1 to 25 of 32 ISO/IEC 27001 Jobs in the City of London

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus on supporting the organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed … 27001 controls, evidence, audits and remediation. Experience managing security risks and driving actions through to completion. Exposure to third-party / supplier assurance and customer security requirements. Knowledge of NIS2 would be particularly valuable. Excellent stakeholder management and communication skills. You'll need the confidence to challenge ...

responsibilities include: Build and develop the Quality, Compliance and EHS framework across European data centre operations. Lead the implementation and ongoing management of ISO management systems, including ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO … ISO 50001. Manage certification processes, external audits and relationships with third-party assessors. Develop health and safety strategies, policies and procedures across operational sites. Conduct internal audits and ensure compliance with operational procedures, SLAs and industry best practice. Drive continuous improvement initiatives and promote operational discipline across engineering ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). • Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. • Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

capabilities. You will have the opportunity to work on SOC 1, SOC 2, ISAE 3402 and ISAE 3000 engagements, certification programmes such as ISO 27001 and ISO 42001, and assurance projects focused on regulations including DORA, DSA, DMA, UKGC RTS and GDPR. You will … technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of: SOC 1 / ISAE 3402, SOC 2, ISAE 3000, ISO 27001, PCI DSS, HITRUST or other recognised assurance or certification frameworks Understanding ...

across the network estate for financial services clients. The role focuses on complex incident resolution, change execution, and performance optimisation for SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments, ensuring all activities meet stringent regulatory, security, and compliance standards. Please note this role requires … strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Provide expert technical leadership for diagnosing, resolving, and optimising complex network issues. Lead configuration management and compliance, support onboarding and automation initiatives, and drive continuous improvement within regulated environments. Duties and Responsibilities Essential Roles ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

Contract Cyber Security Analyst / Engineer 💷 Salary: £400 a day - Outside IR35 📍 Location: City - London 📅 Working pattern: Hybrid – Office presence required in London weekly I'm supporting a growing transport organisation that is looking to hire a Cyber Security Analyst / Engineer to strengthen its IT Security function … proxy, next-generation endpoint protection and email security (DMARC / DKIM / SPF, DNS). Familiarity with the MITRE ATT&CK framework, ISO27001, CIS benchmarks and NCSC Cyber Essentials. Knowledge of GDPR, data protection, and governance, risk and compliance. Knowledge of NIS-R or NIST, TCP / ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

risks. What You’ll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls … / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). Soft Skills: Strong analytical thinking, communication, teamwork, and adaptability. What ...

Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI / CD pipelines and DevSecOps integration Threat modelling techniques and tools Understanding of OWASP Top 10 and common vulnerability classes Experience with API security … application security, secure development or software engineering with a security focus Hands-on experience conducting application security reviews Experience implementing security in CI / CD processes Experience working with development teams in an enterprise environment Desirable Experience building or contributing to a security CoE or capability model Experience working ...

understanding of enterprise IT environments and modern technology architectures. Experience assessing or managing one or more of the following: Cloud platforms (Azure, AWS and / or Google Cloud) Enterprise infrastructure and networks Data centres and hosting environments IT operations and service management Enterprise applications and ERP platforms Identity … business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity ...

security platforms and data sources. Understanding of vulnerability management and security remediation processes. Familiarity with security frameworks and standards such as NIST and ISO 27001. Good understanding of Active Directory, Entra ID or similar enterprise identity environments. Ability to translate technical security issues into clear risks and actions. ...

Privacy and Protection Security Architecture Operational Technology Security Governance, Risk, and Compliance Ideally,You’llAlso Have Security-related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, or IAPP. Experience operating within an NCSC Assured Cyber Consultancy. Understanding of the cybersecurity regulatory landscape and assessment frameworks (e.g. ...

working with owners to establish action plans. Experience: Extensive experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and / or IT Governance functions. Experience in a financial institution or a risk advisory firm providing advice to the financial services sector, or a financial services … regulator. Knowledge and experience with laws, regulations, guidelines, and frameworks within the financial services industry such as COSO, NIST, ISO 27001 and 27002, COBIT, GLBA, SOX. Regulatory savvy, having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk ...

improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification bodies Lead security assessments ...

runbook development Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation / refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards Applies knowledge of tools within the Software … critically evaluate and validate AI-generated outputs Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs / outputs, and adherence to resiliency and security expectations Preferred qualifications, capabilities, and skills Experience with cloud security tooling such as Wiz, Snyk, Semgrep, or Trivy ...

Role As Change Manager, you will take ownership of the end-to-end change programme, driving adoption of D365 across: Procurement & Sourcing Commercial / Bids & Proposals Finance Operations HR You will lead the change strategy using the ADKAR methodology , managing stakeholder engagement, communications, training, resistance management, adoption reporting … CMMC environments Experience within multi-entity or holding company structures Understanding of procurement processes and ERP workflow controls Contract Details 📍 Hybrid / Remote UK 💷 £550 per day 📅 3-Month Initial Contract ⚡ Immediate Start Available 📈 Potential for extension based on programme requirements Why This Role? This is an opportunity ...

procedures. - Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date. Required Skills / Knowledge: - Experience with Microsoft Defender or similar endpoint anti-virus solutions. - Experience with Mimecast or similar email security platforms and understanding of SPF, DMARC ...