Identity Practice

About Bridewell   

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.   

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.   

Requirements

Who are we looking for? 

We are seeking an experienced and technically credible Identity Practice Lead to build and grow our Identity practice, with a particular focus on serving clients operating within Critical National Infrastructure (CNI). 

This is a strategic, hands-on leadership role where you will be responsible for designing, refining, and building a portfolio of identity services — spanning advisory, architecture, and delivery — that meets the heightened resilience, assurance, and regulatory expectations of CNI operators. Alongside service development, you will play a central role in upskilling and training our wider consulting community to deliver identity-based engagements confidently and consistently, and you will help shape the roadmap towards a Managed Identity Service offering. 

You will combine deep technical expertise in Identity and Access Management (IAM) with commercial acumen and a genuine passion for developing others. 

What you’ll be doing 

Practice Leadership & Strategy 

• Own the strategic vision, roadmap, and commercial growth plan for the Identity practice, aligned to broader business objectives. 

• Design, refine, and continuously evolve a structured portfolio of identity services — including identity strategy and maturity assessments, IAM architecture and design, Privileged Access Management (PAM), Identity Governance and Administration (IGA), and Zero Trust identity architectures — tailored to the needs of CNI and regulated sectors. 

• Ensure services are built to withstand the scrutiny of CNI-specific regulatory and assurance frameworks (e.g. NIS Regulations, CAF, sector-specific regulators), embedding resilience, segregation of duties, and OT/IT identity convergence considerations into service design. 

• Act as the senior technical authority and escalation point for identity engagements, ensuring quality, consistency, and technical rigour across all client delivery.