Cyber Security Jobs

• Uxbridge
• On-site
• £70,000 – £75,000 pa
• Director

Lead the organisation's information security strategy, supported by a Cyber Security Analyst, with responsibility for hardening the technology estate and embedding governance policies. The role centres on driving ISO27001 accreditation, building and improving the ISMS, and overseeing incident response, disaster recovery, supplier relationships and internal audits.

• London
• Hybrid
• Senior
• Permanent

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

AWS · Azure · GCP +7

• Hessle
• Hybrid
• £35,000 – £45,000 pa
• Mid-level
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +7

• Prudhoe
• Hybrid
• £35,000 – £45,000 pa
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +6

• London
• Hybrid · 3 days in office
• £100,000 – £110,000 pa
• Mid-level · manages people

Leads a security operations function within a professional services firm, providing technical leadership across incident response, detection engineering and vulnerability management. Works with infrastructure, risk and third-party SOC providers, managing outsourced security suppliers and embedding security into technology projects. Hybrid role, three days a week in the City of London office.

Microsoft Azure · Entra ID · SIEM +1

• Farnborough
• Hybrid
• Mid-level
• Permanent

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

CIS · STIG · NIST +2

• Bristol
• On-site
• £65,700 – £73,000 pa
• Senior

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

Microsoft Office

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• Farnborough
• Hybrid
• Senior
• Permanent

Lead protective and information security engineering on a critical MOD programme, shaping secure designs, assuring controls, and managing vulnerabilities across infrastructure, endpoints, identity and AWS cloud. Combines hands-on hardening, incident response leadership and ST&V with governance, reporting and mentoring, working largely autonomously on-site in Farnborough with some remote work.

AWS

• London
• Hybrid
• Lead
• Permanent

Lead the identity practice within a cyber security services company, shaping and delivering identity-focused security capabilities for clients in critical sectors. The role sits at the centre of a team protecting essential services, combining practice leadership with client-facing security transformation work.

• London
• Hybrid
• Senior
• Permanent

Deliver PCI DSS consultancy engagements across merchant and service provider environments, covering gap assessments, readiness reviews and compliance assessments, plus RoC and AoC documentation. Also supports wider consulting work in ISO 27001, NIST, NCSC CAF, risk management and security maturity, reviewing complex infrastructure, cloud and third-party environments.

PCI DSS v4.x · RoC · AoC +2

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus

• London
• On-site
• £70 – £85 pd
• Senior
• Permanent

Lead cloud security assurance from initial assessment through to approval, assessing services against NCSC Cloud Security Principles and MOD standards. Oversee compliance, audits and third-party access while advising project teams on secure configuration and risk mitigation. Supports Defence Cyber Certification, ISO 27001 and MOD security audits, presenting findings to senior governance stakeholders.

SaaS · ISO 27017 · ISO 27018 +1

• London
• Hybrid
• £70,000 – £75,000 pa
• Senior
• Permanent

This role involves leading information security governance, risk management, and compliance activities within a multinational organisation. The Information Security Manager will drive security risk assessments, audit programmes, and regulatory certification efforts including ISO 27001, PCI DSS, and NIS2. With a focus on cloud security governance, the role requires strong engagement with senior stakeholders and expertise in securing AWS and Azure environments.

• Leicester
• Hybrid · 1 day in office
• £40,000 – £55,000 pa
• Mid-level

Day-to-day you will own and improve the ISMS, coordinate internal and external audits, administer the cyber risk register and run supplier assurance and third-party assessments. You will write policies and standards, produce executive reporting and act as a trusted advisor across technology and business teams, with frameworks including NIST CSF 2.0, PCI DSS and UK GDPR.

LogicGate · OneTrust · Archer +1