Join one of the UK’s largest electrical wholesalers as we rethink our technology for the digital era. We’re modernising our legacy systems and creating new platforms powered by AWS and AI—and we’re looking for creative minds to help shape what comes next.

About the role:
You’ll join a close-knit, highly capable security team that genuinely enjoys working together and takes pride in delivering real value. This is a collaborative environment where ideas are shared openly, support is available whenever you need it, and everyone is trusted to do their work without unnecessary bureaucracy or distractions. There’s strong accountability, alongside flexibility and mutual understanding—people support one another and celebrate progress together.

Technically, you’ll help evolve our governance framework, strengthen existing controls, and play a key role in achieving and maintaining certifications such as ISO27001. We want someone who has been through this process before and can take a pragmatic, delivery-focused approach. You’ll need to be comfortable working in a business that changes quickly, with the ability to balance structure and flexibility, and confidence in engaging stakeholders at all levels. Just as importantly, you’ll listen well, build trust easily, and approach problem-solving with a calm, thoughtful mindset.

Responsibilities:
– Work closely with the Governance and Compliance Manager (South Yorkshire, UK)
– Work closely with the Head of Information Security (North Yorkshire, UK)
– Lead the implementation of changes needed for CEF to achieve ISO27001 and other certifications (such as ISO42001), as required by the business
– Support CEF in maintaining security certifications (Cyber Essentials, PCI) and help strengthen security controls
– Audit and review security controls, policies, and procedures to ensure they align with current working practices and best practice
– Conduct security control gap analysis and propose ways to remediate or reduce any identified risks
– Support other Governance, Risk, and Compliance team members with third-party supplier activities, including security due diligence reviews and client information security questionnaires
– Work with the Governance and Compliance Manager to promote continuous security training and upskilling for all team members and colleagues across CEF
– Support security governance activities and policies related to AWS cloud security
– Partner with business leaders to identify, assess, and prioritise information and data governance risks and issues across the organisation (including products, solutions, systems, data, people, and processes), and ensure effective actions and controls are in place to mitigate them

Essential experience:
– Experience in an operational information security role, successfully engaging and communicating with senior stakeholders across multiple business areas to ensure information security compliance
– Experience obtaining and/or maintaining ISO27001 certification
– Proven ability to define information security policies, controls, and processes to manage an organisation’s risk position
– Proven knowledge of information security principles and best practices, including ISO 27001, NIST, NCSC, PCI DSS requirements, and other regulatory obligations
– Experience in risk and vulnerability management
– AWS security certifications
– Ability to travel to Durham, UK, and other CEF sites as needed

What we offer:
– Work from anywhere in the UK—while we’re mainly remote, we aim to meet in our Durham office multiple times a year, so willingness to travel is required
– Annual discretionary bonus
– 25 days holiday plus UK bank holidays
– Company pension scheme
– Access to Champion Health, the “Netflix of wellbeing,” covering physical, mental, and financial wellbeing
– Access to the MySavings Platform, with discounts and vouchers for groceries, dining out, gym memberships, days out, experiences, and travel
– Access to Light Up Learning (leadership, technical, and personal development)
– Free use of the onsite gym at Janet Nash House in Durham

About us:
Founded in 1951 in Kenilworth, UK, City Electrical Factors (CEF) has grown into a world-leading electrical wholesale and manufacturing business, with more than 400 branches across the UK and a strong presence in the USA, Canada, Spain, and Australia.

Our IT and digital teams are driving the next chapter of our journey—re-engineering legacy systems, adopting modern cloud technologies, and exploring AI to deliver faster, smarter, more connected customer experiences.

We’re a predominantly remote workforce with teams across the UK, USA, Canada, Spain, and Australia. Our culture is collaborative, forward-thinking, and people-focused—your ideas and contributions genuinely matter.

Our mission:
City is a world-leading electrical wholesale and manufacturing business supplying electrical products to industry. Our IT teams deliver value to the business and our customers through packaged software and bespoke engineering designed for the digital age, using AWS serverless technology. We’re looking for talented, creative people across all areas to join us in re-architecting our forward-thinking business in the coming years and beyond as we continue to evolve.

Find out more:
https://www.cef.co.uk | https://www.citytech.careers/life-at-city | https://www.cef.co.uk/stores | https://www.citytech.careers/privacy

Ready to apply?
If you’re excited by technology, value collaboration, and want to make a genuine impact, we’d love to hear from you. Click **Apply** to get started.