1 to 25 of 35 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

Senior Security Engineer (Network IAM SOC) London/WFH to £100k Are you a senior, hands-on Security Engineer with a strong networking background? You could be progressing your career at a well-funded and profitable FinTech scale-up. As the Senior Security Engineer, you'll take ownership … Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

response across application and cloud layers: triage, containment, forensics, root cause analysis, and post-incident hardening.Partner with Privacy/Compliance so platform controls satisfy SOC 2 Type II, ISO 27001, PCI DSS, and GDPR, and design decisions stay defensible and auditable.Scale security through people. Build a Security Champions … transit.Experience running vulnerability management or a bug bounty/pentest program, and driving remediation across teams you don't manage.Strong working knowledge of SOC 2 Type II, ISO 27001, PCI DSS, and GDPR.Ability to turn complex security concepts into clear guidance for engineers and risk-based recommendations ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

They specifically need someone who can help with: Hands-on Microsoft 365/Entra/Intune/endpoint IT operational support ISO 27001 and SOC 2 audit evidence/readiness (expected in December) IT and infrastructure activities associated with an office relocation (expected end of December) General hands … operational support, supported by Junior IT Technician Previous ISO 27001 audit experience is essential, with SOC 2 experience highly desirable. ...

such as Docker, Kubernetes, or OpenShift), identity and access management, encryption protocols, and security monitoring solutionsExpert-level proficiency in major compliance frameworks including COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001, with proven ability to map contractual requirements to specific security controlsExceptional ...

Site Reliability Engineering (SRE) principles and operational excellence frameworks. Working knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments. Experience working within financial services or other highly regulated environments. Familiarity with Zero ...

Senior Security Engineer (Network IAM SOC) London/WFH to 100kAre you a senior, hands-on Security Engineer with a strong networking background You could be progressing your career at a well-funded and profitable FinTech scale-up.As the Senior Security Engineer, you'll take ownership … development of Zero Trust principles.You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

Security, Zero Trust & ComplianceEmbed Zero Trust principles across hybrid cloud—identity, segmentation, encryption, and posture control.Align infrastructure with regulatory and compliance frameworks (ISO 27001, SOC2, CIS, NIST).Define security integration patterns across cloud and on‐prem: IAM, PAM, KMS, certificates, secrets management.Partner with security architects to ensure platform designs meet ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

with OpenStack in private or hybrid cloud environments.Experience with testing frameworks and test‐driven development practices.Understanding security scanning, vulnerability management, and compliance frameworks (e.g., SOC 2, PCI‐DSS, GDPR).Experience with CI/CD, GitOps, or developer platform enablement.CollabhiringWhy Cisco? At Cisco, we’re revolutionizing how data and ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP)You have experience of improving security controls, architecture and operational processesYou're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2You have excellent communication skills, able to explain technical risks and recommendations to non-technical stakeholdersYou ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Experience with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agentsiOS or Android security experienceExperience with ISO 27001, ISO 27701 or SOC 2 auditsA background in health tech, femtech or another regulated, privacy-sensitive industryCertifications or degrees such as CISSP, CCSP, OSCP ...

customers rank among the who’s who in the Fortune 50. Coca-Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best-in-class platform.Our Winning Culture is the engine that drives our teams of innovators. We champion … many: using our cross-framework control crosswalk to identify where requirements across our certified standards, including ISO 27001, 27017, 27018, 27701, and 42001, SOC 1/2 Type 2, Cyber Essentials, ENS, and TX-RAMP genuinely overlap, so our partners build to a single common control instead ...

that investment professionals can trust and audit (citations, provenance, approve flows)Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring5+ years of software engineering with real full-stack ownership in productionStrong TypeScript, React, Python and PostgreSQLAuth ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

Security, Continuous Integration and Continuous Delivery techniques• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2 etc.• Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats and risk via threat ...

Management: Monitor systems for potential threats, carry out vulnerability assessments, apply patches and support security remediation. Compliance & Governance: Work alongside compliance teams to maintain SOC 2 alignment, support audits and ensure security documentation and procedures remain up to date. SRE Collaboration: Partner with the Site Reliability Engineering team … servers and PHP/php-fpm environments. Working knowledge of system monitoring tools and CI workflows. Familiarity with security frameworks and compliance standards, ideally SOC 2. Important Notice: We are expecting a high volume of applications for this role and while we do our best to respond ...