Job Search

Cyber Security Assurance Manager

Contract: 6 Months
Location: London (1 day per week onsite / flexible)
Day Rate: Competitive
Start: ASAP

We're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.

This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk functions.

The Opportunity

You will own the planning and delivery of a risk-based technical assurance programme, providing independent oversight of security controls across infrastructure, cloud, identity, applications, vulnerability management, data security and incident response capabilities.

The role combines technical cyber security expertise, assurance methodology, stakeholder engagement and leadership. You'll engage with senior business and technology leaders, deliver actionable reporting, challenge control weaknesses, and drive continuous improvement across the control environment.

Key Responsibilities

Lead the delivery of a large-scale cyber technical assurance programme.Manage and mentor a team of Technical Assurance Analysts.Conduct independent second-line assessments of cyber security controls and control effectiveness.Review technical evidence, validate findings and assess both design and operating effectiveness of controls.Oversee control testing activities across cloud, infrastructure, networks, applications and identity environments.Drive continuous controls monitoring, automated assurance and data-driven reporting capabilities.Track remediation activities and ensure significant findings are appropriately managed and escalated.Develop executive-level reporting, dashboards and cyber risk metrics.Partner with Cyber Security, Internal Audit, Risk, Compliance, Legal and Technology teams to improve security outcomes.Act as a subject matter expert on cyber assurance, risk and control effectiveness.

Required Experience

Strong background in Cyber Security Assurance, Technology Risk, IT Audit, Security Testing or Cyber Risk Management.Experience leading assurance reviews within large, complex enterprise environments.Deep understanding of second-line assurance and control effectiveness assessment.Experience assessing technical controls across cloud, infrastructure, identity, networks and applications.Strong working knowledge of frameworks such as:ISO 27001NIST Cybersecurity FrameworkNIST 800-53CIS ControlsMITRE ATT&CKExperience producing board-level reporting and translating technical findings into business risk.Excellent stakeholder management skills, with the ability to challenge constructively and influence senior leaders.

Desirable Experience

Continuous Controls Monitoring (CCM) platforms.Automated assurance and evidence collection.PowerShell, Python or API-based automation.Cloud security assurance and modern identity controls.CISSP, CISM, CISA, CRISC, CCSP or ISO 27001 Lead Auditor certifications.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

AI Security Engineer

Job Information

Job Title: AI Security Engineer
Type: Contract 1 year renewable
Sub-Business Unit: Technology Assurance
Location / Coverage: Abu Dhabi

Job Purpose

Engineer and validate security controls for AI/ML and agentic AI services used by the organization, including Azure AI Services, Azure OpenAI, Azure Machine Learning, AI-enabled applications, and third-party AI platforms. The role protects sensitive and regulated data, identities, models, APIs, integrations, and AI infrastructure throughout the AI lifecycle.

Primary Responsibilities

Maintain an inventory of AI/ML assets, models, inference endpoints, agents, connectors, plugins, training pipelines, and supporting infrastructure.Perform security reviews for Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved third-party AI services.Assess authentication, authorization, managed identities, service principals, API keys, secrets, network exposure, and rate-limiting controls.Implement and validate least-privilege RBAC, private endpoints, firewall rules, network isolation, encryption, and secure secret storage.Assess AI data flows for PII/PHI and confidential data exposure across prompts, outputs, RAG repositories, connectors, and training datasets.Configure or validate content safety filters, prompt guardrails, custom blocklists, and abuse-prevention controls.Test for prompt injection, jailbreaks, insecure output handling, excessive agency, data leakage, model misuse, and integration abuse.Review model registry permissions, model/version integrity, dependency provenance, and AI supply-chain security.Develop AI-specific logging, monitoring, and detection use cases for anomalous API activity, prompt attacks, privilege misuse, and data exposure.Support Shadow AI discovery and enforcement using approved CASB/SWG, endpoint, and cloud controls.Conduct threat modelling and security testing for AI use cases before production release and following material changes.Track AI security findings, risks, exceptions, and remediation actions to closure; support risk acceptance where required.Produce AI security assessment reports, data exposure findings, control validation evidence, and maturity recommendations.Coordinate with AI Governance, Privacy, Legal, Data, Cloud, AppSec, SOC, and business owners.

Secondary Responsibilities

Support development of secure AI patterns, guardrails, standards, and reusable review checklists.Contribute to AI incident response playbooks and red-team exercises.Review third-party AI vendors, data processing terms, retention, and residency controls.Maintain awareness of NIST AI RMF, OWASP Top 10 for LLM Applications, ISO/IEC 42001, and emerging AI threats.

Any Other Responsibilities

Any other responsibilities assigned by the Line Manager in line with business and client requirements.

Skills / Certifications

Microsoft Azure security/AI certifications such as SC-100, AZ-500, AI-102 or equivalentCISSP, CCSP, or CISM (preferred)AI security or ML security training; OWASP LLM knowledgeCKS/Kubernetes or DevSecOps certification (advantage)

Soft Skills

Excellent written and verbal communicationAnalytical thinking and problem solvingAttention to detail and qualityAccountability and ownershipTeamwork and stakeholder collaborationAbility to prioritize and meet deadlinesAbility to work at client sites and provide after-hours support when required

Minimum Work Experience

3+ years of cybersecurity engineering experience, including cloud security, application security, or data security, with practical exposure to AI/ML or agentic AI platforms.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or equivalent.Postgraduate qualification in Information/Cyber Security is an advantage.

Preferred Skill Set

Azure AI/OpenAI/ML security and cloud-native controlsIAM, managed identities, API security, secrets, and network isolationAI threat modelling, prompt injection testing, and secure RAG patternsDSPM, DLP, classification, and regulated data protectionPython/PowerShell, CI/CD, and security automation

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Product Security Analyst - Vulnerability Management

Department

Software Technology

Reports to

Business Information Security Officer (BISO)

Role Summary

We are seeking a Product Security Analyst - Vulnerability Management to operate and continuously improve the vulnerability management lifecycle across software products, cloud environments, and supporting technology platforms.

The role consolidates security findings, validates and prioritizes exposure using technical and business context, coordinates accountable remediation, and provides reliable product security posture reporting.

The successful candidate is technically credible, analytical, and highly structured, working closely with product and engineering teams to reduce risk rather than merely administer findings. This is a product security and vulnerability management role, not a 24/7 SOC monitoring position.

Responsibilities

Operate the end-to-end vulnerability management process across applications, APIs, cloud services, infrastructure components, containers, and third-party dependencies.Consolidate findings from vulnerability scanners, penetration tests, application security tools, cloud security services, vendor advisories, and enterprise cybersecurity sources.Validate findings, remove duplicates and false positives, and enrich records with asset ownership, exposure, exploitability, and business context.Prioritize vulnerabilities using severity, known exploitation, reachability, internet exposure, compensating controls, product criticality, and customer impact.Assign accountable remediation owners, agree target dates, track progress, challenge overdue items, and verify closure evidence.Maintain an accurate inventory and mapping of covered products, repositories, services, and technical owners in coordination with Product, Architecture, and Platform teams.Develop and maintain vulnerability dashboards, heatmaps, KRIs, and aging metrics for security leadership, business leadership, product teams, and governance forums.Identify systemic weakness patterns and recommend preventive actions, platform improvements, secure configurations, and remediation campaigns.Support risk treatment and exception workflows by preparing evidence, documenting residual exposure, and escalating material or overdue risks.Coordinate operational follow-up from penetration tests, audits, incidents, external disclosures, and security advisories.Perform focused vulnerability assessments and technical validation using approved tools and methods.Monitor emerging vulnerabilities and threat intelligence relevant to the technology stack and initiate rapid assessment when urgent exposure is suspected.Use CISA Known Exploited Vulnerabilities and other verified threat intelligence as inputs to risk-based vulnerability prioritization.Use EPSS as one empirical exploitation likelihood signal alongside CVSS, reachability, exposure, product criticality, and customer impact.Support Cyber Resilience Act reporting readiness through rapid assessment of active exploitation, evidence collection, and escalation to security leadership.Maintain visibility of product versions, declared support periods, and end-of-support status to inform vulnerability treatment and customer obligations.Use SBOM and dependency data to determine which products, versions, and services contain affected components and accelerate impact assessment.Support security advisories, customer notifications, and coordinated vulnerability disclosure with Product Management, Legal, Quality, and Security stakeholders.Support audit, regulatory, and ISO 27001 evidence requirements related to vulnerability management and operational security controls.Collaborate with Application Security, DevSecOps, Platform Engineering, and Security teams on complex findings, scanning coverage, and automation.Continuously improve workflows, service levels, data quality, and reporting to drive measurable exposure reduction.

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.Several years of experience in vulnerability management, vulnerability analysis, security operations, cloud security, or a related technical cybersecurity role.Hands-on experience with vulnerability scanning and security posture tools across applications, cloud, or infrastructure environments.Strong understanding of CVE, CVSS, common vulnerability classes, exploitability, attack paths, and risk-based prioritization.Ability to validate findings using logs, configurations, source information, command-line tools, and targeted technical testing.Knowledge of cloud services, operating systems, networks, containers, identity and access management, APIs, and software dependencies.Experience managing remediation workflows, security exceptions, evidence, and service-level reporting.Strong data analysis skills and experience producing dashboards, metrics, and concise management reporting.Excellent analytical, organizational, and problem-solving skills with strong attention to data quality.Ability to communicate clearly with engineers, product owners, and senior stakeholders and drive accountable follow-through.Strong written and verbal communication skills in English.High level of integrity, judgment, and commitment to protecting customers and software assets.Ability to travel internationally when required for key workshops, assessments, or team collaboration.Ability to collaborate effectively across global time zones with teams distributed across multiple continents.

Preferred Qualifications

Experience with tools such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender for Cloud, AWS Security Hub, Snyk, SonarQube, or equivalent.Knowledge of CISA Known Exploited Vulnerabilities, EPSS, NIST guidance, CIS Benchmarks, and ISO 27001-aligned vulnerability management practices.Experience with scripting, APIs, workflow automation, and reporting tools such as Power BI.Familiarity with application security tooling and software development concepts sufficient to collaborate effectively with engineering teams.Experience supporting incident response, coordinated vulnerability disclosure, or penetration testing follow-up.Relevant certifications such as Security+, CySA+, GSEC, or equivalent.Familiarity with engineering or technical software environments is advantageous

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

SC Cleared OT Cyber Security Consultant

Outside IR35 | 6-12 Month Contract | UK Based

Contract DetailsInitial 6-12 month contract.Outside IR35.Active SC Clearance required.Single-stage interview process.The Opportunity

We are supporting a major Operational Technology (OT) Cyber Security programme within a critical infrastructure environment and are seeking an experienced OT Cyber Security Consultant to conduct assessments and inspections across operational sites throughout the UK.

The successful consultant will be responsible for reviewing OT environments, assessing security maturity against recognised industry standards, identifying risks and providing practical recommendations to improve resilience across industrial control systems.

This role would suit someone with a strong OT cyber background who is comfortable engaging with both engineering teams and senior stakeholders.

Key ResponsibilitiesConduct OT cyber security assessments and inspections across operational sites.Assess OT environments against recognised standards and frameworks, including IEC 62443.Review OT architectures, network segmentation and security controls.Assess Industrial Control System (ICS) environments, including PLC and SCADA technologies.Identify cyber security risks, vulnerabilities and areas for improvement.Produce clear assessment reports and remediation recommendations.Engage with technical, engineering and operational stakeholders.Review security controls, governance arrangements and operational processes.Support the development of OT security improvement plans and roadmaps.Provide practical, commercially focused cyber security advice.Essential ExperienceStrong Operational Technology (OT) Cyber Security experience.Previous experience conducting OT security assessments, audits or inspections.Strong knowledge of:IEC 62443ICS / Industrial Control SystemsSCADA environmentsPLC technologiesIndustrial networkingOT architecture and segmentationOT cyber security controls and best practicesStrong stakeholder engagement and consulting skills.Excellent report writing and documentation skills.Current SC Clearance.Desirable ExperienceExperience within Energy, Utilities, Manufacturing, Transport or other critical infrastructure environments.Exposure to Oil & Gas environments.Experience supporting OT security improvement or transformation programmes.Knowledge of OT operating models, governance and procurement approaches.LocationUK based.Occasional travel to operational sites as part of planned assessment activities.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

GCS is acting as an Employment Business in relation to this vacancy.

Read less

DevOps / Automation Engineer

We're looking for a DevOps / Automation Engineer to support the design, development, implementation, and ongoing support of production software systems. This role is a strong fit for someone who enjoys automation, deployment, troubleshooting, and working closely with software engineering and QA teams.

What You'll Do

Design, develop, implement, and analyze technical products and systems

Troubleshoot, diagnose, and resolve production software issues

Develop monitoring solutions and perform ongoing software maintenance

Automate software deployment and operational processes

Develop standards and procedures for product quality and release readiness

Recommend improvements to testing techniques, development processes, and system reliability

Provision and manage applications across virtual and cloud infrastructure

Work closely with QA and Software Engineers to support continuous delivery of critical systems

Support deployment and network operations through scripting and automation

What We're Looking For

Bachelor's degree in Engineering or a related field

3-6 years of relevant engineering, DevOps, systems, or infrastructure experience

Experience with automation tools such as Puppet, Chef, or Ansible

Experience with Jenkins and continuous integration

Experience with GitHub, including branching and tagging strategies

Experience with Docker and Kubernetes

Experience working with systems and IT operations

Strong scripting and coding capabilities

Experience with virtual and cloud infrastructure; AWS and OpenStack preferred

Ability to work with a variety of open-source technologies and tools

Strong communication and relationship-building skills with QA and Software Engineering teams

Ideal Background
Candidates coming from DevOps, infrastructure engineering, systems engineering, deployment engineering, or automation-focused roles are encouraged to apply.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Head of Cybersecurity The Opportunity

We are seeking an experienced Head of Cybersecurity to join a senior leadership team within a large, complex organisation operating in a highly regulated and rapidly evolving digital environment. The successful candidate will work closely with senior stakeholders across a broad range of organisations and industries, helping shape strategic approaches to emerging cybersecurity, technology and resilience requirements.

The Role

The Head of Cybersecurity will lead and develop a multidisciplinary team of experienced engagement and policy professionals. The role will involve significant engagement with senior stakeholders across industry, technology, public and private sector organisations, professional networks and other key stakeholder groups.

A key part of the position will be monitoring and analysing the evolving cybersecurity and resilience landscape, providing strategic advice to senior leadership and contributing to the development and implementation of organisational policies, frameworks and initiatives.

This is an opportunity for an experienced cybersecurity leader to play a key role in shaping how organisations understand and respond to evolving cybersecurity and digital resilience requirements.

Key Responsibilities

Lead and manage stakeholder engagement activities across cybersecurity, technology and resilience programmes.

Develop and maintain strong relationships with senior stakeholders across industry, technology and wider organisational networks.

Represent the organisation at relevant cybersecurity forums, working groups, conferences and strategic engagements.

Lead awareness initiatives, events and communications relating to cybersecurity and digital resilience.

Provide expert analysis and advice on emerging cybersecurity, technology, regulatory and policy developments.

Monitor developments across the cybersecurity and resilience landscape and assess their potential organisational impact.

Desired Experience

Significant senior-level experience within cybersecurity, technology, policy, regulation, risk or a closely related discipline.

Proven experience leading stakeholder engagement, policy development or strategic programmes within a complex organisation.

Strong leadership experience, including managing and developing multidisciplinary teams

Strong understanding of evolving cybersecurity and digital resilience legislation, standards and regulatory requirements.

Experience working within a regulated, highly governed or complex organisational environment.

Experience leading large-scale cybersecurity, technology, regulatory or organisational change initiatives.

Experience developing, managing or responding to consultation and engagement programmes.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Role- Senior Security Automation Engineer
Type- Contract
Duration- 12+ months
Location- Mt. Laurel, NJ

Overview

Seeking a Senior Security Automation Engineer to build AI-driven security automation solutions within a Cyber Security Operations Center (CSOC). This is a hands-on engineering role focused on developing intelligent agents and automated workflows that improve threat detection, investigations, and incident response.

Key Responsibilities

Design, develop, deploy, and maintain production-grade security automation and AI-powered workflows.Build AI agents capable of accessing security data, using tools, maintaining context, and executing multi-step tasks.Automate processes across:Threat IntelligenceThreat HuntingDetection EngineeringSecurity InvestigationsIncident ResponseSecurity Data AnalysisApply advanced AI techniques including:Tool CallingRetrieval-Augmented Generation (RAG)Structured GenerationPlanning & ReflectionVerificationModel RoutingMulti-Agent CoordinationDesign memory, context management, task recovery, escalation, and human approval mechanisms.Reduce false positives and operational noise while improving response speed and consistency.Develop security controls and guardrails for AI systems.Create testing and evaluation frameworks to measure AI accuracy, reliability, security, and performance.Collaborate with security and engineering teams to translate operational challenges into scalable automation solutions.Take solutions from prototype to production and continuously optimize them.

Required Qualifications

Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related field (or equivalent experience).8+ years of experience in software engineering, security engineering, automation, AI/ML, or related technical roles.Strong hands-on software development experience.Experience building production-grade automation or AI-powered applications.Experience with LLMs, Generative AI, or Agentic AI technologies.Strong programming skills, particularly in Python or other modern languages.Experience integrating APIs, tools, data sources, and external systems.Understanding of AI agent concepts including tool use, retrieval, planning, memory, context management, and verification.Strong analytical, problem-solving, and scalable system design skills.

Preferred Qualifications

Experience building agentic AI systems or autonomous security workflows.Experience with SOAR, SIEM, security automation, threat intelligence, threat hunting, detection engineering, or incident response.Knowledge of RAG, vector databases, embeddings, semantic search, and knowledge retrieval.Experience with multi-agent architectures, AI orchestration frameworks, and AI evaluation/testing frameworks.Familiarity with Kubernetes, cloud platforms, microservices, APIs, and distributed systems.Experience implementing human-in-the-loop controls and approval workflows.Proven ability to take AI solutions from proof of concept (POC) to production deployment.Understanding of enterprise AI security controls and best practices.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Key ResponsibilitiesDesign, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.Build intelligent agents capable of securely accessing security data, invoking approved tools, maintaining context, and executing multi-step workflows.Develop automation that can assist with:Threat intelligenceThreat huntingDetection engineeringSecurity investigationsIncident responseSecurity data analysisApply modern AI and automation techniques, including:Tool callingRetrieval-augmented generation (RAG)Structured generationPlanningReflectionVerificationModel routingMulti-agent coordinationDesign mechanisms for memory, context management, task recovery, escalation, and human approval.Build automation designed to reduce operational noise and false positives while improving the speed and consistency of security response.Develop appropriate security controls and guardrails around AI agents and automated workflows.Create evaluation and testing strategies to measure the accuracy, reliability, security, and performance of automation.Evaluate emerging AI models, agent frameworks, automation platforms, and orchestration technologies.Prototype new capabilities and transition successful solutions into reliable production environments.Work closely with threat intelligence analysts, threat hunters, detection engineers, incident responders, and security-data engineers to understand operational challenges.Translate security requirements and operational processes into scalable technical solutions.Develop clean, maintainable, scalable, and well-documented code.Troubleshoot, monitor, and continuously improve automation running in production.Participate in architecture, design, code reviews, and technical decision-making.Identify opportunities to automate repetitive or time-sensitive security processes and improve overall SOC efficiency.Required QualificationsBachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.8+ years of experience in software engineering, security engineering, automation engineering, AI/ML engineering, or a related technical field.Strong hands-on software development experience.Experience building automation solutions or AI-powered applications for production environments.Experience working with Large Language Models (LLMs), generative AI, or agentic AI technologies.Strong programming skills in Python and/or another modern programming language.Experience integrating applications with APIs, tools, data sources, and external systems.Understanding of AI agent concepts such as tool use, planning, context management, retrieval, memory, and verification.Experience designing and implementing reliable, scalable technical solutions.Strong analytical and problem-solving skills.Ability to work with both software engineers and security professionals to translate operational challenges into technical solutions.Preferred QualificationsExperience building agentic AI systems or autonomous security workflows.Experience with security automation, SOAR, SIEM, or security orchestration platforms.Experience with cybersecurity operations, threat intelligence, threat hunting, detection engineering, or incident response.Experience with RAG, vector databases, embeddings, semantic search, or knowledge retrieval.Experience with multi-agent architectures and AI orchestration frameworks.Experience developing AI evaluation frameworks, testing harnesses, or benchmarking processes.Experience with Kubernetes, cloud platforms, microservices, APIs, and distributed systems.Experience implementing human-in-the-loop controls and approval workflows.Experience taking AI/automation solutions from proof of concept through production deployment.Familiarity with security controls and best practices for deploying AI systems in enterprise environments.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

GCS is acting as an Employment Business in relation to this vacancy.

Read less