1 to 25 of 51 ISO 27001 Lead Implementer Jobs in London

governance, risk and compliance programmes. This is a role for someone who has moved beyond task execution and is ready to drive workstreams, lead compliance activities, and act as a trusted point of contact for internal teams and external assessors.You will work across Checkout's core compliance … frameworks including PCI DSS v4.0.1, ISO 27001, SOC 2, and emerging regulatory obligations such as DORA and the EU AI Act, supporting our global footprint across Europe, MENA, APAC, and the Americas. You will coordinate audit evidence activities, conduct risk assessments, improve GRC processes ...

governance, risk and compliance programmes. This is a role for someone who has moved beyond task execution and is ready to drive workstreams, lead compliance activities, and act as a trusted point of contact for internal teams and external assessors. You will work across Checkout's core … compliance frameworks including PCI DSS v4.0.1, ISO 27001, SOC 2, and emerging regulatory obligations such as DORA and the EU AI Act, supporting our global footprint across Europe, MENA, APAC, and the Americas. You will coordinate audit evidence activities, conduct risk assessments, improve ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure … control is actually working or only described. What You Will Be Doing Compliance Execution Implement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform ...

choices simply and effectively Relevant professional qualification (e.g. CISSP, BCS Foundation Certificate in Data Protection, BCS CISMP, ISO / IEC 27001 Foundation, BCS Foundation Certificate in Cyber Security, CompTIA Security+, ISC2 Certified in Cybersecurity, BCS Foundation Certificate in IT, CompTIA ITF+, CompTIA A+ … CompTIA Network+, ISO 31000 Foundation). Essential Criteria Attention to detail and a structured approach to workEager to learn about IT network architecture and components, software / application security, infrastructure security, cloud. Active interest in new technical concepts and / or technologies. Good stakeholder collaboration skills. Desirable ...

good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules. Job Description Key Responsibilities: Security Operations & Incident Response Lead the Bank's cyber security operations capability, including oversight of security monitoring and detection services. Manage relationships with Managed Detection and Response … activities and investigations arising from security alerts and intelligence feeds. Identify recurring security weaknesses and drive remediation actions. 3rd-Party Cyber Risk Management Lead the Bank's 3rd-Party Cyber Risk Management framework. Assess supplier cyber security risks throughout the supplier lifecycle, including onboarding, ongoing monitoring ...

CTO. With Cyber Essentials Plus already achieved and a 24 / 7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly expanding enterprise AI estate. … Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC Line manage the IT Security Engineer and lead the organisation-wide security awareness programme Define identity, access and authentication standards, including RBAC, MFA and SSO Own the IT governance framework and regulatory ...

forums.Support operational resilience and outsourcing requirements relating to 3rd-party cyber security.Governance, Reporting & Continuous ImprovementDevelop and maintain operational cyber security procedures and standards.Support ISO 27001 certification, regulatory compliance activities and audit engagements.Contribute to cyber risk reporting, metrics and management information for senior management … intelligence and vulnerability management.Experience of security incident management and cyber crisis response.Experience of supplier cyber risk assessments and 3rd-party risk management.Understanding of ISO 27001, NIST CSF, FCA / PRA expectations and operational resilience requirements.Strong stakeholder management, communication and reporting skills.Qualifications:Minimum ...

CTO. With Cyber Essentials Plus already achieved and a 24 / 7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly expanding enterprise AI estate.You … benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOCLine manage the IT Security Engineer and lead the organisation-wide security awareness programmeDefine identity, access and authentication standards, including RBAC, MFA and SSOOwn the IT governance framework and regulatory / ...

Cyber Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000 / year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape … applications and integration platforms. Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead ...

Purpose: To lead 7IM’s cyber security function and own the day-to-day execution of the Cyber Security strategy across the 7IM Group. The role is accountable for protecting 7IM’s clients, colleagues, data, systems and services from current and emerging cyber threats, while supporting business … clear cyber roadmap, control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert ...

CYBER SECURITY & COMPLIANCE LEAD Hours Full-time, 9:30am – 5.30pm with flexibility required to support system changes, upgrades and critical incidents where necessary. Department IT / Risk & Compliance The Role The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving … expectations. Technical skills and expertise Essential Significant experience in cyber security, information security, or IT risk roles. Experience operating at a senior or lead level within a professional services or regulated environment. Strong understanding of security frameworks (e.g. ISO 27001, NIST ...

reports, risk assessments, and advisory outputs.Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials.Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements … internal methodologies and security services.Build and maintain strong client relationships with a service-focused mindset.Identify client challenges and future needs that may lead to service expansion opportunities.Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating ...

risk assessments, and advisory outputs. Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements … methodologies and security services. Build and maintain strong client relationships with a service-focused mindset. Identify client challenges and future needs that may lead to service expansion opportunities. Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars ...

Robert Half are working with a leading payments organisation is looking for an experienced ISO Implementation Consultant to support the development and delivery of its ISO certification programme. This is an initial four-month contract, working approximately 20 hours per week, supporting a Europe … wide programme. The successful candidate will have a strong background in ISO implementation, information security, GRC, technology risk or cyber security, with practical experience advising organisations on ISO requirements and supporting them through certification or audit readiness. The role will combine hands-on ISO ...

reference architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering … ISO 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI / CD pipelines across client delivery teams Engage senior stakeholders and executive teams with clear security risk reporting, remediation guidance ...

Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role … Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial ...

looking for a Head of Information Security to own our end-to-end security posture, govern our risk and compliance programme, and lead our IT Operations function. This is a VP Level role with company-wide scope. With approximately 200 employees across London, New York, Wroclaw, Antwerp … governance, and IT operations sit at the heart of that ambition.What you will be doingSecurity architecture and engineering– Define security architecture standards and lead threat modelling across the organisation– Establish and maintain long-term security architecture aligned to business strategy and regulatory requirements– Guide technology decisions ...

compliance risk register — identify, quantify, and track risks, distinguishing theoretical gaps from meaningful business and regulatory risk under EU / UK supervisory expectations. Lead information security risk assessments and compliance reviews for new products, features, vendors, and architectural changes that affect the EU / UK regulated attack … continuously improve information security policies, standards, and procedures aligned to DORA, the EU AI Act, NIS2 where in scope, and complementary frameworks (e.g., ISO 27001, SOC 2) where they overlap. Champion pragmatic governance — prioritize issues that represent real security or business risk over checkbox ...

Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing still is not an option … certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor ...

managed.Facilitate security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans.Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.Translate security frameworks and regulatory requirements into practical, operational standards and controls.Analyse security … Risk, Security Governance or Security Compliance.Experience developing and maintaining security policies, standards, controls and governance documentation.A strong understanding of security frameworks such as ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / ...

security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans. Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes. Translate security frameworks and regulatory requirements into practical, operational standards and controls. Analyse … Governance or Security Compliance. Experience developing and maintaining security policies, standards, controls and governance documentation. A strong understanding of security frameworks such as ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / ...

methodologies.Experience working with recognised frameworks and standards, including:NIST Cybersecurity Framework (CSF)NCSC Cyber Assessment Framework (CAF)ISO / IEC 27001 and ISO / IEC 27005CIS Critical Security ControlsCOBITExperience analysing risk data and translating findings into meaningful recommendations … Certified Information Systems Security Professional)CISM (Certified Information Security Manager)CRISC (Certified in Risk and Information Systems Control)CISA (Certified Information Systems Auditor)ISO 27001 Lead Implementer or Lead AuditorNCSC or other recognised cyber security ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF)NCSC Cyber Assessment Framework (CAF)ISO / IEC 27001 and ISO / IEC 27005CIS Critical Security ControlsCOBITExperience analysing risk data and translating findings into meaningful recommendations … Certified Information Systems Security Professional)CISM (Certified Information Security Manager)CRISC (Certified in Risk and Information Systems Control)CISA (Certified Information Systems Auditor)ISO 27001 Lead Implementer or Lead AuditorNCSC or other recognised cyber security ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk data and translating findings into … Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) ISO 27001 Lead Implementer or Lead Auditor NCSC or other recognised cyber ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk data and translating findings into … Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) ISO 27001 Lead Implementer or Lead Auditor NCSC or other recognised cyber ...