Xpertise Recruitment
Information Technology Security Specialist
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
IT Security Specialist
Nottingham (2-3 days per week in the office)
Up to 85k
Job Summary
We are looking for an experienced IT Security Specialist. You will own our cybersecurity strategy end-to-end, from defining policy and architecture to hands-on incident response. You will act as the primary security interface for external partners. You will play a critical role in building a security-conscious culture throughout the organisation, ensuring that colleagues at every level understand their responsibilities and the part they play in keeping our business safe.
Specific Responsibilities
Cybersecurity Strategy & Governance
- Define, own and continuously improve the organisation's cybersecurity strategy, roadmap and policies.
- Assess and manage cyber risk across all business areas, maintaining a live risk register.
- Ensure compliance with relevant regulations and frameworks (e.g. GDPR).
- Report on security posture and key metrics to senior leadership on a regular basis.
- Lead on the creation and maintenance of Business Continuity and Incident Response plans.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Operations & Technical Oversight
- Monitor, detect and respond to security incidents and threats across the IT estate.
- Oversee penetration testing and remediation programmes.
- Define and enforce security standards for infrastructure, endpoints, cloud services and applications.
- Manage identity and access management (IAM) policies and tooling.
Partner & Vendor Management
- Act as the primary point of contact for managed security service providers, security tool vendors and external auditors.
- Lead security due diligence for third-party suppliers and technology partners.
- Collaborate with external penetration testers and create and maintain relationships with industry bodies.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Education, Awareness & Culture
- Design and deliver a security awareness programme tailored to the needs of head office teams.
- Develop engaging, role-appropriate training materials — from shop floor phishing simulations to technical briefings for IT colleagues.
- Act as a trusted advisor to department heads and business leaders on security topics.
- Embed a 'security by default' mindset across the IT team, influencing how projects and changes are delivered.
Project & Change Involvement
- Provide security input and sign-off as required across the project portfolio.
- Evaluate emerging technologies and recommend security controls for adoption.
- Support audits, certifications and regulatory assessments as required.
- Any other related duties, not specified above, as requested, by your Line Manager.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London