Security Engineer

Welcome to the Parliamentary and Health Service Ombudsman (PHSO) careers page.

If you are an internal applicant, you will need to log into your MyHR employee self service to apply for the role.

The job requirements are detailed below. Where applicable the skills, qualifications and memberships required for this job have also been included.

Interview dates:05, 06 and 07 October 2026(in person)

About us

At The Parliamentary and Health Service Ombudsman, we make final decisions on complaints that have not been resolved by UK Government departments and the NHS in England. We work closely with people to understand where, how and why public services sometimes fall short andfail toput people first. Weshare findings from our casework to help Parliament scrutinise public service providers. We also share our findings more widely to help drive improvements in public services and complaint handling.

Our culture is open,friendlyand supportive. We listen, we learn, and we treat everyone with dignity and respect. Inclusion and wellbeing are at the heart of how we work, and we strive to create a workplace where every colleague feels valued,supportedand able to thrive.

We work in a modern, flexible way built on trust and autonomy. Youwillsplit your time between working from home and spending around 40% of your week in our Manchesterofficewhere collaboration and connection with your team are an important part of how we work.

The role

As Security Engineer, you will help protect our systems,dataand services. You will manage and improve security across our Microsoft cloud environment, including Azure, Microsoft 365, Entra ID, Defender and Purview.

You will lead technical investigations into security incidents, work closely with our Security OperationsCentreand help address threats and vulnerabilities. You will also assess the security of new services,suppliersand system changes before they go live

We are looking for someone with strong experience in cloud security, identity, dataprotectionand incident response. You will need sound judgement, good analyticalskillsand the ability to explain security risks and recommendations clearly to technical and non-technical colleagues.

What we are looking for:

• knowledge of security engineering principles and controls across Microsoft cloud, identity, endpoint, dataprotectionand security operation
• understanding of technical, cyber security, data protection and public-sector requirements, translated into risk-based controls
• background in security operations, including alert triage, threat analysis, vulnerability management, gapanalysisand remediation tracking.
• knowledge of assurance approaches, including design review, supplier assurance, risk assessment, controlvalidationand security acceptance
• awareness of recognised frameworks and good practice, including NCSC guidance, Cyber Essentials, ISO 27001, Zero Trust, cloud security and SIEM/SOAR concepts.

We recognise the value of lived experience.If you have experienceofcomplainingaboutany public body, we strongly encourage you to apply.

• Civil Service Pension scheme
• 32.5days annual leave(plus bank holidays on top)
• hybridworking,40 percentoffice based
• one day paid volunteering leave per year
• access to a free, confidential Employee Assistance Programme offering 24/7 advice and support from professionals and counsellors
• comprehensivelearning anddevelopmentprogramme
• employee discount scheme across hundreds of retailers
• bicycle loan scheme
• season ticket loan
• paid for professional memberships

Equality, diversity, inclusion, and wellbeing are vital to the way we work and our culture. We want our colleagues feel included, valued, and supported at work. It is essential that we are representative and accessible for the people who work here and those who use our service.

• an anonymised shortlisting process to make sure it is fair and unbiased
• monitoring the demographic trends in our workforce and making measured, sustained efforts to improve our diversity at all levels
• providing wellbeing support and opportunities for personal and professional development for all colleagues
• creating spaces for connection and engagement through our employee network groups and social clubs
• part of the disability confident scheme
• providing reasonable adjustments
• engaging in regular inclusion learning to enhance the cultural competency of our organisation.

We know the value of having diverse, representative teams across our organisation. Which is why we particularly encourage applications from candidates who are likely to be underrepresented within the team. These include people who are:

• Asian, Black, Mixed Ethnicity or another ethnic background
• Feedback: we do not offer feedback at application stage
• Right towork: we can only consider candidates with the right to work in the UK.
• Sponsorship:w e are unable to offer sponsorship (we do not have a licence).
• Agencies: no agencies; applications from individuals only.
• Early closure: we may close the advert early if we receive a high volume of applications.

Important notice: fraudulent job postings

We have been made aware that some websites are falsely advertising job vacancies for the Parliamentary and Health Service Ombudsman (PHSO). We only advertise job vacancies through these official channels: - our website

Wearechanging our name. Later this year we will become the Public Service Ombudsman. This will make it easier for people to find us and understand what we do. The service we provide will remain the same. Visitour website to find out more.