Group IT Operations and Security Engineer

Your Role

As an IT Operations and Security Engineer, you will lead initiatives to strengthen our IT infrastructure and security posture, ensuring a resilient, scalable, and compliant environment aligned with organisational objectives. You’ll assess current systems, design and implement improvements, and maintain Cyber Essentials Plus certification through proactive monitoring and testing.

You will drive the adoption and optimisation of Microsoft technologies, including Azure, Microsoft 365, Intune, SCCM, and the Defender suite, while embedding robust security controls across all platforms. Managing supplier relationships and deputising for the Group IT Operations & Security Manager, you’ll represent IT in governance and technical forums and collaborate across departments to deliver solutions that support business goals.

Key responsibilities include developing disaster recovery and business continuity strategies, implementing automation and monitoring through Power Shell scripting, and ensuring best practices in security and compliance. This is a hands‑on role for a technical leader passionate about modernising systems and delivering secure, reliable IT services.

• Oversee vendors who manage and maintain servers, networks, storage, and end user systems (on-prem and/or cloud).
• Monitor system performance, availability, and capacity; implement improvements where needed.
• Support deployment, configuration, and patching of operating systems, applications, and infrastructure.
• Administer identity and access management (IAM) platforms, where supported by the CII.
• Automate recurring operational tasks using scripts or configuration‑management tools.
• Oversee vendors who manage backups, disaster recovery processes, and business continuity plans.
• Troubleshoot and resolve hardware, software, and network issues in the event of a major incident, assist and oversee vendors.
• Plan, manage and deliver IS operational projects for Infrastructure, Cyber and Disaster recovery to ensure systems are maintained to current standards.
• Maintain service management records including hardware and software inventories.
• Adhere to ITIL processes for Incident, Change, and Problem Management.
• Deputise for the Group IT Operations and Security Manager in meetings and technical reviews when required.

• Monitor, analyse, and respond to security events and alerts from SIEM, EDR, and other tools. Collaborate with vendors who provide part of this capability
• Assess ongoing infrastructure and security, make recommendations, and implement changes to ensure systems stay current and stable.
• Perform regular vulnerability scanning, patch management, and oversee or action remediations.
• Oversee vendors and maintain security controls: firewalls, intrusion detection/prevention, email protection, endpoint security, etc.
• Enforce security policies, standards, and best practices across the organization.
• Support CII’s compliance with relevant frameworks, Cyber Essentials + (and aspirationally ISO and NIST) through documentation and control implementation.
• Conduct root‑cause analysis for security incidents and lead remediation efforts.
• Evaluate and implement new security tools and technologies. Collaboration & Governance Work closely across IT Services, Digital Transformation, Data & Insights, and relevant 3rd party vendors to ensure secure and stable environments.
• Provide technical guidance to users and colleagues.
• Assist with audits, risk assessments, and security awareness programs.

• ITIL Foundation qualification and Microsoft MCSE or equivalent.
• Cisco qualification in networking, switches, and/or firewalls (desirable).
• Knowledge of ITIL Change and Incident management.
• Experience with Microsoft cloud,…