Security Business Partner – IT Operations

Security Business Partner - IT Operations

Location:

Ealing / Hybrid (some office attendance required)

Salary: £69,922-£76,000 (dependent on experience)

Contract type:
Permanent
- Full Time (35 hours per week, Monday to Friday)

DBS Level
- Basic

Help embed security into the way our IT services are delivered

Are you an experienced cyber security professional with a strong understanding of IT operations, infrastructure and cloud security? Can you build trusted relationships with technical teams, translate security requirements into practical controls and drive risk-based improvements across complex operational environments? If so, this could be the opportunity for you.

We're looking for a Security Business Partner - IT Operations to join our Cyber Security team. Reporting to the Head of Cyber Security, you'll work closely with Infrastructure, Networking, End User Computing and Service Desk teams to embed effective security controls across servers, endpoints, networks and cloud-hosted services.

You'll provide hands-on security oversight and guidance across IT Operations, helping strengthen secure configuration, identity and access management, device protection, network security and infrastructure-layer data protection. You'll also lead vulnerability management activity across the operational environment, working with internal teams and third-party providers to prioritise and deliver remediation based on risk.

Working alongside the Cyber Security Manager and our managed Security Operations Centre provider, you'll help ensure effective logging, monitoring and incident response capabilities are in place. You'll also support operational teams with audit and compliance activity, including Cyber Essentials Plus.

• Work with IT Operations teams to implement and embed centrally defined security controls across servers, endpoints, networks and cloud-hosted services
• Support the adoption and continuous improvement of security baselines, secure build standards and hardened configurations across on-premises and cloud environments
• Provide security oversight for endpoint and device controls, ensuring agreed standards and operational controls are applied consistently
• Promote the effective use of identity and access controls, including multi-factor authentication, Conditional Access, identity governance and privileged access controls
• Provide security input into network architecture and controls, including network segmentation, firewall policies, secure remote access and hybrid connectivity
• Deliver vulnerability management activity across the operational environment, working with internal teams and third-party providers to drive remediation
• Report on vulnerability exposure and remediation progress in line with agreed governance and risk frameworks
• Work with the Service Desk, IT Operations and the managed Security Operations Centre provider to maintain appropriate logging, alerting and response capabilities across infrastructure services
• Help embed data-platform security controls, including Microsoft Purview, ensuring infrastructure configurations, access controls and monitoring align with data protection and governance requirements
• Work with Data and Infrastructure teams to strengthen access controls, encryption, auditing and monitoring for sensitive data repositories
• Provide ongoing security oversight across IT service delivery, helping ensure security controls remain effective and consistently applied

• Relevant experience supporting security controls across IT operations, including servers, endpoints, networks and cloud services
• Experience embedding security controls across hybrid infrastructure, endpoints and operational processes
• A strong understanding of secure configuration standards and security baselines, with the ability to translate them into effective operational practices
• Working knowledge of identity and access controls, including multi-factor authentication, Conditional Access and privileged access
• An understanding of network security controls, including segmentation, firewall policies, remote access and hybrid connectivity
• Strong stakeholder engagement skills, with the ability to influence technical and operational teams towards practical, risk-based security improvements
• Familiarity with data-platform and repository security controls and governance tools, such as Microsoft Purview
• A proactive mindset, with the ability to identify control gaps and use insights from vulnerabilities, incidents and audits to strengthen…