Let's find your next role

Send us your CV

Want us to find a job for you? Send us your CV and we'll be in touch when a suitable role comes up.

What our candidates say

This was a master class in how a recruiter should look after candidates. Your consultant was the best I've come across in 30 years in the IT sector.

Recent candidate feedback, September 2025

Jenny was everything you want in a recruitment consultant. Knowledgeable and supportive, l completely trusted her and felt fully supported.

Recent candidate feedback, January 2026

Harvey Nash were truly excellent throughout the entire process. Their professionalism, support, and communication made the experience exceptionally positive.

Recent candidate feedback, March 2026

Genuinely felt like a breath of fresh air. Emma and Louise have been very professional, supportive and attentive. They were knowledgeable and were able to guide me throughout the process with my questions and concerns.

Recent candidate feedback, February 2026

Michael Day has been absolutely outstanding with his customer service and support throughout the process. He took the time to truly understand what I'm looking for in a role and carefully considered how well my skills and experience match the opportunity. Michael was honest and helpful in advising whether the role would be the right fit for me, which I really appreciated. A big thank you to Michael for his guidance and for helping me secure the role.

Recent candidate feedback, March 2026
View candidates area

Who do we work with?



From global enterprises to SMEs, we work with amazing clients all over the world to find you the best IT jobs in the market today. Here’s an example of some of the companies we’re working with at the moment.

News & Insights

Latest news
Why looking secure isn't the same as being secure A clean security report. No major alerts. The latest AI tools keeping watch over your systems. For many organisations, these are signs that their cybersecurity is working. But what if a threat goes unnoticed? And how can leaders be sure their security measures are protecting the business, rather than simply looking good on paper? As we mark Cybersecurity Awareness Month, it's a good time to ask whether organisations know how secure they really are. Cybersecurity isn't just about having the right tools or passing an audit. It's about knowing what those tools might miss, keeping up with new risks, and having the talent to make the right decisions when something doesn't look right. What happens when the alarm doesn't go off? AI is helping cybersecurity teams work faster. It can review large amounts of information, spot unusual activity and support investigations. That's valuable, particularly when teams have so much to monitor. But AI has limits. Ankur Anand, Chief Information Officer at Harvey Nash, recently highlighted this in comments to ZDNET. He pointed to research testing 23 AI models against evidence from cyber incidents. The models struggled to identify attacks that didn't trigger a security alert. As Ankur explained: "If nothing trips the alarm, an AI built to investigate alarms has nothing to chew on." It's a simple but important point. If a system is built to investigate warnings, what happens when the warning never comes? A dashboard with no alerts might be reassuring. It doesn't necessarily mean there is no threat. Leaders need to know what their tools can detect, what they might miss and how those gaps are checked. That means asking more questions, not just buying more technology. Why passing an audit is only part of the picture The same applies to cybersecurity rules and processes. Security audits and compliance checks are important. They help organisations meet their responsibilities and show that safeguards are in place. But passing a check on one day doesn't mean everything will remain secure the next. Systems change. Businesses introduce new software, employees use different tools, and new risks appear. A document showing that a security check was completed months ago may tell leaders very little about what's happening now. This was one of the themes explored by Justin Pagano, Senior Director of GRC Engineering at Vanta, in a conversation with David Savage on Harvey Nash's Tech Talks podcast. Justin questioned the reliance on PDFs and one-off checks to demonstrate that organisations are managing risk. His message was that security needs to keep pace with the way businesses actually operate. That means looking beyond whether a process has been followed, asking whether security measures are still working, whether new risks have appeared and whether the right people are responsible for acting on them. The people behind stronger cybersecurity Technology and rules are only part of the answer. Organisations also need people who can look beyond what a system tells them. This is where cybersecurity talent becomes especially important. Ankur has spoken about the value of professionals who actively look for threats, even when no alert tells them where to start. He also highlights the need for people who can question AI results and explain technical risks in a way that business leaders understand. These skills matter because someone still needs to decide whether an unusual pattern is a genuine threat, which issues need urgent attention and what action the business should take. Different roles play a part. Security operations specialists investigate suspicious activity. Governance, risk and compliance professionals help ensure controls are useful and up to date. Security architects design safer systems, while cyber leaders connect security decisions to wider business priorities. The common thread is judgement. Good cybersecurity professionals don't just operate tools or follow checklists. They ask questions, challenge assumptions and help the organisation respond when the picture is unclear. For employers, this should shape how they build their teams. Alongside technical knowledge, they need people with curiosity, problem-solving skills and the confidence to speak up when something doesn't seem right. From looking secure to being prepared Cybersecurity Awareness Month is a chance to look again at the confidence organisations place in their defences. Can leaders explain what their systems might not detect? Are security checks keeping pace with changes across the business? Do teams have the skills and freedom to raise concerns, even when the reports suggest everything is fine? These questions won't remove every risk. But they can help organisations find weaknesses earlier and make better decisions about where to focus their efforts. Real security isn't about having a perfect-looking report. It's about understanding the risks, being ready to act and having the right people in place to protect what matters. At Harvey Nash, we help organisations find the cybersecurity professionals they need to strengthen their defences, improve resilience and plan for what's next. Explore our Cybersecurity specialism to see how we can support your team.Why looking secure isn't the same as being secure A clean security report. No major alerts. The latest AI tools keeping watch over your systems. For many organisations, these are signs that their cybersecurity is working. But what if a threat goes unnoticed? And how can leaders be sure their security measures are protecting the business, rather than simply looking good on paper? As we mark Cybersecurity Awareness Month, it's a good time to ask whether organisations know how secure they really are. Cybersecurity isn't just about having the right tools or passing an audit. It's about knowing what those tools might miss, keeping up with new risks, and having the talent to make the right decisions when something doesn't look right. What happens when the alarm doesn't go off? AI is helping cybersecurity teams work faster. It can review large amounts of information, spot unusual activity and support investigations. That's valuable, particularly when teams have so much to monitor. But AI has limits. Ankur Anand, Chief Information Officer at Harvey Nash, recently highlighted this in comments to ZDNET. He pointed to research testing 23 AI models against evidence from cyber incidents. The models struggled to identify attacks that didn't trigger a security alert. As Ankur explained: "If nothing trips the alarm, an AI built to investigate alarms has nothing to chew on." It's a simple but important point. If a system is built to investigate warnings, what happens when the warning never comes? A dashboard with no alerts might be reassuring. It doesn't necessarily mean there is no threat. Leaders need to know what their tools can detect, what they might miss and how those gaps are checked. That means asking more questions, not just buying more technology. Why passing an audit is only part of the picture The same applies to cybersecurity rules and processes. Security audits and compliance checks are important. They help organisations meet their responsibilities and show that safeguards are in place. But passing a check on one day doesn't mean everything will remain secure the next. Systems change. Businesses introduce new software, employees use different tools, and new risks appear. A document showing that a security check was completed months ago may tell leaders very little about what's happening now. This was one of the themes explored by Justin Pagano, Senior Director of GRC Engineering at Vanta, in a conversation with David Savage on Harvey Nash's Tech Talks podcast. Justin questioned the reliance on PDFs and one-off checks to demonstrate that organisations are managing risk. His message was that security needs to keep pace with the way businesses actually operate. That means looking beyond whether a process has been followed, asking whether security measures are still working, whether new risks have appeared and whether the right people are responsible for acting on them. The people behind stronger cybersecurity Technology and rules are only part of the answer. Organisations also need people who can look beyond what a system tells them. This is where cybersecurity talent becomes especially important. Ankur has spoken about the value of professionals who actively look for threats, even when no alert tells them where to start. He also highlights the need for people who can question AI results and explain technical risks in a way that business leaders understand. These skills matter because someone still needs to decide whether an unusual pattern is a genuine threat, which issues need urgent attention and what action the business should take. Different roles play a part. Security operations specialists investigate suspicious activity. Governance, risk and compliance professionals help ensure controls are useful and up to date. Security architects design safer systems, while cyber leaders connect security decisions to wider business priorities. The common thread is judgement. Good cybersecurity professionals don't just operate tools or follow checklists. They ask questions, challenge assumptions and help the organisation respond when the picture is unclear. For employers, this should shape how they build their teams. Alongside technical knowledge, they need people with curiosity, problem-solving skills and the confidence to speak up when something doesn't seem right. From looking secure to being prepared Cybersecurity Awareness Month is a chance to look again at the confidence organisations place in their defences. Can leaders explain what their systems might not detect? Are security checks keeping pace with changes across the business? Do teams have the skills and freedom to raise concerns, even when the reports suggest everything is fine? These questions won't remove every risk. But they can help organisations find weaknesses earlier and make better decisions about where to focus their efforts. Real security isn't about having a perfect-looking report. It's about understanding the risks, being ready to act and having the right people in place to protect what matters. At Harvey Nash, we help organisations find the cybersecurity professionals they need to strengthen their defences, improve resilience and plan for what's next. Explore our Cybersecurity specialism to see how we can support your team.

Why looking secure isn't the same as being secure A clean security report. No major alerts. The latest AI tools keeping watch over your systems. For many organisations, these are signs that their cybersecurity is working. But what if a threat goes unnoticed? And how can leaders be sure their security measures are protecting the business, rather than simply looking good on paper? As we mark Cybersecurity Awareness Month, it's a good time to ask whether organisations know how secure they really are. Cybersecurity isn't just about having the right tools or passing an audit. It's about knowing what those tools might miss, keeping up with new risks, and having the talent to make the right decisions when something doesn't look right. What happens when the alarm doesn't go off? AI is helping cybersecurity teams work faster. It can review large amounts of information, spot unusual activity and support investigations. That's valuable, particularly when teams have so much to monitor. But AI has limits. Ankur Anand, Chief Information Officer at Harvey Nash, recently highlighted this in comments to ZDNET. He pointed to research testing 23 AI models against evidence from cyber incidents. The models struggled to identify attacks that didn't trigger a security alert. As Ankur explained: "If nothing trips the alarm, an AI built to investigate alarms has nothing to chew on." It's a simple but important point. If a system is built to investigate warnings, what happens when the warning never comes? A dashboard with no alerts might be reassuring. It doesn't necessarily mean there is no threat. Leaders need to know what their tools can detect, what they might miss and how those gaps are checked. That means asking more questions, not just buying more technology. Why passing an audit is only part of the picture The same applies to cybersecurity rules and processes. Security audits and compliance checks are important. They help organisations meet their responsibilities and show that safeguards are in place. But passing a check on one day doesn't mean everything will remain secure the next. Systems change. Businesses introduce new software, employees use different tools, and new risks appear. A document showing that a security check was completed months ago may tell leaders very little about what's happening now. This was one of the themes explored by Justin Pagano, Senior Director of GRC Engineering at Vanta, in a conversation with David Savage on Harvey Nash's Tech Talks podcast. Justin questioned the reliance on PDFs and one-off checks to demonstrate that organisations are managing risk. His message was that security needs to keep pace with the way businesses actually operate. That means looking beyond whether a process has been followed, asking whether security measures are still working, whether new risks have appeared and whether the right people are responsible for acting on them. The people behind stronger cybersecurity Technology and rules are only part of the answer. Organisations also need people who can look beyond what a system tells them. This is where cybersecurity talent becomes especially important. Ankur has spoken about the value of professionals who actively look for threats, even when no alert tells them where to start. He also highlights the need for people who can question AI results and explain technical risks in a way that business leaders understand. These skills matter because someone still needs to decide whether an unusual pattern is a genuine threat, which issues need urgent attention and what action the business should take. Different roles play a part. Security operations specialists investigate suspicious activity. Governance, risk and compliance professionals help ensure controls are useful and up to date. Security architects design safer systems, while cyber leaders connect security decisions to wider business priorities. The common thread is judgement. Good cybersecurity professionals don't just operate tools or follow checklists. They ask questions, challenge assumptions and help the organisation respond when the picture is unclear. For employers, this should shape how they build their teams. Alongside technical knowledge, they need people with curiosity, problem-solving skills and the confidence to speak up when something doesn't seem right. From looking secure to being prepared Cybersecurity Awareness Month is a chance to look again at the confidence organisations place in their defences. Can leaders explain what their systems might not detect? Are security checks keeping pace with changes across the business? Do teams have the skills and freedom to raise concerns, even when the reports suggest everything is fine? These questions won't remove every risk. But they can help organisations find weaknesses earlier and make better decisions about where to focus their efforts. Real security isn't about having a perfect-looking report. It's about understanding the risks, being ready to act and having the right people in place to protect what matters. At Harvey Nash, we help organisations find the cybersecurity professionals they need to strengthen their defences, improve resilience and plan for what's next. Explore our Cybersecurity specialism to see how we can support your team.

How can leaders be sure their security measures are protecting the business, rather than simply looking good on paper?
Latest news
How CIOs use AI to better manage data lifecycles

How CIOs use AI to better manage data lifecycles

AI needs high-quality data, and experts believe emerging technology can help solve the information management challenge. Yet while evidence suggests pioneers are making progress, significant adoption barriers remain.
Podcasts
Tech Talks: Janine Luk, Senior Data Engineer, Datatonic

Tech Talks: Janine Luk, Senior Data Engineer, Datatonic

My Job Didn’t Exist When I Started Coding Eight years ago, Janine Luk was teaching herself to code at night and at weekends while working in mar...
Podcasts
Tech Talks: Steve Hemmings, Client CTO, Insight

Tech Talks: Steve Hemmings, Client CTO, Insight

The Truth About the Paper Behind Global Trade Somewhere in a port right now, a cargo document is being stamped by hand. By the figures Steve Hemmings ...
View all news & insights