Cyber Security Jobs

• London
• On-site
• £70 – £85 pd
• Senior
• Permanent

Lead cloud security assurance from initial assessment through to approval, assessing services against NCSC Cloud Security Principles and MOD standards. Oversee compliance, audits and third-party access while advising project teams on secure configuration and risk mitigation. Supports Defence Cyber Certification, ISO 27001 and MOD security audits, presenting findings to senior governance stakeholders.

SaaS · ISO 27017 · ISO 27018 +1

• Bristol
• On-site
• Mid-level
• Permanent

A cyber security role aligned to the Government Security Profession Framework's Cyber Security Risk Manager function. The post holder identifies, understands and mitigates cyber-related risks, providing delivery teams with tailored advice, guidance and direct support so they can make well-informed, risk-based decisions grounded in realistic threat events and likelihoods in the operating environment.

• London
• Senior
• Permanent

Builds and manages services that detect and automate mitigation of cybersecurity threats across Amazon's infrastructure, working with data scientists and software engineers. The role also supports UK customer security programs covering personnel security, accreditations, assurance and training, with visibility to government agencies and senior leadership.

AWS

• London
• Permanent

Join a Security Operations Centre to build detections for suspicious and malicious behaviour, respond to security incidents, and engineer automation and AI-driven solutions that improve team efficiency. You'll collaborate with data scientists, software engineers and security experts to protect AWS infrastructure and UK customers at massive scale.

AWS

• Bristol
• Hybrid · 2–3 days in office
• Senior
• Permanent

Acts as a trusted advisor to clients across sectors, delivering governance, risk and compliance guidance spanning secure architecture, IDAM, PAM and DLP, and frameworks such as ISO 27001, NIST CSF and NIS2. Produces risk assessments, gap analyses and remediation roadmaps, while supporting bids, content creation and marketing events. Requires UK Government Security Clearance and works hybrid from the Bristol office 2-3 days a week.

IDAM · PAM · DLP +5

• London
• Hybrid
• Lead
• Contract

Lead enterprise cloud architecture across GCP and/or AWS, designing secure landing zones, IAM hierarchies and microservices, plus deterministic AI safety controls and perimeter defence. The role also covers systems integration, API layers and architectural governance, including Technical Design Authority approvals and NCSC-aligned assurance within UK central government.

GCP · AWS · VPC Service Controls +4

• United Kingdom
• Junior

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

AWS · Azure · Google Cloud +7

• Gloucester
• Hybrid
• £90 – £110 ph
• Senior
• Contract

Lead security architecture across cloud, hybrid and on-premise environments, embedding Secure by Design principles through the full technology lifecycle. The role covers threat modelling, security assurance, risk assessment and architecture governance, with technical leadership across IAM, IaC, container platforms and secure cloud migration. Requires active eDV clearance and works on a hybrid basis.

IaaS · PaaS · SaaS +3

• London
• Hybrid · 2–3 days in office
• £100,000 – £110,000 pa
• Director · manages people

Leads a five-person information security and governance function within a government body's compliance team, owning the information management system and its audit cycle. Ensures compliance with ISO 27001, Cyber Essentials (Plus), NIST and GovAssure, covering control documentation, third-party risk and security awareness. Hybrid role with two to three days a week in the South London office.

ISO 27001 · Cyber Essentials · Cyber Essentials Plus +2

• Bristol
• £50,000 – £80,000 pa
• Senior

Designs secure network and infrastructure architectures and delivers security assurance and accreditation artefacts for central government and public sector clients. Works across the full systems lifecycle with delivery teams and engineers, assessing environments against CAF, NIST, Cyber Essentials and SbD. Requires TOGAF certification and SC clearance eligibility.

TOGAF · JSP 440 · JSP 604

• Berkeley
• Remote
• £45,000 – £50,000 pa
• Mid-level

Conducts information security assessments for government, defence and commercial clients in a consultancy setting, reviewing controls, policies and procedures against ISO 27001 and the NIST Cybersecurity Framework. Supports audits, risk assessments and compliance reviews, and works directly with client stakeholders to communicate findings and improve security posture.

ISO 27001 · NIST Cybersecurity Framework

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5

• London
• Lead

Lead the cyber security architecture and design function across a portfolio of complex national-scale programmes, acting as Security Pillar Lead. Shape strategy, lead assurance, oversee cyber operational capability and enterprise architecture, and engage UK Government and private sector stakeholders on security risk and emerging threats.

CISSP · SABSA · CISM