Group IT Operations and Security Engineer

Your role:

As an IT Operations and Security Engineer, you will lead initiatives to strengthen our IT infrastructure and security posture, ensuring a resilient, scalable, and compliant environment aligned with organisational objectives. You’ll assess current systems, design and implement improvements, and maintain Cyber Essentials Plus certification through proactive monitoring and testing.

You will drive the adoption and optimisation of Microsoft technologies, including Azure, Microsoft 365, Intune, SCCM, and the Defender suite, while embedding robust security controls across all platforms. Managing supplier relationships and deputising for the Group IT Operations & Security Manager, you’ll represent IT in governance and technical forums and collaborate across departments to deliver solutions that support business goals.

Key responsibilities include developing disaster recovery and business continuity strategies, implementing automation and monitoring through PowerShell scripting, and ensuring best practices in security and compliance. This is a hands-on role for a technical leader passionate about modernising systems and delivering secure, reliable IT services.

Key Responsibilities:

IT Operations:

• Oversee vendors who manage and maintain servers, networks, storage, and end user systems (on-prem and/or cloud).
• Monitor system performance, availability, and capacity; implement improvements where needed.
• Support deployment, configuration, and patching of operating systems, applications, and infrastructure.
• Administer identity and access management (IAM) platforms, where supported by the CII.
• Automate recurring operational tasks using scripts or configuration-management tools.
• Oversee vendors who manage backups, disaster recovery processes, and business continuity plans.
• Troubleshoot and resolve hardware, software, and network issues in the event of a major incident, assist and oversee vendors.
• Plan, manage and deliver IS operational projects for Infrastructure, Cyber and Disaster recovery to ensure systems are maintained to current standards.
• Maintain service management records including hardware and software inventories.
• Adhere to ITIL processes for Incident, Change, and Problem Management.
• Deputise for the Group IT Operations and Security Manager in meetings and technical reviews when required.

Security Engineering:

• Monitor, analyse, and respond to security events and alerts from SIEM, EDR, and other tools. Collaborate with vendors who provide part of this capability
• Assess ongoing infrastructure and security, make recommendations, and implement changes to ensure systems stay current and stable.
• Perform regular vulnerability scanning, patch management, and oversee or action remediations.
• Oversee vendors and maintain security controls: firewalls, intrusion detection/prevention, email protection, endpoint security, etc.
• Enforce security policies, standards, and best practices across the organization.
• Support CII’s compliance with relevant frameworks, Cyber Essentials + (and aspirationally ISO and NIST) through documentation and control implementation.
• Conduct root-cause analysis for security incidents and lead remediation efforts.
• Evaluate and implement new security tools and technologies. Collaboration & Governance Work closely across IT Services, Digital Transformation, Data & Insights, and relevant 3rd party vendors to ensure secure and stable environments.
• Provide technical guidance to users and colleagues.
• Assist with audits, risk assessments, and security awareness programs.

Key Requirements:

• ITIL Foundation qualification and Microsoft MCSE or equivalent.
• Cisco qualification in networking, switches, and/or firewalls (desirable).
• Knowledge of ITIL Change and Incident management.
• Experience with Microsoft cloud, server and desktop products including, SCCM, Azure, Office 365, Active Directory, VMware vSphere, and scripting/PowerShell.
• Experience managing IT Networks, on-premises and Cloud Server infrastructure.
• Experience with mobile device management.
• Strong problem-solving and analytical skills.
• Ability to work calmly under pressure and manage high workloads.
• Proactive, detail-oriented, and able to prioritize multiple tasks.
• Willingness to self-study to learn innovative technologies.
• Excellent verbal, written communication, and interpersonal skills, with excellent documentation ability.
• Ability to innovate and continuously improve.
• Ability to manage multiple objectives and self-organise.
• Flexibility in work type and hours to meet team objectives

Interview process:

We understand that taking time to prepare for and to attend interviews is a big commitment and want the process to be as transparent as possible.

You can expect the following process from us:

• A short, introductory phone call from our Talent Acquisition Advisor.
• A formal and technical interview with the hiring manager via Teams.

Application deadline:

We will review applications on a rolling basis and the position will close once we have secured a shortlist.

Next steps:

If you would like to explore this opportunity with us for the next step in your career, we look forward to receiving your application through the Apply feature.

If you have any queries or require assistance, please get in touch on ukjobs@cii.co.uk and we will endeavour to come back to you as soon as possible.

We are an inclusive employer and welcome applications from all backgrounds. If you require any reasonable adjustments during the recruitment process, please let us know. We are committed to ensuring all candidates have equal access and opportunity, in line with the Equality Act 2010.

Please note: 

At the CII, we work with a carefully selected Preferred Supplier List (PSL) for recruitment. We do not accept speculative CVs and kindly request that agency recruiters do not contact our managers directly, to ensure a consistent and properly coordinated recruitment process.

If you are interested in working with us in the future, please contact ukjobs@cii.co.uk. We review our PSL at set intervals and are happy to retain details for consideration when opportunities arise.

Agencies who do not follow this process will be excluded from any future opportunities to work with us, including PSL reviews.