Cyber Security Jobs

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director

Lead the UK information security strategy for a large healthcare provider, owning IT risk, governance and compliance across the business. The role involves running risk registers, maintaining an ISO 27001-aligned ISMS, leading internal and external audits, overseeing supplier risk assessments and directing incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director · manages people
• Permanent

Lead the UK information security strategy for a healthcare provider, owning governance, risk and compliance across systems and data. You'll develop the ISMS to ISO 27001, NIST, Cyber Essentials and GDPR standards, run internal and external audits, manage third-party supplier risk and lead incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• London
• Mid-level

You will develop and maintain IT security policies, standards and controls, and build compliance dashboards and reporting in Power BI. The role owns the IT Security Risk Register, facilitates risk assessments and supports ISO 27001, Cyber Essentials and internal audit activity across a European IT environment.

Power BI

• Leeds
• Hybrid
• Senior

Operational owner of an enterprise identity platform, maintaining SailPoint IdentityIQ workflows, connectors and lifecycle processes while troubleshooting provisioning and integration issues across Okta and Microsoft Entra. Acts as the bridge between technical IAM delivery and BAU operations, handling audit evidence, JML automation and access reviews, and providing delegated guidance to team members across global regions.

SailPoint IdentityIQ · Okta · Microsoft Entra +3

• London

Supports security governance, technology risk and controls across a European IT environment, working with infrastructure, cloud, identity and operational teams. Owns the IT Security Risk Register, facilitates risk assessments, assesses control effectiveness and translates ISO 27001 and NIST CSF frameworks into practical operational controls, including audit and compliance support.

ISO 27001 · NIST CSF · Cyber Essentials

• Farnborough
• Hybrid
• Mid-level
• Permanent

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

CIS · STIG · NIST +2

• Wolverhampton
• Hybrid
• Director

Lead information security across multiple UK sites for a defence and aerospace manufacturer, owning accreditation, compliance and incident response. Act as the key security point of contact within a global matrix, driving frameworks such as NCSC CAF, ITAR and export control, and supporting secure-by-design across IT, engineering and industrial teams. Requires regular UK and international travel.

NCSC CAF · IGI 1300

• United Kingdom
• Hybrid
• Mid-level

Joins the Information Security Service Delivery team to assess, design, configure and integrate security technology controls, acting as a technical escalation point for security concepts. Works hands-on with Zscaler, Okta, Crowdstrike, cloud and endpoint security, threat modelling and security architecture frameworks, ensuring designs meet policies and regulatory requirements.

Zscaler · Okta · CrowdStrike +5

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• Sunbury-on-Thames
• Hybrid
• Lead · manages people

Lead bp's global GRC engineering and compliance management teams, owning the technology, AI and data strategies and overseeing delivery squads. Drive platform, tooling and dashboard delivery for continuous control health monitoring, plus a compliance framework for global regulations and industry certifications. Hybrid role based in Sunbury-on-Thames, moving to Timber Square, Southwark around Q4 2027.

• Bristol
• Hybrid · 3 days in office
• £86,400 – £96,000 pa
• Lead

Provides strategic cyber security consultancy to senior stakeholders, helping organisations understand and respond to evolving security challenges and business risks. Applies frameworks such as NIST, ISO27001, MITRE ATT&CK and Zero Trust to assess vulnerabilities and maturity, while leading teams, supporting bids and developing business within defence and critical national infrastructure.

NIST · MITRE ATT&CK · ISO 27001

• London
• On-site
• £70 – £85 pd
• Senior
• Permanent

Lead cloud security assurance from initial assessment through to approval, assessing services against NCSC Cloud Security Principles and MOD standards. Oversee compliance, audits and third-party access while advising project teams on secure configuration and risk mitigation. Supports Defence Cyber Certification, ISO 27001 and MOD security audits, presenting findings to senior governance stakeholders.

SaaS · ISO 27017 · ISO 27018 +1

• London
• £75,000 – £85,000 pa
• Mid-level

Hands-on ownership of technology governance, cyber security, risk, compliance and assurance frameworks across a diverse technology estate. Leads CIS Controls Self Assessment activities, coordinates ISO 27001 gap assessments and ISMS implementation, maintains security policies and risk registers, and provides assurance reporting to senior stakeholders while coordinating external auditors and suppliers.

CIS CSAT · ISO 27001 · ISMS +2

• Working From Home, UK
• Remote
• Senior
• Permanent

Lead full-scope red team engagements spanning cyber, physical, social engineering and process attack surfaces, emulating real-world adversaries. Build phishing infrastructure and payloads, operate C2 frameworks like Cobalt Strike, and develop custom tooling and EDR evasion tradecraft. Set methodology and mentor operators while working closely with defensive teams.

Cobalt Strike · Nighthawk

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus