Offres Security à LeedsCréer des alertes d'emploi

As the Information Security and Risk Manager, you are the central leader responsible for the company's overall security and compliance posture. Animate "Security by Design" meetings and review proposed architectures with engineering teams from a security perspective. Your duties include coordinating

Aviation Security Officer Part Time (Leeds Bradford Airport).Leeds Bradford Airport is one of the UKs fastest-growing regional airports, and were committed to employing high-quality people who share our ambition and dedication to excellent customer service.In this vital frontline role, youll embody

Cyber Practice Claranet’s Cyber Practice is dynamic and fast-moving, delivering a comprehensive range of professional services and managed services both onsite and remotely. The Cyber Practice consists of highly skilled professionals delivering a myriad of offensive security testing and governance, risk, and compliance (GRC) services in support of Claranet’s vision. Taking a customer first approach, Claranet’s Cyber Practice prides itself in providing world-class services designed to meet the specific and individual needs of all customers, across all industries. Position Summary As a Security Consultant, you will be responsible for delivering customer projects across a range of GRC services in line with your current capabilities, and future capabilities after suitable training/mentoring. You will be responsible for providing professional service delivery including but not limited to; consultancy services and audit / assessment services against multiple security compliance frameworks/standards, and delivery of other GRC consultancy services as required to service our customers’ needs. This role will require additional activities as part of your job responsibilities to support the delivery of services which will include, but not limited to; customer scoping calls and scoping activities, quality assurance activities, customer project admin/planning, service development activities, internal collaboration with other Claranet teams to provide and support customer project delivery, shadowing and mentoring where appropriate. Beyond this, you may work with other stakeholders across the wider business in support of Claranet’s mission building new and exciting services, enhancing, and improving existing service offerings, and delivering additional services within the Cyber Practice function. Role Mission Claranet UK’s strategy is to build long-term, trusted relationships with its customers by delivering market-leading, integrated managed services. We are seeking a security consultant to deliver high-quality security services to meet the needs of our customers and to contribute to the continued development of our market-leading portfolio designed to meet the growing and diverse needs of our customers. Objectives & Key Results The Security Consultant is part of the Cyber Practice. The Key Objectives & Results Will Be To: • Successful delivery of customer GRC projects across the range of the Cyber Practice GRC services, in line with both employee capabilities and business needs, • Pursue customer satisfaction by delivering projects to a high standard, meeting customer and company expectations, • Proactively support a knowledge sharing culture between GRC team members and the wider Claranet family All Security Consultants • Perform consultancy and audit/assessment activities during delivery of customer projects across the range of the Cyber Security GRC services, in line with both employee capabilities and business need, • Interact professionally with customers across a variety of channels, ensuring timely progression of projects and the ongoing development of longstanding trust-based customer relationships, • Provide ongoing support and guidance to customers to help them achieve their goals and ambitions, • As necessary, create and maintain documentation supporting the delivery of Cyber Security GRC services, • Perform QA (Quality Assurance) reviews of reports produced by the Cyber Security function’s GRC Team, • Where necessary, assist with the development and growth of the Cyber Security function’s such as, product / service improvement or creating cutting-edge training material for internal and external delivery Teams To Collaborate With • Customer Experience & Managed Services – Ensure we are consistently providing the best service to our customers, proactively monitoring their needs, and integrating their feedback into our future portfolio and propositions, • Technology Practices & Delivery – Support efforts to embed GRC services into customer solutions, Claranet services, • Finance – Submission of any work-related expenses Behavioural Competencies – Organisational & Behavioural Fit • Customer facing, able to represent Claranet confidently and professionally, • Willing to travel to deliver onsite work as required, • Ability to identify improvements through inquisitiveness, share ideas constructively and work collaboratively with a variety of colleagues to deploy change, • Self-motivated and able to work both independently as well as part of a dynamic team, • Accountable by delivering on promises and pursuing growth and personal improvement where developmental feedback is received Critical Competencies – Technical Fit • Good understanding of at least one audit framework; PCI DSS, ISO 27001, Cyber Essentials, NIST, SOC 2, NIS2, Microsoft 365 Certification, etc, • Ability to deliver, without supervision/support, at least one Cyber Practice GRC service, • Aptitude for understanding, interpreting, and applying objective standards to specific responses, • Working under pressure of varying deadlines and priorities, and managing workload accordingly, • Ability to quickly learn and understand new skills and technologies specific to the Cyber Security industry Desirable Competencies • Exposure to multiple industry audit/compliance frameworks; PCI DSS, ISO 27001, Cyber Essentials, NIST, SOC 2, NIS2, etc, • Exposure to Amazon AWS, Microsoft Azure or Google GCPs cloud platforms, • Data Privacy Experience, e.g. GDPR, DPA2018

Microsoft Cloud Security Consultant £65,000 – £75,000 + Profit Share Bonus + Training Budget Remote (occasional office or customer travel) Company & Role Imagine working somewhere that truly lives Microsoft Security. Where the people you collaborate with are not just skilled, but passionate about building smarter, safer cloud environments. This Microsoft Partner has built its name on exactly that, delivering exceptional security solutions that protect, empower, and evolve with their customers. They are a proud member of MISA, operate a 24/7 MXDR service, and are trusted by some of the UK’s most security-conscious organisations. Here, you will not just implement technology, you will shape how modern security looks and feels within the Microsoft ecosystem. As a Microsoft Cloud Security Consultant, you will help design, craft, and deploy Microsoft Security solutions that make a genuine difference. Every project you touch will strengthen digital resilience and push the boundaries of what is possible with Microsoft Defender and Purview. Why This Role Stands Out • You will join one of the UK’s most respected Microsoft Security teams, a partner that has earned its credibility through delivery, not marketing., • You will get the freedom to explore, learn and innovate, with training days and a dedicated personal development budget designed around you., • You will share in the company’s success through a profit-sharing bonus scheme., • You will work remotely most of the time, with the occasional in-person day for collaboration, learning, or customer workshops. What You’ll Be Doing • Designing and delivering Microsoft Cloud Security solutions that are robust, scalable and modern., • Deploying and configuring Microsoft Defender tools, including: Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365 etc., • Leading engagements around Microsoft Purview, covering: Data Loss Prevention (DLP), Information Protection and Sensitivity Labelling, Insider Risk Management, Data Lifecycle Management, Compliance and eDiscovery, • Acting as a trusted technical voice for customers, helping them turn security goals into tangible outcomes., • Collaborating with a close-knit team of experts who value curiosity, teamwork, and excellence. What You’ll Bring • Hands-on experience delivering Microsoft Security solutions in enterprise environments., • A solid grounding across Microsoft Defender and Purview technologies., • A proactive mindset, someone who enjoys exploring new features and bringing ideas to the table., • Certifications such as SC-100, SC-200, SC-300, SC-400/SC-401, or AZ-500 are great to have, but genuine passion counts for more., • The ability to balance technical precision with real-world business impact., • If you want to be part of a company that believes security can be intelligent, elegant, and empowering, this is the place where your expertise will truly matter.

M365 / Purview Consultant – Security & AI (Level 300–400) – EMEA A leading global organisation is looking for a Purview-focused M365 Security & AI Consultant (Level 300–400) with strong experience across Microsoft Purview, and good exposure to Copilot and Defender. You’ll help enterprise customers govern sensitive data, meet compliance needs and safely adopt AI within their M365 estate – owning the journey from technical design through to enablement and adoption. Key Responsibilities: • Lead design and delivery of Purview-centric security, compliance and data governance solutions in complex M365 environments., • Configure and optimise Purview policies and controls including Information Protection, DLP, sensitivity labels, Insider Risk, Data Lifecycle and eDiscovery., • Support Copilot for M365 readiness and adoption – ensuring the right permissions, data access and governance are in place., • Contribute to Defender-aligned controls (endpoint, identity, mail, cloud apps/XDR) where they intersect with data protection and compliance., • Run workshops, training and clinics for security, compliance, IT and business stakeholders – including safe Copilot usage and effective prompting., • Lead adoption and change activities (champion programmes, communications, best-practice guidance) to maximise value from existing security & AI capabilities., • Act as a trusted advisor on data protection, compliance and security-by-design in line with regulatory and industry expectations. Skills & Experience: • Strong, hands-on experience in Microsoft Purview at Level 300–400 depth, covering several of:, • Information Protection & sensitivity labels, • Data Loss Prevention (DLP), • Insider Risk, • eDiscovery / Audit, • Data Lifecycle & records management, • Exposure to and interest in:, • Copilot for M365 – readiness, licensing, data access and governance, permissions, safe AI usage, • Defender – particularly where it supports data and identity protection, • Solid understanding of M365 security, compliance and governance capabilities., • Proven track record delivering enterprise-scale security/compliance/AI projects in M365 environments., • Excellent stakeholder skills – able to communicate with security teams, compliance, IT leadership and business owners. Desirable: • Experience delivering large-scale M365 security, compliance or data governance programmes., • Background in AI adoption and change management, ideally in regulated or security-sensitive environments., • Familiarity with Power Platform, security/compliance portals, XDR consoles, Graph APIs and third-party integrations., • Additional European language skills (e.g. Italian) are a strong plus but not essential for this role. Please apply for immediate consideration and to discuss further.

At present we are working with a leading organisation who have a need for a motivated, skilled Cybersecurity Consultant who will be involved in projects from beginning to end across multiple sectors. This could be an ideal role for someone who is looking to take their career to the next level by having more input into organisations as you help them strengthen their security posture, conduct vital areas such as vulnerability analysis and security audits that meet recommended industry standards. You will be working closely with stakeholders in order to implement Cybersecurity strategies, manage client information and provide expertise across all areas of Cybersecurity.. Key Responsibilities • Conduct detailed risk assessments and gap analysis for client environments, • Deliver control reviews and maturity assessments aligned to relevant frameworks (ISO 27001, NIST, CIS, Cyber Essentials/Plus), • Perform vulnerability assessments and develop mitigation strategies, • Support the deployment of Managed Detection and Response (MDR), Penetration Testing, and Data Loss Prevention (DLP) solutions, • Advise clients on governance, incident response, and security awareness training Skills & Experience • Proven experience in a Cybersecurity consultancy role, • Professional certifications such as CISSP or CISM, • Strong working knowledge of ISO 27001, NIST and Cyber Essentials/Plus, • Proficiency with vulnerability management, endpoint protection and SIEM tools The role is genuinely exciting with a forward thinking business who have their employees careers at the forefront of their minds and due to the nature of this opportunity we don't anticipate this being around for long - do not delay, get your application in today to be in consideration. NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.

📣🚨Information & Cyber Security Consultant - Inside IR35 - REMOTE - £600 p/d 🚨📣 - SC Clearance Preferential Looking to speak with ideally SC Cleared Info & Cyber Sec consultants interested in helping a hugely complex org assure a business transformation programme. Especially want to hear from candidates with Data Residency experience! Must have experience with: 1. Security Assurance of Projects / Change Initiatives, 2. Working in a complex environment with lots of moving parts, 3. Technical Cyber and GRC, 4. Data Residency experience, 5. Professional Services experience ⏳ 6 months minimum ⏱ Immediate start 🏢 Remote 📃Inside IR35 💸£600 per day Please send the following to to be considered: • CV, • Day rate requirement, • Availability, • Experience in the 5 requirements listed above in the description Recommendations / referrals welcome! BR, Ash

Project Manager - Cyber Security Maturity Programme (Contract) £400-450 per day, outside IR35 Remote with occasional office visits during the contract It's imperative the successful candidate can start, early to mid Jan 2026 Company & role This organisation operates in a regulated environment and is refreshing its cyber maturity programme. There is already a lot happening, but it needs structure, direction and control. They are looking for a Project Manager who can shape the programme and keep the ship on course while it takes form. This is about clarity, governance and momentum, not long term delivery ownership. Why This Role Stands Out • You are shaping the programme, not just tracking tasks, • You will bring order to fragmented activity and create a single coherent plan, • You act as the steady hand, keeping everything aligned while the foundations are built, • You influence direction without being dragged into full scale delivery, • Clear three month scope with a defined outcome and clean handover Key Responsibilities • Design and document the overall cyber maturity programme structure, • Define scope, milestones, dependencies, risks and outcomes, • Consolidate multiple disconnected documents into one clear programme view, • Engage cyber, IT and operational stakeholders to clarify requirements, • Translate messy inputs into structured programme components with ownership, • Maintain oversight to keep work aligned and prevent drift during shaping, • Build a realistic timeline that reflects business and regulatory constraints, • Produce programme artefacts suitable for internal and external scrutiny, • Create a full handover pack for teams who will run delivery, • Document assumptions and risks to support leadership decisions, • Ensure alignment with regulatory expectations typical of utility environments Ideal Experience • Strong background in programme or project planning within complex organisations, • Proven experience shaping programmes from scratch, • Excellent documentation and structuring skills, • Comfortable working across technical and non technical stakeholders, • Experience in utilities, critical national infrastructure or regulated sectors is a bonus, • Exposure to cyber or IT programmes, • Confident communicator who challenges ambiguity and keeps people aligned

Job Profile We are seeking an experienced Cyber Incident Response Consultant to design and implement a robust, organisation-wide Cyber Incident Response capability. This role will lead the creation of clear, actionable plans and playbooks to ensure the business is fully prepared to respond effectively to cyber incidents. Responsibilities • Design and deliver a fully documented Cyber Incident Response Plan from the ground up, • Develop scenario-based incident response playbooks covering ransomware, DDoS, phishing, and data breaches, • Identify and define key decision-makers, escalation paths, and governance during incidents, • Establish a crisis communications strategy, working closely with internal communications teams, • Lead the implementation of incident response processes across the organisation, ensuring adoption and compliance, • Support and facilitate cyber tabletop exercises, incorporating lessons learned into continuous improvement, • Produce executive-level summaries, recommendations, and (where required) a roadmap for future maturity and testing Skills • 5+ years’ experience in cybersecurity incident response, SOC leadership, or security operations, • Proven track record of developing and implementing incident response plans and playbooks, • Hands-on experience consulting on real-world cyber incidents, • Strong understanding of modern cyber threats, including ransomware and data breaches, • Experience running tabletop exercises and post-incident reviews, • Ability to engage confidently with senior stakeholders and executives

🔐 We’re Hiring: OT/ICS Cyber Security Consultant 📍 Stone, UK | 💼 Full-time | Capula (part of the EDF Group) is a leader in advanced system integration across energy, water, renewables, and manufacturing. We’re seeking an experienced OT/ICS Cyber Security Consultant to join our growing team and help secure some of the UK’s most critical infrastructure. 🛠️ What You’ll Do: • Lead red team activities: penetration testing, threat emulation, resilience validation, • Support blue team functions: architecture, compliance, monitoring, incident response, • Develop attack scenarios using MITRE ATT&CK for ICS, • Conduct risk assessments and support standards like IEC 62443 & NIST SP800-82, • Collaborate with stakeholders and contribute to training, reporting, and continuous improvement ✅ What You’ll Bring: • 3–5 years in cyber security, ideally in OT/ICS environments, • Experience with SCADA, PLCs, RTUs, and ICS protocols (MODBUS, OPC, DNP3), • Hands-on offensive security skills (pen testing, threat modelling), • At least one ICS/OT certification (e.g., GICSP, GRID, IEC 62443), • Eligible for SC clearance and UK Cyber Security Council registration 🎁 What We Offer: • 28 days holiday + bank holidays, • Flexible working & private healthcare, • Pension, life assurance & mental health support, • Cycle to work & green car schemes, • Support for chartered membership (IET, BCS, CIISEC) We’re committed to inclusion and welcome applications from all backgrounds. 📩 Apply now or email your CV and cover letter to , quoting job reference SS-2025-22.

Job title: Security Consultant Location: UK Remote Contract: 9 months, Outside IR35 Why Apply? This contract role offers the opportunity to play a key part in strengthening an established Secure SDLC within a complex, large-scale environment. You'll work across application security and project delivery, influencing how security is embedded throughout the lifecycle and helping teams build solutions securely from the outset. Responsibilities: • Lead improvements to the Secure Software Development Lifecycle, aligned to NIST CSF 2.0., • Act as an Application Security / Project Guardian, embedding security across delivery lifecycles., • Review and tighten existing vulnerability management practices., • Define and document end-to-end security requirements in a clear, accessible format for delivery teams., • Ensure security controls are applied at the right stage of projects, regardless of entry point., • Bring together application, platform, cloud, and infrastructure security to ensure cohesive SDLC controls., • Validate that back-end and platform security controls are correctly implemented and fit for purpose., • Operate as a trusted internal security advisor, balancing risk, delivery timelines, and business objectives. Requirements: • Proven experience improving Secure SDLC maturity within complex environments., • Strong knowledge of NIST CSF, application security, and secure-by-design principles., • Experience working with ISMS environments., • Hands-on capability across vulnerability management, security assessments, and control validation., • Ability to translate security requirements into practical, delivery-ready guidance., • Experience working autonomously across multiple teams with competing priorities., • Strong understanding of cloud and platform security (AWS, Kubernetes, APIs, IAM)., • Pragmatic approach to risk management in agile delivery environments. We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.

Kerberos Security Consultant - SC Cleared Whitehall Resources are currently looking for a Kerberos Security Consultant - SC Cleared on a Remote basis for an initial 6 Week contract. * INSIDE IR35 * * MUST HOLD ACTIVE SC CLEARANCE * Key Responsibilities: • Active Directory Security Assessment, • Conduct a detailed technical review of the Active Directory environment, focusing on domain controllers, trusts, and Privileged Access behaviours. Identify deprecated accounts and protocols and risks associated with KRBTGT accounts and delegated admin structures., • KRBTGT and Privileged Account Management, • Review current management processes for the KRBTGT account and assist in safely rotating passwords in accordance with Microsoft and NCSC best practice. Analyse privileged group memberships (Domain Admins, Enterprise Admins, etc) and provide risk-based remediations., • Deprecated Protocol Review and Hardening, • Identify and report on legacy or insecure protocols., • Kerberos and Authentication Hygiene, • Analyse Kerberos ticket anomalies. Recommend mitigations, including key rotations and enhanced monitoring., • Azure AD and Hybrid Identity Assessment, • Review Azure AD integration, synchronisations, and hybrid identity configurations. Ensure alignment with zero-trust principles and NCSC cloud security guidance., • Service and Tier-0 Asset Review, • Evaluate service accounts, GOPs, and Tier-0 asset protection. Recommend controls for securing Privileged Access Workstations (PAW), Cloud Privileged Access Workstations, and implementation of Privileged Identity Management (PIM) and Privileged Access Management (PAM)., • Reporting and Advisory Engagement, • Provide input for summary and technical reporting, including findings, risks and remediation plans. Provide clear prioritisation for mitigations and roadmaps., • Mitigation Support, • Support internal teams with implementation of password rotations, Entra configuration, changes and policy updates. Validate that changes align with best practice and NCSC guidance. Key Deliverables: • AD/Entra Assessment Report, • Document findings, mapped to Microsoft and NCSC best practice., • KRBTGT and Privileged Account management plan, • Detailed plan for secret rotation, privileged account management., • Deprecated Protocol Remediation Plan, • Recommendation and implementation guidance to deprecate insecure protocols and enforce authentication., • Updated Entra Baseline, • Provide a hardened configuration baseline in line with Microsoft and NCSC best practice., • Risk Report, • Risk report for both internal and executive stakeholders. Essential Skills and Experience: • Advanced understanding of Microsoft Active Directory / Entra, Group Policy, Kerberos, and hybrid identity (On-Prem and Entra ID)., • Strong knowledge of Privileged Access Management (PAM/PIM) and secure authentication protocols., • Standards and Frameworks, • Proven experience of applying NCSC guidance and Microsoft best practice., • Security Hardening, • Practical experience hardening authentication mechanisms (Kerberos, NTLMv2, LDAP signing), and implementing secure administrative practice (PAW/PIM, JiT), • Advisory Capability, • Ability to engage with technical and non-technical stakeholders, translate complex findings in actionable mitigations and recommendations., • Experience with Agile methodologies & skills., • Curiosity, continuous learning and willingness to get hands-on when needed All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description. Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.

Cyber Security academy Manager Overview: The Deputy will report directly to the Academy Director and will be responsible for managing a team of cyber trainers and overseeing all professional, operational and technical training aspects at the academy, including Capture the Flag (CTF) programs, courses (blue/red cyber focused), and other practical training activities. A key part of the role will also involve delivering training directly when required—acting as an instructor/facilitator for courses, labs, and workshops, and supporting delivery during peak periods or specialist modules. Company Overview Our client delivers tailored cyber training and specialised products supported by modern technology and deep operational experience. Their programmes include realistic simulation environments, practical lab-based learning, and fully customised training paths that reflect the latest industry needs and emerging threats. Their work supports government, defence, and commercial organisations, enabling teams to develop real-world capability in secure, controlled and immersive settings. They continue to invest heavily in research and development to ensure their solutions remain relevant, effective, and future-focused. Key Responsibilities: • Lead the academy's training and course delivery., • Directly manage a team of trainers, ensuring professional development, effective teaching, and alignment with program objectives., • Organize and oversee technical training activities, including Capture the Flag (CTF) events, practical labs, and hands-on exercises, focusing on red and blue cybersecurity., • Develop, implement, and assess the technical curriculum to ensure it aligns with industry and military requirements., • Collaborate with the Academy Manager to ensure smooth program operations and contribute to strategic decision-making., • Ensure the academic quality of all courses and training programs, adjusting and improving them as needed. Qualifications: • Advanced degree in Cyber Security or a closely related field., • Extensive experience in cyber security training, with a strong technical background., • Proven leadership and experience managing academic or technical teams, preferably in a military or technical setting., • Fluent English Package: • Competitive base salary (DOE), • Full coverage of travel expenses, • Fully furnished accommodation with an office (relocation is required for this role), • No income tax (due to the nature of the location), • Full medical cover

Information Security Manager £70,000 - £80,000 plus bonus The Organisation Nigel Wright are delighted to be partnering with the Institute of Directors in the search for an Information Security Manager. The Institute of Directors (IoD) is a thriving membership community for Directors in the UK and beyond, where you can connect with other leaders, develop your skills and be heard. The IoD offers professional development, valuable connections and influence. With over 20,000 members across the UK and globally, the IoD has exciting plans for growth and the success of their strategy is underpinned by technology. The Information Security Manager will play a central role in maintaining and strengthening the IoD’s information and cyber security posture during a period of significant technology transformation. This is an exciting opportunity to work within a small and highly supportive team, where you will be involved in all aspects of information and cyber security, spanning governance, risk, assurance, incident response, supplier oversight, culture and strategic change. You will employed on a remote contract with occasional travel to their HQ in London. Unfortunately, the IoD is unable to sponsor visas, so candidates must have a permanent right to work in the UK. The Role In this new role, you will lead in delivering and refining the organisation’s information security, providing day-to-day leadership in security governance, policy management, assurance reporting and internal incident coordination. Specifically you will: • Ensure compliance with frameworks (NIST) and achieve Cyber Essentials accreditation., • Oversee policies, risk management, supplier assurance and incident response coordination., • Implement and maintain security policies and controls., • Manage third-party security services (e.g., SOC provider)., • Provide contextual awareness during incidents and prioritise recovery actions., • Conduct supplier contract reviews for security compliance., • Support security awareness and training across the organisation. Person Specification With experience of implementing or managing an information security strategy, you will possess a strong understanding of information security governance, risk management, policy development, incident management and organisational controls. Ideally with a professional Information/Cyber Security certification such as CISM or CISSP, you will also have: • Experience engaging with incident response teams, SOC providers and external assurance bodies., • The ability to work confidently with a wide range of stakeholders, from operational teams to senior executives, often explaining technical concepts to non-technical audiences, • The aptitude to translate strategic security goals into operational deliverables and measurable outcomes. Most importantly you will possess excellent communication, analytical, prioritisation, problem solving and influencing skills, be self-motivated and possess the ability to thrive in a remote-first setting.

HMRC- Chief Security Officer- SCS2 £100,000 up to a maximum of £162,500 per annum for an exceptional candidate. Belfast, Birmingham, Bristol, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, London (100 Parliament Street, Croydon or Stratford), Manchester, Newcastle, Nottingham, Portsmouth or Telford. Regular travel to multiple locations is expected. We work on a hybrid basis with a minimum of 60% of our working time required to be spent in an office location Please note, salary is dependent upon experience and the band maximum is not guaranteed. For existing Civil Servants, Standard Civil Service pay rules apply. About HMRC Almost every individual and business in the UK is a direct customer of HMRC, as we collect the money that pays for the UK’s public services and gives people who need it vital financial support. Over recent and coming years, our work never has been, nor will be, more critical as we rebuild and secure our nation’s future. With these demands in mind, and as one of the largest and most digitally focussed organisations in the UK, sits the role of Chief Security Officer. As an organisation ever driving towards a high performing trusted and modern tax administration system which is closing the tax gap and becoming ever more agile in serving the British public- promoting sustainable economic growth and supporting millions across the UK and beyond. You will be securing one of the richest data sets available on UK citizens, and as Chief Security Officer, you will have the awesome responsibility for securing the vehicle by which the UK funds itself- leading a team responsible for people data and systems security, collaborating with cross government partners and leading on collaborative security initiatives to deliver a best in class operation across the civil service. As an established and accomplished leader with significant credibility, you will be comfortable operating at both the strategic and operational levels, setting a clear and tangible vision. You will also use your influence and collaborative skills to build consensus and drive delivery across the entire enterprise to ensure platforms, data, and services, are safeguarded against evolving threats. You will bring strategic vision, technical expertise, and strong leadership to a complex and fast-paced environment, shaping the future of security across one of the UK’s largest public sector organisations. To deliver this vital agenda, as Chief Security Officer you will: • Lead on HMRC’s security and data protection (GDPR) strategic vision, direction, and budget, ensuring alignment with organisational objectives., • Provide strategic and operational leadership to HMRC’s Security Function (circa 400 personnel)., • Oversee the operations and strategic direction of a Fraud Prevention Centre (circa 100 personnel)., • Adopt a proactive and engaged stakeholder management strategy both internally and across government to maintain and develop the credibility and trust in the Security function at HMRC., • Establish and maintain HMRC’s security program to ensure that information assets, associated technology, applications, systems, infrastructure, and processes are adequately protected., • As a key member of the CDIOs SLT, contribute to overall CDIO policy making and strategy for infrastructure and application services, including strategic planning and procurement decisions., • Lead, motivate, develop, and appraise team members, building a customer-centric, effective, and coherent security culture. Essential Criteria: • Professional Expertise & Standards - demonstrates a deep and current understanding of information security principles, technologies, and control frameworks. This is evidenced by relevant academic qualifications (degree or postgraduate highly desirable) and professional certifications such as CISSP, CISM, or equivalent. Shows a strong commitment to delivering against recognised industry standards and best practices., • Executive Security Leadership - proven strategic leadership in managing security, risk, and compliance across large-scale, complex IT environments. Brings an outstanding track record of shaping and delivering enterprise-wide security programmes that support organisational resilience and regulatory compliance., • Technical Authority & Innovation - extensive technical expertise across multiple domains of security and compliance, with the ability to exercise independent judgment and make high-impact decisions. Demonstrates a forward-looking approach to emerging threats, including experience in researching and implementing innovative solutions such as Zero Trust architectures, secure AI, and other cutting-edge security models., • Strategic Influence & Stakeholder Management - exceptional influencing, negotiation, and relationship-building skills, with a proven ability to engage and maintain trust with senior stakeholders across government, industry, and third-party providers. Able to align security strategy with broader organisational goals through effective cross-functional collaboration., • Organisational Change & Vision - demonstrable experience in anticipating and preparing for major organisational or technological shifts, including emerging cyber threats. Confidently leads through uncertainty, ensuring the organisation remains agile, informed, and resilient., • Team Leadership & Development - proven ability to build, lead, and develop high-performing teams across multiple locations. Skilled in empowering senior managers and specialists within the security and compliance disciplines, fostering a culture of excellence, accountability, and continuous improvement. This role is open to public sector and private sector candidates and would suit someone with experience of working inside large scale organisations. Your work will impact tens of millions of citizens and many businesses across the UK and abroad and represents an opportunity to lead and influence Security strategy at a scale rarely matched and at the highest levels within the civil service. For further information or to apply please email or contact Dave Flynn on 020 8253 1806 to arrange an informal conversation.

OT Security Compliance Consultant – IEC 62443 Contract / Interim 📍 UK-based | Remote ⏳ Initial duration: 6–8 weeks (extension highly likely) 🔐 Active SC clearance required Context & Objective We are supporting a critical public-sector programme requiring immediate reinforcement of OT cybersecurity compliance. This interim consultancy role focuses on the review, restructuring and alignment of a Cyber Security Management System (CSMS) for Industrial Automation and Control Systems (IACS), in line with IEC 62443. The engagement is driven by a regulatory action and operates against non-negotiable deadlines, making this a hands-on, delivery-focused role for an experienced OT security professional who can operate autonomously and with confidence. Your Role As an OT Security Compliance Consultant, you will take ownership of reviewing and reworking an existing CSMS framework to ensure alignment with IEC 62443 requirements. You will operate at a mid-to-senior delivery level, with direct stakeholder access and minimal oversight. Key Responsibilities • Review and restructure the existing Cyber Security Management System (CSMS) for IACS environments, • Ensure full alignment with IEC 62443 principles and controls, • Assess existing OT security policies and documentation, identifying gaps and remediation actions, • Support the completion of CSMS documentation within a fixed regulatory deadline, • Define and structure a pragmatic audit schedule aligned to IEC 62443 expectations, • Provide clear, actionable input to support compliance readiness, • Work independently, reporting progress and risks directly to the engagement lead Required Experience & Skills • Strong background in OT / IACS cybersecurity, • Practical, hands-on experience with IEC 62443 (not theoretical only), • an OT/IACS security specialist, or, • a senior IT security consultant with proven, hands-on OT exposure, • Comfortable working autonomously under time pressure, • Able to deliver structured, regulator-ready outputs Logistics & Contract Details • Contract / interim engagement, • UK-based candidates only, • Remote working, • Active SC clearance is mandatory, • Target start date: week commencing 12 January, • Initial duration: ~6–8 weeks (to early March), with strong likelihood of extension Why This Role Is Attractive • Direct involvement in a nationally critical OT security programme, • Hands-on application of IEC 62443 in a real operational context, • High-impact, short-term engagement with clear outcomes, • Strong potential for follow-on work across OT risk, audit and resilience programmes, • Opportunity to position yourself as a trusted OT compliance specialist for future engagements

Your role As an Operational Technology Security Consultant, you’ll collaborate with clients and colleagues to deliver security-focused activities across one or more of the following areas: • Conducting site surveys to help clients identify systems in their OT environments (including offshore locations), • Assessing systems and network security for compliance and best practice and performing risk assessments, • Developing OT security policies and procedures to support safe and resilient operations, • Performing audits and gap analyses to help clients maintain compliance and improve security, • Providing practical advice and guidance to help clients address OT security challenges, act as trusted advisor, • Producing security artefacts for future use cases and delivery of OT training. Your skills and experience We welcome applicants from all backgrounds and experiences. You may have experience in one or more of the following areas: • Working in OT environments with a focus on security, across industries such as energy, oil and gas, chemicals, pharmaceuticals, or manufacturing, • OT-related network architecture, endpoint protection, governance, and awareness initiatives, • Supporting organisations in developing roadmaps and processes to improve OT security, • Leading or contributing to assessments and evaluations of OT environments, including analysis and reporting, • Understanding OT security controls and how they apply to large organisations Your security clearance To be successfully appointed to this role, it is a requirement to obtain ___. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Security Assurance Consultant Location – Hybrid, 3 days in the office (locations include Glasgow, Newcastle, Leeds, Sheffield, Manchester, Birmingham, Blackpool, Cardiff, London) Salary: £50,000 - £65,000 An exciting opportunity has arisen for a Security Assurance Consultant to join a collaborative and forward-thinking team responsible for safeguarding information, systems, and people. This role plays a key part in supporting a major public sector client to protect sensitive data, uphold compliance standards, and maintain the security of both staff and service users. As a Security Assurance Consultant, you will analyse and interpret complex information, assess the effectiveness of security controls, and support the production of high-quality assurance reports. Working closely with the Security Assurance SEO and wider security function, you’ll contribute directly to maintaining a secure and resilient environment that enables the organisation to deliver its critical objectives confidently. Key Responsibilities: • Support the assessment of people, process, and technology controls to form a clear view of overall security posture., • Record and maintain accurate, evidence-based findings in assurance systems., • Assist in testing security controls and drafting comprehensive assurance reports., • Contribute to incident reviews and provide post-incident assurance support., • Continuously develop knowledge of security frameworks, standards, and risk methodologies., • Represent the Security Assurance function and present findings to key stakeholders. Candidates must hold one of the following certs - CISM, CRISC, CISSP, CISA, CGEIT, or ISO 27001 Lead Auditor Due to the nature of the role a Security clearance is required.

Project Manager Security (German speaking) 6 month contract (outside IR35) Are you a tech savvy, German speaking Project Manager with a strong knowledge of ISO 27001 and KRITIS? You could be joining a tech company on a six-month contract, with a focus on supporting a security audit. As a Project Manager you will be responsible for overseeing the execution and successful delivery of security audits, with a specific focus on compliance with KRITIS (Critical Infrastructure) regulations and ISO 27001 standards. The role demands a strong project management background, a deep understanding of security frameworks, and expertise in risk management and audit processes. You'll provide effective communication and coordination between internal stakeholders including IT, security, compliance, and executive leadership, ensuring alignment on audit goals, scope and timelines. Location / WFH: You can work from home / remotely from anywhere in the UK or Germany with occasional expenses paid travel. About you: • You're an experienced Project Manager with a Project Management Professional (PMP), PRINCE2 certification, • You have a good understanding of information security frameworks, risk management and best practices for implementing security controls have strong experience of ISO 27001 and KRITIS security standards and regulations, ideally you will also BMS / EPMS, • You have fluent English and German language skills, • You have strong leadership skills and can facilitate communication and coordination between the business and technical teams, • You have experience with audit tools and platforms and can evaluate security tools for the audit process Apply now to find out more about this contract Project Manager Security (German speaking) opportunity.

Job Description – Health and Safety Officer Who are we? Stern Energy operates ground-mounted photovoltaic systems with a current capacity of 400 MW in the UK. We are among the largest operators in Europe with activities in 5 countries and over 1.6 GW under management. We are specialised in proposing and executing revamping and repowering projects to enhance the performance of the assets we operate. How do we work? EXPERTISE, RESPONSE, TRANSPARENCY AND PASSION: our values guide our work. Our professional commitment is to translate the expertise gained into maximum plant efficiency and maintenance of long-term performance. We provide an integrated, timely and effective service based on a "Total Quality" approach of experience, know-how and nationwide services. We continually invest in equipment and technology to refine our procedures and operating methods; we provide our services through internal staff to ensure autonomy and maximum responsiveness. Transparency is key to our work so that our customers can rely on constant control of the plants and the quality of services provided. Customer relations is our passion for building a lasting relationship of trust. We have a dedicated internal team of specifically qualified, multi-disciplined engineers boasting significant expertise, all of whom are solution providers. Main responsibilities • Reviewing and managing risk assessments, method statements and permits to work., • Evaluate and update existing health and safety procedures to align with new legislation or policy changes., • Provide guidance, support, technical information and assistance to subcontractors who work on our sites., • Collaborate with departments and the Head of Health and Safety to develop and implement effective, best-practice safety systems., • Supporting accident/incident investigations and Root Cause Analysis (RCA) of near misses and incidents to ensure safe working procedures are being followed in respect to company policy and UK legislation and regulations., • Perform regular site inspections/audits and prepare detailed reports for the Head of Health and Safety. Skills and Qualifications • Strong experience working in a Health and Safetyenvironment., • Highly organised with the ability to prioritise multiple demands., • Experience or an understanding of the electrical or solar PV sector would be of benefit, but is not essential., • Knowledge of UK health and safety standards and legislation., • Strong interpersonal and communication skills., • Relevant certifications (e.g., NEBOSH, IOSH) are a strong advantage., • Experience with ISO 45001 would be of benefit., • Ability to work independently and collaboratively in a hybrid work environment., • Proficiency in English. A great benefits package to include: • Employee Assistance Programme: 3rd party support for help when you need it, • Pension scheme, • Bonus programme, • Company sick pay, • Inflation support scheme, • Team building day., • Great company culture and regular events, • Wellness Wednesday for 30 minutes every week for mindfulness on top of lunch break, • Extensive learning and development programme, • Regular wellbeing check-ins, • Company mobile phone, • Laptop, • 25 days of annual leave plus Bank holidays At Stern Energy, we are deeply committed to promoting equality and inclusion, and we celebrate the diversity of our team—both those who are with us today and those who will join us in the future. We encourage applications from individuals of all backgrounds, regardless of gender, gender identity, national origin, religion, social, cultural, or ethnic background, sex, sexual orientation, age, disability, pregnancy, veteran status, or any other characteristic protected by law. Our hiring decisions are based solely on business needs, job requirements, and qualifications. We strive to be an equal opportunity employer, fostering an inclusive environment where everyone is respected and free from discrimination or harassment.

Revenue Protection Officer- Carlisle Support Services, proudly working in partnership with Northern Trains The Benefits Health and Wellbeing Plans – including our family-friendly maternity policy.Flexible financial support with instant access to earned and.

Revenue Protection Officer- Carlisle Support Services, proudly working in partnership with Northern Trains.Health and Wellbeing Plans – including our.Flexible financial support with instant access to earned and authorised wages.Full induction, ongoing training, and.Fully funded SIA top-up training

A regional healthcare organization in Leeds seeks a Consultant Psychiatrist to lead within the Crisis Resolution Intensive Support Service.This role offers a chance to significantly impact working-age adults facing acute mental health challenges.Responsibilities include providing medical leadership,

Consultant Psychiatrist - CAU & Police Pathways Service. Crisis Assessment Unit & Police Pathways Service (S136 Suite & Street Triage), Becklin Centre, Leeds. While contributing to the overall clinical leadership of the wider Crisis Resolution and Intensive Support Service (CRISS), the primary focus

Crisis Assessment Unit & Police Pathways Service (S136 Suite & Street Triage), Becklin Centre, Leeds.

A prominent healthcare provider in Leeds is seeking a dedicated Consultant Psychiatrist for its Low Secure Forensic Service. Applicants should have experience in forensic psychiatry and be committed to patient care.

A leading mental health service provider in Leeds is looking for a Consultant Psychiatrist to lead the Crisis Assessment Unit and Police Pathways Service.

Revenue Protection Officer- Carlisle Support Services, proudly working in partnership with Northern Trains.Health and Wellbeing Plans – including our.Flexible financial supportwith instant access to earned and authorised wages.Full induction, ongoing training, and.Fully funded SIA top-up training

Get notified about new Enforcement Officer jobs in Leeds, England, United Kingdom.

Crisis Assessment Unit & Police Pathways Service (S136 Suite & Street Triage), Becklin Centre, Leeds. While contributing to the overall clinical leadership of the wider Crisis Resolution and Intensive Support Service (CRISS), the primary focus of the role will be on providing medical leadership and

Chief Information Security Officer (Interim).Chief Information Security Officer (Interim).Chief Information Security Officer (Interim).The CISO is responsible for ensuring that the organisation has a clear vision and direction for cyber security and information security operations.The role will impl

Cognisys is a leading cybersecurity company specialising in Penetration Testing, GRC Consulting, and Managed Security services. You’ll lead and deliver a variety of cyber security governance, risk, and compliance (GRC) engagements from ISO27001 and SOC2 consultancy and internal audits to broader r

We’re supporting a large-scale AWS transformation programme and are looking for an experienced AWS Security Architect to take ownership of cloud security across design, implementation, and migration. This is a hands-on role at the centre of a major AWS estate build, including Landing Zones, IAM de

Lead regional security teams and ensure cohesive operations to deliver effective datacenter security services. The Regional Director of Security Operations (RDSO) leads and develops security operations across a large multinational datacenter client within the EMEA region. Our client is an industry-l

Working closely with the Security Assurance SEO and wider security function, you’ll contribute directly to maintaining a secure and resilient environment that enables the organisation to deliver its critical objectives confidently. Assist in testing security controls and drafting comprehensive ass

OT Security Compliance Consultant – IEC 62443. Cyber Security Management System (CSMS). OT security professional who can operate autonomously and with confidence.

In-depth knowledge and experience in IT Security, including access controls, network security, logging/monitoring, vulnerability assessments, system hardening, secure software development, application security, encryption, and key management best practices etc. In-depth knowledge of IT Security Poli

People who are passionate about Cyber Security and eager to help clients solve complex challenges with top-tier talent. Cyber Security Recruitment Consultant - £85,000. Unlock Limitless Earning Potential and Ownership in Cyber Security Recruitment!.

We are looking for a Security & Compliance Speciallist to own and drive our security and compliance requirements. Proven experience in a security engineering, compliance, or security leadership role. You will work closely with engineering, product, and leadership teams to embed security into everyth

Work across data, cloud, and security teams to deliver seamless enterprise integration.

Experienced in implementing complex integrated security systems technologies e. Experience in integrating large security systems into one single pane of glass. The TPL plays a key role in delivering the company's safety and security technology solutions and services working with the Technical Consul

As an Operational Technology Security Consultant, you’ll collaborate with clients and colleagues to deliver security-focused activities across one or more of the following areas:. Providing practical advice and guidance to help clients address OT security challenges, act as trusted advisor. Produc

Cyber Security Architect, Cloud Security, Azure, AWS, Security Architecture, Zero Trust, NIST, ISO 27001, CIS, Identity Management, Network Security, Encryption, Risk Assessment, Onboarding, SC, NPPV3, NSD. They are expanding their security capability and now require an experienced Cyber Security Ar

The OT Support Engineer is responsible for maintaining and managing operational technology (OT) systems, supporting virtual machine infrastructure, and managing user access while ensuring the security and integrity of critical OT environments. The role includes onboarding/offboarding accounts, facil

Beazley Security is a global cybersecurity firm committed to helping clients enable advanced cyber defenses that reduce risk with quantifiable results. Working within the IT Security function and in close collaboration with the Beazley Security MDR SOC, this role ensures this detection technologies

Experience of selling Cyber Security, FinTech, Fraud, RegTech or Risk solutions. WMtech is trusted by leaders in the Cyber Security, AI and Enterprise Software sectors to advise on talent strategy specifically for Start-Ups. Enterprise Account Manager – Security, FinTech, Fraud, SaaS, Series C, Lo

Responsible in selling security & infrastructure services solutions in the Cloud, Managed Services, Cloud Migration, Cyber Security, Automation, IOT Security, Edge Computing, etc. Infrastructure & Security Services - IMSS). Responsible for coordinating sales efforts across a cross-functional team ma

Familiarity with email security, SaaS, or infrastructure solutions.