1 to 25 of 36 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

will support organisations in building trust and confidence with their customers, regulators and business partners. You will have the opportunity to work on SOC 1, SOC 2, ISAE 3402 and ISAE 3000 engagements, certification programmes such as ISO 27001 and ISO 42001, and assurance projects focused … relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of: SOC 1/ISAE 3402, SOC 2, ISAE 3000, ISO 27001, PCI DSS, HITRUST or other recognised assurance or certification frameworks Understanding ...

Senior Security Engineer (Network IAM SOC) London/WFH to £100k Are you a senior, hands-on Security Engineer with a strong networking background? You could be progressing your career at a well-funded and profitable FinTech scale-up. As the Senior Security Engineer, you'll take ownership … Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

They specifically need someone who can help with: Hands-on Microsoft 365/Entra/Intune/endpoint IT operational support ISO 27001 and SOC 2 audit evidence/readiness (expected in December) IT and infrastructure activities associated with an office relocation (expected end of December) General hands … operational support, supported by Junior IT Technician Previous ISO 27001 audit experience is essential, with SOC 2 experience highly desirable. ...

such as Docker, Kubernetes, or OpenShift), identity and access management, encryption protocols, and security monitoring solutionsExpert-level proficiency in major compliance frameworks including COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001, with proven ability to map contractual requirements to specific security controlsExceptional ...

Senior Security Engineer (Network IAM SOC) London/WFH to 100kAre you a senior, hands-on Security Engineer with a strong networking background You could be progressing your career at a well-funded and profitable FinTech scale-up.As the Senior Security Engineer, you'll take ownership … development of Zero Trust principles.You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

similar cybersecurity certifications (e.g., CISM, CISA, CRISC) are essential. Other relevant certifications, such as CISA (Certified Information Systems Auditor), ISO 27001 Lead Implementer, or SOC 2 knowledge are desirable.Essential requirements Candidates will only be shortlisted if they can demonstrate that they meet all the following essential requirements. Able ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

with OpenStack in private or hybrid cloud environments.Experience with testing frameworks and test‐driven development practices.Understanding security scanning, vulnerability management, and compliance frameworks (e.g., SOC 2, PCI‐DSS, GDPR).Experience with CI/CD, GitOps, or developer platform enablement.CollabhiringWhy Cisco? At Cisco, we’re revolutionizing how data and ...

external collaboration, licensing, security and compliance centre.Strong cloud security background: IAM, network segmentation, secrets management, vulnerability management, SIEM integration and compliance frameworks (ISO 27001, SOC 2, FCA SYSC).Kubernetes and containerisation expertise: cluster management, workload scheduling, service mesh and GitOps delivery pipelines.Production experience running infrastructure that supports ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP)You have experience of improving security controls, architecture and operational processesYou're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2You have excellent communication skills, able to explain technical risks and recommendations to non-technical stakeholdersYou ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Experience with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

with vulnerability management platforms such as Rapid7, Qualys, Tenable, Wiz Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2. Experience using Power BI to develop dashboards and reporting solutions. Exposure to Microsoft Azure or other cloud technologies. Personal Attributes Positive and proactive ...

customers rank among the who’s who in the Fortune 50. Coca-Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best-in-class platform.Our Winning Culture is the engine that drives our teams of innovators. We champion … many: using our cross-framework control crosswalk to identify where requirements across our certified standards, including ISO 27001, 27017, 27018, 27701, and 42001, SOC 1/2 Type 2, Cyber Essentials, ENS, and TX-RAMP genuinely overlap, so our partners build to a single common control instead ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats and risk via threat ...

Management: Monitor systems for potential threats, carry out vulnerability assessments, apply patches and support security remediation. Compliance & Governance: Work alongside compliance teams to maintain SOC 2 alignment, support audits and ensure security documentation and procedures remain up to date. SRE Collaboration: Partner with the Site Reliability Engineering team … servers and PHP/php-fpm environments. Working knowledge of system monitoring tools and CI workflows. Familiarity with security frameworks and compliance standards, ideally SOC 2. Important Notice: We are expecting a high volume of applications for this role and while we do our best to respond ...