12 of 12 Permanent SOC 2 Jobs in London

Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive reporting. The engineer acts as the primary SME for vulnerability risk decisions and drives continuous improvement … escalation for L1 analysts; mentor team members and review scan configurations and reports. • Lead or support internal VM audits and contribute to ISO 27001, SOC 2, or regulatory compliance evidence. TECHNICAL SKILLS & KNOWLEDGE • Deep expertise in enterprise VM platforms: Qualys VMDR (including TruRisk), Tenable Security Centre/Tenable.io ...

across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused … clients to improve security programmes and regulatory compliance The Person: Good years of experience within cybersecurity, technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and/or GCP environments Degree qualified in Cyber Security ...

Auditor & Controls Analyst Key Experience: IT Audit, Technology Risk, ITGC, IT Application Controls, ISA 315, SOC 1, SOC 2. Required Skills/Experience: - Deliver testing over ITGCs, IT application controls, interface controls, automated controls and IPE with limited supervision. - Support ISA 315-aligned IT understanding and risk assessment … and risks arising from IT. * Prepare clear, review-ready workpapers, testing templates, issue summaries and RACMs. * Support financial statement audit-related technology controls assurance, SOC 1, SOC 2 and regulatory assurance engagements as required. Required Skills/Experience: - Experience in IT audit, technology risk, controls assurance ...

helping the business get real value out of what it already owns. Running alongside this is a wider compliance programme, including a move toward SOC 2, which the identity workstreams feed directly into. You would be working closely with a newly appointed senior security leader and, because … comparable IGA and PAM tooling, with enough technical grounding to hold credibility with engineering teams Exposure to compliance and audit-driven change, with SOC 2 or ISO 27001 experience a distinct advantage Available at short notice and able to commit to two days a week on site ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

team, within tight timescales, to budget and a high level of quality. - Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials). Cyber Security Auditor In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon ...

design. Advising Product and Engineering on data ownership, data usage, intellectual property and the development of new AI products. Partnering with Security on SOC 2, customer security requirements, DPIAs and information security matters. About You Admitted to the US Bar – this is an absolute must. 7 - 12 years ...

talented Cyber Security Consultant for our client based in East London. You must have strong experience within recognised frameworks and regulations including ISO 27001, SOC2, NIST Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following … Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance ...

Process Owner for the compliance management process — requirement identification, control design, testing, monitoring, and continual improvement. Standards & Certification: Lead compliance with ISO 27001, SOC2, GDPR, and other applicable privacy and customer requirements. Reporting & Governance: Develop and report compliance KPIs/KRIs; coordinate reporting to senior management and governance committees. Audit … critical environment (data centres, utilities, defence, aviation, or similar); senior management level and above Demonstrable experience implementing enterprise compliance programmes and managing ISO/SOC2 certifications Strong knowledge of compliance management systems, governance frameworks, and UK GDPR/data protection legislation; familiarity with DORA and NIS Experience translating legislation into ...