1 to 25 of 27 ISO/IEC 27001 Jobs in the City of London

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus on supporting the organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed … 27001 controls, evidence, audits and remediation. Experience managing security risks and driving actions through to completion. Exposure to third-party / supplier assurance and customer security requirements. Knowledge of NIS2 would be particularly valuable. Excellent stakeholder management and communication skills. You'll need the confidence to challenge ...

compliance with ISO 27001, SOC2, GDPR, and other applicable privacy and customer requirements. Reporting & Governance: Develop and report compliance KPIs / KRIs; coordinate reporting to senior management and governance committees. Audit Management: Coordinate internal / external audits and customer due diligence; manage findings through … strong compliance culture; develop and deliver training and awareness programmes. Stakeholder Support: Support Legal, Operations, and Procurement on contractual compliance; coordinate customer / regulatory information requests. What We're Looking For 8–10+ years' progressive experience in governance, audit, risk, compliance, or assurance in a mission-critical environment (data ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

across the network estate for financial services clients. The role focuses on complex incident resolution, change execution, and performance optimisation for SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments, ensuring all activities meet stringent regulatory, security, and compliance standards. Please note this role requires … strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Provide expert technical leadership for diagnosing, resolving, and optimising complex network issues. Lead configuration management and compliance, support onboarding and automation initiatives, and drive continuous improvement within regulated environments. Duties and Responsibilities Essential Roles ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure to cloud … language and a passion for improving security maturity. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer are desirable, alongside substantial experience operating within complex enterprise environments. This is an excellent opportunity to join a collaborative, forward-thinking organisation where ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

Applications, ITSM, Cloud, Digital Transformation, M&A, CyberSec, Suppliers, 3 rd Parties, Governance, Budgets, ISO, Cyber Essential, AI, Automation, Azure, Hybrid (4d / w London) This is an exceptional permanent Head of IT opportunity to join a growing tech organisation undergoing significant technology, operational and business transformation. … CyberSec) and general transformations and modernisations. As Head of IT any experience with AI, M&A is beneficial. Strong M365, Prince2, ITIL and governance / security is essential. Strong senior IT leadership, stakeholder management, supplier governance, budget control and transformation experience are essential as Head of IT. Key skills ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

Manager Location: UK Wide / Hybrid Career Level: Consultant / Manager We're working with a global technology consultancy delivering secure, large-scale digital transformation programmes across Health, Public Sector, Defence and Central Government. This is an excellent opportunity for an experienced Privileged Access Management (PAM) professional … leading security transformation initiatives Desirable experience: • Experience with SailPoint, Saviynt, Omada, Okta, One Identity, or other IGA platforms • Knowledge of security frameworks including ISO 27001, NIST, and COBIT • Exposure to Active Directory, cloud identity solutions, and reporting platforms such as Power BI • Experience onboarding applications ...

with at least one major cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security … control designs and configurations for effectiveness in risk mitigation A collaborative, consultative approach with a genuine desire to help your team succeed Service delivery / project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience ...

working with owners to establish action plans. Experience: Extensive experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and / or IT Governance functions. Experience in a financial institution or a risk advisory firm providing advice to the financial services sector, or a financial services … regulator. Knowledge and experience with laws, regulations, guidelines, and frameworks within the financial services industry such as COSO, NIST, ISO 27001 and 27002, COBIT, GLBA, SOX. Regulatory savvy, having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk ...

enterprise applications, directories, HR systems, Active Directory, LDAP, and Microsoft Entra ID (Azure AD). Regulatory & compliance frameworks - Solid knowledge of SOX, GDPR, ISO 27001, and IT General Controls (ITGC), with experience supporting audit evidence and compliance-driven access governance. Stakeholder engagement & communication - Excellent cross-functional ...

stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification bodies Lead security assessments ...

procedures. - Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date. Required Skills / Knowledge: - Experience with Microsoft Defender or similar endpoint anti-virus solutions. - Experience with Mimecast or similar email security platforms and understanding of SPF, DMARC ...

Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI / CD pipelines. Remained technically hands-on whilst leading teams. Worked closely with engineering leadership to improve security culture. Highly Desirable Experience applying AI within ...

technical roles and role hierarchies. Managing user provisioning, de-provisioning and access approval workflows. Integrating SAP IAG with SAP IAS, SAP IPS, SAP S / 4HANA, ECC and cloud applications. Supporting integrations with third-party IAM solutions where required. Configuring multi-stage approval workflows and risk-based access request … within hybrid SAP landscapes. Exposure to SAP Fiori, ABAP or automation technologies. Experience integrating third-party IAM solutions such as SailPoint. Knowledge of GDPR, ISO27001 or wider security governance frameworks. SAP Security, SAP IAG, SAP GRC, CISSP or CISA certifications. Why This Role: Work on large-scale enterprise SAP security ...

hybrid role based in London (with travel as required and flexibility for some home-working). We are seeking an experienced Project Manager / Business Analyst with a strong delivery background and an interest in cyber security to support a key Cyber Development Programme. Working closely with Digital teams … client is strengthening its cyber security capability as part of a significant programme to improve organisational security maturity, reduce cyber risk, and achieve ISO27001 certification of its Information Security Management System (ISMS) by the end of 2026. This is an excellent opportunity to contribute to a major infrastructure project while ...

assessment Strong skills working with Wazuh (essential), as well as other SIEM tools (preferably Splunk) Experience working with StreamAlert (or similar) Excellent knowledge of ISO27001, NIST or Cyber Essentials Extensive knowledge of security threats, controls, processes and solutions Strong communication skills Comfortable in a primarily remote role with occasional travel … consideration. In line with the Conduct Regulations 2003, when advertising permanent vacancies JNC Recruitment are acting as an Employment Agency, and when advertising temporary / contract vacancies JNC Recruitment are acting as an Employment Business. ...

Manager Cyber - Inside IR35 SZC is developing its security posture to improve maturity against NIST CSF and reduce residual risk. This includes preparation for ISO27001 certification of our Information Security Management System (ISMS) by the end of 2026 together with the associated arrangements, assurance and risk management. To support … stakeholders for assurance, whiteboard and comms sessions. Review and collaborate on copy relating to documents, communications campaigns including awareness and global emails. Required Skills / Experience Experienced project manager / business analyst. Strong planning, delivery management, issue resolution, and senior engagement skills Comfortable working with stakeholders across business ...

Role: Cyber Assurance Lead Position: Contract Location: Hybrid / London Days on Site: Minimum 1 Duration: Approx until 31st March 2027 Pay: Up to 750£ per day Umbrella Job Purpose / Overview Cyber assurance is an umbrella term for several processes aimed at ensuring individual system components … conduct efficient assessments. Convince stakeholders of the importance of audit, assurance and security. Knowledge & Skills Formal method or standards, such as COBIT 5 or ISO27001 and associated best practices. Legal and regulatory standards on data protection and privacy. Knowledge across a range of Security technologies: Azure identify management and networking ...