Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Airbus · Bristol

Acts as a trusted advisor to clients across sectors, delivering governance, risk and compliance guidance spanning secure architecture, IDAM, PAM and DLP, and frameworks such as ISO 27001, NIST CSF and NIS2. Produces risk assessments, gap analyses and remediation roadmaps, while supporting bids, content creation and marketing events. Requires UK Government Security Clearance and works hybrid from the Bristol office 2-3 days a week.

Oliver James · London · £55,000 – £60,000 pa

Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth.We are interested in connecting with senior cyber security & risk consultant candidates based in London.Oliver James is partnered with a world...

Radius Consultancy · London · £80,000 – £90,000 pa

Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.

Exceed Cyber limited · London · £800 – £900 pd

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

Immersive · United Kingdom

Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.

Oliver James · London · £75,000 – £85,000 pa

The role involves developing and implementing cyber security strategies, managing cyber risk, and ensuring regulatory compliance for large organizations. You will work on various aspects of cyber security, including architecture, threat management, and vulnerability assessments, while collaborating with clients to solve complex security challenges.

TRIA · United Kingdom

Build a new cyber GRC capability from the ground up within a growing Group Security function, reporting to the Head of Cyber Security, Compliance and Risk Management. You'll design the security controls framework, develop risk methodology and KRIs/KPIs, lead Cyber Essentials and ISO 27001 compliance, and manage audit and third-party assurance. Distinct for its greenfield ownership and Board-level reporting remit.

Adecco · London · £473 – £800 pd

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

HAYS Specialist Recruitment · Manchester · £40,000 – £46,500 pa

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with a managed service provider on alerts, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance alongside the Cyber Security Manager.

Ricoh · London

Supports security governance, technology risk and controls across a European IT environment, working with infrastructure, cloud, identity and operational teams. Owns the IT Security Risk Register, facilitates risk assessments, assesses control effectiveness and translates ISO 27001 and NIST CSF frameworks into practical operational controls, including audit and compliance support.

Altech Group Ltd · Manchester · £40,000 pa

Supporting and coordinating internal and external audits to keep a fintech business compliant with regulatory, security and governance obligations. The role involves planning and conducting audits, reviewing internal controls, gathering evidence and working with frameworks such as ISO 27001, SOC 2 and PCI-DSS alongside stakeholders across the organisation.

Vermelo RPO · Salford

Owns the end-to-end lifecycle of security products such as IAM, EDR, SIEM and cloud security, defining roadmaps, backlogs and measurable outcomes around risk reduction and adoption. Works with engineering, GRC and vendors to ensure controls are usable, auditable and aligned to business needs, balancing risk, cost and usability.

eFinancialCareers · London

Hands-on third-party risk assessments across the full vendor lifecycle, from due diligence and onboarding through periodic review and exit, with a focus on technology suppliers. Reviewing vendor evidence such as questionnaires, SOC reports and policies, challenging responses and tracking remediation to closure. Output feeds directly into risk committees and governance forums, with high volumes tied to PRA SS2/21, FCA SYSC 8, DORA and EBA outsourcing requirements.