1 to 25 of 26 ISO/IEC 27001 Jobs in Surrey

range of quality, environmental, information security, functional safety and health & safety standards, including: ISO 9001 IATF 16949 ISO 14001 TISAX / ISO 27001 ISO 26262 ISO 21434 ASPICE ISO 45001 Reporting to the Operational Excellence … wider team. Committed to transparency, accountability and the highest standards of personal and professional integrity. Essential Experience & Qualifications Degree in Engineering or another numerate / scientific discipline, or equivalent relevant experience. Strong knowledge of management system and regulatory standards. Experience developing and implementing new processes. Experience conducting internal audits. ...

liabilities and develops mitigation plans. Partners with external auditors to coordinate and facilitate PCI-DSS, ISO 27001, etc. compliance / audit efforts. This position typically works under limited supervision and direction. Candidates for this position will regularly exercise discretionary and substantial decision-making authority. RESPONSIBILITIESEssential … methodology, policy, strategy and processes. Facilitate all security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination. Responsible for coordination with the Internal / External Auditors and Information Technology teams to successfully complete periodic audits. Works independently to schedule and conduct control walk through meetings and address follow ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCCEnsure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes … Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability ...

expertise in company bespoke products and security ensuring integrity and security of networks; Good working knowledge & experience of Cisco Firewalls, Routers& Switches Compliance standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS / IPS) Pen Testing tools Vulnerability Management Design, build, test, commission and troubleshoot security solutions (IDS / … networks including the following systems: Cisco Firewalls, Routers, Switches Juniper platforms SIEM tools IDS / IPS Penetration testing (PEN Testing) Computer Forensic tools ISO27001 & GDPR knowledge Ability to communicate network security issues to peers and management Ability to absorb and quickly gain and retain knowledge of NSSLGlobal bespoke products ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems rather than just identify them. CISSP, CCSP or Security+ would be useful, but practical experience carries ...

innovative space endeavours. Key Responsibilities include: Overseeing and assuring all contractual security obligations for product and service deliverables, including accreditation compliance such as ISO 27001, CE+, and DCC. Developing and maintaining governance frameworks, policies, and procedures aligned with industry standards and best practices. Managing cybersecurity assurance … developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such ...

responsible AI or AI risk management. Proven experience developing and implementing governance frameworks and controls. Working knowledge of relevant standards and frameworks, including ISO 27001, ISO 42001 and NIST AI RMF. Strong understanding of security, privacy and third‐party risk. Excellent stakeholder engagement ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems rather than just identify them. CISSP, CCSP or Security+ would be useful, but practical experience carries ...

managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities. Strong understanding of TCP / IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts. Experience troubleshooting SSL / TLS inspection, certificate services, authentication flows … large-scale enterprise modernisation programmes. Preferred CertificationsZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certificationZscaler Certified Cloud Professional (ZCCP) or specialised ZIA / ZPA certifications. Microsoft security, identity, endpoint, or Azure certifications. CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications. Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator ...

Infrastructure Engineer / Security An excellent opportunity for an experienced Infrastructure Engineer with a strong security focus to support, maintain and enhance secure IT environments. The role combines infrastructure management, cyber security, project delivery and 3rd line support, ensuring systems remain secure, resilient, highly available and compliant. You will … hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background in networking technologies such as TCP / IP, DNS, firewalls and VPNs is essential. Exposure to Infrastructure-as-Code and automation tools including Terraform, Ansible, Python or Bash, together with knowledge of Docker ...

Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where you'll have genuine influence. You'll be trusted to assess challenges, recommend solutions, lead ...

reviewing logs, identifying root causes and implementing remediation. Knowledge & Skills Technical Understanding, awareness or experience of the following: Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies and load balancers. Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python or Bash. Familiarity … with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership … / CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI / CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services ...

standards.· Review and remediate infrastructure vulnerabilities.· Support access control processes, including access· reviews, privileged access checks, and enforcement of least privilege principles.· Support endpoint / server security controls.· Ensure appropriate logging and security monitoring is enabled and reviewed.· Support encryption and certificate-management requirements.· Review infrastructure against security standards … incidents, reviewing logs, identifying root causes, and implementing remediation. Knowledge & SkillsTechnical (Understanding, awareness or experience with the following)· Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies, and load balancers.· Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash.· Familiarity ...

Proven experience of AWS-hosted environment security and a good understanding of compliance frameworks including ISO 27001, SOC 2 and CIS Foundations then we have an excellent opportunity for you. Our blue chip client is looking to recruit an AWS Security Analyst, paying ...

company bespoke products and security ensuring integrity and security of networks; Good working knowledge & experience of o Cisco Firewalls, Routers& Switches, o Compliance standards (ISO27001 and ITIL) o Security tools sets (SIEM, IDS / IPS) o Pen Testing tools o Vulnerability Management · Design, build, test, commission and troubleshoot security … Firewalls, Routers, Switches o Juniper platforms o SIEM tools o IDS / IPS o Penetration testing (PEN Testing) o Computer Forensic tools o ISO27001 & GDPR knowledge · Ability to communicate network security issues to peers and management · Ability to absorb and quickly gain and retain knowledge of bespoke products & satellite ...

strategic Information & Cybersecurity Assurance Manager for a UK aerospace project. You will lead security assurance across product and service delivery, drive accreditation like ISO 27001 and DCC, and manage governance, controls, and risk assessments. You will coordinate certification efforts and align security architecture with industry standards. ...

Manager to own cybersecurity and information assurance across their products, programmes and spacecraft lifecycle. This is a broad, senior assurance role - spanning certification (ISO 27001, CE+, DCC), ITHCs, Secure by Design reviews, supplier security, and space licensing assurance. You'll sit across Change Advisory Boards, incident ...

cybersecurity and information assurance across their products, programmes and spacecraft lifecycle. This is a genuinely broad, senior assurance role - spanning certification (ISO 27001, CE+, DCC), ITHCs, Secure by Design reviews, supplier security, and space licensing assurance. You'll sit across Change Advisory Boards, incident response ...

Infrastructure Engineer / Security An exciting opportunity for a Security Infrastructure Engineer to support, maintain and enhance secure IT infrastructure environments. This role combines project delivery, infrastructure improvement, cyber security, and 3rd line support, ensuring systems remain secure, resilient and compliant. Key Responsibilities Maintain infrastructure services to agreed availability … Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking technologies including TCP / IP, DNS, firewalls and VPNs. Knowledge of automation and Infrastructure-as-Code tools such as Terraform, Ansible, Python or Bash. Familiarity with Docker ...

Routers and Switches Juniper technologies SIEM platforms IDS / IPS solutions Vulnerability management Penetration testing Computer forensic tools Secure network design and administration ISO27001 and GDPR compliance You'll also possess: Strong troubleshooting and analytical skills Excellent communication skills A proactive and organised approach The ability to manage multiple ...

Strong verbal and written communications skills. Knowledge of the following is highly desirable for the role: Structured security frameworks, such as HMG SPF and ISO27001; Security, technical and enterprise architecture methods such as TOGAF and SABSA; Technical risk assessments; Software development methods and techniques e.g. Agile methods such as SCRUM … recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey with Actica. ...

include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS / IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL Qualifications and requirements for the Cyber Security Engineer: Strong experience with Cisco Firewalls, Routers and Switches Experience with Juniper networking platforms Hands … knowledge of SIEM, IDS / IPS and vulnerability management Experience carrying out or supporting penetration testing activities Understanding of ISO27001, GDPR and ITIL best practices Ability to communicate technical cyber security concepts to both technical and non-technical stakeholders Eligible to obtain SC Security Clearance Desirable Experience Telecommunications industry ...

understanding of cyber security trends and threats. Experience in use and application of security risk management frameworks such as NIST CSF and ISO 27001.Experience in a consulting environment. Effective business acumen … understanding of the cyber security challenges faced by organisations and their supply chains. Ability to conduct F2F engagements to risk assess suppliers and articulate / pitch security advice, often at a technical level, directly to key customer and their supplier's stakeholders. Experience with relevant supply chain risk management ...

work and share ideas with the team Take part in training and development activities and support team knowledge-sharing Ensure processes support Isio’s ISO27001 What we’re looking for A good understanding of DB / DC pension schemes and how benefits are calculated Some experience in delivering calculation … solutions across pensions administration systems Experience of relational databases Some programming experience (e.g. SQL / .NET / VBA) or willingness to learn Experience of modern pensions administration systems Ability to interpret benefit specification and translate into calculations An understanding of (or willingness to learn) audit, testing and sign ...