Cyber Security Jobs

• London
• Hybrid · 1 day in office
• £600 – £700 pd
• Senior · manages people
• Contract

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

ISO 27001 · NIST Cybersecurity Framework · NIST 800-53 +5

• Belfast
• Hybrid
• £80,000 – £100,000 pa
• Lead
• Permanent

Independent assurance voice across a sovereign AI platform's cloud estate, corporate environment and AI capability. Sets security baselines for DevOps, IT and Product Security Engineering, then verifies them through continuous monitoring and independent testing, including AI controls such as prompt injection defences and agent permissions. One of the founding roles in a scaling assurance function, working with defence and government customers.

Wiz · ISO 42001 · EU AI Act +4

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• Reading
• £59,000 pa
• Mid-level

Assesses the design and operational effectiveness of cybersecurity controls across a complex technology environment, executing testing activities and adapting test scripts to different control environments. Gathers and reviews evidence, documents findings, maintains test plans and reports, and works with control owners to complete assessments. Covers domains such as threat intelligence, identity and access management, incident response and cryptography.

CISA · CISSP · CRISC +1

• Reading
• Hybrid
• £50,000 pa

Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.

COBIT · COSO · ISO 27001

• London
• Hybrid
• £70,000 – £75,000 pa
• Senior
• Permanent

This role involves leading information security governance, risk management, and compliance activities within a multinational organisation. The Information Security Manager will drive security risk assessments, audit programmes, and regulatory certification efforts including ISO 27001, PCI DSS, and NIS2. With a focus on cloud security governance, the role requires strong engagement with senior stakeholders and expertise in securing AWS and Azure environments.

• Knutsford
• Hybrid
• Senior · manages people

Delivers independent, risk-based audits across Barclays UK, assessing controls over customer journeys, digital channels, technology platforms and data environments, including fraud, financial crime and operational resilience. Uses data analytics and technology-enabled audit techniques to evaluate control effectiveness and support the Barclays UK Audit Plan, working with business, technology and control stakeholders.

• London
• Hybrid
• Director · manages people

Leads risk-based internal audits across Barclays UK, covering customer journeys, digital channels, technology platforms and data environments, from planning through to reporting. Uses data analytics and technology-enabled audit techniques to assess controls over fraud, financial crime, operational resilience and customer outcomes, while coaching colleagues and contributing to audit strategy.

• London
• Hybrid · 2–3 days in office
• £100,000 – £110,000 pa
• Director · manages people

Leads a five-person information security and governance function within a government body's compliance team, owning the information management system and its audit cycle. Ensures compliance with ISO 27001, Cyber Essentials (Plus), NIST and GovAssure, covering control documentation, third-party risk and security awareness. Hybrid role with two to three days a week in the South London office.

ISO 27001 · Cyber Essentials · Cyber Essentials Plus +2

• Portsmouth
• On-site
• £50,850 – £56,500 pa
• Mid-level

Advises customers on cyber security vulnerability, risk, audit and compliance, applying NIST and ISO27001 frameworks to risk assessments and security assurance. Supports accreditation, governance and mitigation strategies across government, defence and critical national infrastructure, engaging stakeholders and presenting findings. Based on-site at least three days a week with customer travel required.

NIST · ISO 27001 · MITRE ATT&CK +1

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.

• Milton Keynes
• Senior

Lead second-line risk oversight across technology, change and operational resilience, providing independent assurance on IT risk, transformation programmes and important business services. Act as a trusted adviser to senior technology and change leaders, working with the parent building society on risk appetite and Group standards. Involves control reviews, scenario testing, RCSA and reporting to Risk Committee, ExCo and Board audiences.

Cloud

• Bristol
• On-site
• £65,700 – £73,000 pa
• Senior

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

Microsoft Office

• Reading
• £86,000 – £87,000 pa
• Lead

Develops and implements automated control testing and continuous monitoring across IT, OT and business functions, identifying automation opportunities and improving control testing processes. Builds automation workflows using Python, PowerShell, RPA or audit automation tools, reviews results, escalates control deficiencies and maintains documentation. Works with technical teams, control owners and stakeholders to support risk, compliance and cybersecurity objectives.

Python · PowerShell · RPA +6

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7