UK-based construction group delivering building, infrastructure and specialist services across public and private sectors.
Support compliance with relevant frameworks and regulations, including Cyber Essentials, ISO 27001, UK GDPR, and NIST best practices. Assist in internal and external audits, ensuring evidence and documentation are maintained to demonstrate ongoing compliance and continuous improvement.
Lead or support security incident investigations to determine the scope, root cause, and business impact of events such as breaches or cyberattacks. Coordinate containment and remediation activities with internal and external stakeholders. Maintain thorough incident documentation, produce post-incident reports, and communicate findings and trends to management.
This role reports into and supports the Head of Information Security & Compliance, driving the operational execution of the security programme while mentoring others and managing third-party providers. This role is pivotal in safeguarding our organisation’s digital assets, infrastructure, and sensitive data against evolving cyber threats. You will assist technical security initiatives, support compliance efforts, and collaborate across departments to embed security into our operations and development lifecycle.
Administer and optimise key security technologies, including Microsoft Azure, Entra ID, Microsoft 365, Microsoft Defender stack, email security solutions and endpoint protection solutions (AV/EDR). Oversee configuration changes, ensure tools are effectively integrated, and monitor identity and access management to detect potential misuse of credentials or privileges.
Stay informed on emerging threats, vulnerabilities, and security trends. Proactively recommend enhancements to tools, processes, and controls to strengthen the organisation’s overall security posture. Maintain your own professional knowledge through ongoing learning and certification.
Assess the organisation’s overall security posture by identifying vulnerabilities and evaluating potential risks. Conduct regular security assessments, vulnerability and maturity scans, and reporting to highlight weaknesses that could be exploited. Evaluate the impact of emerging and zero-day threats, advising on mitigation and remediation strategies.
Take ownership of daily security operations, working closely with the outsourced SOC / SIEM provider to monitor networks, systems, and applications for indicators of compromise or malicious activity.
Contribute to the development, review, and implementation of security policies, standards, and procedures. Collaborate with business units to ensure alignment with organisational and regulatory security requirements.
Promote a strong security culture by supporting the delivery of awareness campaigns and training programmes. Design and execute phishing simulations and other cyber-security exercises, and assist with the creation and maintenance of training materials to improve staff understanding of information security best practices.
Contribute to day-to-day operational tasks such as reviewing quarantined emails, mentoring junior team members, handling escalated security tickets, attending meetings, and supporting or leading assigned projects.
ISO / IEC 27001 Auditing experience (highly desirable)
Excellent documentation, communication, and stakeholder engagement skills.
Adaptable, proactive, and able to manage changing priorities in a fast-paced environment.
Experience planning or coordinating penetration testing and managing remediation activities.
Minimum 5 years’ experience in information security or related technical roles.
Security Awareness and Training
Strong understanding of Microsoft 365, Azure, and related cloud security controls (AWS/GCP exposure advantageous).
Hands-on experience with incident response, vulnerability management, and risk assessment.
Knowledge of UK data protection regulations (UK GDPR, DPA 2018).
Experience in regulated industries (e.g., finance, healthcare, government).
Proven track record managing or collaborating with outsourced SOC and SIEM providers.
Security Tools and Technology Management
This role requires the successful candidate to undergo and obtain BPSS and SC Clearance as a condition of employment.
Applicants must be based in the UK and have the legal right to work in the UK at the time of application
Galliford Try are seeking a highly skilled and experienced Senior Information Security Engineer to join our cyber security team. The role will provide hands-on technical expertise in the management of information security operations, ensuring the organisation’s security posture is maintained and aligned with strategic objectives.
Skilled in maintaining and supporting an ISMS aligned to ISO 27001 and Cyber Essentials.
Pension scheme and private healthcare.
Positive learning and growing environment
Generous holiday allowance.
Training and certification support.
Competitive salary and performance-based bonuses.
Professional development and education
Flexible working arrangements.
Health and wellbeing programs