Data Privacy and Governance Consultant

The Role

I am currently working in partnership with a leading financial services company, and they are currently looking for a Data Privacy and Governance Consultant to join them. Their offices are based in Sale, but the role offers hybrid working (2-3 days a week in the office).

The Person

The main purpose of the role will be to assist with all data protection matters, including assurance and governance work.

You would be responsible for all elements of data governance and protection, including advising on the use of systems and how data is stored and shared.

They need someone who has experience in a Data Protection or similar compliance role.

If you are interested in this vacancy, please apply to the role or email me directly at [email protected]

Vulnerability Analyst

£450-500/day overall assignment rate to umbrella

Remote working

6 month contract

Looking for a Vulnerability Analyst to join a leading financial services firm, you’ll be working as a key member of the vulnerability management team – you’ll be responsible for research, risk assess and mitigate security vulnerabilities and compliance.

Vulnerability Analyst.

Key skills:

• Experience managing CSPM solutions – ideally Wiz
• Knowledge of vulnerability attack methodologies
• Knowledge of industry standard risk models
• Strong understanding of cloud security best practises
• Experience of cloud – preferably AWS and Azure

Vulnerability Analyst, AWS, Azure, Wiz, CSPM

Vulnerability Analyst

£450-500/day overall assignment rate to umbrella

Remote working

6 month contract

Looking for a Vulnerability Analyst to join a leading financial services firm, you’ll be working as a key member of the vulnerability management team – you’ll be responsible for research, risk assess and mitigate security vulnerabilities and compliance.

Vulnerability Analyst, key skills:

• Experience managing CSPM solutions – ideally Wiz
• Knowledge of vulnerability attack methodologies
• Knowledge of industry standard risk models
• Strong understanding of cloud security best practises
• Experience of cloud – preferably AWS and Azure

Vulnerability Analyst, AWS, Azure, Wiz, CSPM

Job Title: IT Security Manager

Location: Avonmouth/Bristol – Hybrid Working 3 days per week onsite

Salary: £55,000 – £65,000 + benefits

Are you an experienced IT Security Manager looking for your next challenge? If so, this could be the ideal opportunity for you. My client, a specialist retail business with an excellent reputation, is currently investing within their IT Security team. As part of this investment, they are looking to hire an IT Security Manager to head up their IT Security function.

Working closely with the Head of IT you will have responsibility for all things IT Security within the business. You will be responsible for scoping, implementing, monitoring, and maintaining IT security systems, you will be able to ensure compliance standards, strategy and reporting is carried out across all parts of the group. You will be supporting the IT team and the business by being a trusted advisor in all aspects of IT security and IT compliance. Responsible for delivery of pragmatic, high quality, secure, cost-effective security solutions.

Key responsibilities

• Ensure IT Security meets the standards required by the business.
• Ensure IT Security systems are secure and fit for purpose.
• In Conjunction with the Head of Technology, set objectives, establish priorities and develop plans.
• Prepare and present proposals and benefits cases as working documents for senior management review on a monthly ongoing basis within an annual planning horizon.
• Implement approved proposals, managing functional input, where appropriate.
• Scope, implement, monitor and maintain IT Security systems.
• Support the wider IT team, and the business, by being a trusted advisor for all IT security and IT compliance matters.
• Perform due diligence and sign-off for all IT Security and Compliance related matters.
• IT Security patching strategy, reporting and compliance.
• Ensure IT Security and compliance systems are developed and maintained to the highest possible level.
• Adherence to, and liaison with Group Internal and External Audit requirements and standards.
• Maintain external IT Security certifications as required by the business.
• Define the IT Security strategy.
• Implement and maintain information security policies and procedures.
• Complete regular vulnerability scanning and required remedial actions.
• Ownership of the phishing strategy, campaigns, communications and remedial actions.
• Create and maintain appropriate documentation and standards.
• Maintain third-party vendor, hardware and software relationships related to IT Security.
• Ensure quality standards are adhered to by self and fellow members of the team.

Skills and Experience required

• Background within a similar stand-alone IT Security Management or IT Security Team Lead role.
• Strong IT security knowledge. (CISM, NIST, etc)
• Working knowledge of GDPR and PCI-DSS.
• Hands-on approach.
• Strong leadership skills (communication, prioritisation, delegation, planning, etc.)
• Quality of work – Demonstrates a high degree of attention to detail, thoroughness and a methodical approach to work. Works at a pace that matches the requirements of the business and recognises the importance of timely completion of tasks.
• Communication & interpersonal skills – Ability to listen and understand information. Presents information in a clear and concise manner to both technical and non-technical people. Knows appropriate way of communicating with customers, peers and line managers. Demonstrates respect for all individuals in all forms of communication. Treat people fairly and courteously regardless of background or culture
• Initiative – Monitors and manages own time to ensure daily, and long-term objectives are met. Develops and improves procedures in agreement with line manager. Accepts additional challenges and responsibilities willingly and assists others.
• Self-reliance. Captures cross departmental analysis and detailed feedback from the Management team for review.
• Planning & organisation – Adapts to changes and uses resources effectively. Able to prioritise and execute competing activities and prioritise and delegate effectively.
• Budgetary competence.
• Demonstrable knowledge of the operational ITIL Service Management framework.
• Experience developing solutions based on best of breed products.
• Key vendor and/or relevant industry standard qualifications e.g. CISSP, CISM, Comptia Security (desirable)

For more information or to apply please send a copy of your CV to [email protected]

Risk Assessor – Malware

Rate: £600 – £700 per day

Duration: 2 months

Location: London (50% on site)

We are looking for a knowledgeable Malware Specialist Risk Assessor to join our clients IT and Cyber Risk team (second line). The successful candidate will be responsible for evaluating and analysing malware-related solutions, controls, and risks within our organisation’s IT environment. This role involves performing risk assessments, identifying vulnerabilities, and providing recommendations to enhance the security posture against malware threats.

Key responsibilities:

Risk Assessment:

• Conduct comprehensive risk assessments of the solutions implemented by CISO to identify and evaluate risks associated with malware threats.
• Assess whether risks related to malware threats within key suppliers and subsidiaries are being appropriately managed.
• Determine whether an appropriate governance framework is in place for Aviva’s malware policies and business standards.
• Assess the effectiveness and resiliency of malware incident response processes.
• Utilise qualitative and quantitative methodologies to assess potential impacts on the organisation’s systems, and operations.

Reporting and Recommendations:

• Prepare a detailed report that outlines vulnerabilities and risks, including the potential impact associated findings and issues.
• Provide actionable recommendations for risk mitigation and control improvements.
• Present the report to CISO and control owners

Technical Skills:

• Proficient in risk or audit assessment methodologies,
• Proficient in malware control and technical solutions.
• Strong understanding of networking concepts, operating systems, and cybersecurity principles.
• Cyber controls and Risk

Interview

1 stage on teams

Intelligent Resource is working in partnership with a Blue-Chip Utilities client in the UK. We are currently recruiting Security Architect to be UK based out.

Job Title= Security Architect-OT
Location = Remote / Birmingham, London, or Manchester
Duration= 6 Months initially
Pay Rate= £650 Per Day Inside IR35

Role:
* Our Blue-Chip Utilities client require a Security Architect with a strong Infrastructure background and OT skills. The role will be 6 months initially and will be via an Umbrella Company. It will involve likely 1 to 2 days a month on site, will require a strong background in Security Architecture, Network Security, Infrastructure Cloud etc. Operation Technology (OT) is also required

Essential Skills
* Strong background in security architecture, security design and defining security frameworks for the enterprise
* Strong understanding of Network security (NGFW, WAF, NLB, Proxy), system or application security (microservices, NLB, SSL) and data security (Encryption)
* Hands-on experience in Cloud (AWS/GCP/Microsoft Azure) security architecture, security engineering. Azure a strong advantage
* Network, Endpoint and Application logging concepts, best practice and monitoring systems including SIEM
* Authentication, Authorisation and Accounting concepts, best practice and IAM management systems. OTP and MFA systems
* Identity strategy, Active Directory Security including federated implementation, for example ADFS, SAML
* Operational Technologies
* Experience with Azure infrastructure such as Account structures e.g. (subscription, tenant), Azure Active Directory, Azure Active Directory Domain Services, Service Principles, RBAC, IAM
* Strong Windows server background on both physical and virtual (VMware) infrastructure
* Migration of applications and services into cloud environment (Azure or vender SaaS platforms)
* Security certifications such as CISSP, CISM etc. are desirable
* Experience of working in large organisations in regulated sectors (example utilities, finance)
* Certification in recognised architecture frameworks (example TOGAF) and the ability to apply these in a pragmatic way would be an advantage

Intelligent Resource committed to barrier-free and inclusive recruitment. We are a Disability Confident recruiter, and a RIDI 100 and Business Disability Forum partner organization.

Should you choose to contact Intelligent Resource regarding this role or apply for it, all personal data you submit to us will be processed in accordance with our Privacy Notice which you can find on our website.

Job Title: IT Security Manager

Location: Bristol – Hybrid Working 3 days per week onsite

Salary: £60,000 – £65,000 + benefits

Are you an experienced IT Security Manager looking for your next challenge? If so, this could be the ideal opportunity for you. My client, a specialist retail business with an excellent reputation, is currently investing within their IT Security team. As part of this investment, they are looking to hire an IT Security Manager to head up their IT Security function.

Working closely with the Head of IT you will have responsibility for all things IT Security within the business. You will be responsible for scoping, implementing, monitoring, and maintaining IT security systems, you will be able to ensure compliance standards, strategy and reporting is carried out across all parts of the group. You will be supporting the IT team and the business by being a trusted advisor in all aspects of IT security and IT compliance. Responsible for delivery of pragmatic, high quality, secure, cost-effective security solutions.

Key responsibilities

• Ensure IT Security meets the standards required by the business.
• Ensure IT Security systems are secure and fit for purpose.
• In Conjunction with the Head of Technology, set objectives, establish priorities and develop plans.
• Prepare and present proposals and benefits cases as working documents for senior management review on a monthly ongoing basis within an annual planning horizon.
• Implement approved proposals, managing functional input, where appropriate.
• Scope, implement, monitor and maintain IT Security systems.
• Support the wider IT team, and the business, by being a trusted advisor for all IT security and IT compliance matters.
• Perform due diligence and sign-off for all IT Security and Compliance related matters.
• IT Security patching strategy, reporting and compliance.
• Ensure IT Security and compliance systems are developed and maintained to the highest possible level.
• Adherence to, and liaison with Group Internal and External Audit requirements and standards.
• Maintain external IT Security certifications as required by the business.
• Define the IT Security strategy.
• Implement and maintain information security policies and procedures.
• Complete regular vulnerability scanning and required remedial actions.
• Ownership of the phishing strategy, campaigns, communications and remedial actions.
• Create and maintain appropriate documentation and standards.
• Maintain third-party vendor, hardware and software relationships related to IT Security.
• Ensure quality standards are adhered to by self and fellow members of the team.

Skills and Experience required

• Proven background within a similar stand-alone IT Security Management or Lead role.
• Excellent IT security knowledge. (CISM, NIST, etc)
• Working knowledge of GDPR and PCI-DSS.
• Hands-on approach.
• Excellent team leadership skills (communication, prioritisation, delegation, planning, etc.)
• Quality of work – Demonstrates a high degree of attention to detail, thoroughness and a methodical approach to work. Works at a pace that matches the requirements of the business and recognises the importance of timely completion of tasks.
• Communication & interpersonal skills – Ability to listen and understand information. Presents information in a clear and concise manner to both technical and non-technical people. Knows appropriate way of communicating with customers, peers and line managers. Demonstrates respect for all individuals in all forms of communication. Treat people fairly and courteously regardless of background or culture
• Initiative – Monitors and manages own time to ensure daily, and long-term objectives are met. Develops and improves procedures in agreement with line manager. Accepts additional challenges and responsibilities willingly and assists others.
• Self-reliance. Captures cross departmental analysis and detailed feedback from the Management team for review.
• Planning & organisation – Adapts to changes and uses resources effectively. Able to prioritise and execute competing activities and prioritise and delegate effectively.
• Budgetary competence.
• Demonstrable knowledge of the operational ITIL Service Management framework.
• Experience developing solutions based on best of breed products.
• Key vendor and/or relevant industry standard qualifications e.g. CISSP, CISM, Comptia Security (desirable)

For more information or to apply please send a copy of your CV to [email protected]

Security Architect
£75,000 – £120,000 per annum
Hybrid role, based in either London, Bristol, or Manchester
Must hold or have held a Security Clearance
Starting ASAP

A key client of ours is rapidly expanding and looking to take on Consultants to carry out client facing Security Architectural services.

The company are an multinational IT consultancy, offering a range of security solutions. They cover both public and private sector projects. They also offer excellent progression opportunities with well-structured career paths, and coaching/training plans to help you achieve this.

Essential criteria:

• Must have experience of Security Architecture or Identity Access Management
• Experienced in a Customer-Facing / Advisory / Consultancy environment
• Must hold or have held a Security Clearance

If this role is of interest please email a CV through to [email protected] (REF: ZSDS)

Aiming to establish a new team, they are looking for multiple IT Security Engineers to join them on a permanent basis to support their projects.

I want to talk to anyone with:

• Specialist knowledge including information security frameworks, data protection legislation and regulatory frameworks.
• Experience working within security, including identifying and responding to security incidents, and knowledge of endpoint security solutions.
• Involvement in engineering projects, including an understanding of reverse engineering, designing secure components, and scripting languages.
• Experience and understanding of security analysis tools, defensive technologies, and other security technologies.

If you have any further questions at all, please don’t hesitate to contact [email protected]

IT Security Manager / Consultant
£90,000 – £110,000
Hybrid role, based in either London or Leeds (Hybrid 2 days a week)
Must be able to gain a high level Security Clearance (must be born in the UK)
Starting ASAP

A key client of ours is rapidly expanding and looking to take on Consultants to carry out internal, and client facing Security Compliance and Cyber Audits.

The company are an multinational IT consultancy, offering a range of security solutions. They cover both public and private sector projects.

The company also offers excellent progression opportunities with well-structured career paths, and coaching/training plans to help you achieve this.

Essential criteria:

• Must have consultancy experience and carrying out HMG or MOD cyber security compliance/audits

• Must be able to gain a high level security clearance (have to be born in the UK)

If this role is of interest please email a CV through to [email protected] (REF: ZSITSM)