relevant legislation and ethical conduct within the cyber security sector. Career Pathway Successful participants are positioned for technical roles such as Trainee Cyber Security Analyst, SOC Analyst or Junior Information Security Officer. You ll be introduced to our hiring partner to maximise your chances of landing a role, with previous learners progressing into cyber security and IT support positions. Price: £0 This is a fully government-funded course - there are no fees to pay. To be eligible, you must: Live in the West Midlands . Be aged 19 or over . Earn below the gross annual wage cap of £34,194 . Not currently be undertaking other government-funded training. Have lived in the UK/EU for the last three years and have the right to work in the UK. Student and Graduate visas are not eligible.

Snr IT Security Analyst/Engineer London, £70 - 82,500 + Financial Benefits + Bonus Snr IT Security Analyst/Engineer is required for this medium sized financial trading company, to act as a senior technical contributor within the global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security. Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls. Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Design, build and deploy small tools, scripts, dashboards or automations to improve operations. Support integration of tooling into workflows, reporting and incident response processes. Maintain practical knowledge of Microsoft 365, Azure/Entra ID and Microsoft security controls, supporting improvements with the primary platform owners. Use automation and AI-enabled workflows responsibly to accelerate analysis, documentation, query development and repetitive operational tasks.

Cyber Security Analyst Up to c. 50,000 per annum DoE + Benefits Permanent Hybrid - 3 days on-site Leeds About the Role I'm working with a large Leeds-based organisation that is looking for a Cyber Security Analyst to help protect its data and systems. Working closely with the cyber leadership and wider IT teams, you'll support the development and operation of security controls, respond to ongoing threats, manage vulnerabilities and help maintain a secure global technology environment. Key Responsibilities Develop and maintain a range of cyber security solutions and controls. Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required. Maintain vulnerability and remediation records to support audit compliance and protect IT assets. Work with IT teams across the organisation to secure new, existing and legacy infrastructure. Define, implement, maintain and improve security measures, policies and controls. Support cyber incident response, including communications with internal stakeholders, customers and suppliers. Work with third parties to ensure systems are patched, hardened and remediated appropriately. Create and maintain security processes, procedures and support documentation. What We're Looking For Experience working with Microsoft Azure and Microsoft security technologies such as Sentinel, Defender for Endpoint, Defender for Servers, Defender for Cloud Apps, Intune, Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup technologies. Understanding of security principles including ISMS, risk assessment, the CIA triad, attack vectors, cryptography and incident response practices such as triage and chain of custody. Strong analytical, troubleshooting and problem-solving skills, with the ability to identify patterns and trends in technical data. Good stakeholder management and communication skills, with the ability to work independently and under pressure. Security+, SSCP, Network+, a computing or cyber security degree, or a similar qualification would be advantageous. What's on Offer Up to circa 50,000 DoE Good pension and company-related benefits Professional development within an established international organisation. What to do now If you're interested in this role, click 'apply now' to send us your CV, or contact us for a confidential discussion. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)

HM76: Cyber Security Analyst Location: London 60% onsite Salary: Competitive Day Rate Contract until 31/03/2027 IR35: In Scope Overview: First Military Recruitment are currently seeking a Cyber Security Analyst Designer on behalf of one of our clients. The successful candidate will support our clients Cyber and Information Security function. Their mission is to secure digital and information assets against misuse and enable the secure delivery of the department s mission. They do this by developing, operating and governing the cyber and information security controls which protect our nationwide internal IT infrastructure, and high-profile citizen-facing digital services. This role is within the Cyber Defence team, which is responsible for understanding, detecting and responding to cyber threats and vulnerabilities impacting our client. This role is responsible for supporting their alert triage and incident response capability. Our client encourages applications from ex-military personnel however all candidates will be given due consideration. Duties and Responsibilities: Triage and investigate cyber security alerts and reports from users. Use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents. Support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions. Support the coordination of cyber incidents. Contribute to post-incident reviews to identify lessons and actions. Identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability. Work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities. Contribute to internal plans, playbooks and knowledge base articles. Act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts. Be responsible for line management of apprentice security analysts. Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join. Skills and Qualifications: Experience investigating and responding to cyber incidents. Experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents. Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent SIEM tool is acceptable). An understanding of the tools, techniques and procedures commonly used by threat actors. Good analytical and problem-solving skills. Good verbal and written communication skills. Active SC clearance. At least 2-3 years experience in a position of Cyber Security Analyst. Working experience of M365 (Microsoft Defender / Sentinel / KQL). Desirable: Experience with Splunk. Experience working in an Agile environment. Experience with cloud environments such as AWS.

This position focuses on cyber incident investigation, remediation, and operational security improvement. Be the escalation point of the external MSSP. This is a 1 year FTC role with high potential to extend. Client Details Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. Description Investigate and respond to security incidents escalated through the Security Operations function. Perform detailed security event analysis and identifying potential threats or areas requiring further investigation. Work closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Perform hands-on remediation and provide recommendations to improve security controls and reduce risk. Conduct security reviews of systems, infrastructure, and operational processes. Drive continuous security improvements. Contributing to the development and implementation of operational security controls and procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation and hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities.

Position: Cyber Security Analyst Location: Abingdon Salary: 37k-45k Benefits 25+ Days Holiday and rising (plus bank holidays) Flexible working (WFH incentives) Bupa Cash Plan Electric Vehicle Scheme Cycle Scheme Discounted Gym Membership Paid Charity Day Car Parking Overview: The Security Administrator is responsible for the hands-on operation and improvement of the MSP's security services across internal and client environments. The role investigates threats, responds to security escalations, improves security posture, supports tenant hardening and helps translate findings into practical remediation actions. The role acts as a technical security escalation point for Service Desk, Infrastructure, Account Managers and clients, supporting QSRs, vulnerability management, exception handling and security improvement activity. Key Responsibilities: Security Operations: Monitor and investigate alerts across Microsoft 365, Sophos and other security platforms used across internal and client environments. Investigate security incidents Support containment, remediation and recovery activity for security incidents. Escalate significant incidents Support Major Incident response activity. Maintain security documentations. Contribute to continuous improvement of the MSP's internal security posture through remediation support, control implementation and evidence gathering. Vulnerability & Patch Management: Review vulnerability scan results. Validate findings and identify false positives. Track remediation activities. Work with Service Desk and Infrastructure teams to reduce risk exposure. Produce regular vulnerability posture reporting. Microsoft 365 Security: Review Microsoft Secure Score, Defender, Entra ID, Intune and Conditional Access recommendations. Support implementation of Microsoft 365 security improvements across internal and client environments. Investigate Microsoft 365 security alerts, identity risks and configuration issues. Assist with MFA, Conditional Access, Defender, Intune and endpoint security initiatives. Key Skills & Attributes: Threat Investigation Security Improvement Delivery Escalation Judgement Evidence & Documentation Discipline Service Desk Enablement. Client Advisory Support Operational Ownership Prioritisation Under Pressure Pragmatic Security Mindset Continuous Learning Person Specification: Experience working in an MSP, multi-client technical support, infrastructure or security administrator role. Practical experience using security platforms to investigate alerts, respond to issues and improve security posture, including Microsoft 365 security tooling and Sophos. Experience investigating security incidents, suspicious activity, phishing, malware, account compromise or similar security scenarios. Experience supporting security hardening, configuration improvement, vulnerability management, patching, remediation tracking or control implementation. Strong troubleshooting skills across user, endpoint, identity, email, cloud and client configuration scenarios. Strong curiosity and initiative, with the ability to investigate unclear security issues, pull on technical threads and follow them through to practical outcomes. Ability to communicate technical risks clearly to Service Desk, Infrastructure, Account Managers and clients. Strong documentation skills, including evidence gathering, investigation notes, exceptions, remediation records and review dates. INDIT Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer. By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information. Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application. Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.

Senior Cyber Security Analyst Glasgow Hybrid (2DPW in office) Competitive Salary Working Hours: 7am 4pm VIQU are partnering with a leading global professional services organisation seeking a Senior Cyber Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring junior analysts, and collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause analysis, containment, and remediation Implement, maintain, and optimise security controls across infrastructure, applications, and endpoints Conduct vulnerability assessments, security testing, and reviews to identify and address security weaknesses Act as a technical SME, mentoring junior analysts and supporting BAU security operations Collaborate with IT and infrastructure teams to strengthen security practices and organisational resilience Maintain security documentation in line with ISO 27001 and monitor performance against KPIs and SLAs Key Experience Required of the Senior Cyber Security Analyst: Proven experience in a Senior Cyber Security Analyst, Security Operations Analyst, or equivalent technical security role Strong hands-on experience with SIEM technologies, threat detection, security monitoring, and incident response Experience with security technologies including firewalls, endpoint detection and response (EDR), DLP, and vulnerability management tools Demonstrable experience investigating complex security incidents and implementing remediation measures Strong understanding of security frameworks, risk management, and ISO 27001 Previous experience acting as a technical SME, mentoring analysts, and supporting BAU security operations Familiarity with ITSM and delivery tools such as ServiceNow, Cherwell, Jira, or Azure DevOps Excellent stakeholder management skills and experience collaborating across global teams Relevant certifications such as CompTIA Security+, CySA+, or CISSP are desirable Apply now to speak with VIQU IT in confidence, or reach out to Katie Dark via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.

Security Analyst (SOC Liaison) Contract Length: 6 Months (End of October Start) Day Rate: 550- 600 per day Inside IR35 Location: UK-Based Remote/Hybrid Working Overview We are seeking an experienced Security Analyst (SOC Liaison) to join a leading organisation on an initial 6-month contract. This role will act as the key interface between the managed Security Operations Centre (SOC) provider, internal security teams, and wider business stakeholders. The successful contractor will support security monitoring, incident management, threat analysis, and the ongoing improvement of security operations processes. This is an excellent opportunity for a hands-on security professional with strong stakeholder engagement skills and experience working within modern SOC environments. Key Responsibilities Manage and coordinate security alerts and escalations from the managed SOC provider. Investigate, triage, and track security incidents through to resolution. Support the investigation, containment, remediation, and post-incident review of security events. Analyse threat intelligence and provide contextual insight into threats relevant to the organisation. Assess security risks associated with new applications, software deployments, and browser extensions. Maintain accurate incident records, operational documentation, playbooks, and standard operating procedures (SOPs). Collaborate with internal teams and third-party security providers to enhance detection and response capabilities. Support ITIL-aligned incident, problem, and change management processes. Contribute to the continuous improvement of security operations, monitoring, and response practices. Essential Skills & Experience 2-3+ years' experience working in a Security Operations Centre (SOC) Analyst or Security Operations role. Hands-on experience with SIEM, EDR, and MDR technologies. Experience with security tooling such as CrowdStrike , Microsoft Defender , or similar platforms. Proven experience investigating and responding to cyber security incidents. Good understanding of the MITRE ATT&CK framework and contemporary cyber threat landscapes. Experience managing security incidents within a corporate or enterprise environment. Strong analytical, problem-solving, and incident management skills. Excellent communication and stakeholder management abilities. Desirable Experience Experience working alongside or managing relationships with outsourced/managed SOC providers. Knowledge of threat intelligence processes and threat-hunting techniques. Exposure to regulated or complex enterprise environments. Understanding of security governance, risk management, and compliance frameworks.

Cyber Security Analyst 2-month contract Remote/London Inside of IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft Purview, eDiscovery, DSAR and DLP . Experience with CrowdStrike (managing alerts) Experience with Netskope or similar (Site reviews and unblocking) Good understanding of SOC / Security Operations and BAU security processes. Key Responsibilities of the Cyber Security Analyst: Monitor, triage and investigate Rapid7 and SIEM alerts , including managing and reducing an existing alert backlog. Perform security investigations , analysing events and identifying potential threats or suspicious activity. Support vulnerability management using Rapid7, including reviewing, prioritising and investigating vulnerabilities. Monitor and investigate security events through SIEM tooling , escalating incidents where appropriate. Manage Mimecast security operations, including email reviews, releasing quarantined messages, whitelisting and sandboxing. Support Microsoft Purview activities including eDiscovery, DSARs and DLP . Manage Netskope requests, including site reviews and URL unblocking. Monitor and triage CrowdStrike alerts. Provide administrative support for Security DDQs and wider information security requests. Maintain appropriate investigation records and security documentation. The Cyber Security Analyst is required to be onsite 1 day a week in Central London. Apply now to speak with VIQU IT in confidence. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.

Are you ready to defend a Council's digital infrastructure against evolving cyber threats? Braintree District Council has an exciting ICT Security Analyst opportunity! Location: Braintree, Essex, CM7 9HB Salary: 37,896 to 41,541 per annum Job Type: Full-time Closing Date: Midnight on 26th October 2026 About Us: Braintree is an ambitious and dynamic Council and is becoming one of the fastest growing Districts in the East of England with three growing towns, London just 45 minutes away and the district located directly between the international transport centres of Stansted Airport and Harwich and Felixstowe International Ports. We have a deserved track record for delivering and a strong reputation within the business community. Braintree District Council is a great place to work. We pride ourselves on our creative and innovative approach, which is led by our employees, and are committed to having an engaged workforce who understand our strategy and how they can help deliver it. Our people see the difference they make and how the work they do actively contributes to and encourages positive change in the local community. ICT Security Analyst - The Role: This is a varied, hands-on role at the heart of our cyber security response. You will be the first point of contact for ICT security issues, identifying, investigating and responding to threats while strengthening the controls that protect our systems, networks and data. Your responsibilities will span security monitoring, risk review, incident response and liaison with local and national partners. You will also contribute to the wider ICT service, including Microsoft 365 administration, infrastructure updates, network monitoring and user support, all within ITIL and change management frameworks. ICT Security Analyst - Key Responsibilities: - Monitor security systems, identify and investigate cyber threats, and respond to incidents while maintaining clear documentation and up-to-date incident response procedures - Design, implement, maintain and monitor security measures across systems and networks, including firewalls, intrusion detection, anti-virus, authentication, log management and content filtering - Deliver cyber security awareness and training to employees and Councillors, plus support regular security testing and reviews - Contribute to Microsoft 365 administration, infrastructure and application updates, network monitoring and service requests with excellent customer service ICT Security Analyst - You: - Hold a Level 5 qualification in Cyber Security or equivalent professional experience - Have experience managing and supporting security technologies with sound understanding of network and operating system security - Are curious, methodical and proactive with excellent attention to detail and the ability to communicate technical risks clearly to non-technical audiences Benefits: - Flexible and hybrid working arrangements available, with a minimum of 2-3 office days per week - Local government pension scheme - Learning and development for all employees - Employee discounts at local businesses - Employee recognition schemes - Extensive health and wellbeing programmes, including discounted gym membership Closing Date: Midnight on 26th October 2026 Interviews will take place on 16th November 2026 Please note that although this vacancy is advertised here, no application is ever submitted through this site. To protect your personal information, you can visit the Braintree District Council website directly and click 'Join our team', then apply via the 'Current Vacancies' link. Alternatively, click Apply today and you'll be redirected straight to the role on our website, where you can complete your application for this exciting ICT Security Analyst opportunity!

Drax Group is seeking an OT Cyber Security Analyst to monitor and secure OT/ICS/SCADA systems across UK assets. The role supports generation assets and involves travel to sites around the UK about 30% of the time. Hybrid work is available with 3 days on site at Drax Power Station Selby or Glasgow. Ideal candidates will combine OT awareness with cyber tooling experience (SIEM/EDR/IDS) and a solid grounding in networking, firewalls, and IEC 62443/NIS CAF frameworks.

We're recruiting a Senior Cloud Security Trust Analyst for a global AI Technology vendor. They support central UK government and regulated customers providing enterprise security design and implementation . This role combines technical cloud security knowledge with customer management, helping customers understand how their environments are protected and how security risks are being addressed. You'll work closely with a small portfolio of customers, leading security discussions and translating information between their technical stakeholders and internal security, engineering and architecture teams. You'll need the confidence to explain cloud architectures, challenge technical responses and discuss vulnerabilities, controls and remediation plans. Your responsibilities will include: Delivering regular customer security reviews, covering vulnerabilities, remediation progress and changes affecting security. Explaining cloud security controls and responding to technical questions, security questionnaires and assurance requests. Coordinating evidence, audit findings and security documentation with internal teams, tracking actions through to resolution. The role offers ongoing customer relationships and exposure to complex cloud environments, with the opportunity to shape how security information is communicated and delivered. You'll bring experience in customer-facing security consulting or technical security assurance , supported by a strong understanding of AWS environments . Your knowledge should cover network security, access controls, vulnerability management, containers and how security tools fit within a wider architecture. You'll also be comfortable interpreting frameworks and audit evidence such as ISO 27001 and SOC 2 . You should be able to hold credible conversations with security engineers and architects, then turn those discussions into clear customer advice and practical actions. Experience supporting government or regulated customers would be particularly useful. Senior Technical Cloud Security Analyst Up to 100,000 Southampton or London Hybrid - two days per week onsite Applicants must hold UK citizenship and be eligible to obtain and maintain SC clearance. Apply with your CV to find out more. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.

Job Title: Security Technical Analyst / Security Consulting Practitioner Location: London, Birmingham, or Sheffield (Hybrid: 3 days per week in-office) Contract Duration: 6 months About the Role We are seeking an experienced Security Consulting Practitioner to guide clients on their business protection journey by shaping security strategies, designing robust solutions, and strengthening cyber resilience. This is a dynamic role that blends strategic advisory with hands-on operational cyber support, perfect for a subject matter expert who excels at cross-functional collaboration and complex problem-solving. Key Responsibilities Strategy & Consulting: Develop and refine security strategies that align seamlessly with business objectives and emerging cyber threats. Solution Design & Implementation: Lead the design of innovative security solutions and provide actionable recommendations to stakeholders. Security Operations: Deliver hands-on support for control deployment, vulnerability tracking, technical issue analysis, and technology assessments. Analysis & Reporting: Conduct thorough security analysis, control reviews, and operational engineering support across various technology platforms. Team Leadership: Act as a subject matter expert to manage team performance, take responsibility for key decisions, and foster continuous improvement by sharing best practices. Required Skills & Experience Advanced proficiency (P3) in Cybersecurity Fundamentals. Demonstrated expertise in Security Strategy & Planning and Security Solution Development. Solid capability in Project Management (P2 - Intermediate). Strong analytical skills with the ability to navigate and resolve complex security challenges. How to Apply If you are a proactive security professional looking to make a significant impact on cyber resilience, we want to hear from you! Please submit your CV outlining your relevant experience. Randstad Technologies is acting as an Employment Business in relation to this vacancy.

About Ricoh A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant , are listed in the Global 100 Most Sustainable Companies , and have been named one of Forbes' World's Best Employers 2025 . At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future. Find your place. Transform your future Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful. People transform when they Love What They Do This belief sits at the heart of The Ricoh Promise. It guides how we recruit, how we support our people, and how we work together every day, creating an environment where you can grow, feel valued and make a difference. When you join us, you are encouraged to share your ideas, challenge the way things are done, and work with others to build something better. If you are looking for a place where your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh. What you will be doing We're looking for an IT Security Governance, Risk & Controls Analyst to help strengthen the security, governance and resilience of our European IT environment. This is an exciting opportunity for someone who enjoys working across security governance, technology risk and controls , helping organisations understand their security posture and make informed decisions about risk. Working closely with infrastructure, cloud, identity and operational IT teams, you'll help develop and embed security policies, standards and controls, manage technology risks and support assurance activities across the European IT landscape. You'll be someone who can take security frameworks and requirements and turn them into practical, effective controls - while building strong relationships with technical teams and senior stakeholders along the way. If you enjoy improving security maturity, challenging the status quo and helping teams manage risk in a practical way, we'd love to hear from you. Key Responsibilities Include: Develop, maintain and embed IT security policies, standards, procedures and control requirements . Support the development and continuous improvement of the IT security governance and control framework . Own and maintain the IT Security Risk Register , ensuring risks are appropriately assessed, documented, monitored and managed. Facilitate technology and security risk assessments , working with technical teams to identify risks and agree appropriate mitigation plans. Assess the effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement . Translate security frameworks and requirements, including ISO 27001 and NIST CSF , into practical operational controls. Support audit, assurance and compliance activities , including ISO 27001, Cyber Essentials and internal control programmes. Work with technology teams to ensure security controls are understood, implemented and operating effectively. Provide clear reporting and insight on security risks, control effectiveness, compliance and remediation activity . Track remediation actions and work with stakeholders to ensure identified risks and control gaps are addressed. Support the continuous improvement of security governance, risk and control processes across the European IT function. Build strong relationships with technical and business stakeholders, acting as a trusted partner on security risk and governance matters. You will ideally have You'll have experience working in IT Security, Information Security Governance, IT Risk, Security Controls, GRC or a similar environment , with a strong understanding of how security governance operates within a complex organisation. Ideally, you'll bring: Experience in IT Security, Security Governance, IT Risk, GRC or Security Controls . Experience developing and maintaining security policies, standards, procedures and control frameworks . Strong understanding of security governance and risk management principles . Experience conducting or supporting technology/security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such as ISO 27001 and NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding of key IT security disciplines including vulnerability management, patching, identity and access management, privileged access management and backup governance . Experience supporting internal or external audits, assurance reviews and compliance programmes . Strong analytical and problem-solving skills, with the ability to understand complex risks and translate them into practical actions. Excellent communication and stakeholder management skills, with confidence engaging with both technical teams and senior leadership. A proactive approach to improving security maturity, governance and control effectiveness . Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer or similar would be advantageous. In return for your commitment, you can expect At Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh Promise shapes your experience through four pillars that bring our culture to life. Love to Connect You become part of a global community built on openness, inclusion and genuine collaboration. Across teams, countries and roles, you'll find people who listen, involve and encourage you - helping you feel valued and able to be yourself every day. Love to Grow Your development truly matters to us. With access to learning pathways, mentoring and career opportunities across functions and countries, you'll be supported to stretch your skills, explore new directions and stay future-ready in a changing world. Love to Give Back Purpose is part of how we work. You'll have opportunities to make a difference through volunteering, sustainability initiatives and community programmes that reflect our shared values and commitment to positive impact. Love to Succeed Success at Ricoh is something we pursue together. You'll benefit from fair rewards, flexible working, wellbeing resources and real recognition - including programmes such as the Imagine. Change. Awards, where colleagues celebrate each other's achievements. We are an equal opportunities employer We believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process. If you require any reasonable adjustments at any stage of the recruitment journey, please let us know and we will support you to bring your best self forward. Ready to love what you do? Apply now and help us shape what comes next.

Contract Business Analyst - Must be Security Cleared - Hybrid Bristol - £550 outside IR35 - 3 months initially Exalto consulting are currently recruiting for a contract business analyst, this is to start immediately on a project, outside IR35, hybrid working in Bristol, initial 3 month contract, you must hold current valid and transferrable Security Clearance Typical Technical experience Modelling & Design: BPMN 2.0, UML, service blueprinting, capability modelling. Automation & AI Tools including Low-code/no-code, tools for BA tasks, and platform-embedded AI. Analytics & Documentation Tools: Miro, Figma, Visio, Lucidchart, Power BI, Excel. Delivery & Collaboration: Jira, Azure DevOps, Confluence, MS Teams, SharePoint, PowerPoint. Platforms: ServiceNow, Halo, and other modern ESM platforms. Experience Profile Demonstrable experience in operating model definition and implementation. Consulting or change heavy environment experience. Contribution to strategic deliverables (strategies, business cases, operating models). If you have the above experience and are looking for a new contract role, please send your CV for immediate consideration as our client are looking to hire ASAP Contract Business Analyst - Must be Security Cleared - Hybrid Bristol - £550 outside IR35 - 3 months initially

Security Incident Management Analyst (x3) Onsite in Inverness or Preston 450 per day (negotiable) inside ir35 6 months duration Active SC clearance We are looking for Security Incident Management Analysts to join a major secure programme, supporting the governance and coordination of security incidents across a complex multi-supplier / SIAM environment . This is a governance and coordination role rather than a hands-on SOC position . You will work across suppliers and security stakeholders to ensure incidents are effectively tracked, escalated, reported and evidenced. Key responsibilities: Track security incidents from identification through to closure Coordinate incident updates across multiple suppliers Monitor SLAs, resolution performance and escalation trends Produce incident reports, dashboards and governance packs Identify gaps in supplier reporting, ownership and evidence Support incident governance and operational review forums Maintain accurate, traceable and audit-ready incident records Support assurance, audit and continuous improvement activities We're looking for: Experience in security incident management, cyber security, IT service management or operational governance Good understanding of incident lifecycle, severity classifications and escalation processes Strong supplier/stakeholder coordination and reporting skills Experience within SIAM or multi-supplier environments is highly desirable ITIL Incident Management knowledge would be beneficial Government, defence or regulated-sector experience is advantageous Active SC clearance is essential Please note: This is not a SOC Analyst or hands-on incident response role. You will not be responsible for threat hunting, SOC monitoring or technical remediation. If this role is of interest, apply now or email your CV to me directly at (url removed)

About Ricoh A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant , are listed in the Global 100 Most Sustainable Companies , and have been named one of Forbes' World's Best Employers 2025 . At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future. Find your place. Transform your future Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful. People transform when they Love What They Do This belief sits at the heart of The Ricoh Promise. It guides how we recruit, how we support our people, and how we work together every day, creating an environment where you can grow, feel valued and make a difference. When you join us, you are encouraged to share your ideas, challenge the way things are done, and work with others to build something better. If you are looking for a place where your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh. What you will be doing At Ricoh, we're looking for an IT Security Compliance & Reporting Analyst to help strengthen the security, governance and resilience of our European IT environment. This is a great opportunity for someone who enjoys working at the intersection of IT security, compliance, risk and data . You'll play a key role in turning security requirements and frameworks into practical controls, meaningful reporting and actionable insight that helps our technology teams and leadership make better security decisions. Working across infrastructure, cloud, identity and operational IT teams, you'll help us understand where we are performing well, where risks exist and where we need to improve. You'll also have the opportunity to influence how we mature our security governance and compliance approach across Europe. If you're analytical, naturally curious and enjoy working with stakeholders to turn complex security requirements into clear, practical actions, we'd love to hear from you. Key Responsibilities Include: Develop and maintain IT security policies, standards and control requirements , ensuring they remain aligned with business and security needs. Build and maintain security compliance dashboards and reporting , using tools such as Power BI to turn data into meaningful insight. Monitor, measure and report on IT security compliance across key technology and operational domains. Own and maintain the IT Security Risk Register , ensuring risks are clearly documented, assessed and actively managed. Facilitate security and technology risk assessments , working with technical teams to identify appropriate and practical mitigation plans. Support audit, assurance and compliance activities , including ISO 27001, Cyber Essentials and internal control programmes. Translate security frameworks and regulatory requirements into practical, operational standards and controls . Analyse security and compliance data to identify trends, gaps and areas requiring attention. Produce clear reporting and insight for senior technology and business stakeholders . Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function. Partner with technical teams to help embed a culture of security, accountability and continuous improvement. You will ideally have You'll have experience working in IT Security, Information Security Governance, IT Risk, Security Compliance or a similar environment , with the ability to work confidently across both technical and business teams. Ideally, you'll bring: Experience in IT Security, IT Risk, Security Governance or Security Compliance . Experience developing and maintaining security policies, standards, controls and governance documentation . A strong understanding of security frameworks such as ISO 27001 and NIST CSF . Experience producing security compliance reporting, MI or dashboards , ideally using Power BI. Experience managing or supporting IT/security risk registers and risk assessments . An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance . The ability to analyse complex information and turn it into clear, actionable insight . Strong communication and stakeholder management skills, with the confidence to engage with both technical specialists and senior stakeholders. A proactive approach to identifying gaps, risks and opportunities for improvement . Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer would be advantageous. In return for your commitment, you can expect At Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh Promise shapes your experience through four pillars that bring our culture to life. Love to Connect You become part of a global community built on openness, inclusion and genuine collaboration. Across teams, countries and roles, you'll find people who listen, involve and encourage you - helping you feel valued and able to be yourself every day. Love to Grow Your development truly matters to us. With access to learning pathways, mentoring and career opportunities across functions and countries, you'll be supported to stretch your skills, explore new directions and stay future-ready in a changing world. Love to Give Back Purpose is part of how we work. You'll have opportunities to make a difference through volunteering, sustainability initiatives and community programmes that reflect our shared values and commitment to positive impact. Love to Succeed Success at Ricoh is something we pursue together. You'll benefit from fair rewards, flexible working, wellbeing resources and real recognition - including programmes such as the Imagine. Change. Awards, where colleagues celebrate each other's achievements. We are an equal opportunities employer We believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process. If you require any reasonable adjustments at any stage of the recruitment journey, please let us know and we will support you to bring your best self forward. Ready to love what you do? Apply now and help us shape what comes next.

Our client, a leading organisation in the construction and infrastructure sector, is seeking a permanent AI Agent Developer to support the delivery and adoption of Microsoft Copilot and AI agent solutions. This role is suited to an AI enablement specialist with practical Copilot delivery experience who can combine technical implementation with stakeholder engagement, governance and continuous improvement. This opportunity would suit an early-to-mid career AI professional with hands-on delivery experience, initiative and curiosity. The successful applicant will be comfortable working in a fast-changing technology environment and motivated to help shape and mature enterprise AI capability within the construction and infrastructure sector. Apply now to take the next step in developing practical AI solutions that make a lasting difference across the business. Key Responsibilities: Design, configure, deploy and maintain AI agents using Microsoft Copilot Studio and related Microsoft technologies Work with business stakeholders to understand requirements and translate them into practical AI solutions Develop and maintain high-quality solution documentation, design standards and reusable templates Support the creation of AI agent development lifecycle processes covering design, testing, deployment and support Help establish governance, quality standards and controls for AI agent development Monitor agent performance, usage and operational costs, identifying opportunities for improvement Deliver demonstrations, knowledge-sharing sessions and training to support AI adoption across the business Provide ongoing support and continuous improvement for deployed agents while collaborating with solution architects, developers, business analysts and subject matter experts Job Requirements: Practical experience building, configuring or supporting AI agents, copilots, chatbots or automation solutions Experience with Microsoft Copilot Studio, Microsoft 365 and Azure services Understanding of prompt engineering and conversational design principles Strong documentation, communication and stakeholder engagement skills Ability to gather requirements and work directly with non-technical business users Experience following structured delivery methodologies and governance processes Strong analytical and problem-solving abilities, with the capacity to manage multiple priorities Knowledge of Azure AI Services, Azure OpenAI, REST APIs, system integrations or Microsoft Power Platform would be beneficial Additional Skills: Understanding of data security, compliance and enterprise AI governance Experience defining development standards, templates or scalable delivery frameworks Familiarity with Microsoft Dynamics 365 Experience delivering training, mentoring or community engagement activities Ability to balance technical delivery with stakeholder engagement and clear documentation What Success Looks Like: Reliable AI agents are delivered and adopted effectively across the business Consistent standards, templates and documentation are established Agent deployment becomes repeatable, supportable and scalable AI usage, governance and operational costs are effectively managed Business users feel confident requesting and using AI solutions