Cyber Security & Compliance Specialist

Cyber Security & Compliance Specialist

• Protect Critical Infrastructure.
• Shape Security Strategy.
• Drive Business Confidence.
• Black & White Engineering is looking for a Cyber Security & Compliance Specialist to play a key role in strengthening and advancing our global cyber security capability.
• This is an opportunity to take ownership of security operations, governance, compliance, and cyber resilience within a growing international engineering consultancy operating across Europe, the Middle East, Asia, and Australia.
• You will work closely with senior leadership to protect business-critical systems, data, and intellectual property while helping the organisation maintain the highest standards of security and compliance.
• If you enjoy combining hands-on technical expertise with strategic security leadership, this role offers the chance to make a visible impact across a global business supporting some of the world's most complex and mission-critical projects.
• What's in it for you?
• Lead and influence the organisation's cyber security strategy and operational capability.
• Own and continuously improve security operations across cloud, identity, endpoints, applications, and data.
• Drive ISO 27001 compliance and help shape the organisation's long-term security governance framework.
• Work with modern security technologies including Microsoft Sentinel, Microsoft Defender, Entra ID, Azure Security, DLP, and threat intelligence platforms.
• Partner with senior stakeholders, external security providers, clients, and project teams across multiple regions.
• Play a key role in enhancing cyber resilience, business continuity, and risk management practices.
• Contribute to the secure adoption of emerging technologies, cloud platforms, and AI-enabled solutions.
• Influence security culture through awareness initiatives, training programmes, and organisational engagement.

Security Operations & Incident Response

• Lead security monitoring, threat detection, incident response, and SOC governance activities.
• Develop and optimise SIEM use cases, detection rules, alert management, and security monitoring processes.
• Manage MSSP and SOC providers, ensuring service quality, performance, and compliance with agreed SLAs.
• Develop and maintain incident response procedures and coordinate security exercises and testing activities.

Identity, Cloud & Data Security

• Manage identity security controls including MFA, Conditional Access, privileged access management, and identity risk monitoring.
• Strengthen security across Azure environments, endpoints, collaboration platforms, and emerging technologies.
• Implement and oversee data classification, data protection, and access control frameworks.

Vulnerability & Threat Management

• Lead vulnerability management programmes including scanning, remediation, penetration testing, and threat intelligence integration.
• Monitor security posture and emerging cyber threats across the organisation.

Governance, Risk & Compliance

• Maintain and continuously improve the ISO 27001 Information Security Management System (ISMS).
• Support audits, risk assessments, policy development, and regulatory compliance activities.
• Ensure alignment with client, contractual, and regulatory security requirements.

Security Awareness & Assurance

• Deliver security awareness initiatives, phishing simulations, and targeted education programmes.
• Support client security reviews, due diligence activities, tender submissions, and certification requirements.

DevSecOps & Third-Party Security

• Embed security controls within application development, CI/CD pipelines, and cloud deployment processes.
• Manage supplier security assessments and third-party risk assurance activities.

Business Resilience

• Support business continuity, disaster recovery planning, testing, and security governance activities.
• What we're looking for
• Experience leading security operations within a hybrid SOC environment.
• Strong knowledge of SIEM platforms, particularly Microsoft Sentinel or equivalent technologies.
• Expertise in threat detection, incident response, vulnerability management, and security monitoring.
• Hands-on experience with Microsoft Defender, Entra ID, Azure Security, and Data Loss Prevention technologies.
• Strong understanding of Zero Trust architecture, identity security, cloud security, and DevSecOps principles.
• Working knowledge of ISO 27001, SOC 2, risk management frameworks, and audit processes.
• Ability to communicate effectively with technical teams, senior stakeholders, clients, and external partners.
• Experience managing third-party security providers and vendor relationships.

About Black & White Engineering