23 of 23 ISO/IEC 27001 Jobs in the City of London

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

Security Governance Manager to join its small Compliance Team. Reporting to the Head of Compliance (CECs Data Protection Officer), you will lead CECs ISO 27001-certified information security management system, strengthen processes, and help shape policy. In this role, you will play a key part … cyber essentials. Good working knowledge of the range of tools, platforms, utilities and cloud computing typically used within modern digital firsts organisations Experience / Qualifications One or more of the following: Undergraduate or postgraduate qualification in information / cyber security OR Equivalent professional certification such as CISSP, CIMP ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

Manage the cyber security risk framework and risk register. Lead security governance, assurance and reporting. Support audits and certifications, including Cyber Essentials and ISO 27001. Lead and coordinate responses to cyber security incidents. Oversee security controls and third-party cyber risk. Drive cyber security awareness and organisational security … Security Manager or similar role. Strong cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and / or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder management and communication ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

Title: SOC Analyst Location: On-site, London moving to hybrid 3 days on-site after 2-week induction Start Date: Immediate Contract length: 31 / 03 / 26 further extensions expected Clearance Required: BPSS (must be obtained prior to onboarding) Day rate: £400 - £500 Candidates must hold … work effectively within a collaborative SOC team Desirable Skills Experience with incident documentation and reporting Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001) Ability to adapt quickly to new tools, threats, and operational priorities Any relevant certifications (e.g., Security+, CySA+, Microsoft SC-series, GIAC ...

Head of Architecture | C# / .NET | Legacy Decomposition | Azure | Fully Remote | Exclusive to Optimal Salary: Up to £100,000 + excellent benefits Contract: Permanent Start: ASAP - 4 weeks notice maximum for this one Working Model: Fully Remote (UK) Eligibility: No sponsorship - you must hold a British passport or Indefinite … principal-level professional with a proven track record of breaking down complex legacy platforms. Must have a solid background in Azure and C# / .NET, no exceptions . Non-Negotiables - Please only apply if you have ALL of the following Core Technologies: C# and .NET (Framework and modern ...

Applications, ITSM, Cloud, Digital Transformation, M&A, CyberSec, Suppliers, 3 rd Parties, Governance, Budgets, ISO, Cyber Essential, AI, Automation, Azure, Hybrid (4d / w London) This is an exceptional permanent Head of IT opportunity to join a growing tech organisation undergoing significant technology, operational and business transformation. … CyberSec) and general transformations and modernisations. As Head of IT any experience with AI, M&A is beneficial. Strong M365, Prince2, ITIL and governance / security is essential. Strong senior IT leadership, stakeholder management, supplier governance, budget control and transformation experience are essential as Head of IT. Key skills ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies ...

Senior Qualys Engineer – Contract UK-based | Hybrid / Flexible Working 6-12 Month Contract (Likely Extension) Inside IR35 £550 We're looking for an experienced Senior Qualys Engineer to support the expansion and optimisation of an enterprise-wide vulnerability management platform within a large, complex organisation. Key Responsibilities Expand … best practice guidance Skills & Experience Strong hands-on experience with Qualys VMDR Deep understanding of vulnerability management and asset discovery Strong networking knowledge (TCP / IP, DNS, firewalls, routing, VPNs) Experience working in large-scale enterprise environments Exposure to AWS, Azure or GCP is desirable Scripting and automation experience ...

conducting security assessments and producing assurance reports. Ability to engage and influence stakeholders at all levels. Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls). Excellent communication, planning, and organisational skills. Experience managing teams and developing talent. Ability to interpret complex technical … Hybrid working - 3 days on site Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core ...

significant experience across security, resilience and risk management within a complex organisation. You will bring: Extensive cyber security leadership experience. Strong knowledge of ISO 27001, NIST or equivalent frameworks. Experience of business continuity, disaster recovery and organisational resilience planning. Knowledge of Facilities Management and Estates, including ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

Position PAM Manager – Location: UK Wide / hybrid As a PAM Manager, you will lead the delivery of complex Privileged Access Management programmes across enterprise environments, leveraging platforms such as CyberArk, BeyondTrust, Delinea, and One Identity. You will act as a trusted advisor to senior stakeholders, working closely with … including managing risks, dependencies, and complex workstreams. Experience producing IAM governance and operational documentation (e.g. operating models, runbooks, DR plans). Desirable Skills IAM / IGA platform certifications. Familiarity with security frameworks (e.g. ISO 27001, NIST, COBIT). Exposure to identity infrastructure (e.g. Active Directory ...

standards and ensuring compliance with regulations. The ideal candidate will have over 8 years of information security experience, including hands-on knowledge of ISO 27001 and SOC programs. Strong cloud security experience, particularly AWS, and excellent stakeholder management skills are required. #J-18808-Ljbffr ...

support work assisting the support and infrastructure teams as and when required. You will develop and maintain the incident response plan, cyber essentials and ISO27001 and follow the NIST framework. You will also work with the infrastructure team on a written DR plan and BC plan. Principal Duties / … intrusion detection systems and firewalls, virtual private networks, web protocols, and email security. * Perform continuous Pen Tests and follow up remediating vulnerabilities. Principal Duties / Responsibilities * Create and update all relevant Jira tickets being worked on regularly. * Maintain system uptime and availability as close to 99.99%. * Configuring ...

Solution & Data Architect - Enterprise Architecture, Azure, Cloud (IaaS / PaaS), Data Architecture, Security Architecture, Data Governance, AI, ESG. Hybrid, London. c.£90k-£110k + Bonus + Excellent Benefits Global Law Firm seeks an experienced Solution & Data Architect to join its Strategy & Architecture team, playing a key role in shaping … communication skills with the ability to engage both technical and non-technical audiences. Experience producing architecture roadmaps, high-level designs and technical documentation to ISO27001 and (ideally) ISO23001 standards. This is an outstanding opportunity to influence technology strategy within a leading global organisation, working across cloud, data, AI and enterprise ...