Cyber Security Jobs

• Guildford
• Mid-level

Owns cybersecurity and information assurance workstreams, including certification assurance for ISO 27001, CE+ and DCC, Secure by Design reviews of infrastructure, cloud and application designs, and coordination of ITHCs, penetration testing and vulnerability remediation. Also manages supplier security compliance, Security Aspect Letters, spacecraft space licensing security, project security budgets and incident response duties within a defence programme context.

ISO 27001 · NIST SP 800-53 · CE+ +6

• Reading
• Hybrid
• £50,000 pa

Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.

COBIT · COSO · ISO 27001

• London
• Hybrid · 2 days in office
• £75,000 – £125,000 pa
• Director

A senior, hands-on individual-contributor role setting information security direction for an international organisation, reporting to the Global Head of Technology. You will define standards and proportionate controls, challenge network, infrastructure and cloud configurations, and provide oversight of vulnerability management, monitoring and incident response, with no security team to manage.

Microsoft 365 · Azure · NIST CSF +3

• Reading
• Hybrid
• £60 – £70 ph
• Lead
• Contract

Lead the design and implementation of secure OT/ICS cybersecurity architectures, conduct risk assessments and assurance activities, and apply frameworks such as IEC 62443, NCSC CAF, NIS Regulations and ONR SAPs. Provide technical leadership across critical national infrastructure, nuclear and defence programmes, engaging senior stakeholders and regulatory bodies, with some bid and client relationship work.

IEC 62443 · NCSC Cyber Assessment Framework · NIS Regulations +1

• Wolverhampton
• Lead · manages people

Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.

CCTV · EASA Part-IS · AirCyber +7

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• London
• Hybrid · 2–3 days in office
• £100,000 – £110,000 pa
• Director · manages people

Leads a five-person information security and governance function within a government body's compliance team, owning the information management system and its audit cycle. Ensures compliance with ISO 27001, Cyber Essentials (Plus), NIST and GovAssure, covering control documentation, third-party risk and security awareness. Hybrid role with two to three days a week in the South London office.

ISO 27001 · Cyber Essentials · Cyber Essentials Plus +2

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus

• London
• Hybrid
• £70,000 – £75,000 pa
• Senior
• Permanent

This role involves leading information security governance, risk management, and compliance activities within a multinational organisation. The Information Security Manager will drive security risk assessments, audit programmes, and regulatory certification efforts including ISO 27001, PCI DSS, and NIS2. With a focus on cloud security governance, the role requires strong engagement with senior stakeholders and expertise in securing AWS and Azure environments.

• London
• Hybrid
• £80,000 – £100,000 pa
• Senior
• Permanent

Defines and delivers secure architectures across enterprise IT and operational technology environments, working with technical and solution architects to embed security through the design lifecycle. Applies threat modelling, NIST/ISO/CIS frameworks and advises on protective monitoring, IAM and risk mitigation. Client-facing, requiring active SC clearance and strong stakeholder communication.

NIST · ISO · CIS +1

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7

• Corsham
• Hybrid
• £550 – £600 pd
• Lead
• Contract

Lead enterprise vulnerability management and cyber risk reduction in a secure MOD/Defence environment, owning frameworks, policies and remediation governance. Coordinate identification, prioritisation and remediation across enterprise systems, optimise tools such as Tanium and Elastic, apply CVSS, and produce board-level reporting. Also supports major cyber security incident management and threat intelligence correlation.

Tanium · Elastic

• Farnborough
• Hybrid
• Mid-level
• Permanent

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

CIS · STIG · NIST +2

• United Kingdom
• Remote
• Senior · manages people

Monitors and performs in-depth analysis of security alerts across Windows, Mac and Linux, handling incidents end to end including malware analysis and remote remediation. Acts as technical escalation point and mentor for junior analysts while improving detection and triage processes in a virtual security operations centre.

CrowdStrike · Windows · Mac +10