Security Business Partner - IT Operations

A2dominion
London, UK
8 days ago
Apply on www.jobs.service.gov.uk
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£69,922.0 - £76,000.0
Working hours
Regular working hours

Tech stack

Cloud Computing Security Cyber Security Data Stores Multi-Factor Authentication Identity and Access Management Information Technology Operations Network Security Network Architecture Network Segmentation Remote Access Technology Cloud Services User Environment Management
+6 more
Software Vulnerability Management Data Logging Cloud Platform System CIS Benchmarks Firewall Services Module Network Server

Job description

Security Business Partner - IT Operations to join our Cyber Security team. Reporting to the Head of Cyber Security, you’ll work closely with Infrastructure, Networking, End User Computing and Service Desk teams to embed effective security controls across servers, endpoints, networks and cloud-hosted services.

You’ll provide hands-on security oversight and guidance across IT Operations, helping strengthen secure configuration, identity and access management, device protection, network security and infrastructure-layer data protection. You’ll also lead vulnerability management activity across the operational environment, working with internal teams and third-party providers to prioritise and deliver remediation based on risk.

Working alongside the Cyber Security Manager and our managed Security Operations Centre provider, you’ll help ensure effective logging, monitoring and incident response capabilities are in place. You’ll also support operational teams with audit and compliance activity, including Cyber Essentials Plus., * Work with IT Operations teams to implement and embed centrally defined security controls across servers, endpoints, networks and cloud-hosted services

  • Support the adoption and continuous improvement of security baselines, secure build standards and hardened configurations across on-premises and cloud environments
  • Provide security oversight for endpoint and device controls, ensuring agreed standards and operational controls are applied consistently
  • Promote the effective use of identity and access controls, including multi-factor authentication, Conditional Access, identity governance and privileged access controls
  • Provide security input into network architecture and controls, including network segmentation, firewall policies, secure remote access and hybrid connectivity
  • Deliver vulnerability management activity across the operational environment, working with internal teams and third-party providers to drive remediation
  • Report on vulnerability exposure and remediation progress in line with agreed governance and risk frameworks
  • Work with the Service Desk, IT Operations and the managed Security Operations Centre provider to maintain appropriate logging, alerting and response capabilities across infrastructure services
  • Help embed data-platform security controls, including Microsoft Purview, ensuring infrastructure configurations, access controls and monitoring align with data protection and governance requirements
  • Work with Data and Infrastructure teams to strengthen access controls, encryption, auditing and monitoring for sensitive data repositories
  • Provide ongoing security oversight across IT service delivery, helping ensure security controls remain effective and consistently applied

Requirements

Are you an experienced cyber security professional with a strong understanding of IT operations, infrastructure and cloud security? Can you build trusted relationships with technical teams, translate security requirements into practical controls and drive risk-based improvements across complex operational environments? If so, this could be the opportunity for you., * Relevant experience supporting security controls across IT operations, including servers, endpoints, networks and cloud services

  • Experience embedding security controls across hybrid infrastructure, endpoints and operational processes
  • A strong understanding of secure configuration standards and security baselines, with the ability to translate them into effective operational practices
  • Working knowledge of identity and access controls, including multi-factor authentication, Conditional Access and privileged access
  • An understanding of network security controls, including segmentation, firewall policies, remote access and hybrid connectivity
  • Strong stakeholder engagement skills, with the ability to influence technical and operational teams towards practical, risk-based security improvements
  • Familiarity with data-platform and repository security controls and governance tools, such as Microsoft Purview
  • A proactive mindset, with the ability to identify control gaps and use insights from vulnerabilities, incidents and audits to strengthen operational resilience

Benefits & conditions

As an employee of A2Dominion, we want you to feel rewarded and have a choice of flexible benefits, salary exchange benefits, and rewards and discounts that work for you, wherever you are in your life.

We offer a wide range of staff benefits. For this role, these include:

  • 25days’ holiday (Plus Bank Holidays) increasing up to 28 days with 3 years of service

  • Upto 8% contributory pension

  • Flexible working

  • Allpermanent and fixed-term employees receive a generous annual allowance of up to £300 to use towards health and lifestyle benefits for both you and your family

About the company

At A2Dominion, we value diversity, embrace flexibility, and are a family-friendly employer. Everyone belongs here. Join us and help make a lasting difference in the lives of our customers.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.jobs.service.gov.uk
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Defining application, pipeline, and security operations roles

Aarno Aukia · LIVE

2:20 min

Decoupling user data with decentralized web nodes

Angie Jones Angie Jones · World Congress 2023

1:10 min

Exposing sensitive information through partial search logs

Dennis Schulz Dennis Schulz +1 · World Congress 2026 Europe

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · World Congress 2022

3:15 min

Integrating security and financial disciplines into DevOps models

Holly Cummins · LIVE

1:32 min

Understanding fast, accurate, and big data store trade-offs

Philipp Krenn · World Congress 2022

Videos

See all

Related articles

See all