Business insider jobs in , LondonCreate job alerts

Elite US Law Firm - Risk & Compliance Lawyer (London) Are you a fee-earning lawyer looking to transition into an in-house role? This could be an excellent opportunity to make that move. This is an outstanding opportunity to join a top-tier, globally recognised firm in a pivotal in-house role, offering excellent exposure and long-term career development within risk and compliance. A leading international law firm is seeking a Risk & Compliance Lawyer to join its London-based Office of General Counsel. This role offers a strong platform for a qualified lawyer to step away from fee-earning and into a high-performing in-house function, working at the centre of regulatory, ethics, and data privacy matters. The Role Reporting to senior leadership, you will advise across the business on regulatory compliance, professional ethics, and data protection. You will work closely with partners and business teams, gaining broad exposure to complex risk and compliance issues within a collaborative and fast-paced environment. Key Responsibilities • Advising on regulatory frameworks, professional conduct, and data protection obligations (including SRA and GDPR), • Supporting practising certificate renewals and regulatory filings, • Drafting and maintaining internal policies, guidance, and compliance materials, • Managing registers, insider lists, and core compliance processes, • Assisting with data privacy matters, including DPIAs, international transfers, and incident response, • Reviewing client and commercial documentation (e.g. NDAs, DPAs, questionnaires), • Supporting training, horizon scanning, and knowledge management initiatives Requirements • Qualified lawyer with relevant fee-earning experience, • Demonstrable interest in risk, compliance, and data privacy Apply below for further details!

At Cititec, we're powering the energy revolution with exceptional talent. Built on years of trusted relationships, we connect our customers with the right energy and commodities people when it matters most. We always operate with high standards, integrity and commitment to our clients and our people. We're expanding across energy - renewables, commodities, offshore, nuclear, trading and powering the businesses that modernise them. If you want to build a career at the centre of what comes next in energy and commodities, Cititec is the place to do it. The Opportunity We are hiring a 360 Contract Consultant to build and grow a specialist desk within the Energy markets. This role is suited to someone operating at Senior Consultant or Principal level, confident managing both client development and candidate delivery, and comfortable being accountable for revenue. You will have genuine ownership of your desk. That means developing client relationships, growing a contractor network, managing extensions and renewals, and driving long-term growth. You’ll be supported by an established brand, strong marketing presence and long-standing client relationships. But success in this role will come from your initiative, credibility and ability to build trust in your market. What You’ll Do… • Build and scale a profitable contract desk within battery storage, renewables, or energy supply chain, • Partner with global clients across London, Europe, the US, and APAC, • Win new business and act as a trusted advisor to senior stakeholders, • Represent Cititec at industry events, roundtables, and within our Commodities Tech Insider community, • Mentor and develop consultants as we grow our Energy Transition practice What We’re Looking For • Minimum 2 years’ experience in 360 contract recruitment, • Proven track record of building and monetising a desk within a contract recruiter capacity, • Experience recruiting renewables, battery storage, energy infrastructure (energy/commodities exposure highly advantageous), • Strong business development capability and confidence engaging senior decision-makers, • Leadership mindset with a desire to help scale a high-performance team What You’ll Get • A structured, transparent, career progression framework with merit-based advancement, • A tiered commission structure that accelerates with your results, plus performance bonuses, • Real autonomy and ownership of your market, • Hybrid working - 2 days WFH, • 25 days annual leave + birthday + volunteer day + tenure days (up to 28), • Vitality private health and dental care Diversity & Inclusion Cititec is committed to building an inclusive industry. We welcome applications from all qualified individuals and are dedicated to equitable hiring internally and for our clients

Job Description: Cybersecurity Consultant (Cloud, Data, AI & Microsoft Security) Department: Information Security - (Data & AI team) Duration: Duration 4 months Location: London (Hybrid) Role Overview We are looking for a highly skilled Cybersecurity Consultant with strong expertise across Microsoft Security, Cloud Security, Data Protection, and emerging AI/LLM security and governance. The role focuses on identifying security gaps, defining secure-by-design patterns, supporting product and platform teams, and strengthening enterprise security posture-particularly across Microsoft 365, Azure, data platforms, and AI-enabled solutions. You will play a key role in threat modelling, risk assessments, guardrail design & implementation, and delivering practical security guidance for engineering, data, and application/product teams. Rationale/deliverables: Contribute to the Operating Securely program by providing information security advice and support to product and engineering teams and validate that security controls are in place and issues / vulnerabilities remediated Perform technical risk assessments for proposed new and changing systems, including products that are designed and built by the client as well as the secure deployment and configuration of business applications that report on and analyse data, e.g. Power BI Perform technical risk assessments and advise product and engineering teams on the secure implementation of AI based solutions, e.g. autonomous AI agents, LLMs, LRMs, and AI-enhanced productivity systems Support the roll-out of the new AI information security control framework Support the Data governance team Key Responsibilities Perform threat modelling(STRIDE), guardrail definition, and security posture assessments across applications, data platforms, APIs, cloud services, and SaaS ecosystems. Identify security control gaps, especially around data pipelines, repositories, network security, API security, middleware, and cloud architectures. Conduct technical security risk assessments, produce risk statements/reports, and support teams with remediation and mitigation strategies. Develop security controls, standards, and documentationfor product teams, platform engineering, and data services (e.g., pipelines, warehouses, data sources). Provide expert guidance on Microsoft Security Stack, including: Microsoft Defender (XDR, MDE, MDI) Microsoft Entra ID (SSO, MFA, Conditional Access, PIM) Microsoft Purview (DLP, Information Protection, Data Governance, DSPM) Microsoft 365 Copilot & GitHub Copilot security enablement Partner with data governance, platform engineering, DevOps, and architecture teams to embed secure-by-design Support secure adoption of cloud-native technologies(Azure), DevSecOps pipelines, GitOps practices, and GitHub Advanced Security (GHAS). Oversee security controls for cryptography, key management, secrets management, HSM/Key Vault configurations, and cloud network security (firewalls, proxies, segmentation). Drive secure integration of AI/LLM tools, including Copilot, Azure OpenAI, and agentic systems-ensuring proper guardrails, risk assessments, and data protection. Participate in cloud monitoring, detection & incident response, working with SIEM/XDR tooling and platform/application teams. Collaborate closely with data governance to ensure appropriate classification, labeling, access control, and lifecycle managementof sensitive data. Essential Skills & Experience Strong understanding of security frameworks(CIS), MITRE ATT&CK, and AI/LLM security frameworks. Hands-on experience with Azure cloud security, DevSecOps, and cloud-native architectures. Expertise with Microsoft 365 Securityand Azure Security Strong knowledge of IAM(SSO, MFA, Conditional Access, AAD/Entra, PIM). Experience delivering data security, DLP, DSPM, and governance controls using Microsoft Purview. Practically skilled in AI security, including risk identification, secure integration patterns, and AI governance models. Experience with cloud monitoring, incident response, SIEM/XDR operations. Ability to translate complex security risks into clear business language and actionable recommendations. Desirable Skills Experience with secure data platforms (Azure Data Factory, Data Lake, SQL, or similar). Knowledge of API, container security, Kubernetes, and infrastructure-as-code security. Familiarity with PCI, GDPR, data privacy requirements, and compliance frameworks. Exposure to adaptive protection, insider risk management, and automated DLP frameworks. Personal Attributes Strong communicator able to work across engineering, data, product, and business teams. Highly analytical with a structured approach to problem-solving. Comfortable in fast-paced environments undergoing modernization and AI adoption. Ability to influence teams and drive secure-by-design culture across the organization

The Role Role Summary As the strategic architect of the Group’s security services, the Head of Security Services shapes and delivers a unified vision for cyber security across a global, federated enterprise and 85+ businesses grouped into 10 divisions. Reporting into the Group Chief Information Security Officer (CISO), this leader is responsible for overseeing day-to-day operational cyber security capabilities, ensuring robust, efficient, and coordinated first and second line security operations that protect the Group’s people, systems, and data from cyber-attacks. By setting the direction for security services, championing the adoption of centralised capabilities, and driving continuous innovation, this role ensures that the security operations are robust, adaptive, and future-ready. With oversight of daily technical security functions and a relentless focus on operational excellence, the Head of Security Services builds and empowers high-performing teams to deliver 24/7 threat detection, rapid incident response, and proactive risk management. This includes ownership of security controls, security testing, tech assurance and vulnerability and threat management, and incident response across the organisation. Collaboration is at the heart of this position. By working across the GCS Leadership Team, with business and technology stakeholders, and with industry experts to align strategy, share intelligence, and drive a single, cohesive approach to security services, this leader ensures the Group not only meets but sets the benchmark for security services in a dynamic digital world. Role Responsibilities/Accountabilities Key Responsibilities: Strategic Leadership & Vision • Establish a costed strategic vision for security services across the Group’s global, federated enterprise. • Evangelist for adoption of central services and drives alignment to a single security services vision. • Define, maintain, and regularly review the security services service catalogue and SLAs, clearly articulating what “good” looks like. • Integrates AI and modernises security operations using latest technologies. • Ensure security operations support organisational resilience and disaster recovery objectives. • Collaborate across verticals with the GCS Leadership Team. Operations & Service Delivery • Oversee daily operations of technical security functions, working collaboratively with the SOCs to provide 24/7 visibility and threat detection ensuring services are resilient, risk-aware, and aligned with business needs. • Regularly review and modernise SOC processes, technologies, and talent. • Partner with MSSPs and build solid vendor relationships to deliver the security strategy. • Define and collect metrics/KPIs, regularly reporting to leadership on SOC events/incidents and overall effectiveness. • Review metrics at a group level and adjust services strategy accordingly. • Management of the security technology stack and continuous improvement of services. Incident Response & Threat Management • Serve as incident commander (including on-call), leading cyber incident response activities. • Lead on cyber incident response activities and contributing to incident management activities by advising on incident identification, assessment, classification, escalation, investigation, mitigation, monitoring and reporting to help ensure cyber incidents are managed in a timely and effectively manner to limit impact. • Drive the development of threat management, threat modelling and identification of new threat vectors by keeping up to date with industry activity and methodology, to help ensure key assets are protected. • Lead threat hunts to proactively discover potential compromises. • Lead and coordinate red teaming, penetration testing, and exercising to assess and enhance the quality of services delivered by SOCs. • Red/purple teaming to ensure standard of services—testing quality of services delivered by various SOCs. • Exercise incident response capabilities. Threat Intelligence & Tech Assurance and Vulnerability Management • Drive the development of threat management, threat modelling, and identification of new threat vectors. • Maintain up-to-date awareness of cyber threat intelligence and emerging attack vectors, always evaluating the materiality of the threat. • Liaise with industry experts and update strategy in line with the threat landscape. • Lead a threat-led, risk-based vulnerability management programme, ensuring timely remediation in collaboration with IT. • Own insider threat and data loss prevention (DLP) initiatives. • Lead the emergency patching vulnerability management programme ensuring threat-led and risk-based prioritisation, along with collaboration with IT for timely remediation. • Own and manage key security controls ensuring they are deployed, tuned, and monitored effectively across cloud and on-premise assets, along with managing the vendors that are responsible for supporting the Group. Team Leadership & Performance • Lead a high-performing team of cyber and project professionals, driving strategy, innovation, and continuous improvement across protection capabilities including SOC, Security Engineering, Technical Assurance and Vulnerability Management. • Manage team performance and cost base, making informed financial decisions and supporting portfolio-level investment planning. • Provide technical leadership and act as a subject matter expert on information security best practices. Collaboration & Stakeholder Engagement • Collaborate across the GCS Leadership Team and with cross-functional stakeholders. • Work with Head of Manufacturing / OT security to align security operations elements in manufacturing. • Collaborate with cross-functional stakeholders to assess and mitigate risk, while maintaining a forward-looking roadmap for cyber capabilities. Experience, Knowledge, Skills & Attributes Essential • A certification such as CISSP CISM, GIAC, or equivalent. University Degree qualified in an engineering discipline ideally with Cyber Security Engineering, Computer Science, Information Technology, or Computer and Electronics engineering. • Prior experience of building security teams and a global delivery operations support model. • Demonstrable experience of building and running a technical assurance function. • Demonstrable knowledge of industry standards such as NIST and ISO27001. Knowledge of relevant regulations such as GDPR, NIS2, and EU AI. • Exceptional analytical and decision-making abilities during BAU and incidents. • Experience in leading cybersecurity incidents, implementing response procedures, and driving continuous improvements, and optimising security tools and technologies to enhance operational efficiency. • Hands-on experience in threat detection and prevention, including expertise in SIEM, EDR, firewall management, or similar security technologies. • Ability to build relationships and engage with all levels of management, communicating complex technical issues to a range of audiences. • Experience of managing service level agreements, commercial engagements, and supporting procurement with contract negotiations. • Demonstrable experience in designing, enhancing, and implementing security processes and policies. • Strong project management and leadership skills with the ability to prioritise both operational and project demands. Desirable • Experience of operating within federated environments or within an IT Service Management Provider / Consultancy • Experience managing external supplier relationships to secure the best value and service

People Security Adviser Inside IR35 - £450 - £500 p/d Active SC Required Primarily Remote We are supporting the build and evolution of a centralised Security Operations & Intelligence function and are seeking a People Security Advisor to play a key role in establishing and embedding a modern, risk-based personnel security capability. Operating at SFIA Level 4 (Enable), this role will work closely with the Physical & People Security Integration Lead to design, implement and continuously improve People Security frameworks, policies and processes across a complex, nationally significant environment. This is a hands-on role combining policy development, risk assessment, investigations, and stakeholder engagement, with a strong focus on integrating People Security across wider security and business functions. Key Responsibilities * Support the design, implementation and continuous improvement of People Security capability and improvement plans * Develop and maintain People Security policies, standards, controls and procedures aligned to UK Government frameworks * Conduct People and Physical Security risk assessments, audits and assurance activities * Lead or support personnel security investigations, incident response and post-incident reviews * Contribute to the development and delivery of insider risk programmes * Provide subject matter expertise and advisory support to business stakeholders on People Security matters * Enable integration across Security, Threat Intelligence, SOC, IAM, HR and Counter Fraud functions * Support supply chain engagement on People Security standards and controls * Define and maintain KPIs for People Security risk management and continuous improvement * Engage with external bodies including National Technical Authorities (e.g. NPSA) and wider government/security forums * Support security governance through forums, working groups and stakeholder engagement Required Experience & Skills * Active SC Clearance * Strong experience in People (Personnel) Security within UK Government or regulated environments * In-depth knowledge of UK Government vetting standards and security frameworks * Experience developing and implementing security policies, standards and procedures * Proven experience conducting security risk assessments and investigations (personnel and/or physical) * Ability to influence, negotiate and engage effectively with senior stakeholders * Experience working within change or transformation environments * Strong written communication skills, with ability to produce high-quality documentation * Solid understanding of integrated security disciplines (People, Physical, Cyber)

Customize and Configure Business Systems: create and customize systems and integrations to provide solutions to business problems for the following - Retail, Distribution, Supply Chain, Logistics and more. Organize and Coordinate: Act as the primary liaison between Supply Chain, Retail teams, and Ne