Cyber Security Jobs

• Sheffield
• On-site
• £40,000 pa
• Mid-level
• Permanent

Supports day-to-day IT security across a national care home provider, covering security monitoring, vulnerability management, endpoint and email security, and incident response. Coordinates audits, penetration testing and assurance activities against frameworks such as NCSC CAF, Cyber Essentials and NHS DSPT, and produces security metrics and awareness training.

Microsoft 365 · Intune · NCSC CAF +3

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7

• Benfleet

Supports the compliance and integrity of control and information systems at a gas-fired power station, covering security strategy, policies, risk assessments, audits and incident response. Works with the Cyber Security Manager on OT security, ISA/IEC 62443 standards and regulatory frameworks, plus Management of Change and RCA investigations.

ISA/IEC 62443 · NIS Directive · NCSC Cyber Assessment Framework +1

• Colchester
• Remote
• £51,000 – £55,000 pa
• Mid-level
• Permanent

Hands-on security role managing and enhancing controls across the IT infrastructure, covering incident response, threat detection, vulnerability management and compliance. You will work with Microsoft security tooling including Entra ID, Defender, Purview and Intune, support audits and frameworks such as NIST and ISO 27001, and help shape security strategy in a small collaborative IT team.

Microsoft 365 · Microsoft Entra ID · Microsoft Defender +4

• Stevenage
• On-site
• Mid-level
• Permanent

Configure, instrument and operate electrodynamic shaker systems to run vibration and shock tests on new spacecraft equipment, installing accelerometers and flight hardware. Work with mechanical engineers to meet customer test objectives, maintain instrumentation and facilities through calibration and logbooks, and support internal and external audits while upholding quality and safety standards.

Electrodynamic Shaker Systems · Vibration Control Software · Accelerometers

• Leicester
• Hybrid · 1 day in office
• £40,000 – £55,000 pa
• Mid-level

Day-to-day you will own and improve the ISMS, coordinate internal and external audits, administer the cyber risk register and run supplier assurance and third-party assessments. You will write policies and standards, produce executive reporting and act as a trusted advisor across technology and business teams, with frameworks including NIST CSF 2.0, PCI DSS and UK GDPR.

LogicGate · OneTrust · Archer +1

• Farnborough
• Hybrid
• Senior
• Permanent

Lead protective and information security engineering on a critical MOD programme, shaping secure designs, assuring controls, and managing vulnerabilities across infrastructure, endpoints, identity and AWS cloud. Combines hands-on hardening, incident response leadership and ST&V with governance, reporting and mentoring, working largely autonomously on-site in Farnborough with some remote work.

AWS

• London
• On-site
• £473 – £800 pd
• Senior
• Contract

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

DORA · EBA · NIST +2

• Stevenage
• On-site
• £74 ph
• Mid-level
• Contract

Operational BAU support, administration and configuration management across Infrastructure and Workplace Windows environments on restricted secret and above networks. The role covers patching, change implementation, Tier 2/3 incident response, root cause analysis, monitoring and 3rd party liaison, and is 100% site-based due to the network's nature.

Windows Server · Windows OS · VDI +1

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• London
• Hybrid
• £80,000 – £90,000 pa
• Lead
• Permanent

Owns the CMDB and hardware/software asset lifecycle across a large international technology estate, setting standards, governance and a maturity roadmap for configuration and asset data. Works alongside other ITSM practice owners to ensure Change, Incident, Problem and Vulnerability Management rely on accurate CI data, using ServiceNow CMDB, HAM and Snow, aligned to ITIL 4 and ISO 27001.

ServiceNow · Snow · Discovery

• London
• Hybrid · 3 days in office
• £450 – £460 pd
• Lead
• Contract

Act as the bridge between technical security architecture and senior business stakeholders, owning the cyber risk profile for critical Risk, Finance and Treasury domains. Embed security-by-design controls, oversee vendor and SaaS risk, lead control assessments and audits, and provide risk-based direction during major incidents. Hybrid role with three days on-site in London.

SaaS

• Stevenage
• On-site
• £67 – £74 ph
• Senior
• Contract

Operational support, administration and configuration management across Infrastructure and Workplace Windows environments for a defence client, including patching, change management and asset/inventory auditing. Acts as Tier 2/Tier 3 escalation for Windows incidents, performing incident response, root-cause analysis and remediation within highly restricted, fully on-site environments.

Windows Server · Windows OS · Active Directory

• Sheffield
• Hybrid
• £50,000 – £60,000 pa
• Permanent

Consultants lead clients through implementing, certifying and continually improving ISO management systems across quality, environmental, health & safety and information security. The role blends home and Sheffield office work with significant on-site client engagement across the UK, including internal audits, management reviews and certification body liaison, plus cross-selling services and occasional overnight stays.

IRCA