Senior Information Security Engineer

Galliford Try Holdings plc; Leicester; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading UK construction group is seeking a Senior Information Security Engineer to ensure robust security operations and compliance with regulations. The role involves managing security tools, conducting risk assessments, and mentoring junior staff. Ideal candidates have 5+ years in information security and relevant certifications. You will collaborate closely with teams and stakeholders while driving the security program and enhancing the organisation's security posture.

Benefits

Generous holiday entitlement

Corporate discounts

Comprehensive pension plan

Private medical scheme options

Cycle to Work schemes

Qualifications

• Minimum 5 years' experience in information security or technical roles.
• Industry certifications such as CISSP, CISM, or CompTIA Security+.
• Experience managing outsourced SOC and SIEM providers.

Responsibilities

• Oversee daily security operations with extended teams.
• Conduct risk assessments and lead incident investigations.
• Develop and implement security policies to ensure compliance.

Skills

Incident response

Risk assessment

Cloud security controls

Communication

Stakeholder engagement

Mentoring

Education

CISSP certification

CISM certification

CompTIA Security+

Tools

Microsoft Azure

Microsoft 365

SIEM tools

Cloud platforms (AWS/GCP)

Oracle Fusion

Job description

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Job Description

Note for Recruitment Agencies:

We prefer to hire directly and we will be in touch with our PSL Agencies if this role is eligible for release.

We do not accept speculative CVs from agencies. If speculative CVs are sent, no fee will be applicable - please direct all queries to the relevant Resourcing Partner.

Title - Senior Information Security Engineer

Location - Leicestershire

We are seeking a highly skilled and experienced Senior Information Security Engineer to join our cyber security team. The role will provide hands‑on leadership and technical expertise in the management of information security operations, ensuring the organisation's security posture is maintained and aligned with strategic objectives.

This role bridges the gap between junior security staff and the Head of Information Security, driving the operational execution of the security programme while mentoring others and managing third‑party providers. This role is pivotal in safeguarding our organisation's digital assets, infrastructure, and sensitive data against evolving cyber threats. You will assist technical security initiatives, support compliance efforts, and collaborate across departments to embed security into our operations and development lifecycle. The role reports to the Head of Information Security and Compliance.

What you will be doing:

• Oversee daily security operations with SOC/SIEM provider, monitoring networks, systems, and applications for threats.
• Detect, analyze, and respond to potential compromises swiftly.
• Conduct risk assessments, vulnerability scans, and advise on mitigation for emerging threats.
• Lead or support incident investigations, coordinate containment and remediation, and produce post‑incident reports.
• Develop and implement security policies, standards, and ensure compliance with organisational and regulatory requirements.
• Deliver security awareness campaigns, training programs, and phishing simulations.
• Administer and optimise security tools (Microsoft Azure, Entra ID, M365, Defender, AV/EDR), manage configurations, and monitor identity/access management.
• Support compliance with Cyber Essentials, ISO 27001, UK GDPR, and NIST; assist audits and respond to security questionnaires.
• Stay updated on threats, recommend security enhancements, and maintain professional development.
• Handle BAU tasks such as quarantined emails, escalated tickets, mentoring, and project support.

Additional Responsibilities:

• Strong understanding of Microsoft 365, Azure, and cloud security controls (AWS/GCP exposure advantageous).
• Experience planning/coordinating penetration tests and managing remediation.
• Knowledge of UK data protection regulations (UK GDPR, DPA 2018).
• Familiarity with secure coding practices and DevSecOps principles.
• Excellent documentation, communication, and stakeholder engagement skills.
• Experience with Oracle Fusion/cloud platforms is an advantage.
• Strong grasp of enterprise IT architectures and security integration.
• Adaptable, proactive, and able to manage changing priorities in a fast‑paced environment.
• Collaborative team player with high ethical standards and a continuous learning mindset.

About You:

• Industry certifications such as CISSP, CISM, CEH, GIAC.
• Minimum 5 years' experience in information security or related technical roles.
• Proven track record managing or collaborating with outsourced SOC and SIEM providers.
• Hands‑on experience with incident response, vulnerability management, and risk assessment.
• Skilled in maintaining and supporting an ISMS aligned to ISO 27001 and Cyber Essentials.
• Experience in construction or regulated industries (finance, healthcare, government) beneficial.
• ISO/IEC 27001 auditing experience (highly desirable).
• CompTIA Security+ or CySA+ certifications.
• Ability to obtain BPSS and SC Clearance as a condition of employment.

What We Can Offer in Return:

With an impressive order book of over £4.1 billion we are one of the industry's leading principal contractors, affording you the opportunity to work on some of the UK's most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long‑held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we're poised for further growth and success, so if you're committed, talented and enthusiastic, Galliford Try is the right place for you.

We are committed to maintaining the physical and mental wellbeing of all our people, through our 'Be Well' programme which offers discounts on certain products, advice and support for a range of issues.

We invest in high‑quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential.

Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged.

Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office‑based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team.

Our benefits:

We put our people first and our benefits package reflects that by offering a comprehensive range of attractive options to help support your career on top of a competitive salary.

• Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays
• A wide range of corporate discounts
• Cycle to Work schemes
• Comprehensive pension plan
• Competitive family leave policy
• Regular Save as You Earn share purchase scheme
• Private medical scheme options are available for all salaried employees, and our employee assistance programme also provides free 24/7 support to those who need it
• Paid for yearly membership to one recognised professional association relevant to your role

About us:

Our purpose is to improve people's lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work.

We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long‑term value.

Galliford Try is a leading UK Construction group. The business is split into four distinct divisions,

Infrastructure, Building, Environment and Specialist Services, covering a range of specialist work in water, highways, telecoms, security, commercial, custodial, education, health, interiors, and leisure, across both public and private sectors. Listed on the London Stock Exchange and a member of the FTSE 250. Our vision is to be leaders in the construction of a sustainable future.

For more information on this role or to enquire about other positions available within our business please contact Skyemarie Bree - [e-mail]

Additional Information:

Galliford Try welcomes applications from candidates who would like to work full‑time, reduced hours or flexibly and this will be discussed in more detail as part of the recruitment process.

We encourage, and would be grateful if, you could confirm any requirements we can reasonably fulfil to make this application a positive experience for you.

Don't meet every requirement of the role? Studies have shown that some people are less likely to apply for jobs unless they meet every single qualification. At Galliford Try, we are committed to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your past experience doesn't align perfectly with every requirement of the role, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

As a Disability Confident employer, we have committed to offer an interview to any candidate with a long‑term health condition or disability that meet the essential criteria for the advertised position. Please contact the Resourcing Partner listed within the job advert if you believe this applies to you. We will also take the opportunity to discuss any adjustments required for your interview.

A full job description for this role is available upon request.

#LI-SB1