1 to 25 of 52 ISO/IEC 27001 Jobs in the City of London

tender demands evidence, or when a board realises nobody actually owns information security. What you will do Plan and deliver ISO / IEC 27001 internal audits, readiness reviews and gap assessments Support clients in building and running information security management systems — risk registers … begins and formal assurance sits — and you respect the boundaries between them What we need from you Practical working knowledge of ISO / IEC 27001, including participating in or conducting internal audits Experience with information security risk, policies, controls, evidence and remediation ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

Evaluate the effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs … Required Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule ...

City Recruitment Associates is helping a London-based client recruit a Governance, Risk and Compliance professional to lead ISO / IEC 27001 internal audits, risk reviews and supplier due diligence. You will translate requirements into actions, create client-facing reports and work with ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI / CD environment, and you'll build much of it yourself. This is a hands-on role: expect to read code, threat model new services, reproduce … sure an agent acting for a user can never exceed what that user could do themselves. Push least privilege further across production and CI / CD. Better than it was, not where we want it. For a concrete example: here's how we built a sandboxed execution environment ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

Group is seeking a skilled Information Security Officer to strengthen our SOC2 compliance and ISO 27001 governance within our Financial services clientele. The role focuses on policy development, audits, and serving as the main point of contact for client inquiries. The ideal … candidate has a Bachelor's degree, at least five years in a compliance role in finance, and strong communication skills. Certifications such as CISA / CISM / CISSP are a plus, and the ability to work both independently and #J-18808-Ljbffr ...

Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly interested … experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer. Suitable Backgrounds May Include Third Party Cyber Risk Manager Cyber Risk Manager Technology Risk Manager Supplier Assurance Lead Vendor Risk Manager Operational Resilience ...

Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist with internal and external audits, including ISO 27001, Cyber Essentials, and client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption … controls and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding ...

bring the wider team along with you. Key Responsibilities Strategy & Governance Lead cyber security strategy and governance, aligning policy with best practice (e.g., ISO 27001, GDPR) Document and maintain security processes and IT policies, supporting business continuity and audit requirements Security Operations Maintain and enforce … infrastructure oversight Knowledge of security frameworks and regulatory requirements (ISO 27001, Cyber Essentials, GDPR) Hands-on technical capability across endpoint / device management, identity and access management, and SaaS security controls Strong stakeholder management, with the ability to train, influence and embed governance processes Desirable ...

Microsoft Purview Security Consultant - Purview, Security, Location: London / Hybrid Working Salary: £45,000 - £52,000 (Depending on Experience) + Benefits + potential bonus ________________________________________ About the Company Our client is a forward-thinking and entrepreneurial cloud consultancy that partners with major organisations across the UK. They help businesses maximise … solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft 365 transformation or migration projects. Pre-Sales Experience ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

adheresto regulatory requirements and maintaints the trsut of our clients. Key Responsibilities: Develop, implement, and maintain compliance policies and procedures in accordance with ISO 27001 standards. Knowledge of SOC2 is beneficial. Conduct regular audits and assessments to ensure compliance and certifications are maintained. Serve … Qualifications: Bachelor's degree Minimum of 5 years of experience in a compliance role within the financial industry. In-depth knowledge of ISO 27001 standards and requirements. Proven experience in a client-facing role, with excellent communication and interpersonal skills. Strong analytical and problem-solving abilities. ...

sites, including Microsoft 365, hardware, user lifecycle management and business systems. Leading the organisation's IT security and governance, including Cyber Essentials certification, ISO 27001 alignment, risk management and data protection requirements. Managing technology vendors, contracts, licences and renewals, ensuring strong commercial control and avoiding unnecessary … outsourced IT managed service provider and holding suppliers accountable for service and commercial performance. A working knowledge of Microsoft 365 alongside Cyber Essentials, ISO 27001 principles, GDPR and data protection requirements. Experience managing IT contracts, licences, renewals, budgets and vendor relationships. The ability to manage technology ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

investigation, root cause analysis, and remediation activities. Work with internal IT teams to implement security improvements and best practices. Support the delivery of ISO 27001 and ISO 42001 security controls. Create and maintain security documentation and knowledge base articles. Develop automation through PowerShell ...

aligned to regulatory obligations. Deliver security architecture work packages and produce HLD and LLD artefacts, data flows and threat models for enterprise and IT / OT converged environments Create cloud security architecture for sitetocloud connectivity, establishing secure landing zones, segmented network connectivity, identity and secrets management. Analyse systems … developing colleagues. To Qualify for the Role, You Must Have: Experience in cybersecurity with a strong track record in security architecture delivery, including IT / OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control Framework & Strategy Define and maintain ...

incident response, with a focus on continuous process improvement.**Risk Management & Threat Intelligence*** Strong familiarity with security frameworks and standards (e.g. NIST, ISO 27001), and deep understanding of security concepts including vulnerability management, threat intelligence, incident response, and offensive security techniques.* Experience in gathering and analysing ...

Summary Salary : Competitive plus comprehensive benefits package Grade : 3A Reporting Line : Head of Cyber Security Operations Contract Type : Permenant Working pattern : Hybrid Location : London / Bolton Closing Date : 22nd September 2026 (Applications may close sooner if we receive vast numbers) What to expect As a Principal Cyber Security Operations … plus bank holidays Up to 18% on target bonus opportunity Annual car allowance Generous pension scheme with minimum 10% employer contribution Access to 24 / 7 digital GP services and our Employee Assistance Programme 6 x Life assurance and income protection after 12 months service Over 400 online courses ...

Risk, IT Audit or a related discipline.• Practical knowledge of information security controls, cyber risk, data protection and technology risk frameworks such as ISO 27001 or NIST.• Experience operating within a regulated environment, ideally Financial Services.• A solid understanding of risk management, governance and control frameworks ...

Bonus Onsite WORKING Location: Central London, Greater London - United Kingdom Type: Permanent Chief Security Architect Location: UK - Hybrid / Remote Salary: Up to £110,000 + senior consultancy / leadership package Clearance: Active DV clearance essential Sector: Defence, Government, National Security & Critical National Infrastructure The Opportunity … looking for an exceptional Chief Security Architect / NCSC Head Consultant to take senior technical ownership of Security Architecture across a high-assurance cyber security consultancy. This is a senior, client-facing architecture role where you will act as a technical authority for security architecture , leading complex engagements across ...