Reporting to the Information Security Manager, you'll cover a cloud-first estate spanning GCP and AWS, marketplace technology, SaaS and in-house engineering. Security maturity is early, so you'll be standing capabilities up and driving adoption, not maintaining someone else's platform.

Your first priorities:

• Asset & Application Visibility — continuous, automated discovery across the estate, from a standing start
• Zero Trust / ZTNA rollout — identity-aware access across remote and internal services
• Automating identity lifecycle (JML) in Entra ID and key SaaS platforms

Alongside that: SIEM engineering and detection tuning, vulnerability management, DLP, and incident response support — with a strong bias toward automation.

What we're looking for

• An IT infrastructure grounding — networking, endpoint, systems, identity — with a move into security. Infrastructure Engineer, Systems/IT Engineer, Cloud or Platform Engineer backgrounds all welcome
• Hands-on delivery of at least one of the three priorities above from a low-maturity start — through the deployment, tuning and adoption phases, not inheriting it already running
• Experience in a lean security or IT function where you led delivery, rather than one contributor in a large layered team
• The judgement to make sound security calls in ambiguous situations, and the communication skills to influence without authority

Depth of prior security experience matters less than the engineering foundation and the appetite to own something end to end.

Nice to have: Cloudflare (particularly Access/ZTNA); GCP or AWS security; scripting (Python, PowerShell) or Terraform; eComm or marketplace background.