Jobs at Bridewell

Designs and delivers enterprise security architectures for clients across financial services, critical infrastructure, and government. Responsibilities include security architecture reviews, cloud and network security, identity and access management, DevSecOps, security monitoring, Zero Trust, risk management, governance, compliance, and advising executive stakeholders. The role requires developing secure end-to-end solutions and maintaining security controls across complex environments.

Leads OT cybersecurity consulting engagements for critical national infrastructure clients, including risk, threat, vulnerability, and compliance assessments. Oversees large-scale transformation projects, security architectures, client relationships, commercial proposals, and delivery governance. Manages and develops consultant teams, supports pre-sales and business growth, shapes service offerings, and provides executive-level guidance on OT security, regulatory frameworks, industrial networks, and emerging threats.

Designs, implements, audits, and optimizes cloud security solutions for clients across multiple industries. Responsibilities include securing AI tools and applications, designing identity and access management, deploying XDR and cloud SIEM/SOAR solutions, assessing cloud security posture, producing technical documentation, presenting recommendations, and collaborating with customers and internal teams. The role requires Azure and Microsoft security expertise, customer-facing communication, and occasional travel to client sites.

Deliver OT cybersecurity consulting services for critical infrastructure and manufacturing clients. Responsibilities include cyber risk assessments, security maturity improvements, framework implementation, attack-vector analysis, secure OT network and remote-access design, policy development, project assurance, and security solution selection. The role requires expertise in PLCs, SCADA, OT security controls, industrial-sector environments, threat impacts, vulnerability analysis, and standards including ISA/IEC 62443, NCSC CAF, NIST SP 800-82, HSE OG86, and ISO 27001. Client relationship management, communication, and technical authoring are also important.

Lead Microsoft Purview transformation programmes across strategy, governance, compliance, data protection, risk management, implementation, adoption, and operationalisation. Manage multidisciplinary consulting teams, senior stakeholders, programme risks, dependencies, communications, training, and behavioural change. Develop strategic roadmaps, governance frameworks, operating models, and compliance architectures while advising executives and supporting the growth of Purview services.

Client-facing senior consultant delivering cyber security engagements across governance, risk and compliance: ISMS development, ISO27001 certification support, NIS2 and framework gap analysis, risk assessments, security management, pre-sales/tender support, quality assurance of consultants, and input to security methodologies.

Lead and deliver large-scale data governance, compliance and business transformation programmes. Define strategy and roadmaps, design operating models and governance frameworks, manage multi‑workstream delivery, stakeholder engagement, change management, training and benefits realisation. Mentor teams, advise senior stakeholders, and support growth of Bridewell’s Data Governance and Microsoft service offerings.

Client-facing senior privacy consultant delivering and managing data protection engagements: DPIAs, breach response, data mapping, DSARs, privacy frameworks, policies, third-party due diligence, training, contract reviews, risk assessments, and advisory support while supporting business development.

Lead and grow the cloud security practice: set strategy, build teams, drive adoption of cloud and AI security technologies, manage partner relationships (notably Microsoft), support sales and client engagements, and ensure delivery excellence across complex cloud security and transformation programmes.

Lead and deliver offensive security assessments (infrastructure, web, API), produce technical and executive reports, support pre-sales, perform QA, research and develop new testing methodologies, and collaborate across teams.

The Generative AI Engineer will design and implement AI solutions, focusing on model fine-tuning, prompt engineering, and secure deployment, while collaborating with cybersecurity specialists.