1 to 25 of 29 ISO/IEC 27001 Jobs in Surrey

range of quality, environmental, information security, functional safety and health & safety standards, including: ISO 9001 IATF 16949 ISO 14001 TISAX / ISO 27001 ISO 26262 ISO 21434 ASPICE ISO 45001 Reporting to the Operational Excellence … wider team. Committed to transparency, accountability and the highest standards of personal and professional integrity. Essential Experience & Qualifications Degree in Engineering or another numerate / scientific discipline, or equivalent relevant experience. Strong knowledge of management system and regulatory standards. Experience developing and implementing new processes. Experience conducting internal audits. ...

liabilities and develops mitigation plans. Partners with external auditors to coordinate and facilitate PCI-DSS, ISO 27001, etc. compliance / audit efforts. This position typically works under limited supervision and direction. Candidates for this position will regularly exercise discretionary and substantial decision-making authority.RESPONSIBILITIESEssential … Risk Assessment methodology, policy, strategy and processes.Facilitate all security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination.Responsible for coordination with the Internal / External Auditors and Information Technology teams to successfully complete periodic audits. Works independently to schedule and conduct control walk through meetings and address follow ...

Infrastructure & Security Manager | Egham, Surrey (Hybrid / Flexible Working) | Competitive Pay Secure. Innovate. Lead. Are you an experienced Infrastructure & Security professional looking for a role where you can genuinely shape the future of a growing technology business? Our client is helping leading brands including Odeon Cinemas Group, Virgin Wines … such as GitHub, Rundeck or Ansible, alongside industry certifications including Azure, CISSP, CISM, CompTIA Security+ or ISO 27001 Lead Auditor / Implementer. Why Join? This is an opportunity to join an ambitious, growing SaaS business where your expertise will have real influence. You'll work ...

testing, supplier security and incident response. What You’ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver security strategies, policies, management plans, procedures and governance in accordance with relevant frameworks and industry standards. … Audit Reports, and Incident & Recovery Plans. Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards. Experience facilitating, coordinating and directing ITHCs, including Security Requirements Traceability Matrix or Scoping Documents and prioritisation ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCCEnsure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes … Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCC Ensure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures … Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards Experience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements ...

operational best practices. Act as a senior escalation point for complex security and infrastructure security issues. Ensure alignment with frameworks such as ISO 27001, NIST, CIS Controls, and relevant regulatory requirements (e.g., GDPR), as well as shareholder directives. Advise senior stakeholders on cyber threats, emerging risks … vulnerability scanners and cloud security platforms. Experience with ISO 27001 compliance. Experience in Risk Management. Knowledge & Skills Cloud security (Azure / AWS). Identity & access management, MFA, RBAC, PAM. Network and endpoint security. Threat detection, incident response and vulnerability management. Secure development and DevSecOps principles. ...

improve productivity, campaign delivery and lead nurturing. Handle customer and marketing data responsibly, in line with their information security and quality standards (ISO 27001, ISO 9001 and ISO 42001) and UK GDPR. Build and deliver multi-step lead generation campaigns across email ...

innovative space endeavours. Key Responsibilities include: Overseeing and assuring all contractual security obligations for product and service deliverables, including accreditation compliance such as ISO 27001, CE+, and DCC. Developing and maintaining governance frameworks, policies, and procedures aligned with industry standards and best practices. Managing cybersecurity assurance … developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such ...

architectures.Experience managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities.Strong understanding of TCP / IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts.Experience troubleshooting SSL / TLS inspection, certificate services, authentication flows, identity … migrations, or large-scale enterprise modernisation programmes.Preferred CertificationsZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certificationZscaler Certified Cloud Professional (ZCCP) or specialised ZIA / ZPA certifications.Microsoft security, identity, endpoint, or Azure certifications.CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications.Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator Associate ...

internal and customer networks. Act as a technical centre of excellence for network and device security. Monitor and investigate security events using SIEM, IDS / IPS and other security tools. Investigate and resolve security incidents and provide incident response support. Manage vulnerabilities and support penetration testing and security assessments. … with customers, suppliers and technology partners as required. Technical Requirements Strong hands-on experience with: Cisco firewalls, routers and switches Juniper platforms SIEM IDS / IPS Vulnerability management Penetration testing Computer forensics Secure network design and management Security monitoring and incident investigation Good knowledge of: ISO 27001 ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership … / CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI / CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities.This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership of CI / … testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for:Designing and maintaining CI / CD pipelines within Azure DevOpsDeploying Azure applications and infrastructure using TerraformSupporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault, VNets, Private ...

Jersey, Leeds, Liverpool, London, Manchester, Milton Keynes, Newcastle, Nottingham, Port Talbot, Reading, Southampton, St Albans Business Line Technology & Transformation Job Type Permanent / FTC Date published 13-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

executive leadership on risk-based decision makingEstablish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirementsOversee enterprise-wide risk management and compliance:Conduct regular risk and information security ...

customer environments. Designing, implementing, testing and troubleshooting security solutions. Monitoring security tools and investigating security events and incidents. Supporting and maintaining SIEM, IDS / IPS and vulnerability management solutions. Carrying out and supporting penetration testing and vulnerability assessments. Providing third-line support for network security issues. Developing and maintaining … managing secure network environments. Strong experience with Cisco firewalls, routers and switches . Experience with Juniper platforms . Good working knowledge of SIEM, IDS / IPS and vulnerability management tools . Experience with penetration testing and computer forensic tools . Knowledge of ISO 27001 ...

strong IT, English and Maths skills Good working knowledge of Microsoft Office, including Word, Excel and Outlook Basic networking knowledge Experience managing Windows PCs / Servers within an Active Directory environment Experience with Linux, particularly Debian / Ubuntu package management, web servers, NFS and SSH An understanding … system security and business continuity Basic scripting experience in Bash and / or PowerShell Strong organisational skills and the ability to manage and prioritise multiple tasks Ability to work independently while also contributing effectively as part of a team Desirable Full, clean UK driving licence Experience with ...

strategic Information & Cybersecurity Assurance Manager for a UK aerospace project. You will lead security assurance across product and service delivery, drive accreditation like ISO 27001 and DCC, and manage governance, controls, and risk assessments. You will coordinate certification efforts and align security architecture with industry standards. ...

cybersecurity and information assurance across their products, programmes and spacecraft lifecycle. This is a genuinely broad, senior assurance role - spanning certification (ISO 27001, CE+, DCC), ITHCs, Secure by Design reviews, supplier security, and space licensing assurance. You'll sit across Change Advisory Boards, incident response ...

ideal candidate will have a strong hands-on background in cyber security and cloud technologies, alongside experience in managing security frameworks like ISO 27001. This position requires excellent communication skills and the ability to advise on security investments and best practices. #J-18808-Ljbffr ...

Strong verbal and written communications skills. Knowledge of the following is highly desirable for the role: Structured security frameworks, such as HMG SPF and ISO27001; Security, technical and enterprise architecture methods such as TOGAF and SABSA; Technical risk assessments; Software development methods and techniques e.g. Agile methods such as SCRUM … recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey with Actica. ...

include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS / IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL Qualifications and requirements for the Cyber Security Engineer: Strong experience with Cisco Firewalls, Routers and Switches Experience with Juniper networking platforms Hands … knowledge of SIEM, IDS / IPS and vulnerability management Experience carrying out or supporting penetration testing activities Understanding of ISO27001, GDPR and ITIL best practices Ability to communicate technical cyber security concepts to both technical and non-technical stakeholders Eligible to obtain SC Security Clearance Desirable Experience Telecommunications industry ...

responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS / IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements.The ideal … infrastructureThe Person:Strong experience with Cisco and Juniper networking technologiesProven background in cybersecurity tools including SIEM, IDS / IPS and penetration testingKnowledge of ISO27001, GDPR and security frameworksAbility to troubleshoot and resolve complex security issues independently Reference Number:BBBH276007Rise Technical Recruitment Ltd acts an employment agency for permanent roles ...

responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS / IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements. … Strong experience with Cisco and Juniper networking technologies Proven background in cybersecurity tools including SIEM, IDS / IPS and penetration testing Knowledge of ISO27001, GDPR and security frameworks Ability to troubleshoot and resolve complex security issues independently Reference Number:BBBH(phone number removed) Rise Technical Recruitment Ltd acts ...

Product Manager / Product Owner - Digital Platform - API - Integrations - Standards & Architecture As a Development Manager you will lead the strategy, ownership, delivery and ongoing evolution of the organisation's Digital Platform and API / Integration capabilities. You'll ensure digital applications and integrations are designed, governed and delivered … delivery teams. Good understanding of Agile methodologies and product delivery practices. Knowledge of information security, data protection and compliance standards, including GDPR and ISO 27001. Strong analytical and problem-solving skills. Experience presenting solutions through architecture or technical governance forums. Professional certifications such as CSPO, PSPO, SAFe POPM ...