1338 jobs found

Position Overview Operational resilience is a mandatory requirement across EMEA. Regulators across EMEA have now set enforceable standards, with the focus shifting from framework building to evidence of compliance, testing, and third party oversight. In order to support this evolution, the Operational Risk and Resilience team are hiring a dedicated Resilience Manager who will be based in the London office. You will serve two key purposes: firstly, as a key liaison across local and global business functions on risk and resilience matters, and secondly, to provide core support for the execution of the operational risk and resilience frameworks in accordance with best practice guidance and regulatory requirements. The role will also include the identification and management of operational and resilience risks and issues, as well as the development of solutions and re engineering of processes to avoid future control and process weaknesses. You will be required to challenge and coordinate front to back business management, as well as collaboration with risk, support and control colleagues across the global firm. The role will require regular board and senior management engagement. Primary Responsibilities Operational Resilience Managing and maintaining the resilience policies and procedures, such as operational resilience policy, self assessment document, digital resilience strategy, ICT risk management framework. Enhancing the operational resilience programme in line with global regulations, which includes collection of key risk indicators and reporting to the Board. Undertake the annual refresh of the important business services, resource mapping, and the impact tolerance statements. Conduct scenario testing for the operational resilience important business services. Investigate BCP and technology related operational risk events, ensuring root cause analysis and control assessments, including deep dive reviews on significant and complex events. Identify vulnerabilities from the important business services mapping and scenario testing, raise issues and associated actions, notifying responsible owners and providing sufficient oversight to ensure the issue is managed to completion. Maintain and develop the BCP and resilience system, Fusion. Act as subject matter expert for all resilience matters, including upcoming regulatory changes. Undertake the review of FCA resilience regulatory changes. Run global resilience projects across all Neuberger entities. Provide resilience reporting to the EMEA risk and compliance committee, and relevant boards. Business Continuity Managing and maintaining the business continuity policy and procedures (including the business continuity plans), such as business continuity policy, business continuity executive group response plan. Implement a Business Impact Analysis (BIA) programme that meets all necessary regulatory requirements. Creation and maintenance of business continuity plans across locations and functions. Undertake and develop the business continuity testing programme and, where appropriate, the Neuberger Group. Coordinate and run the global and regional business continuity tabletop exercises, in conjunction with technology teams. Management of business continuity incidents, ensuring the appropriate response and communications are taken. Ensure all key stakeholders, including business continuity coordinators, are trained on their business continuity responsibilities. Coordinate and oversee the third party due diligence processes undertaken by the senior relationship managers, including the creation of bespoke questionnaires. ICT Risk Governance Oversight of the ICT risk framework, partnering with the first line IT risk function, including annual refresh of the critical and important functions (DORA). Chair of the ICT risk governance committee, providing input and challenge. Input into the DORA incident reporting and register of information process. Partner with the information security team to ensure effective cyber security resilience. Key Requirements / Qualifications University degree in a related and relevant subject is required. Demonstrative experience in an asset / investment management firm as a member of operational/IT risk, BCP, resilience or internal audit team (2 5 years minimum). Ability to develop strong relationships with key stakeholders and delegates across the organization. Attention to detail, ability to work to competing deadlines, and a solutions focused approach. Strong organisational, communication and time management skills are essential. Team player with strong work ethic and positive attitude. Excellent time management, organisational skills, and attention to detail. Strong oral and written communication skills. Strong project management skills. Ability to present to boards and senior management. Track record of working with senior staff. Ability to educate and influence. Applicants must be authorised and have the right to work in the country where the role is located without the need for current or future sponsorship. Neuberger is an equal opportunity employer. The firm and its affiliates do not discriminate in employment because of race, creed, national origin, religion, age, colour, sex, marital status, sexual orientation, gender identity, disability, citizenship status or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

As a Product Manager in Cybersecurity & Technology Controls, you will lead the end-to-end product lifecycle for a blockchain detection and prevention capability serving our SOC. You will translate SOC needs into a prioritized roadmap and backlog, partner closely with engineering and threat SMEs, and ensure detections are accurate, explainable, and operationally effective. Success means improving time-to-detect and time-to-respond while managing false positives and meeting reliability and resiliency expectations. Job Responsibilities Define product vision, strategy, and roadmap for SOC-focused blockchain detection and prevention Lead discovery with SOC analysts and incident responders: workflows, pain points, alert usability, escalation paths, and runbooks Own and refine the backlog: detection use cases, requirements, acceptance criteria, and prioritization tradeoffs Partner with engineering/threat teams to deliver end-to-end capability: signal ingestion, enrichment, alerting, triage experience, and response automation where appropriate Establish and track success metrics (e.g., precision/false positive rate, coverage, latency, time-to-detect/time-to-respond, alert volume, reliability/SLA) and drive continuous improvement Drive launch readiness: documentation, training, operational handoffs, and feedback loops with the SOC Required Qualifications, Capabilities, and Skills Product management experience delivering security detections, SOC tooling, or data/analytics products Strong understanding of SOC operations (alert lifecycle, triage, escalations, incident response) Background in blockchain fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization

Overview The role Willis Re is a technology led reinsurance broker built on a cloud native, modular and data driven platform. As the Technology Head of AI & Emerging Tech, you will own the overall technology strategy and roadmap for AI, automation and next generation capabilities. As a member of the technology leadership team, you will turn innovation into scaled capabilities across broking, placement, analytics, and client servicing-balancing speed with safety, and experimentation with operational excellence. You will partner closely with the Product Manager, Brokers and business leaders to design simple and scalable solutions and move them from pilot to production with clear accountability. Operating in a hybrid delivery model, you will set standards, govern risk and ensure alignment to global architectures and security requirements, while enabling regional flexibility where needed. Key Responsibilities Define and own the technology strategy for AI, aligned to business priorities; translate value propositions into a roadmap. Lead delivery of AI solutions across pricing support, submission triage, document and market data extraction, client insight, workflow automation and co pilot experiences for employees. Establish responsible AI governance and controls in partnership with Cyber, Data Protection and Legal, covering model risk, data privacy, transparency, human in the loop and auditing. Build the target operating model for AI engineering and MLOps, including model lifecycle management, monitoring, incident response, versioning and cost/performance optimisation. Set global standards for AI platforms, toolchains and integration patterns; ensure interoperability with enterprise data platforms and adherence to security and compliance requirements. Drive rapid experimentation with clear exit criteria; scale successful pilots into reliable, maintainable services using automated testing, observability and release practices. Develop and manage strategic vendor and partner relationships, balancing build vs. buy decisions and negotiating commercial and risk terms that protect value. Provide executive level communication and storytelling on technology strategy, risks and outcomes; partner effectively with Product Managers, Brokers and clients to shape solutions that fit market workflows. Assist Product Managers to ensure solutions land successfully with business teams. Maintain horizon scanning and technology assessment, identifying pragmatic opportunities to introduce new capabilities that enhance agility and global scalability. About you You are a business minded technology leader who turns AI and advanced technology into practical capabilities. You combine strategic clarity with hands on depth, moving comfortably from business conversation to solution design and delivery oversight, and you anchor decisions in risk and value. You thrive in a start up environment and are comfortable operating beyond your usual remit to get things done-partnering with business, engineers and regional leaders to unblock delivery and drive adoption. You communicate crisply with business leaders, make trade offs explicit and hold clear ownership for outcomes. Skills and experience Significant experience leading digital transformation, with proven delivery of AI, automation and emerging technology in complex, cloud first environments. Proven capability to architect end to end solutions as well as deliver them, from reference architectures and integration patterns through to production rollout and adoption. Proven delivery of AI/ML and GenAI solutions in production, including document intelligence, NLP, search/summary, recommendation, decision support and workflow automation. Strong grasp of responsible AI, security and compliance, including model risk management, privacy, data residency, human oversight and auditability. Hands on understanding of AI/MLOps practices and platforms, including model lifecycle, observability, cost control, CI/CD, feature stores and data integration. Experience defining and governing enterprise standards and architectures for AI platforms, APIs and integration, aligned to global patterns with regional flexibility. Demonstrated ability to partner with business leaders, translating business requirements into scalable solutions. Vendor and partner management expertise, including evaluation, contracting and ongoing performance management tied to value realisation. Excellent communication and stakeholder management skills, with credible engagement at all levels and across multi region teams. About Willis Re We combine specialist broking with analytics, modeling and research to help insurers optimise risk transfer, strengthen balance sheets and achieve sustainable growth. Our approach is relationship driven, transparent and outcome focused. At the heart of Willis Re is a focus on delivering the most cutting edge analytical solutions to enable more informed, better decision making for risk selection, portfolio optimisation, and capital management. The launch of Willis Re brings a strategic advantage of being unhindered by legacy, an ability to leverage data, statistical models and advanced technologies with the best knowledge and expertise to deliver more efficient and effective reinsurance outcomes. This places Willis Re in a unique position to build a truly analytically driven business, focused on creating solutions for the reinsurance industry that are future led and forward thinking. Willis Re will also leverage recognised technical expertise from WTW's Insurance Consulting & Technology business including their advanced modelling and analytical capabilities. Alongside this will be WTW's Research Network, an award winning business supporting and influencing science to improve the understanding and quantification of risk. Diversity & Inclusion We are committed to embracing a diverse, inclusive, and flexible work environment. We provide equal opportunity to all qualified individuals regardless of race, colour, religion, age, gender, gender expression, national origin, veteran status, disability, orientation, or any other legally protected categories. If you have a need that requires accommodation, please email us at .

About Mimecast Mimecast is a global cybersecurity leader redefining how organisations secure human risk. Our AI powered, API enabled Human Risk Management platform is purpose built to protect organisations from the full spectrum of cyber threats-integrating cutting edge technology with human centric pathways to deliver visibility, strategic insight, and decisive action. More than 42,000 businesses worldwide trust Mimecast to stay ahead of an evolving threat landscape. Our portfolio spans email security, insider risk management (Incydr), human risk awareness and training (Mimecast Engage), and a Human Risk Command Center that scores, surfaces, and enables action on human risk across an entire organisation. About the role We are looking for a Director level Field CISO to join our Security function and report directly to the Global Field CISO. Based in London with two days per week in the office, you will serve as the primary trusted security advisor across our most strategic accounts in EMEA, operating at the intersection of customer success, executive advisory, and industry thought leadership. This position involves advisory support rather than pre sales or support functions and requires a deep understanding of human risk and technology integration. What You'll Do Act as trusted advisor to CISOs, CTOs, and board level stakeholders at top strategic accounts across EMEA, helping them build and mature their human risk management programmes. Guide customers through insider risk strategy, Incydr deployment, AI agent risk, and enterprise risk frameworks, translating Mimecast platform capabilities into measurable business outcomes. Support customers through audits, regulatory examinations, and compliance programmes across a fragmented regional landscape (PDPA, DIFC, POPIA, Saudi NCA, and more). Provide rapid response to security incidents affecting customers, regardless of direct product impact. Represent Mimecast at major EMEA security conferences (GISEC, GITEX, Black Hat MEA, sector specific FSI and government events) and advance the human risk narrative. Author whitepapers, research reports, and opinion pieces on human risk, insider threat, AI security, and the evolving threat landscape. Build and sustain a credible public profile across EMEA that extends the Global Field CISO's reach and reinforces Mimecast's position as the human risk authority in the region. Partner with sales on security sensitive enterprise deals, shortening sales cycles and lifting win rates through advisory credibility in regulated sectors. Support land and expand motions by deepening relationships within existing accounts and surfacing expansion opportunities. Log all advisory linked opportunities in CRM to build evidence of Field CISO ROI and demonstrate how security advisory translates to customer outcomes. Feed structured customer insights back to product and engineering to surface gaps in human risk capabilities and product features. Advocate for reductions in customer audit and compliance toil by pushing for product changes that simplify evidence collection. Contribute to the Mimecast CISO Customer Advisory Board (CAB) and regional CISO community events, building a customer community that values Mimecast as a long term security partner. What You'll Bring Depth of experience in enterprise information security, with more than 10years in a leadership role, including at least 3years as a CISO, VP of Security, or equivalent within an enterprise. Operational experience is mandatory. Bachelor's degree in computer science, information technology, cybersecurity, or a related field (Master's preferred) or equivalent senior security leadership experience. Advanced certifications: CISSP, CRISC, CISM, GCEIT, or equivalent GIAC. Proven ability to engage and influence C suite and board audiences with credibility and humility. Prior exposure to multiple EMEA sub regions with genuine cross cultural fluency. Comfortable operating as a Director level individual contributor without day to day management oversight. Salary and Benefits The base salary range for this position is £124,000-£186,000 plus benefits. This range represents the minimum and maximum new hire compensation for this role and may be eligible for incentive plans and additional benefits in accordance with company policy and local regulations. Equal Opportunity Mimcast is an Equal Opportunity and Affidavitive Action Employer. We encourage applicants from all backgrounds, including under represented groups. We consider all candidates equally without regard to race, gender, age, religion, sexual orientation, or any other protected characteristic. Successful candidates will undergo a background check in accordance with local law, with no requirement for a lie detector test in Massachusetts.

VulnCheck is seeking a Technical Talent Partner to lead recruiting for R&D roles in a remote setting. This position is pivotal in supporting hiring across engineering and product teams, focusing on fields like cybersecurity and AI/ML development. The ideal candidate will have over 4 years of technical recruiting experience, excelling in high-pressure environments and demonstrating strong engagement with hiring managers. This is a unique opportunity to contribute to a dynamic team while offering competitive benefits, including unlimited PTO and ongoing professional development.

The Space, Defence and Intelligence business unit in the company is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end to end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client. the company was recognised in the Sunday Times Best Places to Work List 2025 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a the company Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This position will be a hybrid position, working out of our site in Leatherhead. Your future duties and responsibilities the company are looking for self motivated user interface developers with proven capability of presenting complex scientific and engineering data whilst also delivering an efficient and engaging user experience. This is an excellent opportunity for an experienced JavaScript developer to join a rapidly expanding business area. Our work often starts with a new prototyping project and evolves towards a project using an agile approach (Scrum, SAFe and DevSecOps), to solve interesting problems related to Space based Intelligence, Surveillance and Reconnaissance (ISR). The requirements, the technologies, and the problems we will be solving can change at short notice and so requires developers who are pragmatic, delivery focused, who can adapt as situations evolve, who enjoy new experiences and always want to learn new things. Required qualifications to be successful in this role Essential: Strong experience in Angular, JavaScript, TypeScript, CSS and HTML5. Excellent team working and communication skills are essential. Highly Desirable: Experience in Python Experience of GIS technologies Desirable Experience of Astro Space UX Design System would be particularly useful. Experience in Agile development Together, as owners, let's turn meaningful insights into action. Life at the company is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves the company Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.

Business Unit: Cubic Defense Company Cubic is a global organization that delivers technology solutions in transportation and defense. It provides command, control, communications, computers, cyber, intelligence, surveillance, and reconnaissance (C5ISR) solutions, as well as live, virtual, constructive, and game-based training to serve U.S. and allied forces. Summary The Deputy Programme Manager (DPM) for the ILT-A Programme supports senior programme leadership during a period of rapid growth and change. The candidate will work with programme and project managers, the Regional General Manager, and the ILT-A Programme Manager to ensure successful delivery of the existing business portfolio across Cubic UK (CDUK). The role is primarily office based with occasional field based delivery and operational oversight in the UK and overseas. Key Responsibilities Assist the Programme Manager in planning, scheduling, execution, and delivery of design and build projects. Coordinate multiple parallel projects, ensuring alignment with programme objectives, budget constraints, and timelines. Engage cross functional teams, including engineering, supply chain, procurement, and manufacturing, to develop strategies. Support stakeholder communication and engagement, providing regular updates on project progress, risks, and opportunities. Manage project resources effectively, including financial budgets and personnel allocation. Develop and track key performance indicators (KPIs) to measure project success and continuous improvement. Support the implementation, monitoring, and continuous improvement of security controls across the CDUK IT infrastructure and business systems. Manage risk registers and assist in the identification of risks, including security risks, and implement mitigation plans. Implement and enhance the security strategy, championing a culture of cyber security awareness and best practice across CDUK. Contribute to the upkeep of security certifications in alignment with frameworks such as Cyber Essentials and the Cyber Assessment Framework (CAF). Work with third party providers on security audits and reviews, and support continual improvement of cyber security policies. Maintain contemporary knowledge of current threats and cyber trends. Essential Requirements Proven experience and understanding of programme or project management within an engineering, manufacturing, or defence environment. Ability to manage multiple design and build projects simultaneously. Excellent stakeholder management skills, with experience engaging internal and external partners. Strong problem solving and risk management capabilities. Experience managing risk registers. Proficiency in project management methodologies and tools, including scheduling (e.g., Agile, PRINCE2, PMP, MS Project, P6). Understanding of cyber and information security best practice frameworks, standards, and certifications such as NIST, ISO27001, SbD, and ideally PSN, Cyber Essentials, and CAF. Experience providing security advice across a variety of projects. Strong Governance Risk and Compliance (GRC) knowledge, understanding, and skillset. Experience with budgeting, financial reporting, and resource planning. Desirable Requirements Typically 8+ years of relevant experience. Experience as an information security analyst (IT audit, governance, risk and compliance) within the public or private sector. Degree in Engineering, Project Management, or a related discipline. Experience within defence, aerospace, or highly regulated industries. Familiarity with regulatory and compliance requirements. Membership of a relevant professional body (e.g., APM, PMI, INCOSE). Background in IT (infrastructure, networks, software or cyber security). Personal Qualities Self motivated, proactive, and able to work under pressure to meet challenging deadlines with minimal supervision. Strong relationship building and influencing skills. Excellent communication skills (written and verbal), proactive and solution focused mindset. Ability to lead teams and quickly acquire new skills. Willingness to travel. Worker Type Employee You are committed to hiring and retaining a diverse workforce and are proud to be an Equal Opportunity/Affirmative Action Employer. We are committed to ensuring a workplace free of discrimination based on race, color, religion, age, disability, genetic information, sex, sexual orientation, gender identity, national origin, military or veteran status, or any other basis protected by applicable law. For more information on Equal Employment please visit:

Lead Product Cyber Security Engineer Lead Product Cyber Security Engineer to drive the analysis and implementation of aviation cyber security across our electric propulsion and generation systems. Key Responsibilities Cybersecurity (system security) governance leadership: establish and maintain the organisation's aviation cybersecurity framework aligned with DO 326B and associated standards Security risk assessment: oversee Security Risk Assessments (SRAs), Threat Analyses (TAs), and Security Development Assurance Levels (SDALs) Secure development lifecycle management: integrate cybersecurity activities into system engineering, software, and hardware development processes Compliance and certification support: interface with regulatory authorities, certification bodies, and OEMs to demonstrate compliance with DO 326B/ED 202B Cross functional collaboration: work closely with Design Organisation Engineering teams, Supply Chain and Quality Teams to ensure cohesive security by design Incident response coordination: develop vulnerability management processes and support Evolite's Emergency Response Plan Supplier and supply chain oversight: ensure cybersecurity requirements are flowed down and verified across suppliers and partners Documentation and audit readiness: produce and maintain cybersecurity plans, reports, and evidence packages for audits and certification Training and awareness: build cybersecurity culture through targeted training for engineering and operational teams Qualifications Degree in Engineering, Software, Cyber Security or related disciplines Deep knowledge of DO326A/B, DO356A, DO355, ED202B and related aviation cybersecurity standards Experience working with safety critical systems such as avionics, embedded systems, or aircraft platforms Strong understanding of threat modelling, risk assessment, and security architecture principles Familiarity with certification processes for CAA, EASA, FAA, or other aviation authorities Ability to lead cross disciplinary teams in complex engineering environments Excellent communication and documentation skills suitable for audits, regulators, and executive stakeholders Strong attention to detail A self starter attitude with energy and enthusiasm, with the ability to thrive in a small business environment Ability to work under pressure while managing conflicting demands against tight deadlines A flexible approach to work

At the company Invent, we believe difference drives change. As inventive transformation consultants, we blend our strategic, creative and scientific capabilities, collaborating closely with clients to deliver cutting edge solutions. Join us to drive transformation tailored to our client's challenges of today and tomorrow. Informed and validated by science and data. Superpowered by creativity and design. All underpinned by technology created with purpose. YOUR ROLE Our Full Stack Engineers sit within Digital Excellence, part of the Business Technology practice in the company Invent, which leads digital transformation projects across the company. We are a new and dynamic community that values innovation, professional development, and the ability to make a real difference for our clients. We work in diverse multi-disciplinary teams, hand in glove with our clients. Our Java Full Stack Engineers are responsible for creating the visions of our clients and driving better business outcomes. They are tasked with building cutting edge digital solutions for our clients, combining a clear understanding of business value and a consultative approach to make the difference. They will be able to work on a vast variety of projects and get exposure to a variety of technology such as (but not exhaustively) NodeJS, Java, Kotlin, Spring boot framework, RESTful microservices, NoSQL databases. YOUR PROFILE Extensive experience of building microservices with Java (Spring Boot) Experience using JavaScript/Typescript to build fronted web applications using React, HTML and CSS Experience using version control software - Git Experience using online version control tools - GitHub, GitLab etc Experience using Docker, Docker Compose Experience with CI/CD (Gitlab, GitHub, Jenkins) Experience with cloud technologies such as AWS or Azure Experience working in an agile team environment Familiarity using Infrastructure as Code tools such as Terraform Familiarity building and integrating with NoSQL database (familiarity with MongoDB is preferred) or SQL databases such as Postgres Familiarity with web standards, accessibility, and development best practice Bonus Building microservices in C# Experience building solutions that integrate with LLMs using tools such as Vercel AI, Langchain etc. Using the GOV.UK Design System and using Nunjucks WHAT YOU'LL LOVE ABOUT WORKING HERE We offer engineers a culture of learning, ownership, and focus on value. You'll gain exposure to high profile transformations and hands on exposure to leading technologies. Our consultants are formally trained by industry experts in consulting and client delivery. Consultants have access to a vast array for different training and certifications in a variety of areas: cloud technologies (AWS, Azure, GCP), programming (Java, Kotlin, NodeJS, Spring Boot), DevOps (Terraform, Kubernetes, Docker), Cybersecurity (CISSP, CISM) and Agile delivery (Scrum Master, Product Owner, Scaled Agile Framework). The company offers you the flexibility to develop various areas of knowledge in technical domains aligned both to your interests and our client's outcomes. Les Fontaines: the company has a unique training environment just outside of Paris, where we can immerse ourselves in thought leadership, share knowledge and build capabilities that will help us and our clients to succeed. We hold monthly showcases of our digital transformation initiatives, sharing knowledge and showing off how the power of technology is impacting our clients. There are monthly team drinks and breakfast events to connect face to face with the wider team and discuss trends and insights. Team away days are always a chance to connect with the team, have fun and learn something new. NEED TO KNOW We actively work inclusion, building environments where you can bring your whole self to work. We aim to build an environment where employees enjoy a positive work life balance. We embed hybrid working in all that we do and make flexible working arrangements the day to day reality for our people. All UK employees are eligible to request flexible working arrangements. Employee wellbeing is vitally important to us. We have trained Mental Health Champions across each of our business areas and invested in wellbeing apps such as Thrive and Peppy. CSR We're focused on using tech to have a positive social impact, reducing our own carbon footprint and improving access to a digital world. We were named as one of the world's most ethical companies by the Ethisphere Institute for the 10th year. Office base locations include London, Manchester or Glasgow. You must be fully flexible in terms of assignment location, as these roles may involve periods of time away from home at short notice. Remuneration We offer a remuneration package which includes flexible benefits options for you to choose to suit your own personal circumstances and a variable element dependent on grade, company and personal performance. Eligibility In order to commence a role with the company you will be required to provide documentary proof prior to joining the Company that you are entitled to live and work in the United Kingdom.

Position Overview We are seeking an experienced Cyber Security Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group. Key Responsibilities Monitor and analyze security events across cloud and on premises environments using SIEM and security analytics tools Conduct thorough investigations of security incidents and provide detailed incident reports Develop and maintain incident response playbooks and procedures Experience with threat intelligence platforms and threat hunting Experience with security orchestration, automation and response (SOAR) platforms Understanding of data protection and encryption technologies Experience in regulated industries (financial services, healthcare, energy) Background in offensive security or penetration testing Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP) Conduct cloud security assessments and architecture reviews Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST) Manage cloud native security tools including CSPM, CWPP, and cloud WAF solutions Implement and maintain identity and access management (IAM) policies and controls Lead cyber security programs and coordinate remediation efforts Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps) Stay current with emerging threats, vulnerabilities, and security technologies Contribute to security awareness training and documentation Facilitate Supplier Management and security input into bids Support compliance initiatives (SOC2, ISO27001, PCI DSS, GDPR, etc.) Develop and enforce security policies, standards, and procedures Conduct security audits and risk assessments Maintain security documentation and metrics reporting Required Qualifications Minimum of 5 years cyber security experience 3+ years of hands on experience with cloud security (AWS, Azure, or GCP) Proven experience leading security incidents and coordinating response efforts Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture Technical Skills Strong expertise in cloud security services and tools (AWS & Azure) Experience working with SIEM platforms (Splunk, Sentinel) Understanding of network security, firewalls, IDS/IPS, and VPN technologies Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools) Experience with endpoint detection and response (EDR) solutions Soft Skills Strong analytical and problem solving abilities Excellent written and verbal communication skills Ability to explain complex security concepts to technical and non technical audiences Leadership capabilities and experience mentoring team members Strong attention to detail and ability to work under pressure Collaborative mindset with cross functional teams Business partnering experience Certifications (one or more preferred) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) AWS Certified Security - Specialty Microsoft Certified: Azure Security Engineer Associate Education: Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions Some flexibility for remote work - 2 days minimum in office (Edinburgh preferred) Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. We can support you with your application or through the hiring process if you have a physical or mental disability. You can find out more about your rights under the law at .

AI Security Architect About the role As a AI Security Architect , you will lead the design and implementation of robust security architectures, standards, and governance frameworks for Artificial Intelligence (AI), Generative AI (GenAI), AI-powered applications, agents, copilots, and enterprise environments. This role requires a deep understanding of AI security, AI governance, cloud-native security, application security, data security, and enterprise security technologies. You will work closely with product teams, AI engineering teams, developers, security engineers, DevSecOps, legal, risk, and operations teams to ensure security is Embedded throughout the application life cycle, from solution design and vendor selection to deployment, operation, and ongoing monitoring. The role will define secure AI architecture patterns, provide security oversight for AI initiatives, and enable responsible AI adoption aligned with organisational policies and industry frameworks. Reporting to the Enterprise Security Architect and collaborating with stakeholders, such as the Head of Cyber Security, BISOs and Solutions Architects, you will assist in promoting a harmonised security architecture via standards, patterns, and tooling. Tell me more, tell me more Our client is currently looking for a new recruit in joining their team, please read on! You can also ask our friendly recruitment team any questions you may have about the role, between 8:30am-5:30pm Monday to Friday. Shifts: Monday - Friday (37.5 hours per week) The must haves: Extensive hands-on experience with Threat Modelling, SAST, DAST, and web application security, including OWASP Top 10, CWE Top 25, and SANS 25. Hands-on experience with GCP security architecture (IAM, VPC, Cloud KMS, Cloud Armor etc.) and other cloud-native security tools. Strong understanding of data security practices, including encryption, access control, data security controls and AI security standards. Up to date on cybersecurity threats, risk assessment, and frameworks/regulations (GDPR, PCI, NIST, ISO27001). Proven experience in requirements identification, solution testing, and vendor product selection. Demonstrated leadership and relationship management with internal and external partners, along with excellent communication and presentation skills to build consensus. Strongly self-motivated and able to present a credible and effective case for risk management and security requirements with tact and tenacity to senior executives Strategic orientation with ability to act tactically as required. Strong negotiator/facilitator and consensus builder with results-oriented commitment. Ability to interact at all levels of the organisation. Key responsibilities Partner with teams for development and implement of application/cloud security standards, patterns and guidelines that support ongoing deliveries and balance risk and business benefit. Continuously review the design and effectiveness of application/cloud security controls and develop a program of continuous security improvement. Define and maintain secure AI architecture patterns and standards for AI-powered applications, GenAI solutions, AI agents, and AI platforms, ensuring secure-by-design implementation across the organisation. Review and approve AI solution architectures to ensure appropriate security controls, data protection measures, identity controls, network security, and compliance requirements are incorporated before deployment. Perform AI-focused threat modelling and security assessments, identifying risks such as sensitive data exposure, prompt injection, indirect prompt attacks, model misuse, insecure plugins, excessive permissions, and supply chain vulnerabilities. Provide strategic security leadership for AI initiatives, partnering with architecture, engineering, risk, legal, data governance, and compliance teams to enable secure AI adoption while aligning with industry frameworks and standards including ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework (AI RMF), ISO 27001, CIS Controls, and organisational security policies. Identify gaps in existing AI architecture design and recommend changes or enhancements. Recommend and evaluate security tools including static and dynamic analysers, security frameworks, and tools for AI governance etc. Partner with engineering teams to integrate security controls into continuous integration, delivery and deployment processes. Introduce best practices and principles to enable consistent delivery and enable alignment with long-term direction through security architecture artefacts (Design patterns, Principles, Architecture contract and governance). Provide technical and architectural governance and guidance on security architecture and solutions. What's in it for you? - Our client loves to reward their people for doing a great job. This is a contract for 5-6 months. A day rate, in-scope IR35, £600.00-650 per day (via a Hays approved umbrella company) or £450.00-500 per day via Hays PAYE This role provides a remote working access from the comforts of your own home and only going to our state-of-the-art office in Reading/Paddington twice per week. Next Steps Once you've applied, one of our friendly recruitment consultants will give you a call and talk you through the screening process. If your application is successful, you'll be involved in a live virtual interview with one of our client's hiring managers to get to know you better. We look forward to speaking to you!