Jobs at Bridewell

Deliver PCI DSS consultancy, compliance assessments, gap analyses, readiness reviews, scoping exercises, remediation plans, and client documentation. Assess technical and operational controls across infrastructure, cloud, applications, networks, and third-party services. Support ISO 27001, NIST, NCSC CAF, risk management, security maturity, proposals, pre-sales, and quality assurance while engaging technical teams and senior stakeholders.

Designs, deploys, and optimizes Microsoft Purview data governance, compliance, and risk management solutions across Microsoft 365 and Azure. Responsibilities include DLP, information protection, insider risk management, eDiscovery, communication compliance, data classification, lifecycle management, and information barriers. The consultant assesses client environments, produces technical documentation, integrates Microsoft services, presents recommendations to stakeholders, and provides ongoing advisory support while aligning security solutions with business and regulatory requirements.

Provides hands-on Tanium subject matter expertise for a client engagement, initially focused on Tanium Discovery. Assesses the existing environment, identifies optimization opportunities, recommends best practices, supports broader Tanium modules, advises stakeholders, transfers knowledge, and communicates findings and progress. The role requires autonomous work, deep Tanium knowledge, a consultative approach, and on-site availability in London for an initial three-to-six-month full-time contract.

Manages the technical relationship between managed security service customers and Bridewell. Responsibilities include resolving security incidents and project blockers, supporting threat hunts, quality assuring customer services, overseeing major incidents and root-cause analyses, driving security automation, developing detection content, leading service improvement projects, and overseeing onboarding documentation. The role requires strong Microsoft Security expertise, customer and stakeholder management, and collaboration across managed security service teams.

Designs and delivers enterprise security architectures for clients across financial services, critical infrastructure, and government. Responsibilities include security architecture reviews, cloud and network security, identity and access management, DevSecOps, security monitoring, Zero Trust, risk management, governance, compliance, and advising executive stakeholders. The role requires developing secure end-to-end solutions and maintaining security controls across complex environments.

Leads OT cybersecurity consulting engagements for critical national infrastructure clients, including risk, threat, vulnerability, and compliance assessments. Oversees large-scale transformation projects, security architectures, client relationships, commercial proposals, and delivery governance. Manages and develops consultant teams, supports pre-sales and business growth, shapes service offerings, and provides executive-level guidance on OT security, regulatory frameworks, industrial networks, and emerging threats.

Deliver OT cybersecurity consulting services for critical infrastructure and manufacturing clients. Responsibilities include cyber risk assessments, security maturity improvements, framework implementation, attack-vector analysis, secure OT network and remote-access design, policy development, project assurance, and security solution selection. The role requires expertise in PLCs, SCADA, OT security controls, industrial-sector environments, threat impacts, vulnerability analysis, and standards including ISA/IEC 62443, NCSC CAF, NIST SP 800-82, HSE OG86, and ISO 27001. Client relationship management, communication, and technical authoring are also important.

Client-facing senior consultant delivering cyber security engagements across governance, risk and compliance: ISMS development, ISO27001 certification support, NIS2 and framework gap analysis, risk assessments, security management, pre-sales/tender support, quality assurance of consultants, and input to security methodologies.

Lead and grow the cloud security practice: set strategy, build teams, drive adoption of cloud and AI security technologies, manage partner relationships (notably Microsoft), support sales and client engagements, and ensure delivery excellence across complex cloud security and transformation programmes.