Cyber Security & Compliance Specialist

Cyber Security & Compliance SpecialistProtect Critical Infrastructure. Shape Security Strategy. Drive Business Confidence.

Black & White Engineering is looking for a Cyber Security & Compliance Specialist to play a key role in strengthening and advancing our global cyber security capability.

This is an opportunity to take ownership of security operations, governance, compliance, and cyber resilience within a growing international engineering consultancy operating across Europe, the Middle East, Asia, and Australia.

You will work closely with senior leadership to protect business-critical systems, data, and intellectual property while helping the organisation maintain the highest standards of security and compliance.

If you enjoy combining hands-on technical expertise with strategic security leadership, this role offers the chance to make a visible impact across a global business supporting some of the world's most complex and mission-critical projects.

What's in it for you?

Lead and influence the organisation's cyber security strategy and operational capability.

Own and continuously improve security operations across cloud, identity, endpoints, applications, and data.

Drive ISO 27001 compliance and help shape the organisation's long-term security governance framework.

Work with modern security technologies including Microsoft Sentinel, Microsoft Defender, Entra ID, Azure Security, DLP, and threat intelligence platforms.

Partner with senior stakeholders, external security providers, clients, and project teams across multiple regions.

Play a key role in enhancing cyber resilience, business continuity, and risk management practices.

Contribute to the secure adoption of emerging technologies, cloud platforms, and AI-enabled solutions.

Influence security culture through awareness initiatives, training programmes, and organisational engagement.

Key Responsibilities

• Security Operations & Incident Response
• Lead security monitoring, threat detection, incident response, and SOC governance activities.
• Develop and optimise SIEM use cases, detection rules, alert management, and security monitoring processes.
• Manage MSSP and SOC providers, ensuring service quality, performance, and compliance with agreed SLAs.
• Develop and maintain incident response procedures and coordinate security exercises and testing activities.
• Identity, Cloud & Data Security
• Manage identity security controls including MFA, Conditional Access, privileged access management, and identity risk monitoring.
• Strengthen security across Azure environments, endpoints, collaboration platforms, and emerging technologies.
• Implement and oversee data classification, data protection, and access control frameworks.
• Vulnerability & Threat Management
• Lead vulnerability management programmes including scanning, remediation, penetration testing, and threat intelligence integration.
• Monitor security posture and emerging cyber threats across the organisation.
• Governance, Risk & Compliance
• Maintain and continuously improve the ISO 27001 Information Security Management System (ISMS).
• Support audits, risk assessments, policy development, and regulatory compliance activities.
• Ensure alignment with client, contractual, and regulatory security requirements.
• Security Awareness & Assurance
• Deliver security awareness initiatives, phishing simulations, and targeted education programmes.
• Support client security reviews, due diligence activities, tender submissions, and certification requirements.
• DevSecOps & Third-Party Security
• Embed security controls within application development, CI/CD pipelines, and cloud deployment processes.
• Manage supplier security assessments and third-party risk assurance activities.
• Business Resilience
• Support business continuity, disaster recovery planning, testing, and security governance activities.

What we're looking for

• Experience leading security operations within a hybrid SOC environment.
• Strong knowledge of SIEM platforms, particularly Microsoft Sentinel or equivalent technologies.
• Expertise in threat detection, incident response, vulnerability management, and security monitoring.
• Hands-on experience with Microsoft Defender, Entra ID, Azure Security, and Data Loss Prevention technologies.
• Strong understanding of Zero Trust architecture, identity security, cloud security, and DevSecOps principles.
• Working knowledge of ISO 27001, SOC 2, risk management frameworks, and audit processes.
• Ability to communicate effectively with technical teams, senior stakeholders, clients, and external partners.
• Experience managing third-party security providers and vendor relationships.

About Black & White EngineeringBlack & White Engineering is a leading multi-award-winning engineering consultancy specialising in mission-critical infrastructure and data centre design. With offices across Europe, the Middle East, Asia, and Australia, we deliver innovative engineering solutions for some of the world's most demanding and technically complex projects.

Our success is built on technical excellence, collaboration, integrity, and a commitment to delivering quality outcomes for our clients. We provide an environment where talented professionals can develop their careers, contribute to meaningful projects, and make a genuine impact within a growing global organisation.

Interested?

If you're looking for an opportunity to lead cyber security initiatives within a dynamic international business while working with modern technologies and a highly collaborative team, we'd love to hear from you.

Apply now or contact us for a confidential discussion about the role.