IT Operations Platforms and Security Lead

IT Operations Platforms and Security Lead In summary the Client is looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk - ideally from within the banking or insurance sector. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a \"buy before build\" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas. Security, Compliance & Risk Management • Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. • Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. • Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). • Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. • Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). • Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. • Oversee endpoint security, cloud network and API security for robust protection across all assets • Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience • Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, • Microsoft AD (Entra), Server and SQL experience, • O365 administration and design • Global Software Patching and estate management via Intune • Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience • Software Defined Networking (Cisco, Meraki, Versa) Key Skills • Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. • Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. • Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). • Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. • Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. • IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: • IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. • Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. • Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. • Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: • Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. • Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. • Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor's degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.
IT Risk and Controls Lead

Role: IT Risk and Controls Lead Location: East London (Fortnightly) Salary: 55,000 - £60,000 Effective management of IT Risks, and their associated Controls, is a key aspect of the maturing IT organisation but something that can be hard to achieve when relying on collective responsibility. This role will demonstrate clear ownership for IT Risk and Controls and deliver ongoing management of policies, procedures, risk reviews and a quarterly plan to address specific actions in this area. This is important to ensure consistency across all areas of IT and that controls remain active and up to date. Ideal Candidate: Build and maintain close working relationship with the Risk Assurance department to ensure policies, and procedures, are aligned to Enterprise level policy and meet regulatory requirements. Operational ownership of the IT Risk Register, ensuring adherence to the agreed IT risk management framework. This should include working with each department to review IT risks, to an agreed schedule, and escalating high severity risks appropriately. Working with the IT Services Manager, and the Head of Change, to manage risks identified through incident, or change, management processes in line with the IT Risk Management Framework. Work with risk Owners to identify mitigating controls and maintain a controls register that is prioritised appropriately (Risk vs Control Coverage). Maintain a central library of IT Policies, and Processes, ensuring each one has a clear owner and periodic review cycle. Represent IT Risk within the Change Organisation to ensure that new risks being introduced by new Projects, and any changes to existing risks, or controls, are transitioned into the BAU risk process. In addition, ensuring any programme risk, in terms of failure of an initiative or project, is captured as a Strategic risk or alternate appropriate risk category. Manage a quarterly action plan, working across all IT departments, to: Address control gaps, or improve existing provision, based on priority. Conduct control audits, for example a System Access Review, to ensure ongoing compliance and adherence to policy. Conduct periodic reviews of IT Policies and Procedures Own, and run, the Major Incident Reporting process to ensure that Major Incidents are correctly documented at an enterprise level. Capture any new, or amended, risks or controls that are required as a result of the incident. Develop operational risk and control KPIs, and ensure regular reporting of those. Assist in internal, and external, audit processes as required Required Skills & Experience 5+ years experience in a service-oriented IT role. COBIT Experience Demonstrable working knowledge of common IT processes and department functions. Experience of Risk Management at either a Project, Programme or Department level. Working knowledge of a recognised Risk Management Framework, such as NIST, or as part of a more general framework such as ITIL 4 Process driven mentality Good general communication skills, with an ability to author technical documents to a high standard Proven ability to work with others to plan activities and then drive them to completion within agreed timescales. If role sounds of interest, do not hesitate to submit your CV
Security Risk Lead

Job Title: Security Risk Lead Salary: £53,300 - £71,300 Location: Cambridge/Hybrid with 2 days a week minimum the office Contract: Permanent Join our organisation as a Security Risk Lead. Utilise your expertise and drive to safeguard operations in this impactful role. We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge. About the role The Security Risk Lead plays a pivotal role by driving Cambridge University Press & Assessment's security risk management strategy. This position is responsible for identifying, assessing, and mitigating operational, financial, and strategic security risks across the organisation to ensure a resilient and compliant security framework. Overseeing the Security Risk Manager, the Security Risk Lead will work closely with senior stakeholders to develop and embed risk management processes that align with the organisation's priorities. They will also take the lead on key initiatives to reduce the organisation's risk exposure, delivering critical risk insights, reports Lead and improve the security risk management strategy, identifying, analysing, and evaluating risks that may affect the organisation. Implement controls to mitigate risks and ensure effective execution. Manage and support the Security Risk Manager. Prepare and present regular risk reports for senior management. Oversee the analysis and monitoring of risks, ensuring emerging risks are flagged. Ensure compliance with regulatory requirements. Monitor industry trends and best practices. Collaborate with the Head of Security GRC and teams to manage incidents and propose corrective actions. Provide risk management training and develop a risk-aware culture. Support the development of security risk policies and frameworks. Collect data for risk assessments and foster a collaborative risk management approach. Provide risk management input on key projects. Represent the organisation in industry forums. About you We are looking for someone with extensive knowledge of security risk management frameworks and methodologies (e.g., ISO 31000, 27001, 27005) and regulatory requirements in the industry The ideal candidate will have a relevant degree in Risk Management, Finance, Business, or a related field, or appropriate business experience, along with active CRISC or 27005 Risk Manager certification You should have a minimum of 5 years or demonstrated experience in a governance, risk, or compliance role within an information security context Strong analytical and problem-solving abilities, excellent written and verbal communication skills, and proficiency in risk management software and MS Office Suite are essential You should be detail-oriented with strong organisational and project management skills, and able to work well in a team-oriented environment and build relationships with stakeholders If you would like to know more about this opportunity and what will make you successful, please see the full job description attached to the bottom of this vacancy on our careers site. Rewards and benefits We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package , featuring family-friendly and planet-friendly benefits including: 28 days annual leave plus bank holidays Private medical and Permanent Health Insurance Discretionary annual bonus Group personal pension scheme Life assurance up to 4 x annual salary Green travel schemes We are a hybrid working organisation, and we offer a range of flexible working options from day one. We expect most hybrid-working colleagues to spend 40-60% of their time at their dedicated office or location. We will also consider other work arrangements if you wish to work more flexibly or require adjustments due to a disability. Ready to pursue your potential? Apply now. We review applications on an ongoing basis, with a closing date for all applications being 15th May 2025 although we may close it earlier if suitable candidates are identified. Interviews are scheduled to take place shortly after it closes. Please note that successful applicants will be subject to satisfactory background checks including DBS due to working in a regulated industry. Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov.uk website for guidance to understand your own eligibility based on the role you are applying for. Why join us Joining us is your opportunity to pursue potential. You'll belong to a collaborative team that's exploring new and better ways to serve students, teachers and researchers across the globe - for the benefit of individuals, society and the world. Sharing our mission will inspire your own growth, development and progress, in an environment which embraces difference, change and aspiration. C ambridge University Press & Assessment is committed to being a place where anyone can enjoy a successful career, where it's safe to speak up, and where we learn continuously to improve together. We welcome applications from all candidates, regardless of demographic characteristics (age, disability, educational attainment, ethnicity, gender, marital status, neurodiversity, religion, sex, gender identity and sexual identity), cultural, or social class/background. We believe better outcomes come through diversity of thought, background and approach. We welcome applications from people from all backgrounds and communities, actively seeking to employ people from a wide range of different communities. #LI-SW1
Project Manager

Project Manager | Power Transmission Systems Stone, Staffordshire | Permanent | Competitive Salary VIQU has partnered with a business on the cutting edge of operational technology and digital transformation! We're looking for a dynamic Project Manager to join the Energy team! What you'll be doing: - Managing critical projects - Leading cross-functional teams - Delivering projects within demanding timescales while maintaining SCADA system integrity - Overseeing QMS implementation and maintaining ISO standards compliance - Managing stakeholder relationships and conducting progress reviews You'll need: - Proven track record in engineering project management - Proficiency in Microsoft Project and project scheduling methodologies - Experience in leadership or team management - Strong commercial acumen and risk management capabilities - Valid driving license - there'll be some travel to customer sites! It'd be great if you have: - NEC3/4 contract management experience - APM Practitioner Qualification or equivalent - Bid preparation expertise - Knowledge of SCADA/DCS systems We're committed to creating an inclusive workplace where diversity thrives! We actively encourage applications from underrepresented groups and individuals with disabilities. Ready to power up your career? Apply now or email Aaron Chiverton at for more information.
Submit your CV
-
Manage your visibility
Salary, remote work... Define all the criteria that are important to you.
-
Get discovered
Recruiters come directly to look for their future hires in our CV library.
-
Join a community
Connect with like-minded tech and IT professionals on a daily basis through our forum.
Latest forum topics
- Flash Bitcoin and Flash USDT30 minutes ago
- RECLAIM STOLEN CRYPTO REVIEWS. HIRE DIGITAL TECH GUARD RECOVERY3 hours ago
- Any reliable AdSense alternative for publishers with fast approval?13 hours ago
- Which travel ad network gives best ROI?17 hours ago
- Set iPhone Tone2 days ago
- How can businesses identify their target audience for X niche advertising?13 May 2025 11:19
Jobs by city
Jobs by country