Jobs at Bridewell

Supports SOX, SOC 2, ISO 27001, PCI, and data center audits across critical infrastructure environments. Responsibilities include coordinating external audits, gathering evidence, responding to auditor inquiries, facilitating site walkthroughs, testing control design and operating effectiveness, conducting mock audits, assessing compliance impacts, maintaining control documentation, and training data center teams. The role works with facilities, engineering, physical security, finance, internal stakeholders, and external auditors, with approximately 25% travel to data center sites.

Lead Microsoft Purview transformation programmes across strategy, governance, compliance, data protection, risk management, implementation, adoption, and operationalisation. Manage multidisciplinary consulting teams, senior stakeholders, programme risks, dependencies, communications, training, and behavioural change. Develop strategic roadmaps, governance frameworks, operating models, and compliance architectures while advising executives and supporting the growth of Purview services.

Lead MSSP security engineering to deploy and manage Microsoft Sentinel and SIEMs, onboard clients, build custom data connectors, automate infrastructure with Bicep/Terraform, script automations in Python/Go, develop detections/dashboards/alerts, mentor junior engineers, support pre-sales, and maintain documentation.

Client-facing senior consultant delivering cyber security engagements across governance, risk and compliance: ISMS development, ISO27001 certification support, NIS2 and framework gap analysis, risk assessments, security management, pre-sales/tender support, quality assurance of consultants, and input to security methodologies.

Lead and deliver large-scale data governance, compliance and business transformation programmes. Define strategy and roadmaps, design operating models and governance frameworks, manage multi‑workstream delivery, stakeholder engagement, change management, training and benefits realisation. Mentor teams, advise senior stakeholders, and support growth of Bridewell’s Data Governance and Microsoft service offerings.

Client-facing senior privacy consultant delivering and managing data protection engagements: DPIAs, breach response, data mapping, DSARs, privacy frameworks, policies, third-party due diligence, training, contract reviews, risk assessments, and advisory support while supporting business development.

Lead and grow the cloud security practice: set strategy, build teams, drive adoption of cloud and AI security technologies, manage partner relationships (notably Microsoft), support sales and client engagements, and ensure delivery excellence across complex cloud security and transformation programmes.

Lead and deliver offensive security assessments (infrastructure, web, API), produce technical and executive reports, support pre-sales, perform QA, research and develop new testing methodologies, and collaborate across teams.

The Generative AI Engineer will design and implement AI solutions, focusing on model fine-tuning, prompt engineering, and secure deployment, while collaborating with cybersecurity specialists.