Trouvez votre prochaine offre d’emploi ou de mission freelance Vulnerability management

IT Infrastructure Operations and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. Summary of Skills Required: The following is a summary of the key skills that the Client would like you to bring to the company. Global Enterprise level Infrastructure Management position for the last 5 years, Buy before Build mentality and demonstrable migration of Legacy VM based estates to SaaS and Azure Cloud services platforms, Global Operational team management experience (human resources, strategic delivery, operational service, audit lead for Infra, budget..) Key 3 party operational infrastructure vendor management - i.e. management of managed service partners as a team extension globally, as well as service/solution delivery partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy Infra tech to Azure knowledge/experience, Prior to the last 5 years in Enterprise Management of a global estate/user-base, a demonstrable technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

Mission à Toulouse, télétravail partiel (2/3 jours/semaine) Dans le cadre du renforcement de sa stratégie de Data Security, l'organisation lance un projet de déploiement d'une solution Data Security Posture Management. La mission vise à définir et mettre en œuvre l'architecture de sécurité permettant d'identifier, classifier, protéger et gouverner les données sensibles au sein d'un SI complexe, notamment dans les environnements Microsoft 365, Azure, applications métiers et infrastructures cloud/on-premise. Le consultant interviendra à l'interface entre les équipes cybersécurité, architecture, data, infrastructure, cloud, IAM, conformité et équipes projets, afin de garantir la cohérence de l'architecture cible et la bonne intégration de la solution DSPM dans l'écosystème de sécurité existant. Responsabilités principales 1. Architecture de sécurité de la donnée Définir l'architecture cible de Data Security / DSPM. Cartographier les flux, sources de données, repositories et traitements concernés. Identifier les différents niveaux de sensibilité et les exigences de protection associées. Définir les principes d'architecture : Zero Trust, least privilege, classification, data discovery, data lineage, access governance. Définir les interactions entre DSPM, IAM, DLP, SIEM/SOC, CASB/SSE, M365, Azure et outils de gouvernance. Produire les dossiers d'architecture et les choix techniques associés. 2. Déploiement et intégration Piloter techniquement l'intégration de la solution choisi dans le SI. Identifier les connecteurs et sources de données à intégrer. Définir les prérequis techniques et de sécurité. Concevoir les mécanismes d'accès à la donnée nécessaires au fonctionnement de la solution. Participer au paramétrage des politiques de découverte, classification et exposition des données. Accompagner les phases de POC, pilote puis généralisation. Identifier et traiter les impacts liés aux performances, aux droits d'accès et à la volumétrie. 3. Gouvernance et classification de la donnée Définir ou faire évoluer le modèle de classification des données. Traduire les exigences réglementaires et métiers en règles de sécurité. Définir les critères permettant d'identifier les données sensibles, critiques ou réglementées. Mettre en place une logique de risk-based prioritization des écarts détectés. Contribuer à la définition des politiques de protection et de remédiation. 4. Intégration avec l'écosystème de sécurité Définir les interactions entre DSPM et : Microsoft Purview / M365 Azure IAM / IGA DLP SIEM / SOC outils de vulnerability management CMDB / ITSM solutions de sécurité cloud

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

IT Operations Platforms and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. Summary of Skills Required: Global Enterprise level Infrastructure Management position for the last 5 years, Global team management (human resources, strategic delivery, operational service, audit lead for Infra, budget..) Key - 3 party operational infrastructure vendor management - i.e management of managed service partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy tech to Azure knowledge/experience, Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

IT Operations Platforms and Security Lead In summary the Client is looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor's degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

IT Infrastructure & Systems Manager We are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization's IT infrastructure, enterprise systems, network environment, and end-user computing services. The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Role Description The IT Infrastructure & Systems Manager is a full-time role based in London with a hybrid working arrangement, combining on-site presence with some work from home. This role is responsible for managing and maintaining the organization's core IT infrastructure, including servers, networks, storage, and cloud services. Day-to-day tasks include overseeing system administration, monitoring performance and availability, implementing security best practices, and coordinating backup and disaster recovery processes. The role involves leading and supporting IT operations, resolving complex technical issues, and ensuring that systems, applications, and services remain stable and secure. The IT Infrastructure & Systems Manager will collaborate with internal stakeholders, manage vendors and service providers, contribute to IT strategy and roadmaps, and document procedures, standards, and configuration changes. Qualifications Strong foundation in Information Technology and IT Operations, including infrastructure design, capacity planning, and service management. Hands-on experience with System Administration and Troubleshooting across Windows and/or Linux environments, virtualization, and cloud platforms. Proficiency in Network Security, including firewalls, VPNs, endpoint protection, access control, and security monitoring. Proven ability to manage IT projects, prioritize tasks, and deliver improvements on time and within scope. Excellent communication and stakeholder management skills, with the ability to explain technical concepts to non-technical audiences. Experience leading or mentoring IT team members or support staff is highly desirable. Relevant certifications (e.g., ITIL, Microsoft, Cisco, CompTIA, or cloud certifications) are an advantage. Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking Configure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (e.g., Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (e.g., Paxton) Governance, Documentation & Process Improvement Develop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP's, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SAAS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/ XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Technical Competencies Data analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFS PowerShell scripting SQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management 7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholders This is a hybrid role with 3 days at the office in Central London. Salary for this role will be in the range £60K - £65K. Do send your CV to us in Word format along with your salary and availability.

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3 month assignment. Do send your CV to us in Word format along with your salary and notice period.

Le bénéficiaire souhaite une prestation d'accompagnement dans le cadre de la gestion de sécurité opérationnelle au sein de la production IT du Groupe. La mission concerne les activités de « Security Vulnerability Management ». Les missions sont : Service de Scan de vulnérabilité interne (IVS): - Gestion de l'offre de Détection des vulnérabilités - Paramétrage, installation, suivi et debug de l'infrastructure - Suivi du coverage et des performances du service de scan IVS - Analyse des bulletins de sécurité sur la base des scans IVS et des analyses du CERT - Affectation et suivie des vulnérabilités avec les Product Owner des services concernés - Réalisation des analyses de risques et proposition des plans de remédiations et de contrôles associés Contexte Technique Tanium, Qualys

Senior IT Infrastructure & Systems Manager We are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization's IT infrastructure, enterprise systems, network environment, and end-user computing services. The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking Configure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (e.g., Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (e.g., Paxton) Governance, Documentation & Process Improvement Develop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP's, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SAAS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/ XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Technical Competencies Data analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFS PowerShell scripting SQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management 7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholders This is a hybrid role 3 days in the office in Central London. Salary for this role will be in the range £55K - £60K. Do send your CV to us in Word format along with your salary and availability.

Information Security Architect / Manager Our Client is an International company with offices in Central London. They are looking to bring on-board an Information Security Architect / Manager with at least 5 to 8 years proven expertise within Information Security. The function of the position will be as follows: Assess the current environment against industry standards and trends. Implement robust security and control measures, in line with the global IT team Streamline current processes and execute changes for a secured and optimised technology and data landscape. Subject matter expert in application and network security, with operational experience of managing security operations, SIEM solutions, incident, and response management. Collaborate to develop the Infosec strategy and associated operating model. Conduct an in-depth security risk assessment across the technology stack and provide end-to-end mitigation steps for resilience. Working closely with key stakeholders to ensure compliance with security policies, and promotion of strong information security culture. Provide weekly governance, risk and compliance reports utilising key risk and key performance indicators and metrics. Skills/Competencies Required: Experience developing information security policy, process and procedure design and implementation. Excellent troubleshooting, problem solving, and root-cause analytical (RCA) skills. Good working knowledge of Cisco Meraki and associated technologies. Practical knowledge of Continual Service Improvement (CSI) methodologies. Vulnerability management and assessment. Intrusion detection and prevention analysis / frameworks. Solid exposure to cloud based applications security and provisioning. Experience in writing policy, process, and standard playbooks. Experience in SOC and SIEM platforms Excellent communications skills in framing and messaging issues of highly technical nature, into meaningful and relevant information for a varied audience. Excellent analytical skills, with an ability to manage multiple projects under tight guidelines. Experience with common Information security frameworks such as ISO, ITIL, and COBIT. Information security professional qualifications (CISMP, CISSM, SSCP, CAP..etc) ** Occasional travel to other sites may be required. This is 6 month contract assignment based in Central London. Rate will be circa £500 per day. Please do send your CV to us in Word format along with your daily rate and availability.

Job Title: Cyber Security Specialist Location: Doncaster Salary: £70,000 - £75,000 per year Job Type: Full Time, 12 Month Fixed Term Contract At DB Cargo UK, we keep the UK moving. As the UK's leading rail freight operator, we provide safe, reliable and sustainable rail logistics services that support businesses, communities and the wider economy. We are investing in our technology, resilience and cyber security capability and are looking for an experienced Cyber Security Specialist to join us on a 12 month fixed term contract. This is a key role within our IT Governance & Security function. Acting as DB Cargo UK's cyber security subject matter expert, you will lead cyber security governance, operations, compliance and resilience activities across a diverse portfolio of business-critical applications, cloud services and operational railway systems. You will help ensure cyber security enables business performance, supports innovation and protects our people, customers and operations. Please note that successful candidates will need to go through national security vetting. What You Will Be Doing: Lead and continually improve cyber security governance, risk, compliance and resilience activities across the organisation. Own and maintain the Information Security Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments. Lead information protection, DLP, retention, eDiscovery and security assurance activities. Support customer assurance, procurement reviews, supplier risk assessments and tender submissions. Provide cyber security leadership for ERTMS and ETCS transformation programmes. Deliver cyber awareness initiatives and senior leadership reporting. What We Are Looking For: Demonstrable experience in cyber security, information security or IT risk management. Experience of security operations, incident response and security monitoring. Knowledge of governance, risk management, compliance frameworks and assurance processes. Experience securing cloud, endpoint and identity platforms, ideally within Microsoft environments. Excellent stakeholder engagement and communication skills. Ability to balance security, operational requirements and commercial priorities. Degree in IT, Cyber Security or a related field is desirable. CISSP, CISM, ISO27001 or Microsoft Security certifications are advantageous. Why Join Us? You will have the opportunity to shape cyber security strategy and influence decision making across a critical national infrastructure organisation. We are looking for someone who combines strong technical expertise with sound commercial awareness, recognising that the best cyber security solutions protect people, support operational delivery and enable long-term business success. What's In It For You? Defined Contribution Pension Scheme with employer contributions of up to 10%. Health Cash Plan Scheme. Employee Benefits Portal with discounts across a wide range of retailers and services. Annual Leave Purchase Scheme. Cycle to Work Scheme. Charge & Go EV Vehicle Scheme. Employee Recognition Programme. Access to learning, development and career progression opportunities. Our Commitment: DB Cargo UK is committed to creating an inclusive workplace where everyone is valued, respected and able to thrive. We welcome applications from candidates of all backgrounds and are committed to building a diverse workforce that reflects the communities we serve. Please click APPLY to send your CV for this role. Candidates with experience of: Cyber Security Specialist, Cybersecurity Specialist, Information Security Specialist, Cyber Security Analyst, Senior Cyber Security Analyst, Information Security Analyst, Senior Information Security Analyst, Cyber Security Engineer, Information Security Engineer, Cyber Security Consultant, Information Security Consultant, Cyber Security Manager, Information Security Manager, Cyber Security Governance Specialist, Information Security Governance Analyst, Cyber Security Risk Analyst, may also be considered for this role.

Qualification & Experience Required Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk experience highly desirable). MS Sentinel is also now being introduced. Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark, NPCap, etc.). Experience with (ITSM) Service Management Systems (Remedy, Service Now). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti-virus, vulnerability management, and encryption. Familiarity with GDPR, Data Protection legislation, and security governance frameworks. Ability to think critically under pressure and respond effectively to fast-moving security incidents. Scripting or query experience is highly desirable (SPL, KQL, etc.). Good communication skills from previous roles. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.