1 to 25 of 36 ISO/IEC 27001 Jobs in Berkshire

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

Skills: Technology Controls, GRC, Security, NIST / ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control … measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements: Analyse and rationalise ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal / ...

agreed SLAs and escalating complex or high‐impact issues when needed. Troubleshoot and maintain a diverse IT estate spanning Windows, macOS and Linux desktop / server environments, cloud services, applications and end‐user hardware. Monitor IT systems proactively, identifying performance or availability risks and supporting incident, problem, backup, recovery … support , with exposure to 3rd line support, in an SLA-driven technical environment. Strong troubleshooting capability across hardware and software, including Windows 10 / 11 and Windows Server, macOS, and Ubuntu Linux desktop / server environments . Hands‐on experience with modern workplace and cloud technologies such ...

agreed SLAs and escalating complex or high-impact issues when needed. Troubleshoot and maintain a diverse IT estate spanning Windows, macOS and Linux desktop / server environments, cloud services, applications and end-user hardware. Monitor IT systems proactively, identifying performance or availability risks and supporting incident, problem, backup, recovery … support , with exposure to 3rd line support, in an SLA-driven technical environment. Strong troubleshooting capability across hardware and software, including Windows 10 / 11 and Windows Server, macOS, and Ubuntu Linux desktop / server environments . Hands-on experience with modern workplace and cloud technologies such ...

understand business requirements and convert them into technical specifications and solutions. Experience working alongside functional consultants and business stakeholders. Familiarity with SAP S / 4HANA development concepts and frameworks. Exposure to SAP BTP and modern SAP development tools. Experience working within Agile delivery methodologies. Strong analytical and problem-solving … Fiori, SAP UI5, and OData development. Exposure to CDS Views and RAP development frameworks. Experience working within consultancy or client-facing project environments. Location / Working Pattern Based in Slough, UK Hybrid working arrangement. Required onsite in Slough Tuesday to Thursday each week. Remote working available on remaining working ...

Role Title: Technology Control Frameworks Lead Duration: contract to run until 31 / 05 / 2027 Location: Wokingham. Hybrid 2-3 days per week onsite Rate: up to £506 p / d Umbrella inside IR35 Clearance required: Active SC Clearance is required Role purpose / summary … measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements : Analyse and rationalise ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal / ...

title Senior Security Architect Ref 46225 Division Digital Location Hybrid - Clearwater Court - RG1 8DB Contract type Permanent Full / Part-time Full-time Salary Competitive salary up to £86,000 per annum, depending on experience Job grade C Closing date 11 / 11 / … platform, such as AWS or GCP. Security Frameworks & Standards: Experience applying recognised security frameworks, standards, and methodologies, including ISO 27001 / 27002, NIST CSF, CIS Controls, CAF, and Secure by Design principles. Stakeholder Engagement: Proven ability to lead security architecture workshops, influence technical and business ...

deliver it. Join us and help create outstanding service experiences that make a real difference every day. Your Daily Business As an IT / OT Network Administrator with a focus on Cisco LAN technologies, you will ensure the stability, security, and performance of our corporate and industrial network environments. … Ethernet switches, wireless controllers, and access points, while ensuring configurations follow internal standards and best practices. OT Network Support: Operate, support, and maintain IT / OT network infrastructures leveraging technologies such as MST, HRSP, and multicast, providing stable and resilient network connectivity for industrial communication protocols including PROFINET, Modbus ...

Analyst / Technician### OT Analyst / TechnicianApply: Windsor: Full time: Posted Today: End Date: November 14, 2026 (17 days left to apply): R0083532**Join us, be part of more.**We’re so much more than an energy company. We’re a family of brands revolutionising how we power … part** - Our Operational Technology keeps energy moving safely and reliably — and this role plays a vital part in protecting it. As an OT Analyst / Technician, you’ll provide hands‐on support across our OT cybersecurity and resilience activities, ensuring that industrial control systems remain secure, compliant and operationally ...

Technology Control Frameworks Lead - MUST HAVE SC CLEARANCE - Wokingham and remote - 5 months+ / RATE: £480 per day inside IR35 / START DATE: JANUARY One of our Blue Chip Clients is urgently looking for a Technology Control Frameworks Lead (Cyber Security). Please find some details below: CONTRACTOR … MUST BE SC CLEARED (active) Location: Wokingham| Hybrid - 50 / 50 MUST BE PAYE THROUGH UMBRELLA Description: Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create a single, coherent and practical set of technology, cyber security and IT controls, with clear control objectives ...

Assurance Lead security risk identification, assessment, treatment and acceptance activities. Conduct threat modelling, security assessments and architectural risk reviews. Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53. Support security accreditation, governance and assurance processes. Provide recommendations to reduce risk while enabling … compliance activities. Strong understanding of security architecture frameworks and methodologies. Experience conducting threat modelling, risk assessments and security assurance activities. Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks. Experience designing secure cloud, infrastructure and network solutions. Strong stakeholder ...

such as: Cyber security governance, risk and compliance. Security control design and assessment. Cyber security frameworks, standards, regulatory and contractual requirements (ISO / IEC 27001, Cyber Essentials, Defence Cyber Certification, NIST Cybersecurity Framework and more) Evidence gathering, review and traceability. Gap assessments, compliance ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding of information security control tools Experience ...

Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO / IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built ...

role requires consolidating standards and ensuring traceability across technologies and processes. The successful candidate will map controls to originating frameworks (ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF, CAF, Cyber Essentials Plus) and define governance with #J-18808-Ljbffr ...

Umbrella, inside IR35). You will design and develop a unified set of technology, cyber security and IT controls, mapping to ISO / IEC 27001:2022, NIST SP 800-53, NIST CSF and CAF, and drive governance across Technology, Security and Risk teams. ...

identifying areas for improvement. Advising on security strategy, governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client … information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and / or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. Independent delivery ...

platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Head of Security Engineering Job LocationsUK-MaidenheadPosted Date3 days ago(09 / 11 / 2026 06:32)Job ID2026-7022# of Openings1CategoryInformation TechnologyBanding7 Job Purpose The Head of Security Engineering is responsible for leading … isolation. DevSecOps & Secure Software Delivery Define and lead the Security Engineering approach to DevSecOps and secure software delivery. Embed automated security controls within CI / CD and engineering workflows. Lead adoption and optimisation of SAST, DAST, SCA, secrets scanning and related application-security capabilities. Establish reusable security configurations, workflows ...

Senior AI andamp; Automation Engineer – Azure / Terraform / AI Automation Location: Hungerford Salary: Up to £70,000 per annum Working Pattern: Hybrid – 3 days onsite Employment Type: Permanent, Full-Time The Opportunity We’re working with an established international software organisation seeking a Senior AI andamp; Automation … operational efficiency and influence engineering practices. The ideal candidate will bring strong experience in Terraform, Microsoft Azure, Infrastructure as Code (IaC), scripting and CI / CD , alongside experience with AI-assisted development tools, LLMs or automation agents. This isn’t simply a role maintaining existing infrastructure. You’ll have ...

engineers and driving adoption of AI-first ways of working. We're looking for someone with strong hands-on experience in cloud automation, Terraform / Pulumi, CI / CD, scripting, security, and AI-powered tooling who enjoys solving complex technical challenges and influencing engineering standards across the organisation … automation and scripting experience across multiple languages Advanced Infrastructure as Code across Azure and OCI (Terraform, Bicep) Proven design and delivery of CI / CD and automation solutions Experience building and operating AI / LLM-assisted tooling or agents Strong grasp of security, identity (Microsoft Entra / ...

engineers and driving adoption of AI-first ways of working. We're looking for someone with strong hands-on experience in cloud automation, Terraform / Pulumi, CI / CD, scripting, security, and AI-powered tooling who enjoys solving complex technical challenges and influencing engineering standards across the organisation … automation and scripting experience across multiple languages Advanced Infrastructure as Code across Azure and OCI (Terraform, Bicep) Proven design and delivery of CI / CD and automation solutions Experience building and operating AI / LLM-assisted tooling or agents Strong grasp of security, identity (Microsoft Entra / ...

promoting a positive security culture across the organisation * Presenting cyber risks, recommendations and improvement plans to technical and non-technical stakeholders Required experience / qualifications of the Interim Cyber Security Lead position will include * Significant experience working within cyber security, information security or cyber resilience roles * Strong experience … standards * Experience within large or complex public sector environments * Security certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor, or equivalent * Experience supporting cloud and hybrid technology environments This is a fantastic opportunity for an experienced Cyber Security professional who enjoys helping organisations ...

comprehensive cyber assurance strategy covering technology, operational environments, third parties and critical suppliers. Lead NESO's compliance activities relating to NIS Regulations, CAF, ISO27001 and other applicable regulatory obligations. Manage relationships with regulators, auditors and external assurance providers. Establish metrics and reporting that provide meaningful insight into control effectiveness … Experience building and leading high-performing teams. Desirables Energy sector experience. Experience working closely with NCSC, Ofgem or other regulatory bodies. CISSP, CISM, CRISC, ISO27001 Lead Implementer / Auditor or equivalent. Experience of developing governance, risk management and assurance approaches for emerging technologies, including Artificial Intelligence (AI), Generative ...

demonstrate risk managed and controls operating effectively. The role requires building security assurance across ISO 27001, PCI-DSS, NIST / CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...