Trabajos vulnerability manager en LondonCrear alertas

Job DescriptionArbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.Job PurposeTo support the Banking 3rd party IT applications and systems. To fix application and system problems, or any incident that is disrupting the application service that business users depend on. To assist the business in designing and implementing new systems under the direction of the Senior Platform Lead.To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers and to comply with the FCA and PRA's Conduct Rules.Job DescriptionKey Responsibilities:Ensure all incidents and requests are processed within SLA and in line with customer expectations.Ensure problems are identified and managed in line with the ITIL framework.Identify and document technology risks and provide solutions to reduce, mitigate or transfer the risk. Produce and maintain process documentation, knowledge base articles and run books to support compliance with applicable standards such as ISO27001, PCI DSS and legal and regulatory requirements.Perform daily, weekly, monthly checks and maintenance to ensure the health and availability of services.Remediation of vulnerability identified through penetration testing and vulnerability scanning.Develop and implement proactive systems monitoring and alerting.Provide coaching and advice to other areas of IT to help empower and knowledge transfer to other teams.Risk:Responsible for managing risks inherent to the role by diligently observing internal policies and procedures.Key Interfaces:Incident ManagementIT Senior Management Senior Application Specialists - / Application Specialist – BankingSenior Manager Data and Integration SystemsSenior Manager, IT Service DeliveryBanking Operations StaffPerson SpecificationKnowledge/Experience/Skills:Experience working at a similar level in a Financial Services organisationGood working knowledge of banking platforms and the security and assurance of these platform.Support and monitor critical banking technologies including WebLogic & Oracle Database and other Java and Linux based applications as necessaryInteracting with Vendor support for the resolution of issues within prescribed SLA’sGood working knowledge of Banking and Payment technologies include Faster Payments, BACS & SwiftWorking within an ITIL environmentWorking within an ISO27001 FrameworkDevelop and optimise service availability monitoring and alerting using SolarWindsWriting and executing SQL Queries, Stored Procedures, SSRS reportsConfiguration and integrations of Single Sign On Solutions (Oracle Identity Federation, Azure Active Director).Strong experience in one of the following areas required: Administration and use of ServiceNow, change, incident, problem, ITAM, ITSMQualifications:CompTIA Linux+ (Desirable)Competencies:Change focusJudgment & Problem SolvingStrong Team player, but equally capable in a solo environmentPlanning & ReviewingCommunication & ConfidenceAbout UsLife, Work and BenefitsAt Arbuthnot Latham, we seek proactive individuals who embrace high standards and bring the energy needed to drive success. In return, you can thrive in a dynamic environment that values your innovative ideas and provides the stability and support for your personal and professional growth. Our human-scale ethos means that everyone is recognised as an individual, not just a number, creating a workplace where you truly belong and thrive. As a service led, relationship driven bank, in-person collaboration and wellbeing are important to us and drives our inclusive culture. With this in mind we offer one day a week working from home.BenefitsCompetitive holiday allowance with the ability to buy / sell / rollover up to five days per yearPension via market leading providerPrivate Healthcare cover4x Life AssuranceDiscretionary BonusAccess to a suite of flexible benefits including Cycle to Work Scheme, Gym Scheme, Health Assessment, Season Ticket / Travel loans and Dental insurance as well as other discounts / vouchersData Privacy and Reasonable adjustmentsWe take keeping your data security seriously. For more detail on how we may keep your data please refer to our Privacy NoticeReasonable adjustments: Please let us know of any adjustments or arrangements that you may need to help you apply to this role or that will help you during the recruitment process. If you wish to discuss any particular requirements or concerns you have because of a disability or medical condition please contact us at recruitment@arbuthnot.co.uk. Information you provide about any disability or medical condition will remain confidential unless it is necessary to disclose it to other members of staff or outside agencies to ensure the health and safety of yourself and others, or to implement the adjustments you require. In these circumstances we will first discuss with you how and to whom the information may be disclosed.Location:LondonAdvertising End Date:Not Specified

About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding.The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation.Clients value Baringa’s collaborative approach and the way its teams integrate seamlessly – all working with a shared understanding of what matters most. The firm is known for its kind, curious experts who listen closely and care deeply about client success as they help clients transform energy markets, modernise financial platforms, expand telecoms and digital networks through advanced data analytics, enable digital services in government, and unlock growth in consumer sectors.Certified as a Great Place to Work around the world, Baringa has been recognised by the Financial Times in 22 categories of its UK Leading Management Consultants rankings, and by Forbes for four consecutive years as one of the World’s Best Management Consulting Firms.Our Water practice are looking for an experienced Consultants to Senior Managers to join the team. Our Retail, Networks and Water division helps regulated utilities and adjacent organisations improve performance, deliver transformation, and strengthen outcomes for customers. We’re at the heart of these industries, driving meaningful and lasting improvement. This is an incredibly important period for our Water clients. Following final determinations, we expect a sustained period of significant transformation set against the context of rising bills and increasing customer financial vulnerability. As we already work with most of these organisations, Baringa is well positioned to help Water Retailers to successfully plan for and navigate these challenges. Within our Water practice, the Water Retail and Customer Value and Affordability team supports clients to protect their most financially vulnerable customers whilst improving value across the customer lifecycle, with a focus on billing and revenue improvement, debt and affordability, and operational effectiveness in customer-facing functions. What you will be doingHelping clients to understand their customers holistically, and how those that are most in need can be supported Work with clients on their major strategic transformation programmes to improve their customer, debt, billing and revenue outcomes through senior strategic advice and thought leadership, data-driven diagnosis, process and journey improvement. Support or lead benchmarking and performance reviews, helping clients understand how they compare to peers and where to prioritise action. Take a leading role in customer and operational transformation programmes, supporting planning, governance, risk management and senior stakeholder engagement. Develop and apply analytical insight, including segmentation, forecasting and KPI reporting, to support better decisions and track impact. Work alongside technology and system change, helping ensure business requirements are clear and operational outcomes are delivered. Contribute to business development, including proposals, client conversations, thought leadership or reusable assets in Water Retail and Customer Value Assurance. You will take on responsibility in line with your experience: as a Consultant, owning defined analysis and deliverables, with accountability for quality and detail as a Senior Consultant, owning end‑to‑end workstreams and managing day‑to‑day client delivery as a Manager or Senior Manager, leading workstreams or engagements, managing teams, and taking accountability for outcomes, quality and client relationships Your skills and experience Must HavesExperience working in customer value, debt, billing, revenue assurance or affordability , within water retail operations, with a solid understanding of the underlying processes, common issues and levers. You’ve supported or delivered billing or revenue improvement initiatives, such as identifying revenue leakage, improving collections performance, or strengthening controls and governance. Experience using data and analysis to diagnose problems, build insight, and support clear recommendations and decisions. You’ve delivered process improvement or operating model work in customer or revenue-focused functions, with an emphasis on practical, implementable change. You will have worked with a range of stakeholders across operations, finance, digital and data teams, and can communicate confidently at different levels of an organisation. You’ve produced clear, structured client-facing outputs, including analysis, slides or written recommendations, with strong attention to quality and narrative. Nice to HaveYou’ve contributed to, or led parts of, customer or operational transformation programmes, with exposure to planning, governance, risk management and delivery tracking. Experience working alongside billing, customer relationship management or collections system change, and understand how systems and operations interact. You’ve contributed to proposals, pitches or internal proposition development, helping articulate client problems, solution approaches and value. You will have experience developing others through informal coaching, review or line management (expected at Manager and Senior Manager level). What a career at Baringa will give you Putting People First. Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: Generous Annual Leave Policy: We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service. Flexible Working: We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave. Corporate Responsibility Days: Our world is important to us, so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us. Wellbeing Fund: We want to encourage all employees to take charge and prioritise their own wellbeing. We’ve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice. Profit Share Scheme: All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the company’s success. Diversity and InclusionWe are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people.An award-winning workplaceYou can be a part of our ‘Great Place to Work’ – with our commitment to women and well-being in the workplace for all. Click here to see some of our recent awards and how we’ve achieved this.Using business as a force for good. We maintain high standards of environmental performance and transparency, which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1, 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis - helping us to continually identify where we can improve. We have a long legacy of supporting the communities in which we work, and offer a variety of ways to contribute, by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills, talent and time. In essence, we aim to empower and encourage everyone in the firm to contribute to the things we care about, and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have.Join usAll applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process, ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further.Baringa Privacy NoticesFor UK & EUYour personal data will be retained by Baringa for up to two years, in accordance with our UK Recruitment Privacy Notice / EU Recruitment Privacy Notice, to evaluate your application and meet our legal and reporting obligations. In line with the General Data Protection Regulation (GDPR), you have the right to request access to, rectification, or erasure (subject to legal limitations) of your personal data. For more information, please contact us at privacy@baringa.comFor the USAYour personal data may be retained by Baringa for up to two years, as outlined in our Recruitment Privacy Notice (AMER & APAC), to support the recruitment process and internal reporting requirements. Where applicable, and in accordance with relevant federal and state laws, you may have the right to request access to or correction of your personal information. For further details, please contact privacy@baringa.comFor Australia & SingaporeYour personal data will be retained by Baringa for up to two years, in accordance with our Recruitment Privacy Notice (AMER & APAC), to assess your application and meet applicable reporting and legal obligations. In line with the Australian Privacy Act and Singapore’s Personal Data Protection Act (PDPA), you may have rights to access, correct, or request limited deletion of your personal data. For more information, please contact us at privacy@baringa.com

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.MUFG is one of the world’s leading financial groups, headquartered in Tokyo and with a global network across the Americas, Europe, the Middle East and Africa, Asia and Oceania. The group provides services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management and leasing.Architecture, Middleware, Data Management & Enterprise Services (AMD) is part of EMEA Technology. AMD brings together technology functions that support the delivery, operation and governance of key platforms and services across enterprise architecture, interfaces, data engineering and business intelligence, project delivery, finance technology, compliance technology, digital delivery and related enterprise services.The Risk and Control Manager will support AMD management by helping maintain a clear, evidence-based view of technology risk, control performance, audit readiness and remediation progress across the AMD portfolio. The role will work closely with AMD application, platform and service owners, Technology Risk & Control, Information Security, Operational Risk, Internal Audit and wider Technology stakeholders.Main Purpose of the RoleThe role is responsible for supporting the AMD leadership team in managing technology risk and controls across the AMD function. This includes maintaining risk and control MI, coordinating control testing and evidence, supporting risk appetite reporting, tracking issues and remediation actions, preparing for audits and regulatory reviews, and helping AMD teams operate in line with Technology policies, standards and governance requirements.Key ResponsibilitiesPartner with AMD management, service owners, control owners and lines of defence to identify, document, assess and manage technology risks, controls, issues and actions.Support the definition, maintenance and reporting of AMD’s risk appetite measures, including measures that are meaningful from a risk perspective, capable of being tracked, and within AMD’s ability to influence.Develop and maintain clear MI, dashboards and reporting for AMD risks and controls, including risks relating to vulnerabilities, end-of-life technology, incident management, change management, access management, resilience, data protection and operational hygiene.Coordinate control evidence across AMD teams for audits, self-assessments, control testing, regulatory reviews and management assurance activities, ensuring responses are complete, accurate and timely.Track audit findings, self-identified issues, risk acceptances, management actions and remediation plans, providing early escalation where delivery is off track, ownership is unclear or risk remains outside tolerance.Validate issue closure evidence before submission to the relevant governance, control or audit function, ensuring that remediation is sustainable and appropriately evidenced.Support AMD teams in the operation of core Technology governance processes, including change management, incident management, privileged access management, disaster recovery, business impact analysis and policy compliance.Work with Technology Risk & Control, Information Security, Operational Risk, Internal Audit and Head Office stakeholders to ensure AMD requirements are understood, coordinated and delivered.Challenge unclear ownership, weak evidence, inconsistent controls and incomplete risk assessments in a constructive and practical manner.Promote a strong risk and control culture within AMD by improving awareness, clarity of ownership and management understanding of key technology risk topics.Identify opportunities to simplify, automate and improve risk and control reporting, including use of data sources, workflow tools and analytics to reduce manual effort and improve transparency.Prepare concise, senior-management-ready materials for AMD governance meetings, risk forums, executive committees and other oversight bodies as required.Skills and ExperienceStrong understanding of technology risk, IT controls and control frameworks such as COBIT, NIST, ISO 27001, ITIL and related financial services control expectations.Experience in first line technology risk and controls, internal audit, external audit, operational risk, information security or technology assurance within a financial services environment.Good understanding of application, infrastructure, data, integration and cloud technology risks, including resilience, cyber security, access, change, incident, vulnerability and end-of-life risks.Experience supporting audit, regulatory or control testing activity, including evidence collection, management action planning and issue closure validation.Strong knowledge of technology governance processes such as change management, incident/problem management, access management, service resilience, disaster recovery and policy attestation.Experience producing clear management information, dashboards, risk reports and executive-level materials.Ability to interpret policy and control requirements and translate them into practical actions for technology teams.Strong stakeholder management skills, with the ability to influence and constructively challenge senior managers, technical teams and control functions.Strong written communication skills, with the ability to explain risk and control matters clearly to both technical and non-technical audiences.Comfortable working with data, spreadsheets, workflow tools and reporting platforms to improve control transparency and reduce manual reporting effort.Personal RequirementsSelf-motivated, proactive and comfortable working with limited direction.Able to balance risk with delivery priorities and apply sound judgement when escalating issues.Structured, organised and able to manage multiple priorities across a broad technology portfolio.Clear, concise and credible communicator, able to simplify complex control topics for senior stakeholders.Collaborative and able to build strong relationships with technology, risk, control, audit and business stakeholders.Analytical, objective and evidence-led, with strong attention to detail.Results driven, with a strong sense of ownership and accountability.Able to work effectively under pressure and to tight deadlines.Curious and willing to learn new technologies, tools and data-driven approaches to risk management.Demonstrates a global perspective and an understanding of the financial services and banking environment.We are open to considering flexible working requests in line with organisational requirements.MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.SummaryLocation: LondonType: Full time

Robert Half are supporting a global consulting firm on a Director-level Programme Manager requirement for a Global Risk Consulting Firm. This engagement sits within a cutting-edge Frontier AI and Cyber Security initiative focused on improving vulnerability management, patching and technology upgrade processes across a complex enterprise environment. The initial assignment is expected to run for 3 months, delivering a proof of concept and defining the roadmap for a significantly larger transformation programme. Successful delivery is expected to lead into a sizeable 18-24 month programme of work, creating a unique opportunity to shape a high-profile AI, Cyber and Technology transformation from the outset. \n \n Contract Assignment Details \n\n • Rate: £750/day + 12.07% Holiday Pay via PAYE model\n, • Location: Hybrid, 2 days per week onsite in the City of London\n, • Duration: Initial 3-month engagement with strong potential to extend\n\n \n Key Responsibilities \n\n • Lead a large-scale cyber transformation programme focused on patching, upgrades and vulnerability remediation.\n, • Drive improvements in speed-to-patch and security risk reduction across the organisation.\n, • Manage delivery across multiple workstreams within a complex global matrix environment.\n, • Engage and influence senior stakeholders at Director and Executive level.\n, • Establish programme governance, risk management and delivery controls.\n, • Coordinate technology, security and business teams to deliver strategic change outcomes.\n\n Required Experience \n\n • Experience within Capital Markets, Financial Services, Exchanges, Trading, Market Infrastructure, Banking or similarly regulated environments as a Cyber Programme Director with proven Programme Director or Senior Programme Manager experience delivering enterprise-wide transformation.\n, • Strong cyber security domain knowledge, ideally covering vulnerability management, patching, infrastructure security and risk reduction.\n, • Experience delivering major change programmes within complex matrix organisations.\n, • Exceptional stakeholder management and executive communication skills.\n, • Demonstrable track record leading large-scale technology transformation programmes.\n\n \n Important Information \n Please note that successful candidates will be required to undertake comprehensive pre-employment screening. This will include detailed financial and criminal background checks, together with verification of employment history and references covering the previous 5 years. Applicants should be comfortable undergoing these checks as part of the onboarding process. \n Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data:

Cyber Response & Recovery Manager \n Salary: £68,000-£80,000 + benefits \n Location : London \n Clearance: SC Eligible \n \n We are seeking an experienced Cyber Response & Recovery Manager to join a leading cyber security consultancy, helping organisations recover from major cyber incidents and strengthen their long-term resilience. The Cyber Response & Recovery Manager role is paying a starting salary of between £68k - £80k plus excellent benefits. \n The role includes participation in an on-call rota and occasional UK travel at short notice. In return, you'll have the opportunity to work on complex, high-profile cyber incidents while developing your technical expertise and leadership within a growing cyber recovery practice. \n This is a hands-on role focused on the recovery and remediation phase of cyber incidents rather than frontline incident response. You'll work with clients to restore critical business services, remove attacker persistence, rebuild compromised infrastructure and implement practical security improvements following incidents such as ransomware attacks, Active Directory compromise, cloud compromise and network intrusions. \n \n Key responsibilities \n\n • Lead cyber recovery and remediation workstreams during active and post-incident engagements.\n, • Deliver hands-on technical remediation across Windows, Linux, Active Directory, networking and cloud environments.\n, • Drive patching, vulnerability remediation, secure rebuilds and infrastructure hardening.\n, • Design secure recovery strategies, including isolated recovery environments, backup validation and phased restoration of critical services.\n, • Review network architecture and security controls to reduce reinfection risk and improve resilience.\n, • Develop recovery roadmaps and support clients with longer-term cyber resilience and transformation initiatives.\n, • Manage technical delivery, stakeholder communication and project governance while mentoring junior team members.\n\n \n About you \n \n\n • Windows Server, Active Directory, Linux, networking and enterprise infrastructure.\n, • Cloud platforms such as Azure, AWS and Microsoft 365.\n, • Recovery from ransomware, Active Directory compromise or other large-scale cyber incidents.\n, • Infrastructure hardening, vulnerability management, secure rebuilds and recovery planning.\n, • Managing technical workstreams and communicating effectively with both technical teams and senior stakeholders.\n\n \n Hit the Apply button for immediate review! \n \n \n Cyber Response & Recovery Manager, Network Architect, Cyber Response & Recovery Manager, Network Specialist, Infrastructure Architect, Infrastructure Specialist, Cyber Response & Recovery Manager, Windows, Linux, Infrastructure \n Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment. \n \n

We are seeking a Compliance Manager for large IT organisation who is experiencing considerable growth and are leaders in their industry. \n Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. \n Responsible for the adherence to and continued certification of the following standards: \n\n • ISO 9001 Quality Management System\n, • ISO 27001 Information Security Management System\n, • PCI-DSS Payment Card Industry Data Security Standard\n, • ISO 22301 Business Continuity\n, • GDPR and Data Protection Laws\n\n Conduct regular internal audits in line with the requirements of the standards. \n Implement compliance initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective controls and processes, and integrate specific compliance objectives within business units. Influence senior management in identifying compliance risks and provide appropriate commercial solutions. \n Monitor industry, regulatory and corporate developments in order to identify areas of vulnerability and risk. \n Develop and implement corrective/preventative action plans for the resolution of compliance issues and provide guidance and coaching on how to avoid future incidents. \n Communicate the compliance programme to all employees. Prepare and deliver presentations to executives, managers and other interested parties reporting on status of compliance initiatives. Meet with the business to build relationships and enhance their capability to manage risk. \n Create a defined process that allows for the evaluation, approval and adoption of all new compliance and certification activities to ensure clear ownership, documented processes, and proper controls. \n Assist the Board in defining a Business Continuity Plan appropriate to the business. \n Identify, record, maintain and report on business risks associated to standards. \n Maintain applicable registers in support of non-conformance, risk, legal compliance, etc. \n Establish and maintain a timetable for annual testing of the Business Continuity Strategy. \n Develop induction materials and implement training programs for staff in respect of Information Security and Business Continuity.

Location: Hybrid working, primarily remote, with approximately two in-person team collaboration days per month in London. The role may also require occasional travel to client sites, predominantly within London, with opportunities for travel across the UK and internationally where business needs require. \n Salary: £30,000 p.a \n Holidays: 25 days’ annual leave plus public holidays. Your annual leave entitlement increases by one additional day for each completed year of service, up to a maximum of 30 days. \n Benefits: \n\n • Investment in your learning through Toro-funded training and professional development.\n, • Generous 5% employer pension contribution.\n, • Health and wellbeing support, including access to wellbeing resources and services.\n, • Access to salary sacrifice schemes for technology, home goods, and other eligible purchases.\n, • Electric vehicle (EV) Salary Sacrifice Scheme.\n, • Flexible, hybrid and remote working to support a healthy work-life balance.\n, • Opportunities to work on varied and meaningful projects across a diverse client base.\n\n Starting: ASAP \n About the Role \n Toro is looking for a technically capable Service Delivery Analyst to join our growing Managed Services team. \n This role is ideal for someone who enjoys solving technical problems, providing excellent customer service and supporting a wide variety of cloud, desktop and infrastructure technologies. \n Working alongside the existing Service Delivery team, you'll be responsible for delivering first and second line IT support to our customers, ensuring incidents and service requests are resolved efficiently whilst maintaining a high level of customer satisfaction. \n We're looking for someone who can bring strong technical knowledge to complement the existing team, particularly across Microsoft 365, Google Workspace, networking and endpoint security. \n Key Responsibilities \n Service Desk & Customer Support \n\n • Act as the first point of contact for customer IT support requests.\n, • Deliver first and second line technical support via phone, email and remote support.\n, • Log, prioritise and manage incidents and service requests through the Helpdesk.\n, • Take ownership of tickets through to resolution, escalating where appropriate.\n, • Maintain accurate documentation and audit trails for all work completed.\n, • Provide an excellent customer experience throughout every interaction.\n\n Microsoft 365 & Google Workspace \n\n • Administer Microsoft 365 environments, including:\n, • Exchange Online\n, • Entra ID (Azure AD)\n, • SharePoint\n, • Teams\n, • Licensing\n, • Administer Google Workspace environments including:\n, • User provisioning\n, • Security settings\n, • Groups\n, • Device management\n, • Support email migrations, mailbox investigations and account administration.\n, • Assist with security hardening and best practice implementation.\n\n Endpoint & Security Management \n\n • Deploy, configure and maintain Windows and MacOS endpoints\n, • Basic macOS troubleshooting (safe mode, disk space, software updates, FileVault)\n, • Support the management of Sophos MDR/XDR\n, • Investigate endpoint security alerts.\n, • Assist with vulnerability remediation and patch management.\n, • Support endpoint compliance and security best practice.\n, • Assist with customer cyber security improvements.\n\n Infrastructure Support \n Provide support for customer infrastructure including: \n\n • Windows Servers\n, • AWS\n, • Azure Active Directory\n, • Group Policy\n, • Backup solutions\n, • Printers\n, • Remote desktop environments\n\n Assist with: \n\n • Backup monitoring and restore testing\n, • Firmware updates\n, • Infrastructure maintenance\n, • Performance investigations\n\n Networking \n Support customer networking environments including: \n\n • Ubiquiti / UniFi\n, • Managed switches\n, • Firewalls\n, • Wireless access points\n, • VPN connectivity\n, • Internet connectivity troubleshooting\n\n User Administration \n\n • Manage starters, movers and leavers.\n, • Provision and decommission user accounts.\n, • Prepare laptops and equipment.\n, • Configure user permissions.\n, • Deliver IT inductions.\n, • Provide basic user training where required.\n\n Asset & Service Management \n\n • Maintain accurate hardware and software asset registers.\n, • Support procurement of IT equipment.\n, • Liaise with suppliers.\n, • Maintain technical documentation.\n, • Follow ITIL service management principles.\n, • Participate in change management processes.\n\n Skills & Experience \n Essential \n\n • Strong customer service and communication skills.\n, • Experience providing 1st and 2nd line IT Support.\n, • Strong Microsoft 365 administration experience.\n, • Experience administering Google Workspace.\n, • Windows 11 administration.\n, • Understanding of Apple ecosystem/Apple IDs/Managed Apple IDs and iCloud.\n, • Active Directory Administration (Entra, Azure AD).\n, • Basic networking fundamentals (TCP/IP, DNS, DHCP, VPN).\n, • Experience supporting endpoint security products.\n, • Excellent troubleshooting skills.\n, • Ability to prioritise multiple support requests.\n\n Desirable \n\n • Sophos Firewall and Endpoint experience.\n, • UniFi networking.\n, • Microsoft Entra ID.\n, • Intune / Endpoint Manager.\n, • Azure.\n, • PowerShell or scripting fundamentals.\n, • ITIL Foundation.\n, • Backup technologies.\n, • Cyber Essentials knowledge.\n, • Experience working within an MSP or Managed Service environment.\n

Lead Security Engineer \n Hybrid (London) \n £77,000 + Bonus and Benefits \n A well-established eComm business is building out its security engineering capability, and wants an engineer to own it. This is a build role — the controls and programmes here are early-stage, not inherited. \n They're prioritising IT foundation and attitude over years in a security job title. If you came up through infrastructure, networking or identity and have moved into security, they want to hear from you. \n The role \n Reporting to the Information Security Manager, you'll cover a cloud-first estate spanning GCP and AWS, marketplace technology, SaaS and in-house engineering. Security maturity is early, so you'll be standing capabilities up and driving adoption, not maintaining someone else's platform. \n Your first priorities: \n\n • Asset & Application Visibility — continuous, automated discovery across the estate, from a standing start\n, • Zero Trust / ZTNA rollout — identity-aware access across remote and internal services\n, • Automating identity lifecycle (JML) in Entra ID and key SaaS platforms\n\n Alongside that: SIEM engineering and detection tuning, vulnerability management, DLP, and incident response support — with a strong bias toward automation. \n What we're looking for \n\n • An IT infrastructure grounding — networking, endpoint, systems, identity — with a move into security. Infrastructure Engineer, Systems/IT Engineer, Cloud or Platform Engineer backgrounds all welcome\n, • Hands-on delivery of at least one of the three priorities above from a low-maturity start — through the deployment, tuning and adoption phases, not inheriting it already running\n, • Experience in a lean security or IT function where you led delivery, rather than one contributor in a large layered team\n, • The judgement to make sound security calls in ambiguous situations, and the communication skills to influence without authority\n\n Depth of prior security experience matters less than the engineering foundation and the appetite to own something end to end. \n Nice to have: Cloudflare (particularly Access/ZTNA); GCP or AWS security; scripting (Python, PowerShell) or Terraform; eComm or marketplace background. \n On offer: real ownership with the tooling and trust behind it, AI tooling at organisation level, remote-first with flexible time at a London office, and a lean team where your decisions land. \n Interested? Click APPLY NOW for immediate consideration.

Cyber Security Lead \n Location: London (Hybrid) \n Salary: £100,000 + Bonus + Excellent Benefits \n My client is a highly successful international organisation, looking for a Cyber Security Lead to join them. \n We are seeking a highly skilled Cyber Security Lead to take ownership of our client’s enterprise security posture across Microsoft cloud, identity and endpoint environments. This is a hands-on technical leadership role for a Cyber Security professional who can combine deep engineering expertise with the ability to build and drive a security function forward. \n This is a genuinely greenfield environment, making experience of building and developing a Cyber Security function from the ground up essential. You will become the technical security authority within the organisation, establishing the security roadmap, implementing the appropriate controls and helping shape the organisation’s approach to Cyber Security as it enters its next phase of growth. \n You will be expected to have proven experience managing major cyber security incidents end-to-end, from initial investigation and containment through to remediation, lessons learned and improvements to prevent recurrence. There will be a junior colleague to support and develop, but the core technical expertise and direction will come from you. \n As Cyber Security Lead, you will lead the delivery of the Cyber Security roadmap, strengthen detection and response capabilities, and provide hands-on technical expertise across Microsoft security technologies. Working closely with Infrastructure, Cloud and Architecture teams, you will ensure security controls are properly designed, implemented and continuously improved. \n This role is particularly well suited to Cyber Security Leads, Heads of Cyber Security, Technical Security Managers, Security Operations Leads, Cyber Security Managers and hands-on Heads of Cyber who enjoy leading from the front, remaining technically close to the technology and having genuine ownership of the security function. \n Key Responsibilities: \n\n • Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365.\n, • Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies.\n, • Act as the technical lead for cyber incidents, supporting investigation, containment, and recovery activities.\n, • Oversee vulnerability management, ensuring prioritisation and remediation aligned to business risk.\n, • Manage and enhance security baselines, configuration standards, and policy enforcement across the estate.\n, • Lead continuous improvement initiatives across detection, response, automation, and cloud security posture.\n, • Support governance activities including risk assessments, audits, and compliance reviews.\n\n Technical Experience: \n\n • Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel.\n, • Proven ability to design and implement Conditional Access, identity protection, and device compliance policies.\n, • Experience developing detection rules, analytics, and automation using KQL and Sentinel playbooks.\n, • Solid understanding of Zero Trust architecture and practical implementation across enterprise environments.\n, • Strong knowledge of endpoint hardening, EDR tuning, and modern attack techniques.\n, • Relevant certifications (e.g., SC-200, SC-300, AZ-500, MS-102, CISSP) are highly desirable.\n\n Please note: this role does not offer visa sponsorship. \n Key Words: Cyber Security Lead, Senior Security Engineer, Security Operations Lead, Technical Security Manager, Security Engineering Lead, Microsoft Security, Defender, Intune, Entra, Azure, Sentinel, Endpoint Security, Cloud Security, Identity Security, Zero Trust, Vulnerability Management, Incident Response, Operational Excellence, Security Strategy.

Information Security Manager\n Hybrid (3 days onsite) \n Are you an experienced Information Security professional looking for a role where you can genuinely influence an organisation's security strategy while remaining hands-on with the latest technologies? \n We're working with a well-established financial services organisation seeking an Information Security Manager to take ownership of its cyber security posture. This is an excellent opportunity for someone who enjoys balancing strategic security governance with technical delivery, while also supporting key networking initiatives. \n This is a 90% Information Security / 10% Network Engineering role, making it ideal for someone whose passion is cyber security but who is comfortable maintaining and supporting enterprise network infrastructure when required. Role responsibilities:Information Security (90%)\n\n • Lead the organisation's information security strategy and technical security operations.\n, • Drive compliance with ISO 27001, NIST and CBEST frameworks.\n, • Review new infrastructure and cloud-based services, ensuring they meet security standards.\n, • Conduct vulnerability management activities and coordinate external penetration testing.\n, • Work alongside outsourced SOC and security partners to investigate and respond to security incidents.\n, • Ensure comprehensive SIEM monitoring across the technology estate.\n, • Develop, implement and maintain information security policies, standards and procedures.\n, • Assess cyber risks and recommend appropriate mitigation strategies.\n, • Act as the internal security subject matter expert, engaging with stakeholders across the business.\n\n Networking (10%) \n\n • Support the design and maintenance of secure LAN, WAN and VPN environments.\n, • Assist with Cisco networking infrastructure, firewalls and routing technologies.\n, • Contribute to disaster recovery planning, network resilience and high availability initiatives.\nSkills required:\n\n, • Enterprise firewall technologies including Cisco Firepower (ASA/FTD) and Palo Alto.\n, • Cisco networking technologies including Catalyst switching, Layer 2/3, OSPF and VPNs.\n, • Network security controls including Cisco ISE, TACACS, IPS and endpoint protection.\n, • Security monitoring and incident response within SIEM environments.\n, • Vulnerability management and penetration testing.\n, • Security governance aligned to ISO 27001, NIST and risk management frameworks.\n, • Developing security policies, conducting audits and managing security incidents.\n\n Desirable skills: \n\n • Exposure to tools such as Rapid7, LogRhythm SIEM, Trellix and Symantec Endpoint Protection \n, • CCNP-level networking knowledge is highly desirable.\n\n Information Security Manager\n \n \n Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. \n Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation \n We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website

An exciting remote-based opportunity has arisen for a Threat Intelligence Lead to join our Technology team, reporting to the Chief Information Security Officer. You will design and lead the company’s cyber threat intelligence (CTI), security testing and proactive threat-hunting programmes, helping to protect our customers, assets and brands across our global operations.Working closely with our internal and external security operations teams, you will anticipate, assess and mitigate threats. The intelligence you provide will support strategic decisions, incident response and continuous improvements to our cyber resilience. \n This pivotal Cyber Security role requires strong technical expertise, intelligence capability and commercial awareness within a regulated financial environment. \n What you will do as our Threat Intelligence Lead: \n This is an overview and not an exhaustive list of responsibilities. Collaborating with your Line Manager, you will develop your own objectives but focus on all of the following and more: \n\n • \n Lead the development of our CTI function, establishing clear governance, processes, intelligence priorities and measurable outcomes. \n • \n Represent the organisation in key external intelligence-sharing forums, including FS-ISAC, the NCSC’s CiSP and relevant industry partnerships. \n • \n Use the MITRE ATT&CK framework to identify and analyse attacker tactics, techniques and procedures and strengthen our detection capabilities. \n • \n Develop the Proactive Threat Hunting Initiative, using intelligence and security tools to identify emerging threats, attack paths and vulnerabilities and security gaps. \n • \n Oversee the collection and analysis of tactical, operational and strategic threat intelligence, with a particular focus on threats affecting insurance and financial services sectors. \n • \n Proactively search for malicious activity, anomalies and emerging threats across enterprise networks, endpoints and cloud environments. \n • \n Provide clear, actionable intelligence and threat landscaping briefings to senior leaders, Board committees and key stakeholders across the business. \n\n What are we looking for in our Threat Intelligence Lead? \n We’re looking for an experienced Cyber Threat Intelligence professional who can combine their strong technical expertise with the ability to develop our CTI capability and turn complex intelligence into clear, actionable business insights. \n\n • \n MITRE ATT&CK training/certification is essential. \n • \n Experience developing Priority Intelligence Requirements (PIRs). \n • \n Strong experience working closely with SOC, Incident Response, Vulnerability Management, Security Engineering and Risk. \n • \n Experience managing the end-to-end intelligence lifecycle. \n • \n Significant Cyber Threat Intelligence (CTI) or closely related cyber security experience. \n • \n Strong experience analysing strategic, operational, and tactical threat intelligence. \n • \n Practical experience with MITRE ATT&CK, threat actor profiling, IOC analysis, threat hunting and intelligence-led detection engineering. \n • \n Evidence of leading/developing a CTI capability. \n • \n Relevant professional certification such as GCTI, CRTIA, CPTIA, GIAC, or CISSP is desirable. \n\n In return you will be welcomed and supported by our Ardonagh family joining an organisation that cares about you as a person and your wellbeing. Some of the other benefits are: \n\n • \n Holiday entitlement of 26 days plus bank holidays, increasing with length of service \n • \n 35 hour working week \n • \n Opportunity to progress your career across the entire Ardonagh family \n • \n Award-winning learning & development offering and support to obtain professional qualifications to enhance your knowledge and career prospects \n • \n Pension scheme for when you feel it’s time to retire \n • \n 24-hour Employee Assistance support for you and your family’s physical and mental wellbeing \n • \n Corporate perks such as discounted gym memberships, cinema tickets, shopping, Eyecare vouchers, cycle to work and much more \n • \n One day paid volunteering to give back to our communities \n • \n Ardonagh Community Trust (ACT) - raising funds for charity with donation matching in your local community \n • \n The Spotlight Awards, where we celebrate the best of the Ardonagh Group and all the bright talent across our business. \n\n We offer genuine potential for both personal and professional development, come and be part of our story and help us shape our future. So, what are you waiting for? Apply today and one of our team will be in touch.#LI-HC1 \n #LI-Remote \n INDX3 \n #AIB \n Everywhen is an equal opportunities employer, with a growing and thriving diversity, equity and inclusion strategy; we are committed to a working environment that is free from discrimination, is inclusive, and empowers our people to bring their whole self to work and reach their full potential. \n If your application is successful, we will conduct relevant employment checks prior to you commencing employment with us. These will include verifying your recent employment, address, credit history and a standard criminal record check. \n As an Everywhen colleague, you will be expected to uphold our values, act professionally and respectfully towards others, and contribute to a workplace where everyone is treated with dignity and respect. We expect all colleagues to help maintain an environment free from bullying, harassment, victimisation and other inappropriate behaviours, supporting our commitment to an inclusive and high-performing culture. \n Please note: We may close a vacancy prior to the publish end date if the required quality or number of applications has been received. \n Note to recruiters and employment agencies: We will not pay for unsolicited CVs from recruiters and employment agencies unless we have a signed agreement and have requested assistance, in writing, for a specific opening.

Outline of the role: \n Provide onsite 1st and 2nd line IT support to customers, primarily covering end-user support, M365, endpoint, account and device administration, basic server/network incident triage, security alert and vulnerability/patch status checks, and initial incident response. All tasks must be delivered in a professional and timely manner to ensure a very high level of customer experience. Complex server, network and security design/build activities, SOC operations, and large-scale IT project management are outside the scope of this role and should be escalated to other specialist teams or the relevant vendors as appropriate. \n \n Job Description \n\n • Provide onsite 1st and 2nd line support to customers via face-to-face support, email, telephone, remote access and chat tools.\n, • Use he IT support ticketing system to record, manage, update and close support cases in a timely and accurate manner.\n, • Support daily administration of Microsoft 365, user accounts, endpoint devices and related IT services within the agreed operational scope with the customer.\n, • Perform routine Windows Server administration and initial fault isolation during incidents; escalate complex server issues to other specialist teams or relevant vendors.\n, • Perform initial triage for network and server incidents, including basic checks, information gathering and escalation to specialist teams or vendors when required.\n, • Support security operations at an operational level, including checking security alerts, vulnerability status and patch status, and assisting with tools\n, • Provide first response during security or IT incidents, including initial investigation, containment support, evidence collection and escalation according to the agreed process\n, • Support day-to-day IT element configuration and service delivery activities within the customer environment.\n, • Prepare, deploy, replace and support PCs, mobile phones, peripheral devices and standard end-user IT equipment.\n, • Install, configure and test approved software on PCs and mobile devices in accordance with customer and the company’s procedures.\n, • Support basic testing and deployment of end-user devices, software and IT services; this does not include enterprise IT design or proof-of-concept ownership.\n, • Communicate with support vendors and internal specialist teams until case closure where escalation or vendor support is required.\n, • Attend operational meetings with the customer when required and maintain a professional working relationship with the customer.\n, • Maintain secure operations and keep the working environment tidy and compliant with customer and the company’s requirements.\n, • Maintain clear documentation for operational procedures, configuration changes, implementation records and support activities.\n, • Create reports for the customer and internal manager/director when required.\n, • Provide temporary or long-term customer support at their office, if required.\n, • Participate in early shift coverage and support outside of normal hours when required.\n, • Perform ad hoc tasks assigned by the line manager, provided they are consistent with the agreed operational support scope.\n, • Occasional international travel may be required.\n\n \n Requirements: \n\n • Proven customer service experience in an onsite IT support or helpdesk environment\n, • Experience providing 1st and 2nd line support for end users, including PCs, mobile phones, peripherals and standard business applications.\n, • Familiarity with Microsoft 365 administration, user/account management and endpoint/device administration.\n, • Familiarity with Microsoft Active Directory or Entra ID user administration, Microsoft Windows 11, Microsoft Office, antivirus/endpoint security tools and standard corporate software.\n, • Basic knowledge of Windows Server administration and incident triage; advanced design, build or architecture experience is not required.\n, • Basic knowledge of network products such as routers, switches and firewalls is advantageous for initial fault isolation and escalation.\n, • Awareness of security alert handling, vulnerability/patch status checking and operational tools such as Prisma and Microsoft Defender is advantageous.\n, • ITIL Foundation, Microsoft or endpoint support certifications are preferred but not mandatory.\n, • Business level written and verbal communication skills in English; Japanese is preferable\n, • Business level documentation skills, including meeting minutes, work procedures and customer/internal reports.\n, • Strong work ethic, punctuality, time management and reliability.\n, • Customer-focused mindset and ability to escalate appropriately to internal specialist teams or relevant vendors\n\n \n Conditions: \n\n • 1 year contract to start with\n, • Salary - £39,000 per annum\n, • Working hour – 35 hours per week, Monday to Friday\n, • Location – London\n, • Competitive benefits – Travel expense (within London), pension, annual leave\n\n \n * Access Appointments Consultancy Ltd is a recruitment agency based in London. Please note that we’re afraid that due to the high volume of applications we receive, we may not be able to provide feedbacks on individual CVs. Also we can only consider candidates who are eligible to work in the UK and are able to provide relevant supporting documentation such as passport/visas when required. Thank you for your time and cooperation*

About Us \n Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. \n \n At Visa, you'll have the opportunity to create impact at scale - tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. \n \n Join Visa and do work that matters - to you, to your community, and to the world. Progress starts with you. \n \n Job Description \n \n Cyber Security Analyst (AWS/Azure) \n We are seeking a detail-oriented Cyber Security Analyst to assess platforms, identify security risks, and help improve the organisation's security posture across cloud and technology environments. This role has a strong focus on platform security assessments, cloud security posture management (CSPM), and the use of security tools to detect misconfigurations, vulnerabilities, and control gaps. The successful candidate will work closely with engineering, infrastructure, and product teams to provide practical recommendations, support remediation, and promote secure-by-design practices. \n Key Responsibilities: \n\n • Conduct security assessments of platforms, applications, and cloud environments to identify risks, misconfigurations, and control weaknesses.\n, • Use CSPM, vulnerability management, and related security tools to continuously monitor cloud and platform security posture.\n, • Review configurations across cloud services, infrastructure, identity, networking, containers, and platform components against security baselines and best practices.\n, • Analyse findings from security tools and prioritise remediation based on risk, exploitability, and business impact.\n, • Partner with engineering, DevOps, infrastructure, and product teams to define practical remediation plans and track closure of identified issues.\n, • Support secure design and architecture reviews for new and existing platforms.\n, • Validate that security controls are implemented effectively and aligned with organisational policies, standards, and regulatory requirements.\n, • Assist in developing and maintaining security assessment methodologies, procedures, standards, and reporting templates.\n, • Prepare clear, concise reports and dashboards summarising risks, trends, exceptions, and remediation progress for technical and non-technical stakeholders.\n, • Contribute to continuous improvement of the organisation's cloud and platform security capabilities, including automation opportunities and tool optimisation.\n, • Stay current with emerging threats, cloud security risks, and evolving security tooling relevant to platform environments.\n\n This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager. \n \n Qualifications \n \n\n • Experience in cybersecurity, cloud security, platform security, or risk assessment roles.\n, • Hands-on experience performing technical security assessments across cloud or platform environments.\n, • Strong understanding of cloud security concepts, including identity and access management, network security, logging and monitoring, encryption, secrets management, and workload protection.\n, • Experience using CSPM tools and other security technologies such as vulnerability scanners, SIEM, CNAPP, or configuration assessment platforms.\n\n \n Visa is an EEO Employer \n Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law. \n

Who we’re looking forWe are seeking an experienced Cloud Platform Engineering Lead with deep AWS expertise to join Enterprise Cloud Engineering. This role is focused on building, operating and securing an AI-first, agentic-native AWS cloud platform in a regulated enterprise environment. We are looking for someone with experience of AWS Landing Zones, a security-first mindset, and knowledge of building ‘paved roads’ that reduce friction for application teams and make it easier for developers to comply with policy requirements. Previous software engineering experience is a bonus.You will be a hands-on engineer responsible for delivering platform capabilities and agent skills that enable developers and autonomous AI agents to develop, build, test, and deploy applications through to production. You will also build SRE capabilities covering release management, operational stability, monitoring, and incident and alert response.About SchrodersWe’re a global investment manager. We help institutions, intermediaries and individuals around the world invest money to meet their goals, fulfil their ambitions, and prepare for the future.We have around 5,000 people on six continents. And we’ve been around for over 200 years, but keep adapting as society and technology changes. What doesn’t change is our commitment to helping our clients, and society, prosper.Technology at SchrodersThere's a huge amount of change going on at Schroders. Technology's shaping our business more and more, so there are many opportunities waiting to be grabbed. And because we're a big financial player, we can put hefty backing behind good ideas.We're a serious business – we have enormous responsibilities to our clients and shareholders. But just because we're suited and booted, that doesn't make us stuffy; our tech teams are friendlier and more informal than you might expect. The baseWe moved into our new HQ in the City of London in 2018. We’re close to our clients, in the heart of the UK’s financial centre. And we have everything we need to work flexibly.The teamYou will be part of the Enterprise Cloud Engineering function, with a primary focus on AWS. The team builds and operates AWS Landing Zone foundations (including AWS Organizations, Control Tower, and AFT), security controls, and platform capabilities that enable developer agility while adhering to governance and compliance requirements. We build platform products using strong engineering discipline, including automated testing and well-governed software delivery practices.What you’ll doDesign and deliver a development platform on AWS, enabling teams and autonomous agents to securely create, test, and deliver applications and infrastructure through standardised paved roads Engineer and operate the AWS Landing Zone using AWS Organizations and Control Tower, including automated account vending via Account Factory for Terraform (AFT) and governance guardrails (e.g., SCPs). Implement Terraform based Infrastructure as Code that is modular, reviewable, and suitable for AI assisted/agentic authoring. Build and operate CI/CD pipelines using GitHub Actions/Workflows, embedding quality controls such as linting, static analysis, vulnerability scanning, and automated tests. Define and implement test strategies for platform services and infrastructure code (e.g., unit testing for automation/services, policy tests, IaC validation, integration testing in ephemeral environments). Implement preventative and detective security controls (e.g., AWS Config, Security Hub, policy as code, automated compliance scanning). Develop and maintain Model Context Protocol (MCP) servers and reusable agent skills, contributing to an enterprise Agent Skills Marketplace with appropriate guardrails. Design, build, and support AWS services including VPC networking, compute, storage, containers (ECS/EKS), and serverless (Lambda). Develop Python based automation, services, and agent skills using Boto3 and AWS Lambda. Perform Linux configuration, hardening, and troubleshooting in cloud environments. Collaborate with security, platform, and application teams to improve reliability, security, and developer experience, treating the platform as a product. Strong hands-on experience engineering AWS platforms in enterprise or regulated environments. Familiarity with agentic AI development patterns and tools; experience with AWS Bedrock/Agent-Core and MCP is desirable. Experience with policy as code tools (e.g., OPA, Cedar, Sentinel) and testing/validating policies is desirable. Experience building developer platforms / paved roads / self-service platform products is highly desirable Deep knowledge of AWS Landing Zones, including Organizations, Control Tower, AFT, account vending, audit, and compliance. Strong Infrastructure as Code skills using Terraform (required); familiarity with AWS CDK and CloudFormation is a plus. Experience with CI/CD and Git-Ops using GitHub Actions/Workflows, including approval gates for infrastructure change. Strong AWS security experience across preventative/detective controls, monitoring/alerting, policy as code enforcement, and vulnerability management. Proficient Python development (Boto3/Lambda), building automation and services that compose into larger workflows. Strong Linux systems knowledge and troubleshooting skills. Experience with AWS core services: networking (VPC), compute, storage, containers (ECS/EKS), serverless. Demonstrable experience designing and implementing testing strategies, including automated unit/integration/end to end testing, and embedding these into CI/CD pipelines. What you’ll be likeA pragmatic, hands-on, delivery-focused AWS platform engineer with a builder’s mindset. Quality-minded: you default to reliable systems supported by automated tests and meaningful CI/CD quality gates. An enabler: you enjoy building platform capabilities as products, with strong engineering discipline and attention to developer experience. Security-focused with an automation-first mindset—security should be designed-in, not bolted on. Curious about agentic AI and actively experimenting with AI development tools and frameworks. Comfortable operating at platform scale in complex environments where “you ship it, you own it”. Clear communicator who produces reviewable infrastructure code and durable documentation.We recognise potential, whoever you areOur purpose is to provide excellent investment performance to clients through active management. Diversity of thought facilitated by an inclusive culture will allow us to make better decisions and better achieve our purpose. This is why inclusion and diversity are a strategic priority for us and why we are an equal opportunities employer: you are welcome here regardless of your age, disability, gender identity, religious beliefs, sexual orientation, socio-economic background or any other protected characteristics We're a global investment manager. We help institutions, intermediaries and individuals around the world invest money to meet their goals, fulfil their ambitions, and prepare for the future. We have around 6,000 people on six continents. And we've been around for over 200 years, but keep adapting as society and technology changes. What doesn't change is our commitment to helping our clients, and society, prosper. Full timePosting Date: 2026-08-17

Security Analyst - ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender \n One of our most ambitious and rapidly growing law firm clients are actively looking to take on a new Security Analyst (ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender) on a permanent basis. This role will work close with the Security Manager. The firm have grown by 300% in the last 5 years and have further plans to stimulate growth. \n This role will be best suited for someone with 2-3 years experience looking to bring knowledge and confidence to the team, to be considered for this Security Analyst (ISO27001, Cyber Essentials, Cysa+, Mimecast, Microsoft Defender) it's expected you have that alongside: \n\n • Relevant Security qualifications (Cysa+ or others)\n, • Knowledge of best security frameworks and standards (ISO27001, Cyber Essentials etc.)\n, • Ideal but not required law firm experience\n\n Key Responsibilities \n\n • Maintain the operational configuration of all in-place security solutions in line with established baselines.\n, • Monitor security tools and services to ensure they are operating effectively and appropriately.\n, • Review logs and reports from security tools, workstations, servers and network devices, interpret activity, and help drive appropriate remediation actions.\n, • Support investigations into suspicious or problematic activity and assist with incident response as required.\n, • Contribute to vulnerability assessments, penetration testing activities and security audits.\n, • Provide support and guidance to end users and act as an escalation point for the Service Desk on security tools, best practice, and firm policies and procedures.\n, • Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date.\n\n

Programme Manager - Cyber Security and Operations \n 6 Months \n £90k FTC or £550/Day Inside IR35 \n London or Southampton \n \n Our client is looking for an experienced Programme Manager with a strong background in Cyber Security and Security Operations to lead complex programmes and drive the successful delivery of security capabilities into live operational environments. \n \n The Programme Manager role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between £80k - £90k, or day rate contract between £500 - £550/Day Inside IR35 on an umbrella solution. The role can be based in either London or Southamptom, and will be a mix of office and remote based working - ideally 1-2 days per week in the office. \n \n \n The Role \n\n • As a Programme Manager, our client expects you to take ownership of complex Cyber Security and Security Operations programmes, bringing together cyber specialists, technology teams, operational stakeholders and suppliers to deliver measurable security outcomes.\n, • You will provide the structure, governance and leadership required to take security initiatives from strategy and design through implementation, transition and into business-as-usual operations.\n, • This is a senior, client-facing role requiring strong programme leadership combined with a practical understanding of how modern Security Operations capabilities are designed, implemented and operated.\n\n \n What You'll Do \n\n • Lead complex Security Operations and Cyber Security transformation programmes from mobilisation through to operational delivery.\n, • Establish programme plans, governance frameworks, milestones, dependencies and success measures.\n, • Coordinate delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams.\n, • Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response.\n, • Manage the transition of new security capabilities into live operational services.\n, • Work closely with security architects and technical teams to ensure delivery aligns with security strategy and architecture.\n, • Manage dependencies across internal teams, clients, technology vendors and third-party suppliers.\n, • Own programme risks, issues, assumptions and dependencies, ensuring appropriate escalation and resolution.\n, • Manage programme budgets, resources, forecasts and commercial commitments.\n\n \n What Our Client Is Looking For \n\n • Programme & Security Operations Experience\n, • Significant experience leading complex Cyber Security programmes within enterprise environments.\n, • Strong understanding of Security Operations and the delivery of operational cyber capabilities.\n, • Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation.\n, • Proven experience transitioning security capabilities from project delivery into BAU operations.\n, • Strong programme governance, planning, financial management and risk management capability.\n, • Experience managing multiple workstreams, technical dependencies and third-party suppliers.\n, • Good understanding of cloud, infrastructure, networking, identity and security technologies.\n, • Experience working with managed security service providers and technology vendors would be advantageous.\n, • Our client is looking for someone who can combine strategic programme leadership with a practical understanding of Cyber Security and Security Operations, ensuring complex security initiatives translate into effective, sustainable operational capabilities.\n\n \n \n If you are interested in the above, hit the Apply now button! \n \n Programme Manager, Programme Management, Security Operations, Programme Manager, Cyber, Programme Manager, Security, Programme Manager, Programme Manager \n Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment. \n

Role overview \n We are recruiting for an experienced IT Cyber Security Specialist to join the IT Infrastructure Engineering Team, part of the Technology Department within the wider Business Services function, based at the firm's head office in London. \n \n The team is responsible for the security, and continual improvement of the firm's global IT infrastructure, systems, and cybersecurity capabilities, working closely alongside the Infrastructure Operations Team, which manages day-to-day service delivery and support. \n \n As a project, engineering, and security-focused function, the Infrastructure Engineering Team delivers technology projects and programmes, as well as driving strategic infrastructure and cybersecurity enhancements across the firm's global offices. \n \n Reporting to the IT Infrastructure Engineering Manager, the IT Cyber Security Specialist is a key technical role responsible for the ownership and continual development of the firm's cybersecurity controls and security architecture. The successful candidate will develop security policies, identify and mitigate vulnerabilities, investigate security incidents, and lead the response and resolution of major cyber incidents, helping to ensure the firm's technology environment remains secure, resilient, and aligned to business needs. \n \n Key responsibilities \n The key responsibilities of this role are set out below and there may be others which are not listed. You may be required on occasion to work outside our normal working hours of 9:30am to 5:30pm. \n \n Cyber Security & Engineering \n\n • Constantly review and improve the firm’s security posture and external security rating.\n, • Identify vulnerabilities in hardware and software to be remediated by Engineering\Operations teams.\n, • Understand current and emerging security threats.\n, • Assist and lead in Incident Response investigations and mitigation.\n, • Communicate threats and deliver training and awareness programmes to other team members.\n, • Produces quarterly privilege access slides, suggesting ongoing improvement for monthly operational security slides, measured using secure score.\n, • Evaluate, test and recommend security enhancements.\n, • Develop business continuity plans of critical business services in the event of a disaster.\n, • Lead CE+ accreditation.\n, • Identify security risks and exposures, determine the cause of security violations and suggest procedures to halt future incidents.\n, • Perform targeted regular and ad-hoc scans to identify potential breaches of the firm data and security and data protection policies.\n, • Identify, analyse, monitor and minimise areas of risk that pertain to Information technology.\n\n \n Project Delivery \n\n • Be able where relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review.\n, • Ensure that proposed infrastructure architecture/design are aligned with Firms policies.\n, • Post project, participate in evaluating the success of the project, identifying best practices and lessons learned.\n\n \n Third Level Support \n\n • Provide Major Problem\Incident Support where Operations team need steering from a subject matter expert.\n, • Liaison with 3rd party suppliers on system issues.\n, • Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation.\n, • This role requires the ability to communicate complex ideas clearly and effectively. Strong soft skills, including active listening, presentation, and communication skills, are therefore essential.\n\n \n Candidate profile \n Candidates for this position must have: \n \n\n • 10+ years of experience as a full time IT professional, 5 years in a similar role.\n, • Demonstrable experience in a Cyber Security position with a focus on incident response, threat monitoring, and vulnerability management\n, • Hold at least one security related certifications such as CISSP, CEH, CCNA Security\n, • Experience with threat prevention techniques and tools\n, • Knowledge of best practices in modern security architectures and incident responses\n, • Experience of Infrastructure Business Continuity or Disaster Recovery planning.\n, • Experience designing, integrating and managing complex infrastructure solutions.\n, • Excellent problem-solving ability including leading multi-disciplinary teams to identify, research and coordinate resource to diagnose & troubleshoot complex issues.\n, • Excellent skills with Windows Server 2016/2019/2022 (Active Directory multi-site, DHCP, DNS, Intune, Group Policy, AGPM, PKI, ABDA, DFS, Entra, Azure SSO).\n, • Strong written and oral communication skills, and the ability to effectively communicate with technical and non-technical audiences at all levels.\n, • Be able to work with 3rd parties to manage on premise and cloud services.\n, • Strong planning skills.\n, • Experienced in Information Technology Infrastructure Library (ITIL) processes, procedures, and roles.\n\n \n We are committed to ensuring that our recruitment processes are barrier-free and as inclusive as possible for everyone. This includes making adjustments for people who have a disability or long-term condition. If you have any questions or require any adjustments to be made to one or both of the application or interview processes, please contact the Recruitment Team. \n \n We are a Disability Confident Committed employer and will offer an interview to applicants with a disability or long-term condition who best meet the minimum or essential criteria for our Business Services roles. If you would like to apply through the Disability Confident 'Offer An Interview' commitment, please apply via our online application form and not via LinkedIn. You are disabled under the Equality Act 2010 if you have a physical or mental impairment that has a ‘substantial’ and ‘long-term’ negative effect on your ability to do normal daily activities. For more information about the Disability Confident scheme, please see the government website here. \n \n We welcome applications irrespective of race, colour, ethnic or national origin, disability, sex, gender identity, sexual orientation, age, religion, belief or marital status.

Cyber Response Assistant Manager (Proactive Consulting) \n \n This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. \n \n About the role \n The Cyber Response Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice. \n \n Your specific focus will be in the domain of proactive advice and guidance as it relates to Security Operations / Defensive Cyber Operations (Incident Management, Vulnerability Management, Threat Intelligence). \n Organisations face increasing challenges operating effective security operations capabilities across threat intelligence, vulnerability management and incident management. This role helps clients build and mature these capabilities to improve cyber resilience and enable informed risk-based decision making. \n \n This is a hands-on role, and an opportunity to join a high performing team that works with a wide variety of public sector clients, as KPMG are one of just nine tier 1 responders in the UK. As such, you will gain a huge amount of experience in a short space of time and will also have the opportunity to be put through a range of security certifications. \n \n We do work that matters with some amazing clients across government, defence, infrastructure, healthcare, financial services and large corporates. We secure mission critical assets and build capability, test emerging technologies, exercise national institutions and consult at the highest level. Our work is discrete, but high impact. \n \n Why join us? \n\n • One of only nine UK Tier 1 incident response providers\n, • Access to nationally significant incidents\n, • Exposure across government and critical infrastructure\n, • Investment in certifications and training\n, • Opportunity to shape a rapidly growing capability\n\n \n What will you be doing? \n\n • Working with some high-profile clients across the public sector on mission critical engagements. This will be to senior stakeholders (Grade 6 / SCS 1 and 2).\n, • Advising clients and building solutions to proactive Security Operations/ Defensive Cyber Operations issues. This may include advising on Frontier AI use cases in cyber defence, designing operating models for threat intelligence teams, building technology at scale for attack surface monitoring or building concepts for at scale vulnerability management.\n, • Drafting well thought out and structured oral and written briefings.\n, • Liaising with clients on delivery, implementation and project issue.\n, • Manage end-to-end delivery of consulting engagements, including stakeholder communication, project management, reporting, proposals, capability development, and mentoring junior team members.\n, • You may also be asked to contribute to bid work, generating well-structured responses to bids questions for peer and senior review.\n\n \n The person \n You will have a strong background in cyber-security consulting (and ideally security operations/ defensive cyber operations consulting). You will be a consultant first, technical / engineer second. You will understand complex concepts quickly and be able to digest them into bite sized tangible chunks for client receipt quickly and in an understandable manner. \n \n You may have started in incident response, but its not essential – equally your trade may be self-taught/ learned. What's essential is a can do, proactive attitude while working with ambiguity. Our work often doesn't have all the answers to hand and so you will be comfortable working with ambiguity, consulting widely (internally and with the client) and addressing the issue collaboratively. \n \n You will have experience in one of the industries we serve, but government, defence or healthcare is preferred. You will be aware of industry trends and for instance how Industry A can learn from what Industry B is doing. You won't have all the answers but will be able to create and execute a plan for getting them. Your views will always be well considered and measured. You will have sufficient EQ to understand and accept where you need help. \n \n You will be credible in front of clients, some of whom are very senior, experienced and expecting of Big 4 pace, insight, scale and professionalism. Your communication style will be adaptive. \n \n Skills we’d love to see/Amazing Extras: \n In the past those that have thrived in the role have had degree level qualifications, such as MSc in Information Security, IT or relevant STEM subjects, but it is not essential. Your rounded consulting skills can do attitude and proactive nature are more important. \n \n Essential: \n\n • A broad understanding of the cyber security threat landscape.\n, • Understanding of a wide range of information security and IT methodologies, principles, technologies and techniques. This will include emerging disruptive technologies in the Security Operations/ Defensive Cyber Operations.\n, • Excellent consulting skills, including the management of client stakeholders and internal teams.\n, • Excellent interpersonal, written and communication skills, to including the timely and effective drafting of top-notch client deliverables based on thorough analysis, insight and research.\n, • A willingness to roll your sleeves up, learn, teach others and get stuff done (even if it is not your primary responsibility) to meet mission objectives.\n, • Demonstrable experience getting to grips with knotty client issues and shifting the solution from left to right at scale and pace, and to an exceptional quality.\n\n \n Preferred: \n\n • Demonstrable current experience of the Security Operations/ Defensive Cyber Operations domain.\n, • Proven experience of dealing with cyber security incidents and associated response measures is desirable.\n, • Understanding of emerging technologies such as Frontier AI, and its impact (positive and negative) on the domain of Security Operations/ Defensive Cyber Operations.\n, • Certifications and formal qualifications.\n\n \n Location: \n Our core hubs for this role are either: \n\n • London (Canary Wharf); or\n, • Manchester (St Peter’s Square).\n\n You must be within commutable distance to one of these locations. Current KPMG policy is 60% of the week with clients or our offices, 40% elsewhere (that can include working from home). \n

Cyber Response & Recovery Manager (Remediation) \n \n This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance. \n \n About the role \n \n The Cyber Response & Recovery Manager role will sit within the Cyber Response Services team in KPMG’s Cyber Advisory practice. \n \n Your specific focus will be in the domain of recovery and remediation post incident. Our clients continue to face increasingly destructive cyber threats, particularly ransomware, destructive malware, business email compromise, Active Directory compromise, cloud compromise and advanced network intrusions. In these situations, clients look to KPMG not only to investigate and contain the incident, but also to help them recover securely, rebuild critical services, reduce the risk of reinfection and improve their long-term resilience. \n \n This is a hands-on cyber response and recovery manager role, focused on supporting clients through the most operationally critical phase of a cyber incident: restoring business services safely and securely. The role will work closely with incident response leads, forensic teams, legal advisers, crisis management teams, technology teams and client executives to convert incident findings into practical remediation, rebuild and recovery actions. \n \n As a cyber response recovery manager, you will help clients stabilise their environment, remove attacker persistence, restore identity and infrastructure services, support patching and vulnerability remediation, advise on secure rebuild patterns, review and redesign network architecture, establish isolated recovery environments, and define phased recovery and security improvement roadmaps. \n \n This role is particularly suited to someone with strong hands-on infrastructure, systems administration and cyber security experience, who can operate effectively during high-pressure incidents and provide pragmatic, technically credible advice to clients. The successful candidate should be comfortable working across Windows, Linux, Active Directory, virtualisation, networking, cloud and enterprise infrastructure technologies, and should be able to translate technical remediation requirements into clear recovery plans for both technical and senior stakeholder audiences. \n \n KPMG is one of a small number of Tier 1 incident response providers in the UK. As such, this role provides the opportunity to work on complex, high-profile cyber incidents across a wide range of sectors. You will gain significant experience supporting clients during moments of critical need and will have the opportunity to develop both your technical recovery expertise and incident leadership capability. \n \n When not responding to live incidents, you may support clients with cyber resilience, recovery readiness and post-incident transformation engagements. This may include developing recovery playbooks, designing isolated recovery environments, assessing Active Directory and infrastructure resilience, supporting ransomware recovery planning, reviewing network segmentation, improving backup and restore strategies, and helping clients define cyber security improvement roadmaps. \n \n Our clients expect that cyber-incidents will be tackled with urgency, therefore, there is an expectation that you will be flexible in terms of working hours and be on call (on a rotation basis). In addition, you should be prepared to travel on short notice for periods up to 2 or 3 weeks at a time. \n \n Above all, KPMG is looking for someone who is passionate about helping clients recover from cyber incidents in a safe, structured and sustainable way. In return, KPMG is committed to supporting your development, technical growth and progression into senior cyber response and recovery leadership roles. \n \n Why join us? \n\n • One of only nine UK Tier 1 incident response providers\n, • Access to nationally significant incidents\n, • Exposure across government and critical infrastructure\n, • Investment in certifications and training\n, • Opportunity to shape a rapidly growing capability\n\n \n What will you be doing? \n \n This role is not a pure incident response role. It is a hands-on cyber recovery role focused on helping clients restore services, remediate compromised infrastructure and build stronger security foundations after a cyber incident. \n \n The ideal candidate will combine: \n\n • Deep infrastructure and systems administration experience.\n, • Strong cyber security and incident response understanding.\n, • Hands-on remediation and recovery capability.\n, • Active Directory, Windows, Linux and network architecture expertise.\n, • The ability to lead technical workstreams during high-pressure incidents.\n, • The ability to define and execute short, medium and long-term security roadmaps.\n\n \n Further responsibilities will include: \n\n • The Cyber Response Recovery Manager will be responsible for leading and supporting cyber recovery workstreams during active cyber incidents and post-incident remediation programmes. Responsibilities will include:\n, • Lead cyber recovery workstreams during major incidents, working closely with incident response, forensic, client IT, legal, insurer and senior stakeholder teams, translating incident findings into clear remediation and recovery actions.\n, • Deliver hands-on remediation across enterprise environments, including Active Directory recovery and hardening, Windows/Linux systems, network, cloud, endpoint and security tooling, with a focus on removing attacker persistence and restoring trust.\n, • Drive patching and vulnerability remediation activities, prioritising actions based on business risk, threat actor behaviour and incident context.\n, • Review and redesign network architecture and security controls, including segmentation, firewall rules, and administrative access pathways, to reduce reinfection risk and improve resilience.\n, • Establish and support secure recovery environments and rebuild strategies, including isolated environments, backup validation, restore sequencing, and secure restoration of business-critical services.\n, • Define and execute phased recovery and transformation plans, including immediate stabilisation, structured remediation, and security improvement roadmaps and rebuild standards.\n, • Manage end-to-end delivery of recovery engagements, including stakeholder communication, project management, reporting, proposals, capability development, and mentoring junior team members.\n\n \n The Person \n \n You should have a strong background in cyber-security and incident response. For example: You should be able to guide a client through an unstructured incident response process (such as an advanced network intrusion) – managing resources and defining objectives at each stage of the incident response process; scoping and triage, containment, evidence preservation and extraction, eradication, recovery, forensic analysis and investigation. \n\n • A broad understanding of the cyber security threat landscape.\n, • Strong technical background in computers and networks, and programming skills.\n, • Significant and proven experience of dealing with cyber security incidents and associated response measures.\n, • Experience of managing a rapid deployment incident response team.\n, • Excellent interpersonal, written and communication skills.\n, • Understanding of a wide range of information security and IT methodologies, principles, technologies and techniques.\n, • A genuine interest and desire to develop and mention junior team members.\n, • Strong attention for detail and the ability to manage multiple simultaneous cases.\n\n \n Skills we’d love to see/Amazing Extras: \n \n The successful candidate will demonstrate competency in computing and networks as well as in cyber-security either by having the relevant work experience, completed a degree or obtained industry relevant certification. Therefore the qualifications below should be seen as means to demonstrate competency and not as a requirement. The desired skill and qualification is provided below: \n\n • Excellent communication skills (both written and oral) and project management skills.\n, • Strong hands-on experience across enterprise infrastructure, including Windows Server, Active Directory, Linux, networking, and cloud environments (e.g. Azure, AWS, Microsoft 365), with the ability to operate at a systems administrator level during recovery scenarios.\n, • Proven experience supporting cyber incident recovery, including ransomware, Active Directory compromise, network intrusion, or large-scale infrastructure incidents, with the ability to translate incident findings into practical remediation and recovery actions.\n, • Demonstrated capability in leading and executing remediation activities, including identity and Active Directory hardening, patching and vulnerability remediation, secure system rebuild, backup validation, and restoration of business-critical services.\n, • Solid understanding of network architecture and security, including segmentation, firewall design, administrative access paths, and the ability to review and redesign environments to reduce reinfection risk and improve resilience.\n, • Experience developing and delivering structured recovery plans, remediation trackers, and security roadmaps aligned to immediate recovery, medium-term stabilisation, and long-term transformation.\n, • Strong stakeholder management and communication skills, with the ability to engage both technical and executive audiences, manage high-pressure situations, and produce clear, high-quality deliverables and reporting.\n, • Effective project and delivery management capability, including scoping, prioritisation, financial oversight, and managing multiple workstreams during complex, time-sensitive cyber recovery engagements.\n\n \n Location: \n Our core hubs for this role are either: \n\n • London (Canary Wharf); or\n, • Manchester (St Peter’s Square).\n\n You must be within commutable distance to one of these locations. Current KPMG policy is 60% of the week with clients or our offices, 40% elsewhere (that can include working from home). \n

The Opportunity \n The UK and EMEA proxy teams of Sodali & Co provide strategic advice to major listed issuers on high-profile matters related to corporate governance, investor relations and shareholder engagement, M&A and Activism, annual general meetings, ESG and sustainability. The team are highly regarded, and part of a global shareholder engagement team that is recognised as the leading proxy solicitation firm globally. The team is a trusted advisor in M&A transactions and counsels companies within shareholder activism and takeover/raid defence mandates as well as response to broader hostile activity or unsolicited approaches. The UK/EMEA team directly partner with management boards and supervisory boards as well as senior leaders (Head of Investor Relations, Chief Legal Officer, Head of Corporate Board Office/Corporate Secretary) of the respective listed company. You will join a fast growing global consulting firm, with a multinational, passionate, and ambitious team, that is used to challenge and being challenged, embrace change and strive to achieve greatness. \n \n More About Sodali & Co \n Sodali & Co is a recognized global capital markets stakeholder advisory firm, serving over 2,000 clients in more than 65 countries. The Firm advises a diverse and global client base including many of the world’s largest companies. Formed by the mergers of several market-leading capital markets stakeholder engagement consultancies, Sodali is the largest global shareholder services firm in the world. The Firm operates out of three global headquarters in New York, London, and Sydney and is supported by 12 regional offices in major financial capitals around the world. \n \n Sodali provides a full suite of shareholder, sustainability, and strategic communications advisory services that, together, enable the Firm to deliver clients differentiated insights, integrated expertise, and bespoke advice to address complex interconnected issues, identify and capitalize on strategic opportunities, and drive successful business outcomes. \n \n Practice Group Summary \n\n • Shareholder Advisory services include M&A Advisory, Activism Preparation and Defense, Board Governance Services, Corporate Governance Advisory, Proxy Solicitation, Capital Markets Intelligence, Global Debt and Bondholder Services, and Stakeholder Research.\n, • Sustainability services include ESG Assessment, Strategy & Implementation, and Communications Advisory.\n, • Strategic Communications services include Corporate Communications, Financial and Transaction Communications, Investor Relations, Public Affairs and Campaigns, Crisis and Special Situations, and Research.\n\n \n Key Responsibilities of the Manager, Proxy Role: \n\n • Participate and support in advisory assignments on matters related to corporate governance, shareholder engagement and proxy solicitation, capital markets intelligence as well as sustainability and ESG.\n, • Work and assist on special situations (M&A and shareholder activism), including live raid defence, proxy fights, contests for corporate control and crisis management.\n, • Research and evaluate companies’ corporate governance and stewardship record and vulnerability.\n, • Analyse, modelling and interpreting companies’ shareholder base profile, including proxy voting guidelines and past voting behaviour of major institutional investors to project impact and outcome of shareholder votes.\n, • Analyse the influence, policies and frameworks of proxy advisory firms (e.g., ISS and Glass Lewis).\n, • Develop shareholder engagement and corporate governance roadshow concepts and materials (e.g., investor profiles) by thoughtful research on institutional investors and other stakeholders.\n, • Identify and actively support the pursuit of new business development opportunities. Liaison with clients, other advisors (e.g., law firms, investment banks).\n, • Cooperate and coordinate workstreams with other internal teams and business segments of Sodali & Co (e.g., corporate governance team, sustainability team, engagement team, M&A and activism team, strategic communication team, research and analytics team).\n, • Engage in meaningful discussion with institutional and retail investors as well as proxy advisory firms.\n, • Monitor shareholder positions and trading activities.\n, • Prepare executive summaries, client presentations, case studies and board ready briefing materials.\n, • Conduct research and surveillance on relevant governance, shareholder and activism trends.\n, • Develop and expand subject matter knowledge related to corporate governance, investment stewardship, shareholder dynamics, activism and ESG.\n, • Maintain the UK team’s various databases and in-house intelligence.\n, • Leverage financial and business intelligence databases such as Factset, Refinitiv Eikon, Bloomberg, ISS-Corporate, Diligent Market Intelligence, Broadridge as well as the firm’s proprietary databases, including the Sodali & Co Platform, to process, analyse and present obtained information in the form of texts, charts and tables.\n\n \n Qualifications: \n\n • Experience in M&A and Activism proxy solicitation, investor relations, corporate governance, capital markets, investment management, investment banking or finance.\n, • Academic track record demonstrating numeracy and critical thought.\n, • Highly organised, intellectually curious and analytically minded.\n, • Advanced user in Excel.\n, • Confident to work with qualitative and quantitative datasets to synthesise information and develop innovative, sophisticated solutions.\n, • Outstanding project management skills with the ability to prioritise competing projects and deadlines .\n, • Exceptional written and verbal communication skills with the ability to elaborate concepts and ideas concisely and defend their validity.\n, • Professional and mature manner, ability to politely and considerately interact with clients, other advisors and colleagues while applying highest standards of business etiquette.\n, • Ready to assume responsibility in high-stake situations in combination with a relentless work ethic and high resilience.\n, • Unconditional integrity, confidentiality and discretion.\n, • You will be required to interact with senior leaders of the firm as well as company boards, senior managers of issuers and other advisors (e.g., investment bankers, lawyers), exceptional communication and interpersonal skills are therefore indispensable.\n\n \n Sodali & Co is proud to be an Equal Opportunities Employer. We celebrate diversity and are committed to creating an inclusive environment where everyone feels valued and respected. We welcome applications from all qualified individuals regardless of race, color, religion, sex (including sexual orientation, gender identity, and pregnancy), national origin, age, disability, or veteran status. We are committed to providing reasonable accommodations to support candidates with disabilities or access needs throughout the recruitment process.

NOT A SOC ANALYST ROLE - it sits in our consulting team. Do no apply if you're an aspiring SOC analyst. \n \n *No recruiters please* \n \n Cyber Security Analyst \n \n Important: you must be UK based - we are unable to provide visa sponsorship, and you must meet all 4 minimum requirements below. \n \n Overview \n \n\n • 💰 Salary: starts at £33,000 depending on experience.\n, • 🏖️ Holiday: 24 days paid holiday (pro rata) + your birthday off + bank holidays + one extra holiday day for every 12 months you stay with us.\n, • 🏢 Working Together: We spend three days per week together in our lovely London office (39 floors up in Canary Wharf 👀). The rest of the time, you can choose to work from wherever you are most productive and happy.\n, • 🕰️ Working Hours: 8hrs per day Mon-Fri, 40hrs per week.\n, • 👩🏻 Training: individual training plan and budget for one certification / course per year.\n, • 🍺 Socials: We meet regularly to have a drink, throw some axes.\n, • 🍾 Start Date: September - October\n\n \n Minimum Requirements \n \n You must meet all 4 of these minimum requirements, please do not apply if you do not - your application will be rejected. \n \n\n • Education: a graduate from a UK University with a technical academic background in computer science, software engineering, information security, or a related field.\n, • IT literacy: confident using Microsoft Office applications, especially Word, Excel, Outlook and PowerPoint.\n, • Fluent in English: as this role has some client facing and business development elements, you must be highly proficient with business level English.\n, • Location: must be within 90 mins commute of Canary Wharf, London.\n\n \n About CyPro \n \n We are an innovative cyber security start-up united in a shared mission: to redefine cyber security for small and medium-sized businesses (SMBs). \n \n Our Founders – Jonny & Rob - spent most of their early careers delivering cyber security for large enterprises and central government, and they saw a clear need for a new approach to cybersecurity, especially as small to medium-sized businesses became increasingly targeted by cyber criminals. Indeed, by 2022, SMBs were the focus of 75% of cyber attacks, largely due to them being easy targets. \n \n Together, CyPro is already setting new standards, defining innovative solutions and equipping its clients with the cyber security they need to prevent attacks, secure bigger clients, and scale to new heights of success. \n \n We are growing quickly as a business and the next few years promise more of the same. Joining CyPro will allow you to become an integral part of our mission and join a team industry experts embarking on this exciting journey. \n \n There are some elements of your role which are expected from all members of staff, irrespective of their grade or seniority. \n \n\n • Problem-Solving: ability to identify, troubleshoot, and resolve a wide range of security issues effectively, both tactically and strategically.\n, • Adaptability: ability to work both independently and collaboratively within a fast-paced, evolving environment.\n, • Driven, Self-Starters: we are not a large FTSE organisation with a procedure for everything. You will need to be willing to put in the extra effort and operate in an environment often with little guardrails.\n\n \n The Role \n You will be in a dynamic, client-facing team, where you will deliver the security needs of a number of high-growth clients through our consultancy and managed services offerings. You’ll work alongside a skilled team provided by CyPro, including a CISO, SOC Manager, Security Architects, Penetration Testers, and Cloud Security Specialists. \n \n You will be supporting both our client side delivery and helping us grow our business operations (sales, marketing, etc.). Day-to-day you will be responsible for: \n \n 🏆 Client Side Delivery \n\n • Assist in creating deliverable templates for security assessments and vulnerability analyses for clients.\n, • Support the development and implementation of security policies, procedures, and controls.\n, • Help in monitoring and analysing security incidents and threats.\n, • Collaborate with clients to understand their security needs and provide appropriate solutions.\n, • Participate in the preparation of detailed reports and presentations for clients.\n, • Grammar and sense checking final deliverables before they go to the client.\n, • Seek a fundamental cyber security certification such as ISC2’s CC or CISSP.\n\n \n ⚙️ Support Administration \n\n • Support with managing calendars for CyPro founding partners.\n, • Minutes from meetings and notes from client workshops.\n, • Organising team events.\n, • Helping to update the website (i.e. when new joiners arrive, add their profile picture to the Teams section of our site).\n\n \n 📈 Grow Business Operations \n\n • Marketing: Support marketing efforts, including content creation, social media management, and using AI to create service explainer videos.\n, • Sales: Assist in sales activities, such as preparing proposals, conducting market research, and maintaining client relationships.\n, • Events: Help organise and participate in webinars, workshops, and other promotional events.\n, • Business Development: Collaborate with the business development team to analyse data sets of leads, identify new opportunities and reach out to potential new clients.\n, • Procedure How-To Videos: Capturing video how-to’s for standard operating procedures (SOP’s).\n\n \n 🧠 Soft Skills \n There are a handful of ‘soft skills’ which are of critical importance when fulfilling an Analyst role. For example; \n\n • Accountable & Humble – much like a professional athlete, you recognise that you hold the responsibility for your performance at work. The ego is left at the door. Analysts are able to look inward, reflect and constantly identify areas for improvement.\n, • Continuously Improve – with an acute sense of self-awareness, a strong Analyst is constantly reflecting on their performance and refining their approach. They acknowledge they have much to learn and make mistakes, their focus is on improving quickly and consistently.\n\n \n 👩 💻 Interview Process \n \n We operate differently. No long drawn out recruitment processes - we generally can get candidates through our process (from START to FINISH) within 10 days 🎉. Successful candidates can expect the following 4 stage process for this role: \n \n\n • 📹 Video Introduction - you will be invited to send a short 2-3 minute introduction video.\n, • 📞 Telephone Interview - a 20 minute initial chat with a Cyber Security Manager.\n, • 🧪 Online Testing - we send you a few short (15mins) online tests to complete.\n, • 🎮 Assessment Centre - a morning in our Canary Wharf office where we do some fun exercises together and hold the final interview with a practice partner.\n

JLL empowers you to shape a brighter way .Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you've got deep experience in commercial real estate, skilled trades or technology, or you're looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.What this job involves:The Benefits Operations Manager, UK&I will be responsible for managing the delivery of benefits and providing leadership to the HR Operations team across all benefits including Health and Welfare, Retirement, and Financial and Physical Wellness.What your day-to-day will look like:Benefits DeliveryManage end-to-end cyclical activities e.g. benefit renewals, communications, regulatory reporting, documentation etcSupport Tier 1 on resolving complex benefits related queries and escalationsAct as subject matter expert for wider HR team in relation to benefits queriesMaintain benefits communications and leverage provider resources, internal networks and technology to drive benefits engagementPartner with the HR Ops team to support benefits delivery. Proactively collaborate with the team to develop / improve processes, with the aim to minimise administration errors and drive operational efficienciesConsult with the Benefits CoE resource to ensure there is a globally/regionally consistent approach to benefits deliveryMaintain the inventory of programs, policy documents, calendar of activities, etc so that there is a clear understanding of the programs and activities required to actively manageProvide technical expertise to the business on complex issues as requiredOverall responsibility for the delivery of all voluntary benefit enrolments including renewals, effective communication and project managementAd-hoc project lead as needed for items that require involvement from Benefit OperationsEnsure timely changes to benefits related systemNew Programs - upon notification of a new plan/program, identify the file requirements to support and work with the Benefits CoE/implementation team. Also includes changes to existing programs. Develop and execute comprehensive test plansProvide support to the Senior Pensions Manager on pension activitiesVendor ManagementManage the vendor and 3rd party relationships working closely with them to ensure service levels, budgets and agreements are adhered toResponsible for timely submission and processing of invoicesData Integrity managementProvide guidance, including but not limited to compliance, vendor utilisation, external relationship management/utilisation to all division and/or business unit representativesResponsible for overseeing metrics trackingIdentify potential areas of compliance vulnerability and risk and provide general guidance on how to avoid or deal with such situationsManage audits of payroll/benefits data, especially with regard to benefit deductionsManage internal compliance audit and monitoring activities inclusive of department and overall organisationInvoice Management for UK BenefitsContribute to creating a budget and ensures billing is monitored frequently in an effort to streamline costs and invoicing processes for vendorsAct as the escalation point for issues with data compliance risk (e.g., tax implications, legal ramifications, etc.)GovernanceIn partnership with Benefits CoE, manage benefits programs in line with the agreed operating framework. Proactively review and offer recommendations for enhancements to the guiding principles, policies and processes. Programs include pensions, healthcare, insured risk benefits, car benefits, wellbeing programs and other perksMaintain the inventory of programs, policy documents, calendar of activities, etc so that there is a clear understanding of the programs and activities required to actively manageProcess efficiency/managementAct as a solutions architect assessing chronic data issues that could be solved programmaticallyProvide guidance on research and resolution of interface-related issues, including the error reporting processEvaluate existing procedures and identify optimal solutions, whether administrative or systematic, to improve internal processes and ultimately user experienceCollaborate with other internal departments (HRIS, Payroll, Tax, Legal, Finance and Compliance) to ensure operational success across the organization and support feedback documentation and enhancement cyclesSupport Benefits CoE in all aspects of Open Enrollments including submission of headcount/salary related data to vendorBuilds strong relationships with internal and external partners to help ensure optimal process satisfactionUK TransitionsSupport the UK business and PXP's with key TUPE transfers with benefits managementProvide statistical analysis on benefits usage and ROI to aid both management reporting and proposalsStakeholder ManagementBuild effective working relationships with key stakeholders, incl. People Partners, PSD, Global Reward teams, Procurement, Legal/Compliance and Finance to successfully deliver change initiativesRisk ManagementMonitors legal, tax and statutory requirements, developing processes and controls to ensure compliance with internal and external regulationsResponsible for frequent and proactive communication on operational execution and deliveryCreate and use formal processes and tools to manage resources, budgets, risks, and changesRequired Skills and Experience:Workday HRIS knowledgeDarwin benefits portal knowledgeProject management experience implementing new programsFunctional knowledge of data interfacesExcellent consultative problem-solving skillsStrong communication and presentation skillsLocation:On-site -London, GBRIf this job description resonates with you, we encourage you to apply even if you don't meet all of the requirements. We're interested in getting to know you and what you bring to the table!At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you're pursuing.JLL Privacy NoticeJones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL's recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely.For more information about how JLL processes your personal data, please view our Candidate Privacy Statement .For additional details please see our career site pages for each country.Jones Lang LaSalle ("JLL") is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process - including the online application and/or overall selection process - you may email us at . This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL.TPBN1_UKTJ

Job ID: 26011683Posted: 2026-08-10Location: LONDON, United KingdomJob Function: Engineering & ArchitectureSchedule: Full timeShift: DayWorkplace: HybridCareer Area: TechnologyCompany: American ExpressDescriptionThe Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.American Express is embarking on an exciting transformation driven by an energetic new team of high performers. This group is nimble and creative with the power to shape our technology and product roadmap. If you have the talent and desire to deliver innovative payment products and services at a rapid pace, serving our customers seamlessly across physical, digital, mobile, and social media, join our transformation team! You will be part of a fast-paced, entrepreneurial team responsible for delivering world-class cardmember experiences. We are looking for an innovative, experienced, and talented senior software engineer who will work closely with business unit and development team to develop new system capabilities as defined within the technical/ functional specificationsResponsibilitiesDesign, develop, and maintain scalable, cloud-native full-stack applications using Golang for backend services and React.js, TypeScript, and modern frontend frameworks for rich, responsive user experiences. Architect and develop highly available microservices using Go, RESTful APIs, gRPC, event-driven architectures, and asynchronous messaging technologies. Build modern frontend applications using React.js, TypeScript, JavaScript (ES6+), HTML5, CSS3, and component-based architectures with reusable UI libraries and design systems. Develop secure backend services using Go, implementing authentication, authorization, API gateways, caching, concurrency patterns, and distributed transaction management. Design and optimize relational and NoSQL databases including PostgreSQL, MySQL, Cloud SQL, MongoDB, Redis, and BigQuery. Build scalable API integrations using REST, GraphQL, gRPC, WebSockets, and event streaming technologies such as Kafka or Google Pub/Sub. Deploy and operate cloud-native applications on Google Cloud Platform (GCP) using services including GKE, Cloud Run, Cloud Functions, Cloud Storage, Cloud SQL, Pub/Sub, Secret Manager, IAM, Load Balancing, API Gateway, Memorystore, and Vertex AI. Implement Infrastructure as Code (IaC) using Terraform, automate deployments through GitHub Actions, Cloud Build, Jenkins, and Docker/Kubernetes-based CI/CD pipelines. Design resilient, secure, and observable distributed systems using OpenTelemetry, Cloud Monitoring, Prometheus, Grafana, Datadog, and centralized logging solutions. Collaborate closely with Product, UX, Architecture, and Platform Engineering teams to deliver scalable, secure, and high-quality software solutions. Conduct architecture reviews, perform code reviews, mentor engineers, and promote engineering best practices across frontend, backend, and cloud platforms.QualificationsBachelor's degree in Computer Science, Engineering, or a related discipline with 10+ years of experience designing, developing, and delivering enterprise-scale full-stack software solutions. Strong experience developing backend services using Golang, Java, Spring Boot, and modern API frameworks, with expertise in designing scalable RESTful APIs, gRPC services, microservices, and distributed systems. Extensive frontend development experience using React.js, TypeScript, JavaScript (ES6+), Next.js, HTML5, CSS3, and modern UI frameworks such as Material UI or Tailwind CSS, with strong knowledge of responsive design, accessibility (WCAG), and component-driven architecture. Experience building end-to-end full-stack applications by integrating modern frontend frameworks with cloud-native backend services, including state management (Redux Toolkit, React Query, Context API), authentication (OAuth2, OpenID Connect, JWT), and API integration using REST, GraphQL, and WebSockets. Experience building and deploying cloud-native applications using Docker, Kubernetes, Helm, and container orchestration platforms, with a strong understanding of scalability, resilience, and high availability. Experience designing distributed systems using microservices, event-driven architectures, messaging platforms (Kafka, Google Pub/Sub), caching technologies (Redis), and asynchronous communication patterns. Demonstrated ability to leverage AI tools for software engineering productivity, including intelligent code generation, automated testing, documentation generation, code reviews, refactoring, debugging, and developer workflow automation using GitHub Copilot, Gemini Code Assist, ChatGPT, and similar platforms. Strong knowledge of frontend and backend testing methodologies, including unit testing, integration testing, end-to-end testing, and API testing using tools such as Jest, React Testing Library, Playwright, Cypress, Go testing, and Postman. Experience implementing observability and operational excellence using OpenTelemetry, Prometheus, Grafana, Google Cloud Monitoring, Cloud Logging, and application performance monitoring tools. Strong understanding of application security, cloud security best practices, OWASP principles, secure software development lifecycle (SSDLC), identity management, secrets management, and vulnerability remediation. Experience working in Agile/Scrum environments with GitHub-based collaborative development practices, code reviews, mentoring engineers, and driving technical excellence across full-stack engineering teams.Preferred Additional:Knowledge of payments industry Experience with coding skills across a variety of distributed technologies Experience with a broad range of software languages and payments technologiesConsiderations for sponsorship: Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions. About the TeamAt American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Collinson is the global, privately-owned company dedicated to helping the world to travel with ease and confidence. The group offers a unique blend of industry and sector specialists who together provide market-leading airport experiences, loyalty and customer engagement, and insurance solutions for over 400 million consumers. Collinson is the operator of Priority Pass, the world’s original and leading airport experiences programme. Travellers can access a network of 1,500+ lounges and travel experiences, including dining, retail, sleep and spa, in over 650 airports in 148 countries, helping to elevate the journey into something special. We work with the world’s leading payment networks, over 1,400 banks, 90 airlines and 20 hotel groups worldwide.We have been bringing innovation to the market since inception – from launching the first independent global VIP lounge access Programme, Priority Pass to being the first to sell direct travel insurance in the UK through Columbus Direct and creating the first loyalty agency of its kind in the travel sector with ICLP. Today we still invest heavily in innovation to ensure that we continue to deliver superior customer experiences.Key clients include Mastercard, American Express, Cathay Pacific, British Airways, LATAM, Flying Blue, Accor, EasyJet, HSBC, Chase, HDFC.Our mission is focused on doing good beyond profit, which for us means we seek out opportunities for our people to share in our success and that we give back to the communities and people within which we work.Never short of ambition, the success of our business is delivered through the diverse and talented team of over 2,200 global colleagues.Lead DevOps EngineerThe RoleAs Lead DevOps Engineer, you'll own the design, reliability, scalability, security, and cost efficiency of our production platform - a zero-downtime, multi-region AWS environment running Kubernetes and serverless workloads and centralised AI enablement layers at scale. You'll set the technical direction for the DevOps team, driving and documenting the platform standards, practices, and tooling that champion DevEx, eases friction and keep our systems resilient and secure.This is a hands-on leadership role. You’ll architect and solve complex infrastructure challenges while mentoring and growing the engineers around you. You'll own our platform SLAs, serve as the platform advocate in cross-functional decisions, and act as the core authority on resilience, cost, security, and enablement.Key ResponsibilitiesPlatform Ownership - Own the end-to-end reliability, stability, and performance of our production platform. Enforce SLAs across availability, security posture, and resilience. Drive the measures, thresholds, and incident response standards the team operates to.Zero-Downtime Operations - Run and maintain a multi-region, zero-downtime platform. Own deployment strategies (blue/green, canary), traffic management, and failover patterns that ensure continuous availability under change and failure.Security & Compliance - Own the platform's security posture end to end: networking controls, IAM, KMS, secrets management, vulnerability management, and compliance against frameworks such as PCI DSS v4 and CIS Benchmarks. Work closely with security teams and act as the DevOps authority on audit and risk.DR & Business Continuity - Participate in disaster recovery strategy, automation, execution and continuous improvement.TCO & Cost Management - Drive the strategy on platform total cost of ownership, providing teams with clear cost-allocation visibility. Drive rightsizing, tagging strategy and architectural decisions that balance cost against reliability and developer experience.Infrastructure as Code & CI/CD - Set and maintain the standards for IaC (Terraform, Terragrunt). Ensure deployments are secure, fast, and auditable. Raise the bar on automation so routine operational tasks are eliminated, not managed.Observability - Own the observability strategy across the platform using Datadog. Define what good looks like: SLO/SLA dashboards, alerting thresholds, runbooks, and the feedback loops that let teams act on signals before users feel them.Team Leadership & Mentoring - Lead and grow a team of DevOps engineers. Set technical direction, conduct design reviews, and create an environment where engineers take ownership. Actively mentor and develop less experienced engineers, helping them move from task execution to platform thinking.AI & Automation - Lead the team's adoption of AI-assisted operations - embedding AI into CI/CD pipelines, runbook automation, incident response, and developer tooling. Define where AI adds real leverage and own its safe integration into the platform.Your ExperienceDeep expertise with AWS at scale: EKS (Automode), Lambda, EC2, RDS/Aurora, multi-region networking (VPC + Endpoints, Transit Gateway, Network Firewall, WAF, API Gateway), security services (IAM, KMS, Secrets Manager, SCPs, Security Hub, GuardDuty) and AI tooling (Bedrock Agentcore).Proven ownership of a production-grade EKS platform with zero-downtime deployments - ArgoCD, Istio, blue/green and canary strategies are second nature.Terraform expert. You've set the IaC standards for a team, not just followed them.Automation & CI/CD - Be an authority on CI/CD pipelines to automate fast, secure and seamless deployments, with a strong emphasis on improving developer experience to automate routine tasks and improve operational efficiency.Experience embedding AI into SLDC workflowsHands-on DR experience: automated backup, multi-region/az failover, AWS FIS testing, and formal DR exercises with defined RTO/RPO targets.Familiarity with security - you've worked within a compliant environment, and you're comfortable in security audits and risk conversations. You're comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC.Observability ownership with Datadog (or equivalent) - you've defined SLOs, built the dashboards, and set the alerting culture.Experience leading or mentoring a DevOps team - you can set direction, manage technical debt conversations, and grow engineers.Comfortable with Python, Bash, Ansible, Helm, and GitHub Actions.Collinson is an equal opportunity employer and welcomes differences in all their forms including: colour, race, ethnicity, gender identity, sexual orientation, neurodivergence, family status, age, individuals with disabilities and people from all backgrounds, cultures and experiences as we strongly believe this contributes to our on-going success.We are focused on continually evolving our purpose driven, high performing culture, providing an environment where our people have the opportunity to achieve their full potential and do interesting and meaningful work. Our company values are: Take Action, Do the right thing, One team and Be insight led. These help guide everything we do internally in terms of how we think, act and interact, right through to how we deliver value to our customers and clients.In your application, please feel free to note which pronouns you use (For example - she/her/hers, he/him/his, they/them/theirs, etc).If you need any extra support throughout the interview process, then please email us at ukrecruitment@collinsongroup.com

Fitch Group is currently seeking a Endpoint Engineer based out of our London office. As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst. Fitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference. Want to learn more about a career in technology and data at Fitch? Visit: About the role:The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles.How You’ll Make an Impact: Endpoint Platform Engineering (Windows CSP / Intune)Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture.Design and maintain consolidated, well-governed CSP policy structures across the fleet.Hardware Fleet & Device LifecycleDrive vendor-led firmware and driver lifecycle management — including HP Image Assist and Dell Command Update automations — to improve device stability and end-user experience.Troubleshoot and remediate audio, video, and conferencing reliability issues.Perform hardware and performance testing/benchmarking to support fleet standardization decisions.Autopilot & Provisioning ModernizationModernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency.Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline.Complete remaining GPO-to-CSP transitions in support of provisioning consistency.Application & Configuration ManagementPackage, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements.Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives.Developer Tooling & AI Workload EnablementConfigure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards.Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing.Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (e.g., Claude Code, Copilot) within governance and device-management guardrails.Operations & SupportDeliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination.Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement.Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations.Documentation & Cross-Functional CollaborationCreate and maintain technical documentation, runbooks, and cross-team knowledge resources.Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management.Act as an owner by proactively driving issues to resolution across business You May be a Good Fit if: 3–5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in:Windows 11, Azure AD / Entra IDMicrosoft Intune (Endpoint Manager), MECM, and co-management servicesActive Directory and Directory Services, including Group Policy and RSAT toolsIntune configuration and compliance policy managementLAPS and least-privilege / privilege elevation models (e.g., Privilege Management)Microsoft 365 Apps deployment, configuration, and update servicingNetworking fundamentals (DNS, DHCP, VPN, Proxy)Strong experience with modern Intune management, including:Windows Autopilot (user-driven, pre-provisioning, self-deploying)Zero-touch provisioning and cloud-first imaging strategiesIntune application management (Win32, MSI, MSIX, store apps, managed apps)Settings Catalog, Compliance Policies, and Configuration ProfilesDevice Filters, Dynamic Groups, and scalable targeting strategiesEndpoint Analytics and digital experience monitoring (DEX)Hardware validation and lifecycle management, including:Hardware and performance testing/benchmarking to support fleet standardization decisionsFirmware and BIOS update management and deployment (e.g., HP, Dell)Wi-Fi driver troubleshooting and remediation across the device fleet802.1X / WPA2-Enterprise network authentication troubleshooting (EAP-TLS, RADIUS)Proficiency with Windows PowerShell, including:Running, creating, and editing PowerShell scriptsManaging system processes and services via PowerShellUnderstanding basic command syntax and parametersTroubleshooting errors using PowerShellExperience supporting Zero Trust, conditional access, and identity-based access controls.Developer tooling and AI workload support, including:Configuring and troubleshooting VS Code, Python, and common CLI/developer environmentsGit-based version control workflowsEndpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing)Applying governance and device-management guardrails to developer and AI tooling without blocking productivityAbility to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks.Demonstrated ownership mindset, with a focus on eliminating root causes and improving user experience.What Would Make You Stand Out: PowerShell App Deployment Toolkit (PSADT) — creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic.Advanced MECM collection design and query creation.Windows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed).Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN).Experience with third-party patching platforms (e.g., Patch My PC).Strong PowerShell automation expertise and familiarity with Git-based workflows.Experience with vulnerability management tools and endpoint telemetry/observability platforms.Experience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU-accelerated workstations.Microsoft certifications related to Endpoint, Azure, or Security.Why Choose Fitch: Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind Supportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives At Fitch, AI is embedded in how we work every day—supporting smarter decision-making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day-to-day operations, helping teams work more efficiently and think differently as we continue to evolve. We’re looking for colleagues who are comfortable operating in an AI-enabled environment—or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done. Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interests or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work. Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law. #LI-HYBRID #LI-KC1

Out of the successful launch of Chase UK in 2021, we’re a new team, with a new mission. We’re creating products that solve real world problems and put customers at the center - all in an environment that nurtures skills and helps you realize your potential. Our team is key to our success. We’re people-first. We value collaboration, curiosity and commitment.As a Technology Risk & Controls Manager at JPMorgan Chase within the CyberSecurity & Technology Controls team, you are the heart of this venture, focused on getting smart ideas into the hands of our customers. You have a curious mindset, thrive in collaborative squads, and are passionate about new technology. By your nature, you are also solution-oriented, commercially savvy and have a head for fintech. You thrive in working in tribes and squads that focus on specific products and projects – and depending on your strengths and interests, you'll have the opportunity to move between them.While we’re looking for professional skills, culture is just as important to us. We understand that everyone's unique – and that diversity of thought, experience and background is what makes a good team, great. By bringing people with different points of view together, we can represent everyone and truly reflect the communities we serve. This way, there's scope for you to make a huge difference – on us as a company, and on our clients and business partners around the world.There are two primary areas of job responsibilities associated to this roleRisk & Control Manager across the entire business for a sub-set of the Control suite, primarily focused on Vulnerability Management, SDLC, Technology Operations, Incident & Event ManagementSupport/Own the definition and maintenance of the technology risk and control environment for the line of businessAssess the effectiveness of technology controls against requirements and policy statementsSupport and co-ordinate responses to 2LOD, Audit, Regulator & Customer requests for information on control obligationsAnalyze and report on compliance of cyber and technology controls against LoB (Lines of Business), Firmwide and Regulatory StandardsRisk & Control lead for aligned portfolio of Products and Applications within the businessRisk Advisory & Oversight functionMaintain relationships with stakeholders to facilitate oversight and effectiveness of the technical control environment Validate that business Key Risk Indicators are accurately captured & included in prioritization activitiesRequired qualifications, capabilities and skills5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigationAn understanding of Enterprise Risk Management practices in a technical environment.Technical and operational understanding of financial services regulations.Self-motivated and with a desire to learn.Ability to operate on multiple tasks whilst still achieving high delivery standards.Technical Understanding of Cloud computing (GCP).CISSP (Certified Information Systems Security Professional) or equivalent experience.When you work at JPMorgan Chase & Co., you are not just working at a global financial institution. You are an integral part of one of the world’s biggest tech companies. In 20 technology centers worldwide, our team of 50,000 technologists design, build and deploy everything from enterprise technology initiatives to big data and mobile solutions, as well as innovations in electronic payments, cybersecurity, machine learning, and cloud development. Our $10B+ annual investment in technology enables us to hire people to create innovative solutions that will transform the financial services industry. At JPMorgan Chase & Co. we value the unique skills of every employee, and we are building a technology organization that thrives on diversity. We encourage professional growth, career development, and offer competitive benefits and compensation. If you are looking to build your career as part of a global technology team tackling big challenges that impact the lives of people and companies all around the world, we want to meet you. J.P. Morgan offers an exceptional benefits program and a highly competitive compensation package.J.P. Morgan is an Equal Opportunity Employer.J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.Full timePosting Date: 2026-07-02

Job Reference: NJ0590Date Posted: 17 August 2026Recruiter: Nexus Jobs LimitedLocation: LondonRemote Working: Some remote working possibleSalary: 55,000 to 60,000Sector: I.T. & CommunicationsJob Type: PermanentWork Hours: Full TimeContact: Jas GujralEmail: cv@nexusjobs.comTelephone: 020 7488 6900Apply for this job nowJob DescriptionSenior IT Infrastructure & Systems ManagerWe are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization’s IT infrastructure, enterprise systems, network environment, and end-user computing services.The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization.This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems.Infrastructure & Systems ManagementAdminister, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber securityMonitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing SupportProvide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions.Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems SupportSupport and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). NetworkingConfigure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint ManagementSupport vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (e.g., Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (e.g., Paxton)Governance, Documentation & Process ImprovementDevelop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP’s, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating SystemsWindows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & VirtualizationVMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VROMicrosoft Office 365 ManageEngine Patch Manager Plus SAAS solutionsSQL ServerSecuritySymantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/ XDREndpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) NetworkingCisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & StorageDell PowerEdge Servers Dell PowerVault SAN Storage Technical CompetenciesData analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFSPowerShell scriptingSQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholdersThis is a hybrid role 3 days in the office in Central London.Salary for this role will be in the range 55K - 60K.Do send your CV to us in Word format along with your salary and availability.

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions, enabling the communities we support to grow and succeed in the right ways, all more confidently and more often—that’s what we call the courage to thrive. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive. Try new things, learn new skills and discover what you excel at—all from Day One.As a wholly owned subsidiary of U.S. Bank, Elavon is committed to building the platforms and ecosystems that help over 1.5 million customers around the world to achieve their financial goals—no matter what they need. From transaction processing to customer service, to driving innovation and launching new products, we’re building a range of tailored payment solutions powered by the latest technology. As part of our team, you can explore what motivates and energizes your career goals: partnering with our customers, our communities, and each other.We actively uphold transparent and fair hiring practices that support individual opportunity, inclusive culture, and career mobility across all levels of our organisation.We offer meaningful opportunities for growth, a culture of inclusion, and a strong commitment to transparency and integrity in everything we do.Job DescriptionDevOps Team Lead - Development PlatformAs a DevOps Team Lead, you will manage a cross-location team while driving CI/CD modernization, infrastructure reliability, and DevOps adoption for a Java/Springboot development department. You'll combine people management with hands-on proficiency in Jenkins, ArgoCD, AWS/Kubernetes, Terraform, and DevSecOps/GitOps practices. You'll be architecting build systems, designing scalable build infrastructure, improving team processes, and collaborating across leadership to deliver technical solutions and roadmap execution.Main dutiesLine Management of a cross location team (onsite / nearshore)People development, performance, knowledge and skills managementOptimizing team ways of workingFostering a sense of ownership and collaboration with other department teamsUnderstanding development teams needs and designing CI/CD solutions (Java/Springboot stack)Driving observability, reliability and software development technologies adoption in the departmentMaintaining, architecting and evolving our development environment to improve efficiency and productivityCollaboration with ops team on technology adoption in higher environmentsOwning, improving and architecting build pipelinesEnsuring maintenance of our Jenkins clusterProactively coordinating with tech leadership and peersBreaking down work programs into phases and actionable work itemsDriving refinements, prioritizing workArbitrage of project work VS ad-hoc requestsRoadmap planningAbout youMust haveExperience managing senior Individual contributors across locationsProven track record of onboarding and adapting to new technologiesStrong ownership mindset with effective problem‑solving capabilitiesExperience building/packaging JVM based projects with a focus on security complianceHands‑on Jenkins experience: shared libraries, declarative/scripted pipelines, Job DSLProficient in GitLab code hosting and CI/CD practicesExperience with containers and container orchestration systemsExperience with IaC, cloud computingExperience with an observability stackNice to haveJava/Springboot projects experienceGitOps proficiency with ArgoCD (ApplicationSets, sync policies, multi-environment promotion)AWS (EKS, EC2, IAM, VPC, CloudWatch, S3) with production-grade reliability experienceKubernetes workload management, Helm/Helmfile chart authoring, Docker image best practicesTerraform module development and state management for AWS infrastructureMonitoring with CloudWatch, Prometheus, Grafana, or ELK; incident investigation skillsExperience implementing DevSecOps practices across pipelines and infrastructure.Familiarity with container and IaC vulnerability scanning.Proficiency with secrets management using External Secrets Operator (ESO) with AWS Secrets Manager/SSM.Ability to document systems, runbooks, pipelines, and platform processesLocation expectationsThis role requires working from a U.S. Bank location three (3) or more days per week.AccessibilityWe are committed to providing an inclusive and accessible recruitment experience. If you need adjustments at any stage of the application or hiring process, please contact your recruiter for guidance and support. Total RewardsU.S. Bank is committed to fair, equitable, and transparent compensation practices in line with local regulatory and legal requirements. Our total rewards approach is designed to attract, retain, and support top talent while ensuring equal pay for work of equal value.We offer a market-competitive compensation package that includes:Clearly defined salary ranges aligned with industry benchmarks and internal equity standards.Performance-based incentives for eligible employees (as defined by relevant plan rules), awarded through transparent, objective criteria that recognize both individual and company performance.Inclusive equitable benefits that are accessible to all employees and focused around our 3 main pillars of financial wellbeing, health & wellness).Continuous development opportunities including training, education support, and career progression pathways based on inclusive and transparent criteria.Employee recognition programs that celebrate achievements and milestones for all.We regularly review our compensation and benefits to ensure they remain competitive, inclusive, and responsive to employee needs and market trends. Further details of the compensation package will be provided upon application.We encourage candidates to explore the full value of our offer, including monetary and non-monetary benefits, at Employee benefits and development | U.S. Bank | Elavon.Closing DatePosting may be closed earlier due to high volume of applicants.We aim to provide timely updates throughout the process and encourage early applications to ensure consideration. SummaryLocation: London, United KingdomType: Full time

Role: Cyber Security Lead Location: Nottinghamshire Working Arrangement: 3 days a week in office Salary:Up to £70k Are you an experienced SOC professional who's ready to take the next step into leadership without leaving the technical work behind? We're looking for a Cyber Security Operations Manager to lead our in-house Security Operations capability while remaining deeply involved in the day-to-day technical aspects of detection, response and continuous improvement. This role is ideal for someone moving from a Senior SOC Analyst, Senior Security Engineer or SOC Team Lead position who wants to develop their leadership skills while staying hands-on. You'll spend around 80% of your time working on technical security operations and 20% leading and developing the team, making this an excellent opportunity for someone looking for their first management role. What you'll be doing Leading and mentoring a small SOC team while remaining an active technical contributor. Investigating and responding to security incidents across enterprise, cloud and operational technology environments. Improving detection capabilities, automation and SOC processes to stay ahead of emerging threats. Working closely with vulnerability management, incident response and governance teams to strengthen the organisation's security posture. Taking part in the on-call rota and providing technical leadership during security incidents. What we're looking for You'll likely have experience in a senior SOC or security operations role and be ready to take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication skills and the ability to collaborate across technical teams. Professional certifications such as CISSP, CISM, GCIH, GCIA, GSEC or cloud security certifications are welcome but not essential. Why join us? This is an opportunity to shape the future of an evolving Security Operations function within a large, complex technology environment. You'll have the autonomy to improve processes, introduce new ideas and develop your leadership career while remaining close to the technology you enjoy. If you're looking for a role that combines technical depth with your first step into management, we'd love to hear from you. We welcome diverse applicants and are dedicated to treating all applicants with dignity and respect, regardless of background. TPBN1_UKTJ

Reports to: Head of Technology/Chief Technology Officer Location: London, W2 6HY, UK Role: Full time (37.5 hours per week). Minimum three days per week in the office Record seeks an experienced and technically capable Head of Infrastructure to lead the delivery, operation, security, and continuous improvement of the firm's global infrastructure services. Reporting to the CTO, this role is responsible for ensuring that infrastructure platforms remain secure, resilient, scalable, and fit for purpose, supporting the business's operational, regulatory, and strategic requirements. The successful candidate will lead infrastructure operations, cloud services, end-user computing, networking, workplace technology, operational resilience activities, and infrastructure project delivery. The role combines strong technical leadership with hands‑on operational management and requires an individual capable of leading a high‑performing team while maintaining close oversight of key technology platforms and third‑party service providers. The CTO retains ownership of technology strategy, architecture, cyber strategy, technology risk, operational resilience governance, technology budgets, and Board-level technology reporting. The Head of Infrastructure is responsible for executing and delivering against those strategic objectives. Record is a leading specialist currency and asset manager with $114.6 billion (as at 31 st March 2026) in Assets Under Management. Record’s services include currency management, sustainable finance, and asset management. Our clients are largely institutions, including pension funds, charities, foundations, endowments, and family offices. Record’s offices are in London, Zürich, New York and Hamburg. The relevant team is based in the London. Responsibilities: Infrastructure Operations • Lead the day-to-day operation of the firm’s global infrastructure environment., • Ensure infrastructure services meet agreed availability, performance, resilience, and security requirements., • Own operational support delivery across cloud, network, server, storage, end-user computing, and workplace technology platforms., • Act as senior escalation point for major infrastructure incidents and service disruptions., • Develop, monitor, and report on operational KPIs, SLAs, service performance, and capacity metrics., • Maintain infrastructure lifecycle management plans covering hardware, software, cloud services, and supporting technologies. Technical Leadership • Lead and develop the infrastructure team, fostering a culture of accountability, technical excellence, and continuous improvement., • Provide technical leadership and mentoring across infrastructure disciplines., • Establish and maintain infrastructure standards, procedures, and operational practices., • Ensure solutions are implemented in accordance with technology standards and architectural principles established by the CTO. Cloud & Modern Workplace Technology • Lead the operational management and optimisation of Microsoft Azure, Microsoft 365, Entra ID, Intune, and endpoint technologies., • Drive cloud adoption, automation, standardisation, and operational efficiency initiatives., • Ensure modern workplace services support productivity, collaboration, and security objectives., • Identify opportunities to leverage automation and AI-assisted operational tooling to improve service delivery and efficiency. Infrastructure Security & Compliance • Implement and maintain infrastructure security controls in line with internal policies, regulatory obligations, and risk requirements., • Oversee vulnerability management, patching, endpoint protection, privileged access controls, and infrastructure monitoring., • Support security assessments, penetration testing, audit activities, and regulatory reviews., • Ensure infrastructure services meet applicable finance services control and compliance expectations. Operational Resilience & Disaster Recovery • Maintain infrastructure disaster recovery capabilities and technical recovery procedures., • Lead infrastructure resilience testing and recovery exercises., • Ensure backup, monitoring, recovery, and failover capabilities remain effective and regularly tested., • Support wider business continuity and operational resilience activities. Project & Change Delivery • Lead the infrastructure workstreams associated with strategic technology programmes and projects., • Deliver infrastructure upgrades, cloud migrations, office technology deployments, security enhancements, and platform modernisation initiatives., • Manage project resources, risks, dependencies, budgets, and timelines for infrastructure related initiatives., • Ensure infrastructure projects are delivered to agreed scope, quality, and timeframes. Vendor & Supplier Management • Manage operational relationships with infrastructure vendors, managed service providers, and technology partners., • Monitor supplier performance against service level agreements and contractual commitments., • Support vendor due diligence, supplier reviews, and procurement activities., • Act as an escalation point for infrastructure suppliers and outsourced service providers. Stakeholder Engagement • Work closely with Technology, Trading, Operations, Risk, Compliance, Finance, and other business teams., • Communicate clearly with technical and non-technical stakeholders., • Provide regular updates on infrastructure performance, risks, projects, and service improvements., • Build trusted relationships across the organisation and promote a service-oriented culture. Experience and Qualifications • Minimum 5 years’ experience leading an infrastructure function within financial services, asset management, banking, fintech, or other regulated environment., • Proven experience as a Head of Infrastructure, Infrastructure Manager, Infrastructure Lead, or equivalent senior infrastructure leadership role., • Demonstratable experience managing infrastructure teams and third-party managed service providers., • Strong experience operating enterprise infrastructure environments within a regulated organisation., • Strong technical expertise across:, • Microsoft Azure, • Microsoft 365, • Entra ID / Active Directory, • Microsoft Intune, • Windows Server, • Virtualisation platforms (VMWare), • Enterprise networking, • Storage and backup technologies, • Infrastructure security controls, • Experience leading infrastructure transformation, migration, and modernisation initiatives., • Strong understanding of operational resilience, disaster recovery, and business continuity requirements., • Experience managing vendors, supplier relationships, and service delivery arrangements., • Excellent written and verbal communication skills with the ability to engage stakeholders at all levels. Desirable • Experience within asset management, investment management, hedge funds, market infrastructure, or broader financial services., • Experience supporting Bloomberg, market data platforms, trading systems, or equivalent financial applications., • Experience with automation technologies and Infrastructure as Code, • Exposure to AI-enabled operational tooling and enterprise AI governance., • Industry certifications such as:, • Microsoft Azure, • CISSP, • CCSP, • ITIL, • VMWare, • TOGAF Soft Skills Required • Strong technical leader with excellent operational management capabilities., • Pragmatic and commercially aware decision-maker, • Self-starter with a strong sense of ownership and accountability., • Calm and effective under pressure., • Excellent organisational and prioritisation skills, • Detail-oriented with a focus on quality and control., • Strong relationship builder and collaborator., • Committed to continuous improvement and professional development., • Able to balance technology, risk, operational, and business considerations when making decisions. Success Measures • Maintain stable, secure, and resilient infrastructure services., • Deliver infrastructure projects successfully and on schedule., • Improve operational efficiency through automation and continuous improvement., • Maintain a strong infrastructure control environment with positive audit outcomes., • Build and develop a high-performing infrastructure team., • Ensure the infrastructure estate supports the firm’s growth, regulatory obligations, and operational resilience requirements., • Bonus scheme - paid twice a year (usually November & June), • Pension – defined contribution scheme: 11% employer contribution plus may elect for additional personal contributions. Some cash flexibility allowed, • Private medical (BUPA) employee cover – option to purchase cover for partner and family, • Dental insurance – employee cover and option to purchase cover for partner and family, • Life insurance, • Permanent health insurance, • Medical health assessments, • Salary sacrifice car scheme, • Subsidised gym membership, • Share incentive plan (SIP) with Record matching, • 20 days minimum holiday, discretional additional holiday may be taken, • Study support for further qualifications. Full support and training from the company and the team Record is proud to be an Equal Opportunities Employer.For our employees to reach their full potential they need to feel valued, included and respected. This is the culture that Record works towards and, as part of this, we celebrate individual differences and aim to promote a sense of belonging. As a Disability Confident employer, we have an inclusive recruitment process and will hire anyone from any background. Where there are barriers to applying, we are committed to discussing options with you to make the process more accessible and provide reasonable adjustments. #J-18808-Ljbffr

Cyber Response Assistant Manager (Proactive Consulting) This role requires current SC or DV clearance, or eligibility and willingness to obtain clearance.About the role The Cyber Response Assistant Manager role will be working in the Cyber Response Services (CRS) Team within our Advisory practice. Your specific focus will be in the domain of proactive advice and guidance as it relates to Security Operations / Defensive Cyber Operations (Incident Management, Vulnerability Management, Threat Intelligence).Organisations face increasing challenges operating effective security operations capabilities across threat intelligence, vulnerability management and incident management. This role helps clients build and mature these capabilities to improve cyber resilience and enable informed risk-based decision making.This is a hands-on role, and an opportunity to join a high performing team that works with a wide variety of public sector clients, as KPMG are one of just nine tier 1 responders in the UK. As such, you will gain a huge amount of experience in a short space of time and will also have the opportunity to be put through a range of security certifications. We do work that matters with some amazing clients across government, defence, infrastructure, healthcare, financial services and large corporates. We secure mission critical assets and build capability, test emerging technologies, exercise national institutions and consult at the highest level. Our work is discrete, but high impact. Why join us?One of only nine UK Tier 1 incident response providersAccess to nationally significant incidentsExposure across government and critical infrastructureInvestment in certifications and trainingOpportunity to shape a rapidly growing capabilityWhat will you be doing? Working with some high-profile clients across the public sector on mission critical engagements. This will be to senior stakeholders (Grade 6 / SCS 1 and 2). Advising clients and building solutions to proactive Security Operations/ Defensive Cyber Operations issues. This may include advising on Frontier AI use cases in cyber defence, designing operating models for threat intelligence teams, building technology at scale for attack surface monitoring or building concepts for at scale vulnerability management.Drafting well thought out and structured oral and written briefings.Liaising with clients on delivery, implementation and project issue. Manage end-to-end delivery of consulting engagements, including stakeholder communication, project management, reporting, proposals, capability development, and mentoring junior team members. You may also be asked to contribute to bid work, generating well-structured responses to bids questions for peer and senior review. The personYou will have a strong background in cyber-security consulting (and ideally security operations/ defensive cyber operations consulting). You will be a consultant first, technical / engineer second. You will understand complex concepts quickly and be able to digest them into bite sized tangible chunks for client receipt quickly and in an understandable manner.You may have started in incident response, but its not essential – equally your trade may be self-taught/ learned. What's essential is a can do, proactive attitude while working with ambiguity. Our work often doesn't have all the answers to hand and so you will be comfortable working with ambiguity, consulting widely (internally and with the client) and addressing the issue collaboratively.You will have experience in one of the industries we serve, but government, defence or healthcare is preferred. You will be aware of industry trends and for instance how Industry A can learn from what Industry B is doing. You won't have all the answers but will be able to create and execute a plan for getting them. Your views will always be well considered and measured. You will have sufficient EQ to understand and accept where you need help.You will be credible in front of clients, some of whom are very senior, experienced and expecting of Big 4 pace, insight, scale and professionalism. Your communication style will be adaptive.Skills we’d love to see/Amazing Extras: In the past those that have thrived in the role have had degree level qualifications, such as MSc in Information Security, IT or relevant STEM subjects, but it is not essential. Your rounded consulting skills can do attitude and proactive nature are more important. Essential:A broad understanding of the cyber security threat landscape. Understanding of a wide range of information security and IT methodologies, principles, technologies and techniques. This will include emerging disruptive technologies in the Security Operations/ Defensive Cyber Operations.Excellent consulting skills, including the management of client stakeholders and internal teams.Excellent interpersonal, written and communication skills, to including the timely and effective drafting of top-notch client deliverables based on thorough analysis, insight and research. A willingness to roll your sleeves up, learn, teach others and get stuff done (even if it is not your primary responsibility) to meet mission objectives. Demonstrable experience getting to grips with knotty client issues and shifting the solution from left to right at scale and pace, and to an exceptional quality. Preferred:Demonstrable current experience of the Security Operations/ Defensive Cyber Operations domain. Proven experience of dealing with cyber security incidents and associated response measures is desirable. Understanding of emerging technologies such as Frontier AI, and its impact (positive and negative) on the domain of Security Operations/ Defensive Cyber Operations.Certifications and formal qualifications.Location:Our core hubs for this role are either:London (Canary Wharf); orManchester (St Peter’s Square).You must be within commutable distance to one of these locations. Current KPMG policy is 60% of the week with clients or our offices, 40% elsewhere (that can include working from home).

DescriptionWho we areWe are a rapidly growing pan-European digital wealth manager, serving over 167,000 active investors with over 6.5 billion invested on our platform. We began in Milan in 2011 with the purpose to help more people improve their financial well-being by making personal investing simple and accessible through technology. Fast forward to today, and we are recognised as one of the most innovative fintechs, headquartered in the heart of London.With a team of 220+ people across 4 offices in Italy and the UK, we are proudly backed and funded by major partners including Poste Italiane, Cabot Square Capital, United Ventures, and Allianz.Our visionOur vision is to combine passion, expertise, and technology to provide best-in-class investment solutions and advice that protects and grows client wealth over time.Our Core Values:We’ve built our business on three Principles:Relationships are our first asset: We’re one team, built on trust, honesty, and transparency. We value our relationships above all else.Trust drives success: We give each other the space to grow. We empower our employees to succeed, so they can make a real impact.Our customers dream big, just like us: We see the bigger picture and we make sure our customers see it, too. We’re always focused on the best outcomes for our clients and for each other, no matter what the goal, or how big the dreamWhat this means in practice:At Moneyfarm, our success comes from the impact each of us makes. We move with purpose, urgency, and ambition, focused on delivering outcomes that matter for our clients and our business. Everyone is empowered to take ownership, challenge the status quo, and turn bold ideas into results. As we evolve, we embrace AI as a catalyst for sharper thinking, smarter decisions, and even greater impact.Our diversity makes this possible. Different perspectives, backgrounds, and experiences fuel our creativity and drive better decisions — it’s our competitive edge. We value people for who they are and their unique strengths: that's why we offer flexible ways of working to support them in doing their best work.About the roleMoneyfarm is a UK and Italy-based digital wealth manager, recently expanded through the acquisition of Willis Owen and Profile Pensions, both FCA-regulated entities. We are looking for an ambitious early-career professional with a legal background, a genuine interest in financial services or FinTech, and around 6-12 months' relevant experience to join our Risk & Compliance function as a Junior Compliance Analyst.This role suits someone early in their compliance career who has already had some exposure to a regulated, legal, or financial services environment and is looking to build on that foundation. You will work closely with, and be mentored by, senior members of the Compliance team, supporting our day-to-day compliance queues, covering anti-money laundering (AML) alerts, customer vulnerability, horizon scanning, and complaint handling and progressing, with training, towards leading Compliance Monitoring Programme reviews across our UK regulated entities (MFM Investment Ltd, Willis Owen and Profile Pensions).You do not need extensive compliance experience; around 6–12 months in a relevant role is sufficient. What matters most is a legal or analytical mindset, meticulous attention to detail, sound judgement, and curiosity about how a regulated financial services firm actually works day to day. Further training and development will be provided.Key ResponsibilitiesAML, Financial Crime & Customer Risk MonitoringReviewing and triaging Jira-based compliance and support tickets across day-to-day compliance queues, including transaction monitoring alerts for large or unusual one-off and recurring Direct Debits, held withdrawals, and CIFAS fraud database markers, escalating to senior team members where required.Providing first-line compliance and business advisory support via Jira, answering day-to-day queries from across the business on compliance matters such as JISA queries, ISA misallocation, and customers moving abroad, escalating more complex questions to senior colleagues.Supporting AML case handling (e.g. Ongoing PEP and sanctions monitoring, source of funds/source of wealth checks, GBG ongoing monitoring alerts, and high-risk questionnaire reviews), and helping maintain accurate case records.Assisting with the investigation of flagged accounts such as accounts linked to potential fraud, phishing, or account takeover, and cases involving customers from higher-risk jurisdictions, working with the wider team to determine appropriate next steps.Helping to identify and support the handling of vulnerable customer cases (e.g. bereavement/probate cases, power of attorney requests, safeguarding concerns) sensitively and in line with the firm's vulnerable customer policy.Horizon ScanningCarrying out UK regulatory horizon scanning, relevant to Moneyfarm's UK business, including FCA publications, consultations, policy statements and industry developments, and helping to understand the practical implications for the business.Working with senior colleagues to update policy, process, or systems response following emerging regulatory change.Compliance Technology & Vendor Due DiligenceSupporting due diligence on new and existing compliance technology vendors (e.g. transaction monitoring systems, financial promotions review tools), assessing suitability, data handling, and regulatory fit as the team adopts new tools.Helping maintain vendor due diligence records and re-review documentation as new compliance tools and systems are rolled out or updated.Compliance MonitoringInitially supporting the execution of Compliance Monitoring Programme (CMP) reviews led by senior members of the team, including testing against agreed methodologies, evidencing findings, and helping draft clear, well-supported review reports.As you build regulatory knowledge and experience, this role is expected to progress towards independently leading selected Compliance Monitoring reviews end-to-end, from scoping and testing through to reporting findings and agreeing remediation.Assisting with the maintenance of compliance monitoring records and helping track remediation of findings through to closure.Complaints & Customer CaseworkAssisting with the analysis of customer complaints and escalations relating to account issues (e.g. frozen accounts, Direct Debit chargebacks, disputed transactions), drafting clear, well-reasoned responses for review by senior compliance staff.Liaising with other business departments across Operations, Customer Service, Marketing and Legal to gather the facts needed to resolve customer cases fairly and within regulatory timescales.Regulatory Support & ReportingSupporting the preparation of regulatory returns (e.g. FCA RegData submissions) and internal compliance reporting for governance forums.Helping maintain accurate compliance documentation (policies, procedures, and standards) as the Group updates its Compliance framework, including as part of the ongoing integration of Willis Owen and Profile Pensions.Building foundational knowledge of the regulatory landscape relevant to Moneyfarm's business (MiFID II, Consumer Duty, AML/KYC).Please note that this list is not exhaustive. Moneyfarm is a growing, evolving business and this role is expected to change over time; you will be required to carry out other risk and compliance activities as reasonably requested by your manager, in line with the changing needs of the business and the Risk & Compliance function.RequirementsEssentialAround 6-12 months' relevant experience in a compliance, legal, financial services, or FinTech environment (e.g. a graduate scheme, paralegal role, internship-to-permanent move, or similar), gained in the 6-12 months before applying.A university degree in Law, or a related discipline; or equivalent experience/qualification demonstrating strong analytical and legal reasoning skills.A demonstrable interest in financial services, FinTech, wealth management, or financial regulation, evidenced through your prior role, study, or other relevant engagement with the sector.Strong analytical skills, high attention to detail, and the ability to read and interpret detailed rules or policy and apply them consistently.Clear, confident written and verbal communication, with the ability to explain issues plainly to non-compliance colleagues.A proactive, organised approach, able to manage a busy queue of concurrent cases and competing deadlines.Discretion and sound judgement when handling sensitive customer and regulatory information.A genuine willingness to learn UK financial services regulation in depth, including MiFID II, Consumer Duty, and AML/KYC and to keep that knowledge current as rules evolve.DesirablePrior exposure specifically within a regulated wealth management, investment platform, or digital FinTech business.Familiarity with case management or workflow tools (e.g. Jira, Confluence).An interest in how AI tools can be used to automate or streamline compliance processes, and a willingness to support the team's wider AI initiatives.Behaviours & CompetenciesCurious and keen to learn the detail of how a regulated wealth manager operates.Reliable and ethical, with a strong sense of ownership over casework.Collaborative, comfortable working across Compliance, Operations, Marketing, and Legal.Calm and clear-headed when handling sensitive or vulnerable customer situations.Adaptable, given the fast-paced environment of an integrating, multi-entity, multi-jurisdiction (UK/Italy) business.Job SummaryID: D584466A8ADepartment: Cass/Legal/ComplianceType: full time

Job Summary A Cyber Vulnerability Manager is responsible for identifying and managing the risks posed by vulnerabilities in the IT systems and applications used by the NHS in Wales. Cyber Vulnerability Manager Location:. Duties: Act independently using own initiative within established parameters, s

As an Information Security Manager, you will drive security architecture decisions, lead incident response and vulnerability management efforts, and support secure digital transformation initiatives.

An AI security startup seeks a Product Manager to oversee the development of an innovative vulnerability management platform. Remote work is available for this position.

Information Security team! The Controls Assurance Analyst will support the Assurance Manager in delivering the information security assurance programme. Execute control assessments across key security domains including Identity and Access Management, Vulnerability Management, Security Monitoring, Cl

Perform periodic IT Security audits across UK properties to ensure compliance to established IT Security policies, PCI-DSS and regulatory requirements. As an Information Security Manager, you will drive security architecture decisions, lead incident response and vulnerability management efforts, and

Sky is seeking an experienced AppSec Tooling Manager to lead and scale our vulnerability tooling and security automation.

British International Investment (BII) is the UK’s leading development finance institution, wholly owned by the UK Government. Our primary mission is to address global development challenges through strategic investments that promote sustainable and inclusive economic growth. BII focuses on catalysing economic development, creating jobs, and building resilient economies in some of the world's most complex and underserved markets. We invest in businesses and projects that prioritise inclusive development, environmental sustainability, and innovation. Our approach is characterised by rigorous investment standards, high governance principles, and a commitment to delivering measurable development impact. Our team consists of highly skilled and passionate professionals dedicated to making a tangible difference globally. We foster a collaborative and intellectually stimulating work environment that values curiosity, innovation, and professional growth. Our culture balances high performance with a strong emphasis on wellbeing, ensuring our employees can achieve their full potential while contributing to our mission. The Cybersecurity Team protects BII’s technology, people, and processes from cyber-attacks. With top-tier tools and a leading Managed Security Service Provider, the team maintains the confidentiality, availability, and integrity of BII’s assets and data, supporting operations across markets. As a core part of the security function, the team is crucial in defending against evolving cyber threats. Given it’s role the team is highly visible to the senior leadership of the organisation. The Head of Cyber Security provides operational leadership, governance and accountability for BII’s cybersecurity capability. The role manages a team of cybersecurity professionals responsible for protecting and defending BII from Cyber-attacks, whilst similarly managing identity as a security enabler. The role holder will own core and emerging cyber risk domains—spanning Cyber security operations, identity and AI—ensuring risks are identified early, governed effectively and managed within appetite. They will strengthen organisational resilience through incident readiness and response. The role also acts as Bronze Incident Manager for cybersecurity incidents. BII’s technology and supplier landscape is evolving, increasing cyber risk. This role provides clear operational ownership of cyber defence, risk governance and incident readiness, embedding security into change and decision-making. Cyber risks are detected early, managed appropriately, and reported to senior leadership. Controls are proven effective through monitoring, vulnerability management, and measurable resilience improvements. Incidents are handled with rehearsed responses and applied lessons learned. Reporting to the Head of Security, the Head of Cyber Security leads day-to-day cybersecurity and works closely with Technology, senior stakeholders and key suppliers to ensure that the Cybersecurity of BII is maintained and endures. The role turns cyber risk into prioritised actions and provides clear input to senior leadership forums to protect services, enable change and strengthen resilience. • Define and implement Cybersecurity strategy for BII, in order to keep BII safe., • Lead and manage the cybersecurity team by setting direction, priorities, performance standards and development plans., • Deputise for the Head of Security when required by representing Security in senior forums and making decisions within delegated authority., • Lead cybersecurity operations, including monitoring, vulnerability management, readiness and control health reporting., • Act as Bronze Incident Manager for cyber incidents by coordinating response and escalating to Silver/Gold when required., • Manage cyber risk within agreed appetite by assessing, treating and reporting risks with clear evidence and metrics., • Set cybersecurity governance for key domains, including Identity, third-party security, AI risk and data sovereignty., • Translate cyber risk into prioritised actions and report clearly to OpCo/ExCo/Audit and other forums., • Manage the outsourced Managed Security service provider (MSSP) and specialist suppliers by setting expectations, reviewing SLAs/KPIs and driving remediation., • Embed security into change by defining requirements and validating controls for patching, configuration and new services., • Maintain cyber playbooks, runbooks and standards to improve consistency and reduce key-person dependency., • Define and oversee cyber security training awareness across BII. The successful candidate brings a strong track record in senior cybersecurity roles, leading others to deliver effective security operations, incident management and risk governance in complex environments. The background includes working with outsourced security providers, influencing technology and business stakeholders, and embedding practical security controls into day-to-day operations and change. The ideal candidate has a technical background and can translate complex topics into clear, business‑focused discussions. • Proven people leadership and the credibility to represent Security in senior forums and deputise for the Head of Security., • Ability to set security standards and governance, and to present risk and control status clearly to senior stakeholders., • Strong communication skills, with the ability to articulate complex technical matter to non-technical and senior audiences., • Significant experience leading cybersecurity operations, including detection/monitoring and vulnerability management., • Experience managing cyber incidents end-to-end, including communications, decision logs and lessons learned., • Strong knowledge of current threats, identity security and third‑party risk., • Experience managing MSSPs and specialist suppliers through governance and SLAs/KPIs., • Broad technical understanding across cloud, endpoints, networks and logging sufficient to challenge and guide technical teams., • Demonstrable understanding of emerging AI‑driven threats, their implications for cyber security and their mitigations., • A relevant cybersecurity qualification and/or recognised certification (e.g., CISSP, CISM, SANS) with ongoing professional development, • Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure)., • Experience with SIEM/SOAR, detection engineering or incident automation., • Experience implementing IAM tooling and access governance (e.g., PAM, IGA)., • Experience commissioning security testing and remediation programmes (e.g., pen tests, scanning)., • Experience delivering security awareness and incident exercising programmes., • Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. We look for team members who aspire, as we do, to work at our best and to be: • Impact‑led, commercially rigorous, • Tenacious in the face of challenges, • Collaborative and caring British International Investment is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background. #J-18808-Ljbffr

British International Investment (BII) is the UK’s leading development finance institution, wholly owned by the UK Government. Our primary mission is to address global development challenges through strategic investments that promote sustainable and inclusive economic growth. BII focuses on catalysing economic development, creating jobs, and building resilient economies in some of the world's most complex and underserved markets. We invest in businesses and projects that prioritise inclusive development, environmental sustainability, and innovation. Our approach is characterised by rigorous investment standards, high governance principles, and a commitment to delivering measurable development impact. Our team consists of highly skilled and passionate professionals dedicated to making a tangible difference globally. We foster a collaborative and intellectually stimulating work environment that values curiosity, innovation, and professional growth. Our culture balances high performance with a strong emphasis on wellbeing, ensuring our employees can achieve their full potential while contributing to our mission. The Cybersecurity Team protects BII’s technology, people, and processes from cyber-attacks. With top-tier tools and a leading Managed Security Service Provider, the team maintains the confidentiality, availability, and integrity of BII’s assets and data, supporting operations across markets. As a core part of the security function, the team is crucial in defending against evolving cyber threats. Given it’s role the team is highly visible to the senior leadership of the organisation. The Head of Cyber Security provides operational leadership, governance and accountability for BII’s cybersecurity capability. The role manages a team of cybersecurity professionals responsible for protecting and defending BII from Cyber-attacks, whilst similarly managing identity as a security enabler. The role holder will own core and emerging cyber risk domains—spanning Cyber security operations, identity and AI—ensuring risks are identified early, governed effectively and managed within appetite. They will strengthen organisational resilience through incident readiness and response. The role also acts as Bronze Incident Manager for cybersecurity incidents. BII’s technology and supplier landscape is evolving, increasing cyber risk. This role provides clear operational ownership of cyber defence, risk governance and incident readiness, embedding security into change and decision-making. Cyber risks are detected early, managed appropriately, and reported to senior leadership. Controls are proven effective through monitoring, vulnerability management, and measurable resilience improvements. Incidents are handled with rehearsed responses and applied lessons learned. Reporting to the Head of Security, the Head of Cyber Security leads day-to-day cybersecurity and works closely with Technology, senior stakeholders and key suppliers to ensure that the Cybersecurity of BII is maintained and endures. The role turns cyber risk into prioritised actions and provides clear input to senior leadership forums to protect services, enable change and strengthen resilience. • Define and implement Cybersecurity strategy for BII, in order to keep BII safe., • Lead and manage the cybersecurity team by setting direction, priorities, performance standards and development plans., • Deputise for the Head of Security when required by representing Security in senior forums and making decisions within delegated authority., • Lead cybersecurity operations, including monitoring, vulnerability management, readiness and control health reporting., • Act as Bronze Incident Manager for cyber incidents by coordinating response and escalating to Silver/Gold when required., • Manage cyber risk within agreed appetite by assessing, treating and reporting risks with clear evidence and metrics., • Set cybersecurity governance for key domains, including Identity, third-party security, AI risk and data sovereignty., • Translate cyber risk into prioritised actions and report clearly to OpCo/ExCo/Audit and other forums., • Manage the outsourced Managed Security service provider (MSSP) and specialist suppliers by setting expectations, reviewing SLAs/KPIs and driving remediation., • Embed security into change by defining requirements and validating controls for patching, configuration and new services., • Maintain cyber playbooks, runbooks and standards to improve consistency and reduce key-person dependency., • Define and oversee cyber security training awareness across BII. The successful candidate brings a strong track record in senior cybersecurity roles, leading others to deliver effective security operations, incident management and risk governance in complex environments. The background includes working with outsourced security providers, influencing technology and business stakeholders, and embedding practical security controls into day-to-day operations and change. The ideal candidate has a technical background and can translate complex topics into clear, business‑focused discussions. • Proven people leadership and the credibility to represent Security in senior forums and deputise for the Head of Security., • Ability to set security standards and governance, and to present risk and control status clearly to senior stakeholders., • Strong communication skills, with the ability to articulate complex technical matter to non-technical and senior audiences., • Significant experience leading cybersecurity operations, including detection/monitoring and vulnerability management., • Experience managing cyber incidents end-to-end, including communications, decision logs and lessons learned., • Strong knowledge of current threats, identity security and third‑party risk., • Experience managing MSSPs and specialist suppliers through governance and SLAs/KPIs., • Broad technical understanding across cloud, endpoints, networks and logging sufficient to challenge and guide technical teams., • Demonstrable understanding of emerging AI‑driven threats, their implications for cyber security and their mitigations., • A relevant cybersecurity qualification and/or recognised certification (e.g., CISSP, CISM, SANS) with ongoing professional development, • Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure)., • Experience with SIEM/SOAR, detection engineering or incident automation., • Experience implementing IAM tooling and access governance (e.g., PAM, IGA)., • Experience commissioning security testing and remediation programmes (e.g., pen tests, scanning)., • Experience delivering security awareness and incident exercising programmes., • Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. We look for team members who aspire, as we do, to work at our best and to be: • Impact‑led, commercially rigorous, • Tenacious in the face of challenges, • Collaborative and caring British International Investment is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background. #J-18808-Ljbffr

British International Investment (BII) is the UK’s leading development finance institution, wholly owned by the UK Government. Our primary mission is to address global development challenges through strategic investments that promote sustainable and inclusive economic growth. BII focuses on catalysing economic development, creating jobs, and building resilient economies in some of the world's most complex and underserved markets. We invest in businesses and projects that prioritise inclusive development, environmental sustainability, and innovation. Our approach is characterised by rigorous investment standards, high governance principles, and a commitment to delivering measurable development impact. Our team consists of highly skilled and passionate professionals dedicated to making a tangible difference globally. We foster a collaborative and intellectually stimulating work environment that values curiosity, innovation, and professional growth. Our culture balances high performance with a strong emphasis on wellbeing, ensuring our employees can achieve their full potential while contributing to our mission. The Cybersecurity Team protects BII’s technology, people, and processes from cyber-attacks. With top-tier tools and a leading Managed Security Service Provider, the team maintains the confidentiality, availability, and integrity of BII’s assets and data, supporting operations across markets. As a core part of the security function, the team is crucial in defending against evolving cyber threats. Given it’s role the team is highly visible to the senior leadership of the organisation. The Head of Cyber Security provides operational leadership, governance and accountability for BII’s cybersecurity capability. The role manages a team of cybersecurity professionals responsible for protecting and defending BII from Cyber-attacks, whilst similarly managing identity as a security enabler. The role holder will own core and emerging cyber risk domains—spanning Cyber security operations, identity and AI—ensuring risks are identified early, governed effectively and managed within appetite. They will strengthen organisational resilience through incident readiness and response. The role also acts as Bronze Incident Manager for cybersecurity incidents. BII’s technology and supplier landscape is evolving, increasing cyber risk. This role provides clear operational ownership of cyber defence, risk governance and incident readiness, embedding security into change and decision-making. Cyber risks are detected early, managed appropriately, and reported to senior leadership. Controls are proven effective through monitoring, vulnerability management, and measurable resilience improvements. Incidents are handled with rehearsed responses and applied lessons learned. Reporting to the Head of Security, the Head of Cyber Security leads day-to-day cybersecurity and works closely with Technology, senior stakeholders and key suppliers to ensure that the Cybersecurity of BII is maintained and endures. The role turns cyber risk into prioritised actions and provides clear input to senior leadership forums to protect services, enable change and strengthen resilience. • Define and implement Cybersecurity strategy for BII, in order to keep BII safe., • Lead and manage the cybersecurity team by setting direction, priorities, performance standards and development plans., • Deputise for the Head of Security when required by representing Security in senior forums and making decisions within delegated authority., • Lead cybersecurity operations, including monitoring, vulnerability management, readiness and control health reporting., • Act as Bronze Incident Manager for cyber incidents by coordinating response and escalating to Silver/Gold when required., • Manage cyber risk within agreed appetite by assessing, treating and reporting risks with clear evidence and metrics., • Set cybersecurity governance for key domains, including Identity, third-party security, AI risk and data sovereignty., • Translate cyber risk into prioritised actions and report clearly to OpCo/ExCo/Audit and other forums., • Manage the outsourced Managed Security service provider (MSSP) and specialist suppliers by setting expectations, reviewing SLAs/KPIs and driving remediation., • Embed security into change by defining requirements and validating controls for patching, configuration and new services., • Maintain cyber playbooks, runbooks and standards to improve consistency and reduce key-person dependency., • Define and oversee cyber security training awareness across BII. The successful candidate brings a strong track record in senior cybersecurity roles, leading others to deliver effective security operations, incident management and risk governance in complex environments. The background includes working with outsourced security providers, influencing technology and business stakeholders, and embedding practical security controls into day-to-day operations and change. The ideal candidate has a technical background and can translate complex topics into clear, business‑focused discussions. • Proven people leadership and the credibility to represent Security in senior forums and deputise for the Head of Security., • Ability to set security standards and governance, and to present risk and control status clearly to senior stakeholders., • Strong communication skills, with the ability to articulate complex technical matter to non-technical and senior audiences., • Significant experience leading cybersecurity operations, including detection/monitoring and vulnerability management., • Experience managing cyber incidents end-to-end, including communications, decision logs and lessons learned., • Strong knowledge of current threats, identity security and third‑party risk., • Experience managing MSSPs and specialist suppliers through governance and SLAs/KPIs., • Broad technical understanding across cloud, endpoints, networks and logging sufficient to challenge and guide technical teams., • Demonstrable understanding of emerging AI‑driven threats, their implications for cyber security and their mitigations., • A relevant cybersecurity qualification and/or recognised certification (e.g., CISSP, CISM, SANS) with ongoing professional development, • Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure)., • Experience with SIEM/SOAR, detection engineering or incident automation., • Experience implementing IAM tooling and access governance (e.g., PAM, IGA)., • Experience commissioning security testing and remediation programmes (e.g., pen tests, scanning)., • Experience delivering security awareness and incident exercising programmes., • Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. We look for team members who aspire, as we do, to work at our best and to be: • Impact‑led, commercially rigorous, • Tenacious in the face of challenges, • Collaborative and caring British International Investment is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background. #J-18808-Ljbffr

Service Manager - Anti-Social Behaviour Client: London Borough of Hillingdon Location: Civic Centre, High Street, Uxbridge, Middlesex, UB8 1UW Rate: £400-£450 per day Contract: Temporary until 31 January 2027 Hours: Monday to Friday, 9:00am-5:00pm Working arrangement: Technically hybrid, but primarily office-based DBS: Basic DBS required Driving: Required as part of the role; company vehicle provided About the role We are recruiting an experienced Service Manager to provide strategic and operational leadership across a borough-wide Anti-Social Behaviour and associated enforcement service. This is a senior, hands-on leadership position requiring someone who can quickly take ownership of the service, support operational teams and ensure that ASB prevention, investigation and enforcement activity is delivered effectively. Although the role is technically hybrid, the successful candidate must be willing to work from the Uxbridge office more often than not. Being visible, accessible and present on the floor is considered essential to providing the team with effective day-to-day leadership and support. Key responsibilities • Provide strategic and operational leadership across the Council's ASB and associated enforcement functions., • Lead, manage and support teams operating within a fast-paced and complex environment., • Oversee the prevention, investigation and enforcement of serious and complex ASB cases., • Ensure appropriate action is taken to protect vulnerable residents, reduce harm and manage community risk., • Maintain effective oversight of casework quality, service performance and operational delivery., • Scrutinise and interpret performance information, identifying trends, risks and areas requiring improvement., • Present performance data, service updates and recommendations to senior managers, elected members and partner organisations., • Ensure services comply with relevant housing legislation, the Anti-Social Behaviour, Crime and Policing Act 2014 and other statutory requirements., • Maintain compliance with Housing Regulator expectations and wider regulatory standards., • Provide direction and professional guidance on complex, sensitive or high-risk ASB and enforcement cases., • Strengthen partnership working with the police, community safety services, safeguarding teams, housing providers and other agencies., • Support continuous service improvement and ensure resources are deployed effectively., • Promote a visible, accountable and resident-focused leadership culture. About you You will be an established ASB or housing enforcement leader with substantial experience managing an operational service. You must be confident taking responsibility from the outset and operating with minimal supervision or training. You will combine strong statutory knowledge with credible people leadership, sound operational judgement and the ability to analyse and present complex performance information clearly. Essential experience • Extensive experience managing or leading an Anti-Social Behaviour service., • Strong experience within social housing, a local authority, a housing association or a closely related community safety environment., • Proven experience leading teams in a demanding operational setting., • Experience overseeing complex ASB, tenancy enforcement or community safety cases., • Demonstrable experience using performance information to scrutinise services and drive improvement., • Experience presenting reports, findings and recommendations to different stakeholder groups. Essential knowledge and skills • Strong working knowledge of housing legislation., • Detailed knowledge of the Anti-Social Behaviour, Crime and Policing Act 2014., • Sound understanding of safeguarding, vulnerability, risk management and enforcement practice., • Strong leadership and people-management skills., • Excellent written, verbal and presentation skills., • Ability to interpret complex information and communicate it clearly., • Strong decision-making and problem-solving abilities., • Ability to work independently, prioritise competing demands and deliver under pressure., • Confidence dealing with senior stakeholders, partner agencies and sensitive operational matters. Additional information The successful candidate must be able to hit the ground running and provide immediate stability, direction and visible leadership to the service. Regular attendance at the Civic Centre in Uxbridge is essential. This is not a predominantly home-based assignment, despite being technically classified as hybrid. Driving is required as part of the role, with a company vehicle available. The successful candidate will also be required to complete a Basic DBS check

Radius is seeking a Compliance Manager for large IT organisation who is experiencing a level of growth and are leaders in their industry. Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 Information Security Management System PCI-DSS Payment Card Industry Data Security Standard ISO 22301 Business Continuity * GDPR and Data Protection Laws Conduct regular internal audits in line with the requirements of the standards. Implement compliance initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective controls and processes, and integrate specific compliance objectives within business units. Influence senior management in identifying compliance risks and provide appropriate commercial solutions. Monitor industry, regulatory and corporate developments in order to identify areas of vulnerability and risk. Develop and implement corrective/preventative action plans for the resolution of compliance issues and provide guidance and coaching on how to avoid future incidents. Communicate the compliance programme to all employees. Prepare and deliver presentations to executives, managers and other interested parties reporting on status of compliance initiatives. Meet with the business to build relationships and enhance their capability to manage risk. Create a defined process that allows for the evaluation, approval and adoption of all new compliance and certification activities to ensure clear ownership, documented processes, and proper controls. Assist the Board in defining a Business Continuity Plan appropriate to the business. Identify, record, maintain and report on business risks associated to standards. Maintain applicable registers in support of non-conformance, risk, legal compliance, etc. Establish and maintain a timetable for annual testing of the Business Continuity Strategy. Develop induction materials and implement training programs for staff in respect of Information Security and Business Continuity

We are seeking an experienced Housing Income Manager to lead the Council's rent collection, arrears recovery and wider housing income function. Key responsibilities include: Leading the housing income and rent collection service. Managing current and former tenant arrears and income recovery. Developing strategies to improve collection rates and reduce arrears. Monitoring income, performance, financial risk and bad debt. Leading effective approaches to Universal Credit, Housing Benefit and welfare reform. Working closely with Housing, Finance, Revenues and Benefits, Legal and external partners. Ensuring appropriate consideration of vulnerability and safeguarding. Using data and performance information to drive service improvement. Leading, managing and developing the income management team. Contributing to HRA business planning and the wider financial sustainability of the housing service. The ideal candidate will have strong experience of housing income or rent collection within a local authority or social housing environment, together with excellent financial, analytical, leadership and customer-service skills

Role: Cyber Assurance Lead Position: Contract Location: Hybrid/ London Days on Site: Minimum 1 Duration: Approx until 31st March 2027 Pay: Up to 750£ per day Umbrella Job Purpose / Overview Cyber assurance is an umbrella term for several processes aimed at ensuring individual system components can adequately protect themselves from attacks. Doing so requires not just a one-time effort but spans the complete system lifecycle in a changing environment as security posture may evolve over time adapting to emerging threats or changing systems utilisation. The Cyber Assurance Lead role holder is responsible to ensure that assurance is carried out professionally fulfils its role as last line of defence. They will oversee cyber security controls implementation, from definition in line with risks assessments to operation and maintenance. The Cyber Assurance Lead post holder will conduct assessments and audits, sharing findings and mitigations actions with the relevant stakeholders and teams. The Digital & IT directorate sits within the PMO Unit which in turn sits within the overall delivery department. Digital & IT is accountable for providing Enterprise IT infrastructure and application to the business and to a subset of Tier 1 contract partners. Framework & Boundaries The role holder is given Cyber Assurance services ownership by the Head of IT Operations / IT Operations Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements and industry standards. Principal Accountabilities Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities. Produce detailed plans for cyber security audits. Assure the implementation, operation and maintenance of security controls. Write formal reports, and sometimes deliver oral briefings, on the findings of audits and compliance reviews. Results are presented clearly so that both technical staff and general management understand the key points. Present findings to colleagues and managers, in both cyber security and general roles. Assess the correctness of cyber security risk assessments and risk management plans, taking account of the organisation's business goals. Review compliance with legal and regulatory requirements Provide expert advice on audit, assurance and risk management. Use specific auditing tools to conduct efficient assessments. Convince stakeholders of the importance of audit, assurance and security. Knowledge & Skills Formal method or standards, such as COBIT 5 or ISO27001 and associated best practices. Legal and regulatory standards on data protection and privacy. Knowledge across a range of Security technologies: Azure identify management and networking, Windows security controls and firewall technologies. Security Hardening and Testing. Vulnerability Management. Cyber Security Risk Management and Governance in line with Law and Regulations (incl. SNI and export control). Knowledge on Privacy and Online Rights. Familiar with Adversarial Behaviours.Qualifications & Experience Track record of conducting Cyber Security Risk Assessments within a regulated environment, preferably the nuclear industry. Experience in Cyber Security Risk Management Plan implementation management. Previous experience of leading Cyber Assurance audits and overseeing the mitigation actions and controls implementation. Cyber Security Experience within an Azure Cloud Computing work environment CCISP / CCISM (or similar). Lead Security Auditor. Certified Ethical Hacker (CEH).Application Information: If this sounds of interest, please APPLY NOW with your CV and a cover letter highlighting your suitability for this exciting role. Good Luck! This vacancy is being advertised by Rullion Ltd acting as an employment business. Since 1978, Rullion has been securing exceptional candidates for a range of clients; from large well-known brands to SMEs and start-ups. As a family-owned business, Rullion's approach is credible and honest, focused on building long-lasting relationships with both clients and candidates. Rullion is a forward-thinking recruitment company that specialises in providing a wide range of talent consultancy services to a diverse client base, from small start-ups to large household names. We celebrate and support diversity and are committed to ensuring equal opportunities for both employees and applicants. Thanks Rullion Rullion celebrates and supports diversity and is committed to ensuring equal opportunities for both employees and applicants

IT Support Engineer (1st / 2nd Line) Location: Hoddesdon Salary: Competitive Contract: Permanent, Full Time Travel: Occasional travel to sites across UK&I Yolk Recruitment is supporting a growing organisation with the recruitment of an IT Support Engineer to join its internal IT team. This is a hands-on 1st and 2nd line role supporting users across a multi-site environment. You'll take ownership of incidents from initial triage through to resolution, working across Microsoft 365, Active Directory / Entra ID, endpoint security and general desktop support. What you'll be doing Providing 1st and 2nd line support across desktops, laptops, mobiles, printers and peripherals Managing and resolving support tickets in line with SLAs Supporting Microsoft 365 including Outlook, Teams, OneDrive and SharePoint Managing users and access through Active Directory / Entra ID Supporting MFA, Conditional Access and Microsoft Defender Deploying and managing devices through Microsoft Intune / Endpoint Manager Supporting joiners, movers and leavers Assisting with patching, vulnerability remediation and endpoint security Supporting IT asset, licence and subscription management Troubleshooting basic networking and connectivity issues Maintaining IT documentation and knowledge base articles What you'll bring You'll have previous experience within an IT Support, Helpdesk or Desktop Support position, alongside: Strong Windows desktop support experience Good working knowledge of Microsoft 365 Experience with Active Directory / Entra ID Exposure to Microsoft Defender / Advanced Threat Protection Basic networking knowledge Experience supporting remote or multi-site users Strong troubleshooting and communication skillsExperience with Microsoft Intune, Azure, Dynamics 365 Business Central, Power Platform, Paxton, Time & Attendance systems or Splicecom PBX would be advantageous, but isn't essential. What's in it for you? You'll join a collaborative IT team operating in a modern Microsoft-first environment, with exposure to cloud, security and endpoint management technologies. There's also genuine scope to develop towards senior support, infrastructure or specialist positions. Ready to Apply? Contact Jack Winder to find out more. Please apply with a CV and a cover letter outlining why you're perfect for the role. Know someone great for the job? We offer a referral scheme-just get in touch! Note: We do our best to respond to every application, but due to volume, we can't always guarantee it. If you haven't heard back within 7 days, unfortunately, you haven't been successful this time. Keep an eye on our site for new opportunities

This full-time, permanent role has a starting salary of £42,958 per annum based on a 36 hour working week. Are you committed to providing a caring and safe home environment for children and young people? Are you a champion for creating the right conditions in which children and young people can thrive and seize opportunities? If so, we'd love you to consider joining us as a Deputy Manager at our residential home located in Walton-on-Thames. Our Offer to You 26 days' holiday, rising to 28 days after 2 years' service and 31 days after 5 years' service Option to buy up to 10 days of additional annual leave A generous local government salary related pension Up to 5 days of carer's leave and 2 paid volunteering days per year Paternity, adoption and dependents leave An Employee Assistance Programme (EAP) to support health and wellbeing Learning and development hub where you can access a wealth of resources Wellbeing and lifestyle discounts including gym, travel, and shopping A chance to make a real difference to the lives of our residents Relocation bonus of up to £8,000 Refer a friend payment of £750 as a thank you for finding the right residential workerIn return for your expertise, commitment and experience we will support your ongoing learning and development through a culture of high support and high challenge. We offer market leading training opportunities and, with a developing and expanding residential service, there will be lots of opportunities to progress in your career. About The Role When a young person joins us at our home in Walton which supports children and young people with emotional and behavioural difficulties, they're not just looking for support- they're looking for stability, encouragement and someone who believes in their potential. As a Deputy Manager you will help to guide and support the team of Residential Support Workers and Senior Practitioners who work directly with our children and young people on a daily basis. As a Deputy you will be the heart and soul of our home, working alongside the Home Manager to provide operational leadership and make sure everything runs smoothly with the day to day management of the home and any linked services. You'll also support the growth and development of our children and young people by: Ensuring they are listened to Ensuring they feel safe and cared for Providing them with opportunities to take part in games, activities and days out Promoting self-belief and creating the conditions to achieve endless possibilitiesAs a senior member of the team, we are looking for someone who is caring and passionate about our children and young people achieving their potential and this includes staff too! You'll supervise and support staff to deliver services that meet the needs of our children and young people whilst injecting fun, energy and adventure into how things are done. Work will include managing complexity, risk or vulnerability, which means you will need to know the Ofsted inspection framework, the quality standards governing children's homes and be able to evaluate and monitor the effectiveness of work within the home. Your Application In order to be considered for shortlisting, your application will clearly evidence the following skills and align with our behaviours: Proven ability to establish and maintain positive relationships with children/young people, their families and professionals involved in their care, and knowledge of the issues that affect them Proven experience in supervising, inspiring and leading staff, enabling them to improve practice and outcomes for young people Demonstrable competence in effective assessment, risk management and strengths-based care planning Level 3 Diploma in Residential Childcare or equivalent GCSEs in Maths and English (or equivalent alternative) and good IT skills In-depth knowledge of delivering statutory childcare services including at least 2 years' experience relevant to the residential care of children and knowledge of the Children's Homes Regulations 2015 and Quality StandardsSurrey has both urban and rural areas and our residential staff will be expected to have a valid driving licence to drive in the UK, access to a vehicle and be willing to travel across the county. An enhanced DBS 'Disclosure and Barring Service' check for regulated activity (formerly known as CRB) and the Children's and Adults' Barred List checks will be required for this role. To apply, we request that you submit a CV and you will be asked the following 4 questions: Please tell us about your motivation for applying for this role Please tell us about your knowledge of the Ofsted Inspection Framework and children's homes quality standards, with an example of where you have you had to apply and adhere to these Please tell us about a time when you have provided effective leadership, what was the situation and the outcome? This role will involve supporting others to work together as a team to improve outcomes for children and young people. Tell us about your experience of having supported and worked as part of a team around a child/ young personThe job advert closes at 23:59 on the 13th September 2026 with interviews to follow. Local Government Reorganisation (LGR) Surrey County Council is undergoing Local Government Reorganisation, moving from a two-tier system to two new unitary councils in April 2027. If you are employed by Surrey on 1st April 2027, your role will transfer with current terms and conditions to one of the new organisations, supporting local devolution and greater powers for our communities. Our Commitment We are a disability confident employer which means if you have shared a disability on your application form and have evidenced you meet the minimum shortlisting criteria as displayed on the advert, we guarantee you an interview. Your skills and experience truly matter to us. From application to your first day, we're committed to supporting you with any adjustments you need, we value inclusion and warmly welcome you to join and help build a workplace where everyone belongs

Infrastructure Engineer Location: Epsom Salary: £40,000 - £45,000 + Benefits Job Type: Full-time, Permanent The Role We are seeking a mid-level Infrastructure Engineer to join a well-established and growing software company based in Epsom, Surrey. This is a full-time, on-site role supporting, managing, and optimising office infrastructure and data centre operations to ensure seamless performance, security, and reliability. The ideal candidate will have 3-5 years of hands-on experience supporting physical servers, managing a Microsoft environment, and troubleshooting networks including firewalls, switches, and load balancers. Who We Are Our client is an innovative and established software house, delivering complex technology solutions to both public and private sector organisations for over two decades. They have built a strong reputation for excellence and innovation. Their flagship product is a powerful communication and engagement platform used by thousands of users across public sector organisations to share important updates, promote services, and increase community engagement. As a mature, stable, and growing product, it demands a secure and reliable technical environment. Our client is a member of the G-Cloud and DOS (Digital Outcomes and Specialists) frameworks and plays an active role in the UK government's digital transformation programme. Key Responsibilities • Microsoft 365 Administration – Manage Exchange Online, SharePoint, OneDrive, and Teams, including user accounts, permissions, and integrations., • Infrastructure & Network Management – Configure and maintain firewalls, routers, switches, VLANs, and IP routing while troubleshooting network issues., • Server Management – Install, configure, and maintain Windows Server (2022, 2019, 2016) and Linux environments, including Active Directory, DNS, DHCP, IIS, SQL Server, and Group Policies., • Virtualisation – Manage and support MS Hyper-V environments, including P2V and V2P migrations., • Mobile Device Management (MDM) – Deploy and maintain MDM solutions and enforce security policies., • Cybersecurity – Implement security best practices, conduct vulnerability assessments, and apply patches to maintain compliance., • Email Deliverability & Authentication – Configure and monitor SPF, DKIM, DMARC, and DNS settings to optimise email performance., • User Support – Provide 1st-3rd line support, troubleshoot issues, maintain IT assets, and improve IT workflows., • Documentation – Maintain technical documentation, network diagrams, and an up-to-date asset register. Skills and Qualifications • 3-5 years of experience in IT infrastructure, systems administration, and networking., • Strong knowledge of Microsoft 365, Windows Server, and Linux environments., • Experience managing enterprise-grade firewalls (e.g., SonicWall) and network troubleshooting., • Hands-on experience with Hyper-V virtualisation and server deployments., • Solid knowledge of cybersecurity principles and best practices., • Excellent troubleshooting skills and ability to work independently., • Strong communication and teamwork skills., • Relevant IT certifications (Microsoft, Cisco, CompTIA, or similar) are desirable. Career Progression Infrastructure Engineers in this business typically progress to Senior Infrastructure Engineer and Operations Manager, with further progression to Operations Director. Benefits • Competitive salary (£40,000 - £45,000) and benefits package, • Professional development opportunities and certifications, • Collaborative and innovative work environment, • Exposure to cutting-edge IT infrastructure projects, • Health insurance (from second year), • Pension scheme Working Hours & Environment • 9am - 6pm, Monday to Friday, • Fully on-site role, • Office located in the centre of Epsom, less than a 5-minute walk from the main train station and close to local amenities Start Date ASAP