1 to 25 of 34 ISO/IEC 27001 Jobs in Surrey

range of quality, environmental, information security, functional safety and health & safety standards, including: ISO 9001 IATF 16949 ISO 14001 TISAX / ISO 27001 ISO 26262 ISO 21434 ASPICE ISO 45001 Reporting to the Operational Excellence … wider team. Committed to transparency, accountability and the highest standards of personal and professional integrity. Essential Experience & Qualifications Degree in Engineering or another numerate / scientific discipline, or equivalent relevant experience. Strong knowledge of management system and regulatory standards. Experience developing and implementing new processes. Experience conducting internal audits. ...

liabilities and develops mitigation plans. Partners with external auditors to coordinate and facilitate PCI-DSS, ISO 27001, etc. compliance / audit efforts. This position typically works under limited supervision and direction. Candidates for this position will regularly exercise discretionary and substantial decision-making authority.RESPONSIBILITIESEssential … Risk Assessment methodology, policy, strategy and processes.Facilitate all security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination.Responsible for coordination with the Internal / External Auditors and Information Technology teams to successfully complete periodic audits. Works independently to schedule and conduct control walk through meetings and address follow ...

liabilities and develops mitigation plans. Partners with external auditors to coordinate and facilitate PCI-DSS, ISO 27001, etc. compliance / audit efforts. This position typically works under limited supervision and direction. Candidates for this position will regularly exercise discretionary and substantial decision-making authority. RESPONSIBILITIESEssential … methodology, policy, strategy and processes. Facilitate all security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination. Responsible for coordination with the Internal / External Auditors and Information Technology teams to successfully complete periodic audits. Works independently to schedule and conduct control walk through meetings and address follow ...

Infrastructure & Security Manager | Egham, Surrey (Hybrid / Flexible Working) | Competitive Pay Secure. Innovate. Lead. Are you an experienced Infrastructure & Security professional looking for a role where you can genuinely shape the future of a growing technology business? Our client is helping leading brands including Odeon Cinemas Group, Virgin Wines … such as GitHub, Rundeck or Ansible, alongside industry certifications including Azure, CISSP, CISM, CompTIA Security+ or ISO 27001 Lead Auditor / Implementer. Why Join? This is an opportunity to join an ambitious, growing SaaS business where your expertise will have real influence. You'll work ...

testing, supplier security and incident response. What You’ll Be Doing Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC. Deliver security strategies, policies, management plans, procedures and governance in accordance with relevant frameworks and industry standards. … Audit Reports, and Incident & Recovery Plans. Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards. Experience facilitating, coordinating and directing ITHCs, including Security Requirements Traceability Matrix or Scoping Documents and prioritisation ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCCEnsure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes … Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standardsExperience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability ...

provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCC Ensure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures … Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards Experience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements ...

Microsoft Dynamics CRM / CE experience is essential for this role. 12 month fixed term contract £55,000 + benefits Hybrid, 2 days a month in the office. London or Surrey based Our client, a large charity, are looking for a talented D365 CRM / CE Application Support … maintaining CRM Microsoft Dynamics 365 platforms including SharePoint. Strong technical understanding of CRM architecture, integrations, and data structures. Experience managing multi-environment setups (Dev / Test / UAT / Prod) and deployment pipelines Practical experience with CI / CD tools (eg, Azure DevOps, GitHub Actions, Jenkins ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems rather than just identify them. CISSP, CCSP or Security+ would be useful, but practical experience carries ...

innovative space endeavours. Key Responsibilities include: Overseeing and assuring all contractual security obligations for product and service deliverables, including accreditation compliance such as ISO 27001, CE+, and DCC. Developing and maintaining governance frameworks, policies, and procedures aligned with industry standards and best practices. Managing cybersecurity assurance … developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents. Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls. Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions. Professional qualifications such ...

responsible AI or AI risk management. Proven experience developing and implementing governance frameworks and controls. Working knowledge of relevant standards and frameworks, including ISO 27001, ISO 42001 and NIST AI RMF. Strong understanding of security, privacy and third-party risk. Excellent stakeholder engagement ...

architectures.Experience managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities.Strong understanding of TCP / IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts.Experience troubleshooting SSL / TLS inspection, certificate services, authentication flows, identity … migrations, or large-scale enterprise modernisation programmes.Preferred CertificationsZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certificationZscaler Certified Cloud Professional (ZCCP) or specialised ZIA / ZPA certifications.Microsoft security, identity, endpoint, or Azure certifications.CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications.Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator Associate ...

managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities. Strong understanding of TCP / IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts. Experience troubleshooting SSL / TLS inspection, certificate services, authentication flows … large-scale enterprise modernisation programmes. Preferred CertificationsZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certificationZscaler Certified Cloud Professional (ZCCP) or specialised ZIA / ZPA certifications. Microsoft security, identity, endpoint, or Azure certifications. CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications. Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator ...

Infrastructure Engineer / Security An excellent opportunity for an experienced Infrastructure Engineer with a strong security focus to support, maintain and enhance secure IT environments. The role combines infrastructure management, cyber security, project delivery and 3rd line support, ensuring systems remain secure, resilient, highly available and compliant. You will … hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background in networking technologies such as TCP / IP, DNS, firewalls and VPNs is essential. Exposure to Infrastructure-as-Code and automation tools including Terraform, Ansible, Python or Bash, together with knowledge of Docker ...

internal and customer networks. Act as a technical centre of excellence for network and device security. Monitor and investigate security events using SIEM, IDS / IPS and other security tools. Investigate and resolve security incidents and provide incident response support. Manage vulnerabilities and support penetration testing and security assessments. … with customers, suppliers and technology partners as required. Technical Requirements Strong hands-on experience with: Cisco firewalls, routers and switches Juniper platforms SIEM IDS / IPS Vulnerability management Penetration testing Computer forensics Secure network design and management Security monitoring and incident investigation Good knowledge of: ISO 27001 ...

Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where you'll have genuine influence. You'll be trusted to assess challenges, recommend solutions, lead ...

reviewing logs, identifying root causes and implementing remediation. Knowledge & Skills Technical Understanding, awareness or experience of the following: Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies and load balancers. Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python or Bash. Familiarity … with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership … / CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for: Designing and maintaining CI / CD pipelines within Azure DevOps Deploying Azure applications and infrastructure using Terraform Supporting Azure services ...

DevSecOps Engineer - Azure / Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities.This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership of CI / … testing, while helping development teams embed secure practices throughout the software delivery lifecycle. The Role You'll be responsible for:Designing and maintaining CI / CD pipelines within Azure DevOpsDeploying Azure applications and infrastructure using TerraformSupporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault, VNets, Private ...

standards.· Review and remediate infrastructure vulnerabilities.· Support access control processes, including access· reviews, privileged access checks, and enforcement of least privilege principles.· Support endpoint / server security controls.· Ensure appropriate logging and security monitoring is enabled and reviewed.· Support encryption and certificate-management requirements.· Review infrastructure against security standards … security incidents, reviewing logs, identifying root causes, and implementing remediation.Knowledge & SkillsTechnical (Understanding, awareness or experience with the following)· Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies, and load balancers.· Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash.· Familiarity ...

executive leadership on risk-based decision makingEstablish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirementsOversee enterprise-wide risk management and compliance:Conduct regular risk and information security ...

customer environments. Designing, implementing, testing and troubleshooting security solutions. Monitoring security tools and investigating security events and incidents. Supporting and maintaining SIEM, IDS / IPS and vulnerability management solutions. Carrying out and supporting penetration testing and vulnerability assessments. Providing third-line support for network security issues. Developing and maintaining … managing secure network environments. Strong experience with Cisco firewalls, routers and switches . Experience with Juniper platforms . Good working knowledge of SIEM, IDS / IPS and vulnerability management tools . Experience with penetration testing and computer forensic tools . Knowledge of ISO 27001 ...

strong IT, English and Maths skills Good working knowledge of Microsoft Office, including Word, Excel and Outlook Basic networking knowledge Experience managing Windows PCs / Servers within an Active Directory environment Experience with Linux, particularly Debian / Ubuntu package management, web servers, NFS and SSH An understanding … system security and business continuity Basic scripting experience in Bash and / or PowerShell Strong organisational skills and the ability to manage and prioritise multiple tasks Ability to work independently while also contributing effectively as part of a team Desirable Full, clean UK driving licence Experience with ...

Proven experience of AWS-hosted environment security and a good understanding of compliance frameworks including ISO 27001, SOC 2 and CIS Foundations then we have an excellent opportunity for you. Our blue chip client is looking to recruit an AWS Security Analyst, paying ...

strategic Information & Cybersecurity Assurance Manager for a UK aerospace project. You will lead security assurance across product and service delivery, drive accreditation like ISO 27001 and DCC, and manage governance, controls, and risk assessments. You will coordinate certification efforts and align security architecture with industry standards. ...