Job Search

We are seeking an experienced Security Advisor to provide practical, risk-based guidance that supports the protection of people, information, systems, and physical assets. Working with stakeholders across the business, you will help identify security risks, recommend proportionate controls, and promote a strong culture of security awareness. This role will suit someone who can combine sound professional judgement with the ability to communicate clearly with both technical and non-technical audiences.

Your responsibilities will include conducting security assessments, reviewing existing controls, and advising on the management of risks, vulnerabilities, incidents, and compliance requirements. You will contribute to the development and maintenance of security policies, standards, procedures, and guidance, ensuring they remain aligned with relevant legislation, regulations, and recognised industry practice. You will support incident response activities, assist with investigations and post-incident reviews, and track remediation actions through to completion. The role will also involve preparing reports, delivering briefings and awareness sessions, supporting audits, and contributing to security improvement projects and business continuity planning.

Applicants should have demonstrable experience in a security, risk, assurance, compliance, or related advisory role, together with a strong understanding of security principles, risk management, and control frameworks. Experience of working with information security, physical security, operational resilience, or incident management would be advantageous. You will need excellent analytical, writing, influencing, and stakeholder-management skills, as well as the ability to prioritise effectively and work independently in a changing environment. Relevant professional qualifications or certifications are desirable, but equivalent practical experience will be considered. A high level of integrity, discretion, and attention to detail is essential, along with a proactive approach to identifying and resolving security issues.

We are seeking an experienced Microsoft Azure Cybersecurity Advisor to help organisations strengthen their cloud security posture and protect critical data, applications, and infrastructure. In this advisory role, you will work with technical and business stakeholders to assess cybersecurity maturity, identify risks, and develop practical, scalable security strategies aligned with business objectives and regulatory requirements.

Your responsibilities will include advising on Azure security architecture, identity and access management, network protection, endpoint security, data protection, security monitoring, and incident response. You will assess existing environments, conduct security reviews, define remediation roadmaps, and support the implementation of controls using relevant Microsoft security technologies and services. You will also contribute to threat modelling, risk assessments, security policies, cloud governance, and secure-by-design practices. The role will involve translating complex technical risks into clear recommendations for both technical and non-technical audiences, while helping teams improve their operational resilience.

Applicants should have strong experience in cloud cybersecurity, with practical knowledge of Microsoft Azure security capabilities and common enterprise security frameworks. Relevant experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure Policy, Key Vault, networking controls, and cloud security posture management is highly desirable. Professional certifications such as Azure Security Engineer, Cybersecurity Architect, CISSP, CISM, or equivalent qualifications would be advantageous. You should be confident working across multiple projects, communicating with stakeholders at all levels, and producing clear, well-structured technical documentation. A proactive approach, strong analytical skills, sound judgement, and a commitment to continuous learning are essential for success in this position.

We are seeking a Security Advisor to provide trusted, practical advice that strengthens security across people, processes, technology and physical environments. In this role, you will work with stakeholders at different levels to identify risks, assess the effectiveness of existing controls and recommend proportionate improvements. You will contribute to a positive security culture by making complex issues clear, actionable and relevant to day-to-day operations.

Your responsibilities will include conducting security assessments, supporting risk reviews, maintaining risk and issue registers, and advising on appropriate mitigation plans. You will help develop, review and implement security policies, standards, procedures and guidance, ensuring they remain aligned with applicable legislation, regulatory expectations and recognised good practice. You will also support incident management activities, investigate security concerns, coordinate responses where required and capture lessons learned to reduce the likelihood of recurrence. The role may involve contributing to business continuity, information protection, physical security, third-party assurance and security awareness initiatives.

The successful candidate will have experience in a security, risk, compliance or assurance role, with the ability to assess risks and communicate recommendations clearly to both technical and non-technical audiences. You should be confident engaging with stakeholders, influencing decisions and managing competing priorities while maintaining attention to detail. Experience of security frameworks, risk management methodologies, audit activity, incident response or policy development would be beneficial. Relevant professional qualifications or certifications are desirable, although practical experience and a commitment to continuous learning are equally valued. You will be expected to demonstrate sound judgement, discretion, integrity and a collaborative approach, together with the ability to work independently and deliver high-quality advice within agreed timescales.

We are seeking a Field Security Technical Advisor to provide expert technical guidance and operational support across field-based programmes and facilities. The role will assess security risks, identify vulnerabilities, and recommend practical measures to protect personnel, assets, information, and operations in complex or changing environments. You will work closely with programme, logistics, facilities, and management teams to ensure that security considerations are integrated into planning, implementation, and day-to-day activities.

Key responsibilities will include conducting security assessments and site visits; reviewing and updating security plans, procedures, and contingency arrangements; advising on access control, physical protection, communications, transport, travel, and emergency preparedness; and supporting the implementation of minimum security standards. You will monitor incidents and emerging threats, contribute to reporting and analysis, and provide timely advice during emergencies or periods of heightened risk. The role will also involve delivering security briefings, training, and awareness sessions; supporting drills and exercises; liaising with relevant local authorities and service providers; and helping field teams maintain effective incident reporting and business continuity arrangements. Regular travel to operational locations is expected.

Applicants should have substantial experience in operational or technical security, preferably in humanitarian, development, commercial, public-sector, or similarly challenging environments. A strong understanding of risk management, security systems, emergency response, and field security procedures is essential. Experience with security assessments, training delivery, incident management, and the development of written guidance will be highly valued. Relevant professional qualifications in security management, risk, emergency management, or a related discipline are desirable. The successful candidate will demonstrate sound judgement, discretion, analytical ability, and the confidence to provide clear advice in high-pressure situations. Strong written and verbal communication skills, cultural awareness, adaptability, and the ability to work independently and collaboratively are required. Fluency in English is essential, and knowledge of additional languages may be advantageous. A willingness and ability to travel regularly, sometimes at short notice, is also required.

We are seeking an experienced Supply Chain Security Advisor to strengthen the resilience, integrity and security of complex supply networks. In this role, you will provide expert guidance on supply chain security risks, controls and compliance requirements across suppliers, logistics providers, manufacturing partners and other external stakeholders. You will work closely with procurement, operations, information security, risk, legal and business continuity teams to identify vulnerabilities and develop practical, risk-based improvements.

Your responsibilities will include conducting supply chain security assessments, reviewing supplier risk profiles and supporting due diligence activities throughout the third-party lifecycle. You will help establish and maintain security standards, policies, procedures and contractual requirements, while monitoring supplier adherence and coordinating remediation plans where gaps are identified. The role will also involve assessing risks relating to physical security, cybersecurity, counterfeit or compromised components, data protection, continuity of supply and geopolitical disruption. You will contribute to incident response, threat monitoring, audit preparation and management reporting, ensuring that key risks, actions and performance indicators are clearly communicated to senior stakeholders.

The successful candidate will have demonstrable experience in supply chain risk management, supplier assurance, security governance, operational resilience or a closely related discipline. You should understand recognised security and risk management frameworks, third-party assurance practices and relevant regulatory or contractual obligations. Strong analytical, investigative and project management skills are essential, along with the ability to translate complex risks into clear recommendations and workable controls. Excellent communication and stakeholder management skills are required, as you will influence teams and suppliers at all levels. Professional qualifications in supply chain, security, risk, information security, business continuity or a related field are advantageous. The role may require occasional travel and collaboration across multiple locations and time zones.

We are seeking an Advisory Engineer to join an Enterprise Product Security Incident Response Team (E-PSIRT). In this role, you will help identify, assess, coordinate, and resolve security vulnerabilities affecting enterprise products, platforms, and services. You will act as a trusted technical adviser to engineering, product, infrastructure, and customer-facing teams, helping to ensure that security issues are managed consistently, efficiently, and in line with established response processes.

Your responsibilities will include investigating reported vulnerabilities and security incidents, validating technical findings, assessing severity and potential business impact, and coordinating remediation activities across multiple stakeholders. You will contribute to vulnerability response plans, security advisories, risk assessments, and incident documentation, while supporting clear and timely communication with internal teams and, where appropriate, external researchers or customers. You will also help improve response procedures, develop repeatable playbooks, identify trends, and provide guidance on secure engineering practices. The role may involve analysing logs, code, configurations, and technical reports, as well as supporting post-incident reviews and corrective action tracking.

The successful candidate will bring experience in product security, vulnerability management, incident response, application security, or a closely related discipline. Strong knowledge of common vulnerability concepts, CVE and CVSS methodologies, threat modelling, secure development principles, and security testing practices is expected. You should be comfortable interpreting technical information, prioritising competing issues, and explaining complex security risks to both technical and non-technical audiences. Experience with cloud environments, software development lifecycles, automation, scripting, and security tools is advantageous. We value sound judgement, attention to detail, collaborative working, and the ability to remain organised and decisive in a fast-moving environment. Relevant professional certifications or equivalent practical experience are welcome.

We are seeking an Advisory Engineer, AI Governance and Product Security to help build safe, secure and trustworthy artificial intelligence products. This role will provide practical technical guidance across the product lifecycle, from early research and design through deployment, monitoring and continuous improvement. You will work closely with software engineers, product managers, data scientists, security specialists, legal advisers and risk teams to translate emerging AI governance expectations into clear, workable engineering practices.

Your responsibilities will include assessing AI systems for security, privacy, safety and regulatory risks; developing threat models and control requirements; advising on secure architecture, data protection, access management and model integration; and supporting the design of testing, monitoring and incident response processes. You will help establish standards for responsible AI development, including documentation, risk assessments, human oversight, transparency and lifecycle governance. The role will also involve reviewing technical designs, conducting assurance activities, tracking remediation plans and communicating complex risks and recommendations to both technical and non-technical stakeholders. You may contribute to internal policies, playbooks, training materials and governance forums, while staying informed about evolving threats, standards and legislation affecting AI-enabled products.

The successful candidate will have experience in product security, application security, platform engineering, risk management or a related technical discipline, together with a strong understanding of AI and machine learning systems. You should be comfortable analysing complex systems, identifying practical controls and influencing delivery teams without relying solely on formal authority. Experience with secure software development, cloud environments, privacy engineering, model evaluation, adversarial testing or AI assurance is highly desirable. Strong written and verbal communication skills are essential, as is the ability to balance innovation, usability and risk. Relevant certifications or equivalent professional experience are welcome. Above all, you will bring sound judgement, curiosity and a collaborative approach to helping teams deliver secure, compliant and responsible AI products.

We are seeking an experienced Security Architecture professional to provide strategic advice and technical leadership across complex enterprise environments. The successful candidate will shape secure, resilient architectures that support organisational objectives, digital transformation and effective risk management. You will work with senior stakeholders, technology teams and delivery partners to establish security principles, define target architectures and ensure that security is embedded throughout the design, delivery and lifecycle of services.

Key responsibilities will include developing and maintaining security architecture frameworks, patterns, standards and reference models; assessing proposed solutions and identifying security risks, dependencies and opportunities for improvement; and producing clear, proportionate recommendations for technical and non-technical audiences. You will contribute to security strategies, roadmaps and investment decisions, support assurance and governance activities, and provide constructive challenge where designs do not meet required security outcomes. The role will also involve mentoring colleagues, promoting secure-by-design practices and helping to improve consistency across architecture and engineering communities.

Applicants should have substantial experience in enterprise or security architecture, with a strong understanding of identity and access management, cloud security, networks, applications, data protection, infrastructure and modern delivery methods. You will be able to translate business and operational requirements into practical security controls and communicate complex issues clearly to senior decision-makers. Experience of recognised architecture methods, risk management, threat modelling, regulatory or compliance environments, and working across multidisciplinary programmes is highly desirable. Professional recognition at Chartered or Principal level through an appropriate cyber security or technology body would be welcomed, alongside relevant qualifications and a commitment to continuing professional development. We value sound judgement, collaboration, integrity and the ability to influence change in a complex organisation.

We are seeking a Regional Cyber Security Advisor, Vice President, to provide strategic security guidance and practical risk management support across a diverse regional business environment. This senior role will partner with business leaders, technology teams, risk functions, and control owners to strengthen cyber resilience, protect information assets, and embed security into business and technology decision-making. The successful candidate will act as a trusted advisor, translating complex security risks into clear, commercially relevant recommendations.

Key responsibilities include assessing regional cyber security risks, advising on risk treatment plans, and monitoring adherence to security policies, standards, and regulatory requirements. You will support the implementation of the cyber security strategy, contribute to security architecture and technology reviews, and provide oversight of initiatives involving cloud services, third-party providers, applications, infrastructure, and data protection. The role will also involve reviewing control effectiveness, coordinating remediation of security findings, supporting audits and regulatory engagements, and contributing to incident response, crisis management, and lessons-learned activities. You will promote security awareness and a strong risk culture through executive briefings, training, workshops, and regular engagement with stakeholders across multiple locations.

Applicants should bring substantial experience in cyber security, information security, technology risk, or a related discipline, ideally gained within a complex, regulated, or multinational environment. Strong knowledge of security governance, risk frameworks, control testing, identity and access management, vulnerability management, incident response, and data protection is required. Professional certifications such as CISSP, CISM, CRISC, or equivalent qualifications are desirable. You will need excellent communication and influencing skills, sound commercial judgement, and the ability to manage competing priorities while operating confidently with senior stakeholders. Experience working across regional or international teams, with a collaborative and pragmatic approach to problem-solving, will be highly valued.

We are seeking a Principal Cyber Security Consultant to provide senior-level advisory services across a broad range of cyber security, risk and resilience challenges. In this role, you will work with executive stakeholders, technology leaders and delivery teams to assess current security capabilities, define target operating models and develop practical strategies that support business objectives. You will bring a strong understanding of cyber security principles and the ability to translate complex technical risks into clear, commercially focused recommendations.

Your responsibilities will include leading cyber security assessments, maturity reviews, threat and risk analyses, security architecture engagements and transformation programmes. You will shape client deliverables, establish security roadmaps, define policies and control frameworks, and advise on regulatory, governance and compliance requirements. You will also support incident preparedness, resilience planning, third-party risk management and the design of effective security controls. As a principal consultant, you will be expected to manage senior relationships, facilitate workshops, present findings to boards and leadership teams, and contribute to the development of methodologies, propositions and high-quality written materials. You will provide technical direction and mentorship to consultants, helping to build capability and maintain consistently strong delivery standards.

The successful candidate will have significant experience in cyber security consulting, advisory or a comparable leadership position, with a proven record of delivering complex engagements from strategy through to implementation. Strong knowledge across areas such as governance, risk management, security architecture, cloud security, identity and access management, incident response or cyber resilience is essential. You should be confident engaging with both technical and non-technical audiences and be able to challenge constructively while building trusted relationships. Relevant professional qualifications, such as CISSP, CISM, SABSA, ISO 27001 or equivalent, are advantageous. Excellent communication, analytical, commercial and stakeholder management skills are required, along with the ability to work independently, manage competing priorities and influence outcomes in fast-paced environments.