532 jobs for “Cyber Design Lead”
Ashdown Group
Lead the organisation's information security strategy and ISMS, working towards ISO27001 accreditation with support from a Cyber Security Analyst. The role covers governance, third-party and auditor management, awareness training, internal audits, and testing disaster recovery, continuity and incident response plans.
Randstad Technologies Recruitment
Senior cybersecurity partner for Global Finance & Technology domains at a global financial institution, owning the domain risk register and embedding security-by-design into change delivery and solution designs. Strengthens in-service posture across IAM/PAM, vulnerability management, logging and SaaS risk, and leads control governance and audit readiness. Hybrid role in Sheffield, three days a week in the office.
SaaS
Randstad Technologies Recruitment
Act as the bridge between technical security architecture and senior business stakeholders, owning the cyber risk profile for critical Risk, Finance and Treasury domains. Embed security-by-design controls, oversee vendor and SaaS risk, lead control assessments and audits, and provide risk-based direction during major incidents. Hybrid role with three days on-site in London.
SaaS
Airbus · 10000+ people · Public
Acts as a trusted advisor to clients across sectors, delivering governance, risk and compliance guidance spanning secure architecture, IDAM, PAM and DLP, and frameworks such as ISO 27001, NIST CSF and NIS2. Produces risk assessments, gap analyses and remediation roadmaps, while supporting bids, content creation and marketing events. Requires UK Government Security Clearance and works hybrid from the Bristol office 2-3 days a week.
IDAM · PAM · DLP +5
Senior advisory role providing expert leadership on cyber risk management, security assurance and governance across large-scale public sector technology programmes. Involves assessing risks, reviewing technical designs and architectures, and embedding secure-by-design principles into cloud and digital transformation work while influencing senior stakeholders.
AWS · SaaS
Immersive
Owns end-to-end product design for AI-powered and agentic experiences within an enterprise cyber resilience platform, from discovery and prototyping through validation and delivery. Champions Object-Oriented UX, governs the design system, and partners closely with product, engineering and research to turn complex cybersecurity data into intuitive workflows.
Immersive One
Hays Technology
Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and acts as design authority embedding secure-by-design and threat modelling into major technology change across cloud, identity and AI.
Azure · AWS · GCP +5
Mentmore Recruitment
Assesses the design and operational effectiveness of cybersecurity controls across a complex technology environment, executing testing activities and adapting test scripts to different control environments. Gathers and reviews evidence, documents findings, maintains test plans and reports, and works with control owners to complete assessments. Covers domains such as threat intelligence, identity and access management, incident response and cryptography.
CISA · CISSP · CRISC +1
Circle Recruitment
Lead a globally distributed engineering organisation spanning cyber security, backend development, sensor infrastructure and AI-driven vulnerability research. Set technical strategy and standards while providing hands-on direction across architecture, system design and code review, and drive adoption of AI, LLMs and autonomous workflows to accelerate vulnerability discovery and exploit analysis.
LLM
QinetiQ
Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.
Microsoft Office
Appcast Enterprise
Lead bp's global GRC engineering and compliance management teams, owning the technology, AI and data strategies and overseeing delivery squads. Drive platform, tooling and dashboard delivery for continuous control health monitoring, plus a compliance framework for global regulations and industry certifications. Hybrid role based in Sunbury-on-Thames, moving to Timber Square, Southwark around Q4 2027.
QinetiQ
Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.
NIST · ISO 27001 · MITRE ATT&CK
Safran · 501–1000 people · Late stage
Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.
CCTV · EASA Part-IS · AirCyber +7
University of Essex
A KTP Associate role transforming in-house cybersecurity software using Large Language Models and NLP, building real-time threat detection and clear user-facing responses. Involves developing UI and API integrations, working with large datasets and PyTorch, and acting as project lead while embedding technology and upskilling company staff.
PyTorch
Summer Browning Associates
Lead enterprise cloud architecture across GCP and/or AWS, designing secure landing zones, IAM hierarchies and microservices, plus deterministic AI safety controls and perimeter defence. The role also covers systems integration, API layers and architectural governance, including Technical Design Authority approvals and NCSC-aligned assurance within UK central government.
GCP · AWS · VPC Service Controls +4
