Information Security Specialist II

This is more than a job. It’s a chance to build, grow, and make a real impact! Join our team as our new Managed Cloud Security Lead!

In this role, you will help protect managed cloud customer environments by monitoring security exposure, coordinating vulnerability remediation, improving security reporting and supporting customer audit activities. You will work in a practical, operational security environment where curiosity, ownership and clear communication are valued. 

Location: Sheffield

Work model: Hybrid (at least two days a week in the office)

You will play a key role in strengthening the security posture of managed cloud environments, combining vulnerability management, compliance support, customer reporting and continuous improvement. 

• Improve reporting and compliance profile of our cloud environment to determine opportunities for continuous improvement. 

• Lead a cultural shift away from vulnerability management towards exposure management to focus remediation activities to what really matters. 

• Monitor security findings across managed cloud and infrastructure environments. 

• Review, validate and prioritise security findings, ensuring remediation actions are tracked through to completion. 

• Collaborate with system administrators, infrastructure and support teams to coordinate patching and reduce security exposure. 

• Use Rapid7 or similar security tooling to support security monitoring, remediation tracking and reporting. 

• Prepare clear, useful security reports for customers and internal stakeholders. 

• Support customer audits, evidence gathering and compliance-related security activities. 

• Identify opportunities to automate repetitive tasks, improve reporting and build more sustainable ways of working. 

• Act as a confident security voice within the team, advocating for good practices and practical risk reduction. 

• Experience in cloud security, infrastructure security, security operations, vulnerability management or a similar technical security role. 

• Practical experience with cloud environments; AWS experience is preferred, while strong experience with other cloud platforms is also welcome. 

• Good understanding of vulnerability management, patching concepts, infrastructure hardening and remediation follow-up. 

• Exposure to Rapid7 or comparable tools such as Tenable, Qualys, Nessus, Microsoft Defender for Cloud or similar platforms. 

• Ability to work independently, manage priorities and follow issues through to resolution. 

• Clear communication skills, with the confidence to explain risks, ask the right questions and influence good security practices. 

• Interest in automation, process improvement and the smart use of tools or AI to reduce manual effort. 

• Previous experience with audits, customer security reporting or compliance evidence gathering would be an advantage. 

#LI-ST1

#LI-Hybrid