25 of 25 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

including horizon scanning across jurisdictions.Reduce cyber risk exposure and strengthen cybersecurity governance in partnership with the CISO, aligning to global standards e.g. ISO 27001, SOC 2.Contribute to Board, Audit Committee and Annual Report risk disclosures.Risk & Compliance OperationsLead the Group's risk and compliance programme, ensuring controls are well-designed … operational and scalable, particularly for SOC 2 Type 2 and ISO 27001.Maintain a centralised, audit-ready evidence repository and coordinate internal/external audits, client reviews and due diligence.Oversee remediation plans and ensure continuous evidence collection.Develop consistent, lightweight playbooks for vendor intake, audit readiness and control testing ...

across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused … clients to improve security programmes and regulatory compliance The Person: Good years of experience within cybersecurity, technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and/or GCP environments Degree qualified in Cyber Security ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … organisational skills. You write clear documentation and reports, and you can translate complex requirements for stakeholders at every level. You'll have at least 2 years' experience in a related role. Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

Role: Technical Delivery Lead (Platform) Salary: £70,000-£90,000 p/a + discretionary annual bonus of up to 7.5% Location: Hybrid - London 2 days per week The Opportunity: Our client, an innovative medical technology business is looking for an experienced Platform Delivery Lead to join its growing … training or qualifications in Agile, Lean, Six Sigma, PRINCE2 or a similar discipline Knowledge of GCP, ISO13485, ISO27001 or similar quality frameworks Familiarity with SOC 2/SOC 3 and secure, compliant software delivery An engineering or technical background Experience working with structured delivery lifecycle or process ...

detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities. AI SecurityDesign and implement guardrails for AI/LLM systems, covering … frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation. Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. Nice to haveAZ-500, AWS Certified Security – Specialty, or equivalent cloud security certification. ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...

enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! Location: Remote, within UKAbout … teams, and embed them into CI/CD and GitOps workflows. Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls. Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely ...

design, data modelling, and integration with internal and external financial systems. Security & Compliance Ensure systems meet regulatory, security, and audit standards (PCI-DSS, SOC2, GDPR). ...

systems, and cloud environments (AWS, Azure, GCP).Enterprise readiness. Ensure the platform is configured, secured, and monitored to meet enterprise security and compliance requirements (SOC 2, ISO 27001, data residency, etc.).Bridge field back to product. Push field learnings into the core platform so the next deployment ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and deliveredcompelling technical demonstrations … adjacent modules), either in a vendor, partner, or customer capacityProven, demonstrated experience leading technical client conversations at the CISO, security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management ...

ability to build and execute growth strategies across multiple countries and territories.Preferred QualificationsKnowledge of cybersecurity frameworks and regulations including ISO 27001, NIST, NIS2, DORA, SOC 2, PCI DSS, GDPR, and related compliance requirements.Strong understanding of cyber risk management, security governance, operational resilience, regulatory compliance, internal audit, and third ...

escalation playbooksDriving the transition of advanced detection capability into Cyber Security ownershipWhat we're looking forProven experience in detection engineering, threat hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel … build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity metricsPragmatic mindset: precision and impact beat coverage theatreExperience operating beyond traditional SOC or MSSP modelsHands-on cloud detection experience (identity, control plane, SaaS)Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST ...

bring: 7+ years of experience in security and compliance, ideally within eCommerce, payments, or technology environments Familiarity with industry frameworks such as PCI DSS, SOC 2, ISO 27001, NIST, or similar Experience managing third-party audits, including coordinating evidence collection across teams Solid grasp of security measures, threats ...

team, within tight timescales, to budget and a high level of quality. - Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials). Cyber Security Auditor In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon ...

with the realities of a fast-moving engineering-led organisation. DesirableExperience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance techniques in cloud-native and software engineering ...

and secure identity patterns for internal/external systems. Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2).Collaboration & LeadershipCollaborate with engineering, UX, and business stakeholders using Agile methodologies. Mentor team members on IAM technologies and best practices. Produce clear ...

design. Advising Product and Engineering on data ownership, data usage, intellectual property and the development of new AI products. Partnering with Security on SOC 2, customer security requirements, DPIAs and information security matters. About You Admitted to the US Bar – this is an absolute must. 7 - 12 years ...

talented Cyber Security Consultant for our client based in East London. You must have strong experience within recognised frameworks and regulations including ISO 27001, SOC2, NIST Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following … Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance ...

chain concepts (wallets, addresses, transactions) but no requirement to audit contracts. Familiarity with SOC operations, and post-incident forensic analysis. Familiarity with SOC2, ISO 27001, or financial audit requirementsAny relevant industry certificationCOMPENSATION & PERKSFull-time salary based on experience and meaningful equity in an industry-leading companyThis is a role ...

Process Owner for the compliance management process — requirement identification, control design, testing, monitoring, and continual improvement. Standards & Certification: Lead compliance with ISO 27001, SOC2, GDPR, and other applicable privacy and customer requirements. Reporting & Governance: Develop and report compliance KPIs/KRIs; coordinate reporting to senior management and governance committees. Audit … critical environment (data centres, utilities, defence, aviation, or similar); senior management level and above Demonstrable experience implementing enterprise compliance programmes and managing ISO/SOC2 certifications Strong knowledge of compliance management systems, governance frameworks, and UK GDPR/data protection legislation; familiarity with DORA and NIS Experience translating legislation into ...

locations. Develop and maintain network build standards, configuration templates, and technical runbooksEnsure all designs meet FinTech regulatory and security requirements (e.g., PCI-DSS, SOC2)Own the reference architecture and standard design patterns used for new office deployments and office expansions. Operations, Monitoring & User ExperienceProvide escalation support (L3/… with MPLS, VPLS, and internet circuit procurementExperience working with third-party vendors and ISPs across multiple geographiesComfortable working in a regulated environment (PCI-DSS, SOC2 awareness is a plus)DesirableCCNP/CCIE (Routing & Switching)Fortinet NSE 4-7 (Network Security)Exposure to network automation tooling (Ansible, Python, NetBox)Experience with ...