mitigation.Practical knowledge of information security standards and risk assessment frameworks such as ISO27001, SOC 2, NIST 800-32KPI / KRIStrong knowledge of cyber controls, policies, and procedures.Experience of delivering metrics for senior level audiences.Demonstrate analytical and problem-solving skills. Ability to communicate risks … day. And you’ll never stop growing, whatever your level.Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careersRTWPROG WPFULL SLICSS more »
background in information security, risk management, and compliance, as well as a minimum of 3 years experience in designing and delivering client-facing ISO27001 related Information Security consultancy, DPIAs and other Data Protection related services.Develop a Virtual Information Security Advisor serviceDeveloping and ISO27001 Implementation programmeManaging the existing Internal Audits Managed Service offeringYou will be responsible for carrying out Data Protection Impact Assessments for existing clients, and managing a dedicated Data Protection advisor (yet to be hired).Deliver DPIA’s for clientsYou will help clients design and implement a … DPIA questionnaires and processesPerforming DPIAsDesigning and implementing Performing Supplier due diligence processes.Oversee our organisation’s information security management system (ISMS) in accordance with ISO27001 standardsConduct risk assessments, manage the company Risk Register and Risk Treatment Plan, and oversee the programme of in-house and customer more »
Greater London, England, United Kingdom Hybrid / WFH Options
Ada Meher
London) looking to hire a Head of Software Engineering to help them drive growth in their technical team. Role: Head of Engineering Location; Bristol / London bi-weekly (Hybrid Remote) Salary: £110-130k DOE Headline Benefits: B Corp, Remote Working, 30+ Holiday days, Flexible Hours You’ll be … manage online communities to grow revenue at scale. For this role, you must have experience growing Engineering teams multiple times (ideally through Series A / B / C), as well as B2B2C experience (ideally in MarTech, Retail, Gaming or similar) Essential experience: Experience leading a small Engineering team … Experience working in SaaS Knowledge of AWS and Infrastructure / Artificial Intelligence (AI) would be a benefit Knowledge of security implementation (ISO27001) Strong experience with JavaScript / Typescript Engineering (MEAN / MERN preferred) Bonus – high-level achievements outside of work (ie sports / music) Position: The more »
risk indicators (KRIs) for the information security program. What We're Looking For: - Strong understanding of information security best practices and regulatory requirements (ISO27001, PCI-DSS, SOX). - Knowledge of risk management, incident response, and compliance frameworks. - Experience working with globally distributed cross-functional teams. more »
Multiple IAM Tools is a huge plus! Knowledge of industry regulations and standards related to information security and privacy (e.g., GDPR, PCI DSS, ISO27001). Excellent leadership, communication, and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and senior stakeholders. Relevant … Competitive salary and performance-based bonuses Comprehensive health and wellness benefits Flexible work arrangements Professional development opportunities Dynamic and collaborative work culture New training / Certification funded more »
face-to-face meetings. What we're looking for from you: Commerical experience within InfoSec role Understanding of Security frameworks and standards (Cybersecurity Framework, ISO27001, SOC2) Excellent analytical and problem-solving skills with a keen attention to detail A fiercely diverse environment with 60% of their employees being female! They more »
security and best practices to future-proof the infrastructure. KEY RESPONSIBILITIES Uphold a security-first and security-last mindset, ensuring all actions align with ISO27001 standards and FCA regulations. Respond promptly and professionally to software or hardware queries via email, phone, or face-to-face. Monitor and update the ticketing … Nice to have, but not esstential: Linux, Docker, Powershell and Bash Scripting. BENEFITS 25 days annual leave in addition to Bank holidays. Discretionary commission / bonus scheme. Company pension scheme. Life and medical insurance, and eyecare scheme. Employee Assistance Program. Cycle to work scheme. Family-friendly policies. Recruit and more »
to participating in strategy development as a key leader within our clients security function. This would be a great opportunity for an experienced Cyber / Information Security Engineer who is looking to stay hands on technically, but have an element of leadership implemented into their next position! Main responsibilities … best practice and recommend necessary changes across our clients security function. To be considered for this role, you should have: Experience working in Information / Cyber Security, ideally in a technical hands on / engineering role. Hands-on experience with security tools such as firewalls, intrusion detection / … solutions. Experience with cloud security principles and practices with either AWS or Azure. Experience implementing policies and procedures in alignment with standards such as ISO27001, NIST, PCI-DSS, Cyber Essentials, and similar. Our client offers an attractive benefits package that includes a bonus scheme, private medical care, pension, life assurance more »
organisations and others to improve cyber security standards. Oversee the security review of third-party suppliers and systems. Manage the Cyber Essentials, GovAssure and ISO27001 annual accreditation processes. We are looking for: Understanding of: Windows, client & server IAAS, PAAS especially Azure Firewalls Networking & Wi-Fi End-point protection Web-hosting … technology Demonstrable understanding of ISO27001, Cyber Essentials, data protection, business continuity and audit compliance Mobile phone security: IOS and Android Excellent interpersonal (Builds relationships) Team player who embraces change Positive communicator Strong influencing and negotiating skills Strategic (Planning for thefuture) Architectural – Translates business requirements into technical initiatives. Delivery (Results driven more »
a technical role with the drive to grow more- there will be plenty of opportunities for development and growth. Experience with security frameworks like ISO27001 & PCI DSS as well as exposure to Data Protection & GDPR would be highly sought after too. In this role you will: Work on a variety … house security environment Direct experience working within a variety of security tools- SIEM, EDR, Vulnerability scanners, etc Understanding and knowledge of different security frameworks- ISO27001, PCI DSS, Cyber Essentials, etc. For more information, please apply or send your CV direct to natan.goren@lafosse.com, for a discreet conversation. more »
Practical knowledge of technical security controls (e.g. SIEM, EDR, AV, Web + Email Gateways) Strong knowledge of endpoint and server operating systems and networking ISO27001 experience preferred. Desirable Certifications: ISC2 CISSP, CCSP, or SSCP COMPTIA CASP+, CySA+, or Security+ If you are interested please email your CV to megan.seymour@stottandmay.com more »
effectively without flailing. Research and propose new technologies. A key contributor and influencer on their team in embedding auditable regulatory compliance measures, such as ISO27001 and PCI Compliance. Have a broad understanding of the entire architecture, as well as very detailed understanding of their area. Frequently presents at Brown Bag … Lunches and Team Meetings. Assisting in interviews and recruitment. Support mkodo in the implementation and ongoing maintenance of its ISO27001 Information Security Management System (ISMS). Adhere to all relevant mkodo ISO27001 Information Security Management System (ISMS) policies, procedures and requirements at all times. Complete any reasonable tasks relating to … the mkodo ISO27001 Information Security Management System (ISMS). Key Skills & Attributes: Extensive experience in iOS development Proficiency with iOS tech stack including Swift. Experience working with RESTful APIs. Experience with multi-threaded programming. Experience building adaptive UIs for Mobile Devices. Familiar with Apple’s Human Interface Guidelines and App more »
identify, report, and respond to cyber security risks in accordance with industry standards and frameworks, (NIST Cybersecurity Framework, NIST 800-37, ISO/IEC27001) and regulations (SOX, GDPR, HIPAA) Own and drive requirements for cybersecurity risk management tools. Identify, assess, and prioritize … Solid understanding of cybersecurity policies, standards, and controls Experience and solid understanding of industry standards (NIST Cybersecurity Framework, NIST RMF and ISO/IEC27001 etc.), and regulatory standards such as (HIPAA, SOX, GDPR, SOC2, PCI etc.) Experience with control testing and validation … make a meaningful global impact. For more information about Fortrea, visit www.fortrea.com. Fortrea is proud to be an Equal Opportunity Employer: As an EOE / AA employer, Fortrea strives for diversity and inclusion in the workforce and does not tolerate harassment or discrimination of any kind. We make employment more »
will be recognised and valued. To be considered for this role you will Have in-depth knowledge of security frameworks, such as NIST, ISO27001, and PCI DSS Possess proven experience in security risk management & compliance in ISO27001, GDPR, PCI DSS … security functions, ensuring compliance, and fostering strong technical partnerships. To excel in this role, a comprehensive understanding of security frameworks such as NIST, ISO27001, and PCI DSS is essential. Your background should reflect a proven track record in security risk management and compliance, with a more »
City of London, London, United Kingdom Hybrid / WFH Options
Southern Housing
or critical security events to the IT Security Manager What youll need Strong knowledge of cyber security frameworks, standards, and regulations such as ISO27001, NIST, GDPR, etc Experience in leading continuous improvement and lessons learnt in a cyber security context Excellent communication and presentation, and more »
technical subjects to both technical and nontechnical audiences, flexes style to suit the needs of the audience A good understanding of security frameworks including ISO27001/ 2, Cyber Essentials Plus, CIS Top 20, Data Protection Act 2018, OWASP Top 10 Have a relevant industry certification such as CISSP, CISM more »
Site Building Supervisor / Manager - Data Centre Radius has an exciting opportunity working for an established Data Centre in East London. This role provides coordination and delivery of core buildings FM related services for staff and clients. To provide high quality maintenance supervision and predictive works, reduce reactive works … renewable energy. Role Description Specific responsibilities for: • Assisting in the development and execution of engineering works relating to M&E installed base • Coordination / Liaison with contractors for maintenance, reactive works and projects • Responsible for reviewing of risk assessments and method statements • Responsible for supervising small works installation and … building maintenance works • Assist in ensuring site working practices are being upheld for the following; Permit for Access Hot working Fire system isolation / operation Permit for cable installation access Contractors signing in procedures • Responsible for signing off completed works by maintenance contractors or others as necessary • Responsible for more »
Business Process Management (iBPM), Enterprise Content Management (ECM), Customer Communication Management (CCM) and BPM-Platform-Based Case Management frameworks. Newgen is certified for ISO 9001:2008, ISO27001:2013, CMMi … Development (v1.3) Level 3 and CMMi Services (v1.3) Level 3. Position: - Sales Director – Banking Nature of work: - The individual is responsible for Sales hunting / New businesses development in the Banking and Financial services vertical. Qualification and Experience: - 10 years of experience selling S / W products /more »
Requirements Certified Information Systems Security Professional (CISSP) certified or relevant experience to demonstrate understanding. Extensive information security experience. Deep knowledge of Information Security frameworks (ISO27001, NIST). Experience of Cloud technology and security. Must demonstrate awareness of current and upcoming regulatory requirements in relation to cyber and outsourcing. Ability to more »
problems from the development teams and give the direction for development Evaluate the existing technology and architecture, provide suggestions for improvement Participate in ISO27001 activities and make sure the architecture design is aligned with the Information security policies Collaborate with Information security team … to determine the security and compliance Collaborate with stakeholders at all levels to communicate architectural decisions, trade-offs, and solution designs effectively Maintain network / architecture diagram and inventory for resources to provide visibility on whole infrastructure Requirements: Degree in Computer Science, Information System or IT related disciplines. At … OAuth2, SAML2, JWT, OpenID Connect Certified Architect in one of the Cloud Platform (e.g. GCP, AWS, etc…) would be an advantage Experience in Agile / Scrum development methodology is a plus Strong analytical, problem solving, interpersonal and presentation skills. Self-Motivated and a good team player Good command of more »
capability units & other suppliers in a service partnership as ‘one service team’ to middle management level. maintain, and ensure compliance to the Security process / processes. review the security process and associated activities for efficiency and effectiveness and make recommendations for improvement. initial investigation to determine scope and details … statistics to identify historical trends and knowledge gaps and provide relevant support and content via management reporting. in regular reviews to resolve security issues / review processes with relevant parties, such as Service Desks, Operations, Account Team, Security Team, Solution Architects etc. The … success in this role will be assessed by the following KPIs: Contractual Compliance to the Security Measures . Maintain and assure compliance to an ISO27001 based Information Security Management System (ISMS). Create and maintain of Information Security documents. Manage the regular IT Security audits. Security Event Response and Investigation more »
Trust Investigation and Roadmap Definition: Research and develop a roadmap for implementing a Zero Trust security model. Other Contribute to Cyber Essentials + and ISO27001 strategy Ensuring policies, activities and standards are up-to-date, fit for purpose, in line with appropriate standards, certifications, best practice and legislation. Ensuring policies … standards and technology controls are implemented and maintained. Acting as a central point of contact / escalation for incident, compliance, data protection and information security queries or issues. About You Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). Minimum of more »
and stay abreast of emerging threat, vulnerabilities and best practices in cybersecurity. What you’ve got… Demonstrable understanding of cybersecurity principles, frameworks (such as ISO27001, NIST, etc.) and best practices; including knowledge of various security technologies, threat landscape, vulnerabilities and mitigation strategies. Familiarity with regulatory and compliance requirements (such as … assessments and audits, with the ability to interpret results and present to leadership. Two or more of the following certifications: CISSP, CISM, CRISC, CISA, ISO27001 Lead Implementer. Ready to Apply? If you are reading this and are thinking ‘Wow, this sounds like me!’, then we want to hear from you more »
improvement of our security posture. Requirements for this confidential position include a recognised security qualification (e.g., CISSP), lead auditor / assessor qualification (e.g., ISO27001), and a relevant degree or equivalent. Bring your in-depth knowledge of telecom regulations, understanding of Mobile and Fixed Telecoms networks, and experience in Security more »
owning an enterprise-wide risk management framework within the Bell SI business. They will be responsible for Bell’s internal audit function, ensuring ISO certifications are maintained as well as ensuring corporate compliance policies are established and adhered to. They will be leading a team and working with … to manage the IMS internal audit function, ensuring that all required internal audits are completed as necessary to ensure compliance to Bell’s ISO certifications (9001, 27001, 45001, 14001). Day to day management of HSEQ Lead, Quality & Information Security Audit Lead and Compliance & Audit Administrator. … Flexible remote working and a supportive environment for varying personal circumstances A diverse and inclusive work culture Modern vibrant workplaces Company pension Private healthcare / dental care Cycle to work scheme And much more! Protecting your privacy and the security of your data is a longstanding top priority for more »