Mentmore Recruitment

About the Company

At Mentmore we understand that hiring exceptional people is important for our clients but that it is only one part of their job. We aim to make that process as enjoyable, efficient and effective as possible.

We provide high quality candidates for both permanent and contract IT positions and are specialists within our five Core Practice areas:

*Information Security
*Change & Project Management
*Infrastructure & Service Management
*Architecture
*Executive IT Leadership

Our knowledge extends across a variety of sectors including Consumer Goods, Retail, Pharmaceutical, Digital, Media, Consultancy, Insurance, Financial Services and Petrochemical.

We operate all around the world with a particular specialism in the UK, Netherlands, Switzerland, Germany, the Nordics and the US.

Listed Jobs

Company Name

Mentmore Recruitment

Job Title

Associate Director - Cyber Advisory & Assurance

Job Description

Job Title: Associate Director – Cyber Advisory & Assurance Role Summary: Lead end‑to‑end cyber advisory and assurance engagements, managing a small consulting team and ensuring the delivery of high‑quality, client‑ready outcomes. Serve as a trusted advisor to senior stakeholders, providing guidance on cyber risk, regulatory compliance, and strategic operating models while driving growth within existing accounts and contributing to the expansion of the cyber practice. Expectations: - Deliver complex cyber security projects on schedule and within quality standards. - Mentor and coach junior consultants, fostering professional development. - Produce clear, executive‑level reports, assessments, and recommendations. - Identify and upsell additional advisory opportunities within current client relationships. - Support method development, thought leadership, and continuous improvement of the practice. Key Responsibilities: - Oversee the full lifecycle of cyber advisory and assurance engagements across diverse industries. - Lead a team of four junior consultants, providing coaching, performance feedback, and quality oversight. - Develop and refine engagement methodologies, best‑practice templates, and knowledge‑sharing frameworks. - Act as a trusted advisor to senior client stakeholders on cyber risk management, operating model design, and regulatory requirements (DORA, NIS2, ISO/IEC 27001). - Contribute to commercial growth of existing accounts through opportunity identification and upsell activities. - Support proposal creation as needed; no cold‑selling required. - Champion continuous improvement, innovation, and thought leadership within the cyber practice. - Facilitate succession planning and capability building for future cyber consultants. Required Skills: - Proven experience leading cyber advisory projects in a consulting or professional services setting. - Deep knowledge of cyber security frameworks and regulations (DORA, NIS2, ISO/IEC 27001). - Excellent written and verbal communication, able to distil complex topics for senior or executive audiences. - Strong report‑writing and review capabilities; deliver clear, client‑ready outputs. - Demonstrated ability to mentor or manage junior team members. - Commercial awareness with a focus on upselling within existing client relationships. Required Education & Certifications: - MSc in Information Security, Computer Science, or related field preferred. - Professional certifications: CISSP, CISM, CCSP, ISO 27001 Lead Auditor/Implementer, or equivalent.

London, United kingdom

On site

24-11-2025

Company Name

Mentmore Recruitment

Job Title

Senior DevSecOps Engineer

Job Description

Job title: Senior DevSecOps Engineer Role Summary: Lead the integration of security into the DevOps process, designing and maintaining robust CI/CD pipelines that embed testing, compliance, and monitoring. Collaborate with development and tooling teams to streamline workflows, enforce secure coding practices, evaluate emerging tools, and document best practices. Provide guidance on version control, branching, and secure CI/CD patterns, ensuring high‑quality, compliant releases and continuous improvement of the DevSecOps pipeline. Expectations: - Deliver secure, automated CI/CD pipelines that meet quality and compliance standards. - Reduce security risk in the SDLC through proactive automation and monitoring. - Influence and educate teams on secure coding, DevOps best practices, and tool usage. - Evaluate and adopt tools that enhance pipeline efficiency, developer experience, and security posture. Key Responsibilities: - Design, implement, and maintain end‑to‑end CI/CD pipelines, integrating unit, integration, security, and compliance tests. - Automate security testing and compliance checks within pipelines. - Identify and eliminate bottlenecks in SDLC, creating repeatable deployment, configuration, and monitoring patterns. - Partner with development teams to onboard standardized DevOps practices, secure coding guidance, and branching strategies. - Evaluate and recommend tooling (CI/CD, scanning, monitoring) and stay current with industry trends and emerging technologies. - Document security and DevOps processes, create knowledge‑base articles, and deliver workshops on secure development. - Assist onboarding of projects and teams to central DevSecOps infrastructure and template pipelines. Required Skills: - Proven experience in DevSecOps, Agile software delivery, and SDLC. - Deep knowledge of CI/CD tooling (GitLab CI, GitHub Actions, Argo CD, Concourse). - Hands‑on experience with AWS, Azure, or GCP; Docker and Kubernetes container orchestration. - Familiarity with security standards and frameworks (OWASP, NIST, ISO 27001). - Strong scripting/automation skills (Bash, Python, YAML). - Excellent communication skills to explain DevSecOps concepts to technical and non‑technical stakeholders. - Ability to mentor and influence cross‑functional teams. Required Education & Certifications: - Bachelor’s degree in Computer Science, Software Engineering, or related field. - Preferred: Certified AWS Solutions Architect, AWS Certified Security – Specialty, Azure Security Engineer Associate, or equivalent cloud security certifications. - Additional certifications in DevSecOps, security scanning, or automation tools are a plus.

London, United kingdom

Hybrid

Senior

03-12-2025

Company Name

Mentmore Recruitment

Job Title

DevSecOps Engineer

Job Description

Job title DevSecOps Engineer Role Summary Integrate security practices into DevOps workflows to ensure secure, compliant software delivery across CI/CD pipelines. Collaborate with tooling leads, development teams, and stakeholders to automate and enhance security posture throughout the SDLC. Expactations - Deliver secure, automated pipelines that meet organizational quality and compliance standards. - Act as a security advocate, providing guidance and training to development teams on best practices. - Continuously assess and improve tooling, processes, and documentation to drive DevSecOps maturity. Key Responsibilities 1. Design, implement, and maintain CI/CD pipelines that embed security testing, compliance checks, and deployment automation. 2. Partner with developers to identify workflow bottlenecks, recommend secure coding and branching strategies, and onboard projects to standardized DevOps patterns. 3. Evaluate, recommend, and integrate new tools (cloud, container, CI/CD, security monitoring) that improve productivity and security. 4. Create and maintain comprehensive documentation and conduct workshops to promote secure coding and DevSecOps understanding. 5. Stay current with industry standards (OWASP, NIST), emerging technologies, and regulatory requirements to inform continuous improvement. Required Skills - Proven DevSecOps experience in Agile software delivery. - Deep knowledge of SDLC, DevOps, and DevSecOps principles. - Hands‑on expertise with CI/CD tools (GitLab CI, GitHub Actions, Argo CD, Concourse) and cloud platforms (AWS, Azure, GCP). - Proficiency in containerization (Docker, Kubernetes). - Strong understanding of security frameworks (OWASP, NIST) and secure coding practices. - Excellent communication and documentation skills. Required Education & Certifications - Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience). - Preferred certifications: AWS Certified Security – Specialty, Azure Security Engineer Associate, or equivalent cloud security certification.

London, United kingdom

Hybrid

03-12-2025

Company Name

Mentmore Recruitment

Job Title

Disaster Recovery SME

Job Description

Job Title Disaster Recovery SME Role Summary Lead the design, assessment, and enhancement of Disaster Recovery (DR) capabilities for a global retail organization. Own the development of DR frameworks, conduct gap analyses, validate vendor plans, and govern consistency across all business units. Expectations * Deliver DR programs for multiple countries and business units. * Engage senior leaders and stakeholders worldwide, adapting to local cultures and operational contexts. * Maintain compliance with technology, regulatory, and operational standards. * Support major technical migrations with robust DR provisions. Key Responsibilities 1. Develop and enforce DR frameworks for all entities in the group. 2. Partner with executive and leadership teams in each country to evaluate current readiness and gather data. 3. Perform detailed gap analyses for entities lacking DR plans and recommend corrective actions. 4. Review and validate third‑party vendor DR plans, identifying deficiencies and improvement opportunities. 5. Define internal and external roles and responsibilities to ensure clear accountability. 6. Strengthen governance and drive consistent DR processes across regions. 7. Conduct annual DR testing for each entity, verifying alignment with evolving technology, regulatory, and operational changes. 8. Tailor approaches to countries at varying maturity levels, considering local culture and communication styles. 9. Collaborate with global stakeholders to secure resources and ensure timely delivery of DR activities. 10. Provide emergency coordination support during back‑office technical migrations. Required Skills * Proven global DR program delivery experience in multi‑country environments. * Strong foundation in Disaster Recovery, Business Continuity, and Cyber Governance frameworks. * Experience engaging senior leadership and managing complex stakeholder landscapes. * Ability to work effectively with systems integrators, vendors, and external service providers. * Excellent communication, cross‑cultural adaptation, and documentation skills. * Analytical and organizational proficiency. * Broad knowledge of cybersecurity domains (SOC operations, IAM, governance structures). Required Education & Certifications * Bachelor’s degree in Information Technology, Computer Science, Business Continuity, or related field. * Professional certifications in DR/BC—such as Certified Business Continuity Professional (CBCP), ISO 22301 Lead Implementer, Certified Information Systems Auditor (CISA), or similar—preferred.

London, United kingdom

Hybrid

04-12-2025