12 of 12 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

Stay informed about emerging threats and trends, integrating this knowledge into the security testing processes Support the firm's certification activities, such as ISO27001, SOC2, and Cyber Essentials Plus, by assisting with audits, documentation, and continuous improvement efforts. Engage with security industry groups and collaborate with external industry partners ...

talented Cyber Security Consultant for our client based in East London. You must have strong experience within recognised frameworks and regulations including ISO 27001, SOC2, NIST Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following … Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance ...

security risks and provide pragmatic recommendations that balance security with business objectives. Support security and compliance initiatives across PCI DSS, GDPR, ISO 27001 and SOC 2. Work with internal stakeholders and external auditors during security assessments and certification programmes. Promote secure engineering practices and help strengthen security awareness across … knowledge of authentication, identity and access management. Experience with security and compliance frameworks such as PCI DSS, GDPR, ISO 27001 and/or SOC 2. Knowledge of vulnerability management, risk assessment and security governance. Strong communication skills with the ability to influence both technical and non-technical stakeholders. ...