Job Description

About the role:

At

Holland & Barrett

, we're over a century old -- and still building like a startup. Our digital transformation has created a

highly distributed IT estate

, spanning corporate offices, hundreds of retail stores, manufacturing sites, and cloud environments. Securing that landscape at scale is critical -- and that's where you come in.



This is a

principal-level, hands-on security role

with genuine scope. You'll own the security architecture across our corporate IT environment, shaping how we protect networks, endpoints, email, and cloud platforms across a global business.



If you enjoy tackling real-world security challenges across diverse environments -- from head office to shop floor to cloud -- this role offers both complexity and impact.



The Role



As

Principal IT Security Engineer

, you'll be the technical authority for IT security across Holland & Barrett. You'll design and implement security controls end-to-end, working across network security, endpoint protection, email security, and Azure cloud security to deliver a cohesive, defense-in-depth strategy.



This is a strategic yet hands-on role, partnering closely with IT operations, security leadership, and business teams to embed security into day-to-day operations.



What You'll Do


Architect and implement

network security

(firewalls, IDS/IPS, segmentation) Own

email security

controls including phishing protection, encryption, and DLP Design and deploy

endpoint security

across corporate, retail, and manufacturing devices Lead

Azure security

architecture covering identity, network, data, and compliance Define and enforce IT security policies and standards Drive vulnerability management and remediation across the estate Lead and support

incident response

for infrastructure-related security events Continuously evolve the security posture in line with emerging threats

Key requirements:

Experience operating at

Principal or Senior IT Security Engineer

level Deep hands-on expertise in

network, endpoint, and email security

Strong

Azure security

experience, including IAM and network controls Background securing

distributed, multi-site environments

Experience with SIEM, vulnerability management, and threat intelligence tooling Ability to translate security strategy into practical, scalable solutions Strong communication and stakeholder engagement skills
Why Holland & Barrett?

Architect security at enterprise scale

across a global retail organisation Broad, technically rich role with real ownership and influence Work alongside a security team that values

hands-on expertise

Flexible working and a supportive, purpose-led culture
If you're an experienced security engineer ready to shape and protect a complex global IT environment, we'd love to hear from you.

What we offer:

What we offer:

Wellbeing & Lifestyle Benefits

Health Cash Plan Life Assurance Incentive Scheme - Based on company & personal performance Virtual GP Private Medical care FREE at-home blood test kit Holiday Purchase option Pension Contribution scheme Access to 'Wellhub' with gyms, studios and wellbeing apps

Discounts & Savings

25% Colleague Discount with FREE Standard Delivery Exclusive Discounts from a wide range of partners /EUR50 Annual Product Allowance to spend in store

Learning & Development

Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library AND MORE! Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an organisation with belonging at its heart - making health and wellness a way of life for everyone.


Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).

Division:

Technology

City:

London

Country:

UK

Job Type:

Full Time

Number of Hours:

37.5

Contract Type:

Permanent

Closing Date:

25 January 2026