Overview
In this role you will strengthen and drive the organisation’s information and cyber security posture across on-prem and Azure environments. You work closely with IT teams to remediate findings from assessments, tests and scans, acting as a security expert across the business. You will own end-to-end remediation and help define pragmatic controls while aligning with best practices. This opportunity supports your development through our academy and cross-functional collaboration, contributing to a secure guest-centric environment.
Pay / Benefits
- Complimentary hotel stays with breakfast
- 50% off at the group’s bars and restaurants
- Refer a friend bonus scheme
- World-class development opportunities
- Season ticket loan and cycle to work
- Subsidised gym and wellness experiences
Responsibilities
- Own and resolve cyber security–related tickets, investigations, and issues
- Triaging, investigating, and responding to threats via the global XDR platform
- Escalation point for complex or high-risk security events
- End-to-end remediation of findings from penetration tests and vulnerability scans
- Collaborate with infrastructure and regional teams to remediate across servers, endpoints, networks, and cloud
- Plan and execute internal security assessments and technical reviews
- Establish, maintain, and improve cyber security policies, standards, and processes
- Security role in IT and business project design and implementation
- Coordinate security activities across regional IT teams and provide technical guidance
Key requirements
- Strong IT infrastructure and systems engineering background
- Hands-on experience remediating security vulnerabilities
- Experience with penetration testing and vulnerability management outputs
- Strong experience securing Active Directory on-premises and in Azure
- Understanding of identity, access management, patching, and monitoring
- English language proficiency (written and verbal)
- XDR platform (triage, investigation and response)
- Active Directory on-premises and Azure
- Cloud and hybrid environments security
- Vulnerability management and remediation
- Security assessments and posture improvement
- Security policies, standards and processes
…
