Cyber Security Engineer

Escode, a global leader in software escrow solutions and part of NCC Group, is dedicated to protecting businesses from unforeseen disruptions. We ensure that business-critical software applications and source code are safe, secure, and always available. As a trusted intermediary for some of the world’s best-known brands, we safeguard access to vital code and digital assets, ensuring business continuity and the protection of software investments.

With over 40 years of experience, Escode pioneered the software escrow category in 1988, recognizing the growing technology dependence of businesses and the need for a safety mechanism. We are proud to set industry standards and shape its direction, providing unparalleled expertise and reliability. Learn more about Escode: https://www.escode.com/

Take a look at our website here to learn more about Escode: https://www.escode.com

Role Purpose

Cyber and Information Security plays a critical role in supporting our internal business functions alongside our external customer commitments.

The role is responsible for day to day management of IT Security in Escode. This includes development & maintaining of administrative, technical and physical security controls to continually improve the Escode’s security.

This role presents an excellent opportunity to lead this area and will help Escode in managing its cyber risks and meeting its business requirements.

Key Account Accountabilities

As part of your role, you will be responsible for:

• Vulnerability management - identification, and remediation utilising inhouse systems and expertise
• Assist in audits and ensuring we meet the standards for frameworks such as Cyber Essentials Plus and ISO 27001 amongst others
• Support the wider business as a security subject matter expert
• Develop, improve, and maintain security and wider IT processes
• Perform due diligence and security assessments as part of our supply chain risk management program
• Assist or lead on security projects
• Lead in IT Security Incident Management, from detection to “lessons learned”
• Create standards to facilitate developers to design applications so that they are "secure by design";
• Test systems to prove that they are actually secure

Functional & Technical Skills

You will have the following experience:

• Professional experience in the cyber and information security field, you will be familiar with introducing governance regimes and risk management to large, diverse organisations.
• Professional experience, you will have attained a broad understanding of technology principles and a thorough grasp of methods used to identify and manage cyber and information security risks.
• Candidates should enjoy working across differing specialised areas, but they should also be willing to defend security principles when necessary, sometimes against majority opposition.
• Knowledge of security frameworks, eg NIST 800-53, NCSC CAF, Cyber Essentials Plus and others.
• Knowledge of cloud environments with a particular emphasis on Azure and AWS.
• The ability to appropriately identify and categorise risk and suggest effective remediation.
• Good communication skills and the ability to explain security concepts to senior management and other stakeholders both technical and non technical, who may not have a security background.

You must be willing to travel to NCC office locations globally and stay away from home on occasion.

About your application

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

If you do not want us to retain your details, please email [email protected]. All personal data is held in accordance with the NCC Group Privacy Notice. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject t