> Markdown version of [/jobs/ext/2257413-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/2257413-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Engineer - **Company:** Hellios Information - **Location:** Cumnor, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, Systems Development Life Cycle, Risk Management Information Systems, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Google Cloud, Data Classification, Cyber Threat Analysis, Information Technology, Devsecops, Security Orchestration, Automation & Response - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815089697-cyber-security-engineer ## About the Role * Bachelor's in Information Security, Computer Science, Engineering, or related field. * Relevant professional certifications such as: + CISSP + CISM + CRISC + CISA + ISO 27001 Lead Implementer/Auditor, * 10+ years in information security, with at least 5 years in a cybersecurity engineering role. * Experience operating in regulated environments (e.g., financial services, healthcare, telecoms). * Strong knowledge of cybersecurity regulatory frameworks. * Proven experience leading incident response at enterprise scale. * Experience reporting to Board-level stakeholders. Technical Expertise * Security frameworks: ISO 27001, NIST CSF, COBIT * Cloud security (AWS, Azure, GCP) * Identity & Access Management (IAM) * SIEM, SOAR, EDR/XDR platforms * Threat intelligence and vulnerability management * Data protection technologies * Secure SDLC and DevSecOps practices, * Strategic thinker with strong commercial awareness * Excellent communication and stakeholder management skills * Strong leadership and team development capability * High integrity and ethical standards * Crisis management expertise * Ability to influence at Board and Executive level ## Description Location Kemp House, Chawley Park, Cumnor, Oxford Job Title Cyber Security Engineer Reporting To Chief Information Security Officer Job Summary To support and evolve our web-based Supplier Information & Risk management systems and business offerings. The Cyber Security Engineer is responsible for establishing and maintaining the enterprise vision, strategy, and programme to ensure information assets, technologies, and data are adequately protected. This role will lead the organisation's cybersecurity strategy in alignment with Irish and EU regulatory requirements including GDPR, NIS2 Directive, DORA (where applicable), and Central Bank of Ireland guidance (if regulated). The Cyber Security Engineer will work closely with executive leadership and the Board to manage cyber risk and ensure resilience across the organisation. Key Responsibilities * Cybersecurity Strategy & Governance + Develop, implement, and maintain the enterprise-wide information security strategy. + Align security initiatives with business objectives and risk appetite. + Establish and maintain security governance frameworks (e.g., ISO 27001, NIST CSF, Cyber Essentials). + Report regularly to the Executive Team and Board on cybersecurity posture and risk. * Risk Management & Compliance + Lead enterprise cyber risk assessments and mitigation programmes. + Ensure compliance with: o GDPR and Data Protection Commission guidance o NIS2 Directive (where applicable) o DORA (for financial services organisations) + Oversee third-party and supply-chain security risk management. + Lead audit engagements and regulatory inspections related to cybersecurity. * Security Operations & Incident Response + Oversee security operations including SOC, threat detection, and vulnerability management. + Develop and maintain incident response and crisis management plans. + Lead response to major security incidents and coordinate with regulators and law enforcement where necessary. + Ensure business continuity and disaster recovery capabilities are robust and tested. * Architecture & Engineering Oversight + Provide security architecture oversight for cloud, on-premises, and hybrid environments. + Ensure secure software development practices (DevSecOps). + Oversee identity and access management (IAM) and zero-trust initiatives. * Data Protection & Privacy + Work closely with the Data Protection Officer (DPO) to ensure technical and organisational measures are appropriate. + Ensure strong data classification, encryption, and retention controls. * Leadership & Culture + Develop cybersecurity awareness programmes across the organisation. + Foster a strong security-first culture. Required Experience & Qualifications * Bachelor's in Information Security, Computer Science, Engineering, or related field. * Relevant professional certifications such as: + CISSP + CISM + CRISC + CISA + ISO 27001 Lead Implementer/Auditor Experience * 10+ years in information security, with at least 5 years in a cybersecurity engineering role. * Experience operating in regulated environments (e.g., financial services, healthcare, telecoms). * Strong knowledge of cybersecurity regulatory frameworks. * Proven experience leading incident response at enterprise scale. * Experience reporting to Board-level stakeholders. Technical Expertise * Security frameworks: ISO 27001, NIST CSF, COBIT * Cloud security (AWS, Azure, GCP) * Identity & Access Management (IAM) * SIEM, SOAR, EDR/XDR platforms * Threat intelligence and vulnerability management * Data protection technologies * Secure SDLC and DevSecOps practices Competencies & Attributes * Strategic thinker with strong commercial awareness * Excellent communication and stakeholder management skills * Strong leadership and team development capability * High integrity and ethical standards * Crisis management expertise * Ability to influence at Board and Executive level The Company Hellios is a leading supplier information and risk management company operating in the financial services and defence industry. Established with the primary objective to benefit major blue-chip companies and their suppliers, Hellios provides a single streamlined approach by sharing data across an industry community in areas including modern slavery, cyber security and GDPR. Since its inception as a startup in 2012, Hellios has experienced rapid growth, expanding to over 145 employees and establishing offices across the UK, The Netherlands, Spain, and Ireland. The Company is continuing to grow quickly, and a key part of this role is to prepare the Company for further growth. At Hellios, we are guided by an ethos centred on delivering unparalleled service quality and innovative technology. Our commitment rests upon nurturing enduring, sustainable relationships with both our buyer and supplier clientele. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)