1 to 25 of 48 Permanent SOC 2 Jobs in London

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

security, technology, and service delivery controls.* Coordinate and lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting … and customer collaborators.* Strong understanding of audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities. ...

Define and own the GRC programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat … progressive experience in information security, with at least 3 years in a senior or leadership role Hands‐on experience owning ISO 27001 and SOC 1 and SOC 2 programmes, not just supporting them Demonstrated experience managing security incidents end‐to‐end, including client and regulatory communications Strong ...

engage credibly with the wider infosec team and its systems. Critically review and challenge supplier technical proposals, architectures and security testing reports (e.g. Soc 2, penetration test reports) ensuring proportionate controls are in place. Provide informed input into security testing scope (e.g. Penetration testing, configuration reviews) and review … Nist ai rmf) or developing ai use-case risk assessments. Exposure to property technology would be a distinct advantage. Experience reviewing penetration test reports, soc 2 reports, or supplier security architectures. Experience with security tooling such as siem, email security platforms or vulnerability scanning. Hands‐on experience supporting ...

balance long-term strategic vision (governance frameworks, scalable architectures) with tactical quick wins that deliver immediate value Partner with Security and Legal to maintain SOC 2 compliance — owning IT controls, evidence collection, and audit readiness Ensure GDPR and data protection requirements are embedded into every system and workflow … best practices within the IT function and across the organisation Qualifications 8k+ years in IT engineering, platform engineering, or infrastructure roles — with at least 2 years leading or mentoring a technical team Strong, demonstrable coding ability in Python — not just scripting, but building well-structured, testable automation with proper ...

balance long-term strategic vision (governance frameworks, scalable architectures) with tactical quick wins that deliver immediate value • Partner with Security and Legal to maintain SOC 2 compliance — owning IT controls, evidence collection, and audit readiness • Ensure GDPR and data protection requirements are embedded into every system and workflow … best practices within the IT function and across the organisation Requirements 8k+ years in IT engineering, platform engineering, or infrastructure roles — with at least 2 years leading or mentoring a technical team Strong, demonstrable coding ability in Python — not just scripting, but building well-structured, testable automation with proper ...

Consultant Seeking an experienced GRC Consultant to join a critical certification programme midway through delivery and take ownership of driving successful outcomes across SOC 2 and ISO 27001 initiatives. Day Rate: £650-£700pd IR35 Status: Inside Location: 2 days a month in London Office Duration: 6 months … initially Responsibilities Take ownership of existing SOC 2 and ISO 27001 certification programmes, rapidly assessing current status, identifying gaps, and driving remediation activities through to successful audit and certification outcomes. Recover and stabilise compliance programmes that have fallen behind schedule, establishing clear accountability, coordinating stakeholders, and ensuring delivery ...

and cross‐border transfer mechanisms (UK/EU/US/SG). Work closely with our vCISO to maintain ISO 27001 and SOC 2 compliance – owning the legal and policy layer, supporting audit cycles, and closing out action items. Draft and maintain privacy notices, DPAs, and internal … improve contracts, not just mark them up. Working knowledge of UK GDPR and practical experience managing compliance programmes or certification cycles (ISO 27001/SOC 2 exposure strongly preferred). Genuine AI literacy – you use Claude or equivalent tools in your workflow; drafting without them would feel like ...

Fosse-1 is seeking an experienced GRC Consultant to lead a critical certification programme focusing on SOC 2 and ISO 27001. You will take ownership of driving successful outcomes, while ensuring compliance with standards. Your role will involve recovering compliance programmes, leading engagements with auditors, and strengthening ISMS ...

against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO/IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team of Security Analysts and Engineers, providing management, mentorship … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO/IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO 27001, SOC 2, NIST. ...

architecture across on-premises and cloud environments. Develop security policies, standards, and procedures in alignment with business and compliance requirements (e.g., ISO 27001, NIST, SOC 2, GDPR). Lead threat modeling, vulnerability assessments, and penetration testing to identify and mitigate risks. Collaborate with IT, DevOps, and application development ...

software‐defined storage, disaster recovery as code, and observability stacks. Ability to engage credibly in security framework discussions—Zero Trust, NIST CSF, CIS Controls, SOC 2, and regulatory environments (GDPR, HIPAA, FedRAMP). Experience leading or owning large‐scale, complex customer onboardings with multiple stakeholders, integrated environments, and ...

mandatory security checks. Impress Us More By Having (Desirable) Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments. Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP. ...

and resolve production issues. Security & compliance aware engineering Work closely with Security and GRC teams to ensure services meet security and compliance requirements (e.g. SOC 2, ISO 27001). Implement secure coding practices, strong authentication and authorization patterns, and data protection controls. Contribute to internal documentation and standards … Opportunity to travel (if applicable) Flexible vacation policy Private Healthcare Employee stock ownership (ESOP) Flexible working and autonomy Pay it forward days - we offer 2 annual pay it forward days where you can take time to volunteer for a charitable cause that is important to you. Wellness days ...

explain complex technical issues in clear, understandable terms. Passionate about learning new technologies and continuously improving systems and processes. Experience in compliant environments (SOC 2, ISO 27001, ISO 27701). Experience in Azure, including MS Graph, and/or GCP. Understanding of information security concerns and demonstrable experience ...

design, data modelling, and integration with internal and external financial systems. Security & Compliance Ensure systems meet regulatory, security, and audit standards (PCI-DSS, SOC2, GDPR). ...

deployments, and observability-first culture. Drive metrics for deployment frequency, lead time, MTTR, change failure rate; implement platform reliability standards (target 99.95%+ uptime, SOC 2 Type II, GDPR/data sovereignty). Champion developer experience and AI-assisted development tools (e.g., Copilot, Claude Code, Cursor) and rapid ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

e.g., pen tests, scanning). Experience delivering security awareness and incident exercising programmes. Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. Candidates should be strongly motivated by BII’s development mission and ideally demonstrate some commitment to development or social goals ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Proficiency with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...

teams build with cost in mind. Shape Sanity's longer‐term architecture for multi‐region scale, disaster recovery, data residency, and trust requirements like SOC 2, ISO 27001, PCI, HIPAA, or similar customer expectations. Hire, coach, and stretch infrastructure leaders and engineers. The team needs direction, high standards … 200+ person company with committed, ambitious people. We are pioneers, we exist for our customers, we are hel ved, and we love type 2 fun. Read more about our values here. Sanity.io pledges to be an organization that reflects the globally diverse audience our product serves. We believe that ...

regulatory landscape relevant to digital asset custody and trading (for example FCA, FINMA, FSRA/ADGM, MiCA). Compliance familiarity across ISO 27001, SOC 2, and NIST CSF/800‐53, with the ability to map controls cleanly between them. Enterprise architecture grounding (TOGAF, SABSA) where it complements ...