1 to 25 of 32 ISO/IEC 27001 Jobs in Berkshire

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

understand business requirements and convert them into technical specifications and solutions. Experience working alongside functional consultants and business stakeholders. Familiarity with SAP S / 4HANA development concepts and frameworks. Exposure to SAP BTP and modern SAP development tools. Experience working within Agile delivery methodologies. Strong analytical and problem-solving … Fiori, SAP UI5, and OData development. Exposure to CDS Views and RAP development frameworks. Experience working within consultancy or client-facing project environments. Location / Working Pattern Based in Slough, UK Hybrid working arrangement. Required onsite in Slough Tuesday to Thursday each week. Remote working available on remaining working ...

Role Title: Technology Control Frameworks Lead Duration: contract to run until 31 / 05 / 2027 Location: Wokingham. Hybrid 2-3 days per week onsite Rate: up to £506 p / d Umbrellainside IR35 Clearance required: Active SC Clearance is required Role purpose / summary Design … measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal / ...

Role Title: Technology Control Frameworks Lead Duration: contract to run until 31 / 05 / 2027 Location: Wokingham. Hybrid 2-3 days per week onsite Rate: up to £506 p / d Umbrella inside IR35 Clearance required: Active SC Clearance is required Role purpose / summary … measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal / ...

Role Title: Technology Control Frameworks Lead Duration: contract to run until 31 / 05 / 2027 Location: Wokingham. Hybrid 2-3 days per week onsite Rate: up to £506 p / d Umbrella inside IR35 Clearance required: Active SC Clearance is required Role purpose / summary … measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal / ...

title Senior Security Architect Ref 46225 Division Digital Location Hybrid - Clearwater Court - RG1 8DB Contract type Permanent Full / Part-time Full-time Salary Competitive salary up to £86,000 per annum, depending on experience Job grade C Closing date 11 / 11 / … platform, such as AWS or GCP. Security Frameworks & Standards: Experience applying recognised security frameworks, standards, and methodologies, including ISO 27001 / 27002, NIST CSF, CIS Controls, CAF, and Secure by Design principles. Stakeholder Engagement: Proven ability to lead security architecture workshops, influence technical and business ...

deliver it. Join us and help create outstanding service experiences that make a real difference every day. Your Daily Business As an IT / OT Network Administrator with a focus on Cisco LAN technologies, you will ensure the stability, security, and performance of our corporate and industrial network environments. … Ethernet switches, wireless controllers, and access points, while ensuring configurations follow internal standards and best practices. OT Network Support: Operate, support, and maintain IT / OT network infrastructures leveraging technologies such as MST, HRSP, and multicast, providing stable and resilient network connectivity for industrial communication protocols including PROFINET, Modbus ...

Technology Control Frameworks Lead - MUST HAVE SC CLEARANCE - Wokingham and remote - 5 months+ / RATE: £480 per day inside IR35 / START DATE: JANUARY One of our Blue Chip Clients is urgently looking for a Technology Control Frameworks Lead (Cyber Security). Please find some details below: CONTRACTOR … MUST BE SC CLEARED (active) Location: Wokingham| Hybrid - 50 / 50 MUST BE PAYE THROUGH UMBRELLA Description: Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create a single, coherent and practical set of technology, cyber security and IT controls, with clear control objectives ...

Assurance Lead security risk identification, assessment, treatment and acceptance activities. Conduct threat modelling, security assessments and architectural risk reviews. Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53. Support security accreditation, governance and assurance processes. Provide recommendations to reduce risk while enabling … compliance activities. Strong understanding of security architecture frameworks and methodologies. Experience conducting threat modelling, risk assessments and security assurance activities. Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks. Experience designing secure cloud, infrastructure and network solutions. Strong stakeholder ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding of information security control tools Experience ...

Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO / IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built ...

role requires consolidating standards and ensuring traceability across technologies and processes. The successful candidate will map controls to originating frameworks (ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, CAF, Cyber Essentials Plus) and define governance with #J-18808-Ljbffr ...

Umbrella, inside IR35). You will design and develop a unified set of technology, cyber security and IT controls, mapping to ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF and CAF, and drive governance across Technology, Security and Risk teams. ...

part - Our Operational Technology keeps energy moving safely and reliably - and this role plays a vital part in protecting it. As an OT Analyst / Technician, you'll provide hands-on support across our OT cybersecurity and resilience activities, ensuring that industrial control systems remain secure, compliant and operationally … . Ability to work effectively with engineers, vendors, and cybersecurity teams to maintain secure and resilient OT operations. Degree in Cybersecurity, IT / Engineering (or equivalent experience); relevant OT security certifications preferred. Excellent collaboration and communication skills, enabling effective facilitation across operations, finance, compliance, architecture, and delivery teams ...

identifying areas for improvement. Advising on security strategy, governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client … information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and / or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. Independent delivery ...

external ecosystem partners to build reliably on top of Keyloop infrastructure.Drive cloud-native architecture decisions, leveraging AWS services and infrastructure-as-code practices (Terraform / Pulumi) to ensure scalability, resilience, and cost efficiency.Champion platform security-by-design, ensuring adherence to enterprise security standards, compliance frameworks (ISO 27001 … across Keyloop’s product portfolio, providing consistent APIs, event streaming, and shared infrastructure rather than duplicating capability across product teams.Design and deliver low-code / no-code integration capabilities that enable rapid, standardised connectivity with third-party systems across the automotive ecosystem, including OEM partners, dealer group platforms ...

platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Head of Security Engineering Job LocationsUK-MaidenheadPosted Date2 days ago(09 / 11 / 2026 06:32)Job ID2026-7022# of Openings1CategoryInformation TechnologyBanding7 Job Purpose The Head of Security Engineering is responsible for leading … isolation. DevSecOps & Secure Software Delivery Define and lead the Security Engineering approach to DevSecOps and secure software delivery. Embed automated security controls within CI / CD and engineering workflows. Lead adoption and optimisation of SAST, DAST, SCA, secrets scanning and related application-security capabilities. Establish reusable security configurations, workflows ...

Senior AI andamp; Automation Engineer – Azure / Terraform / AI Automation Location: Hungerford Salary: Up to £70,000 per annum Working Pattern: Hybrid – 3 days onsite Employment Type: Permanent, Full-Time The Opportunity We’re working with an established international software organisation seeking a Senior AI andamp; Automation … operational efficiency and influence engineering practices. The ideal candidate will bring strong experience in Terraform, Microsoft Azure, Infrastructure as Code (IaC), scripting and CI / CD , alongside experience with AI-assisted development tools, LLMs or automation agents. This isn’t simply a role maintaining existing infrastructure. You’ll have ...

engineers and driving adoption of AI-first ways of working. We're looking for someone with strong hands-on experience in cloud automation, Terraform / Pulumi, CI / CD, scripting, security, and AI-powered tooling who enjoys solving complex technical challenges and influencing engineering standards across the organisation … automation and scripting experience across multiple languages Advanced Infrastructure as Code across Azure and OCI (Terraform, Bicep) Proven design and delivery of CI / CD and automation solutions Experience building and operating AI / LLM-assisted tooling or agents Strong grasp of security, identity (Microsoft Entra / ...

comprehensive cyber assurance strategy covering technology, operational environments, third parties and critical suppliers. Lead NESO's compliance activities relating to NIS Regulations, CAF, ISO27001 and other applicable regulatory obligations. Manage relationships with regulators, auditors and external assurance providers. Establish metrics and reporting that provide meaningful insight into control effectiveness … Experience building and leading high-performing teams. Desirables Energy sector experience. Experience working closely with NCSC, Ofgem or other regulatory bodies. CISSP, CISM, CRISC, ISO27001 Lead Implementer / Auditor or equivalent. Experience of developing governance, risk management and assurance approaches for emerging technologies, including Artificial Intelligence (AI), Generative ...

demonstrate risk managed and controls operating effectively. The role requires building security assurance across ISO 27001, PCI-DSS, NIST / CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

minimum of 3 years proven experience in cybersecurity sales. Familiarity with Microsoft security technologies and leading vendors (e.g., Mimecast, CrowdStrike). Background in MSP / MSSP environments or channel sales models. Direct experience of working for, or closely with, leading security vendors suchas Microsoft, Mimecast, Crowdstrike. Experience working with … audiences. Technical & Industry Knowledge: Understanding of cybersecurity frameworks and compliance (ISO 27001, NIST, GDPR). Familiarity with threat detection, EDR / XDR, SIEM, email security, and identity management solutions. Awareness of current threat landscape and MSSP service models (SOC, vulnerability management, incident response). ...

other areas: Minimum of 3 years' experience in a relevant full-time security position A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor / Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. … ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of managing Security incident and investigations including APT threat actors Some knowledge of specialized security tools would be highly desirable (e.g. Palo Alto ...

Control Tester - Cyber Security Location: UK - details available on application Sector: Cyber Security / IT Risk & Assurance About the Role We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment. You will assess the design and operational effectiveness of security … Experience working in a regulated or complex organisation. Exposure to critical national infrastructure environments. Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll play an important role in strengthening information security assurance by helping assess whether cybersecurity controls ...