> Markdown version of [/jobs/ext/105435-cyber-security-specialist](https://www.wearedevelopers.com/jobs/ext/105435-cyber-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Specialist - **Company:** Croda International Plc - **Location:** Goole, UK - **Contract:** Permanent contract - **Skills:** Cyber Security, Cloud Services, Software Vulnerability Management - **Published:** May 31, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=bcaa14087c6f048c ## About the Role Do you have experience in NIST standards?, Experience working in a cyber security Strong understanding of core security principles and how to apply them in real-world environments Experience supporting or participating in incident response activities Ability to provide clear, practical security guidance to technical and non-technical stakeholders Familiarity with common security technologies (e.g. monitoring platforms, endpoint security, cloud controls, vulnerability tools) Understanding of security frameworks such as NIST CSF, ISO 27001, or similar Pragmatic and risk-aware, with the ability to balance security and business needs Comfortable working across a broad range of technologies rather than specialising in a single area Strong problem-solving and decision-making skills Effective communicator who can influence and collaborate across teams Able to prioritise and manage competing demands in a dynamic environment Desirable (but not essential): Relevant security certifications (e.g. CISSP, CISM, GCIH or similar) Experience in regulated or enterprise-scale environments Exposure to cloud platforms, enterprise IT environments, or security operations tooling Experience in manufacturing environments ## Description This role is a hands-on cyber security generalist responsible for translating Croda's security policies and standards into practical, effective controls across the organisation. You will play a key role in incident response, provide pragmatic day-to-day security guidance to IT and business teams, and help ensure that security controls are implemented in a way that is proportionate, workable, and aligned to commercial priorities. This position suits someone who enjoys solving real-world problems, working across multiple areas of cyber security, and bridging the gap between policy and implementation., Translate information security policies and standards into practical controls, processes, and ways of working Work with IT and business teams to ensure security controls are implemented effectively and proportionately Support ongoing improvement and maturity of security controls across the organisation Incident Response Act as a core member of the cyber incident response capability, coordinating or leading response activities where required Support the full incident lifecycle including detection, triage, containment, eradication, and recovery Work with stakeholders to ensure clear communication and effective resolution during incidents Drive improvements through post-incident reviews and lessons learned Tactical Security Guidance Provide pragmatic, day-to-day security advice to IT, engineering, and business teams Act as a trusted advisor on projects, ensuring security is considered and embedded in a practical and proportionate way Support secure design decisions across infrastructure, applications, and cloud services Operational Security Support vulnerability management activities, including identification, prioritisation, and remediation guidance Help teams understand and address security risks in line with business priorities and risk appetite Investigate and respond to security alerts from internal tools, users, and third parties Contribute to threat intelligence awareness and ensure relevant risks are assessed and acted upon Governance Provide security input into change management (e.g. CAB) and project delivery processes Work with internal teams, vendors, and partners to improve security outcomes Support internal audit activities and remediation of security findings Contribute to the ongoing development of security processes and ways of working What Success Looks Like: Security policies are consistently translated into practical, working controls Incidents are handled effectively with clear coordination and continuous improvement IT and business teams receive clear, actionable, and proportionate security guidance Security controls are understood, adopted, and embedded into day-to-day operations ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)