1 to 25 of 65 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skillsJoin us and you will be part of a fast-growing community of like … ensure ongoing effectivenessIdentify control gaps, deficiencies, and areas for improvementCompliance & Risk AlignmentAssess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2)Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA)Support regulatory and internal compliance initiativesEnsure controls align ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

and Access Transparency, relevant to deploying per-market for different banks' regulatorsHands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSSExperience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

remediation activities across engineering and security teams, ensuring alignment with agreed timelines and compliance requirements. AuditAudit Interpretation: Read and interpret third-party audit reports (SOC 2 Type II, ISO 27001, penetration test summaries) and represent findings to customers in questionnaires and security responses. Communication & Stakeholder ManagementInformation Translation: Gather … experience responding to SIG, CAIQ, VSA, and bespoke enterprise/government security questionnaires. Compliance Knowledge: Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP.Technical Expertise: Strong technical understanding of security principles ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP) You have experience of improving security controls, architecture and operational processes You're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2 You have excellent communication skills, able to explain technical risks and recommendations ...

safe adoption of AI coding and agentic tools across the businessCompliance and incident responseWork with GRC to translate regulatory and compliance requirements (e.g. SOC 2, ISO 27001) into concrete technical controlsLead or support incident response for application security events, grounded in Zero Trust principlesTranslate technical risk into terms … that don't have security as their day jobPractical understanding of integrating security into the SDLCDesirable: Cloud security experience (AWS/GCP)Experience with SOC 2, ISO 27001, or similar compliance frameworksExposure to AI/ML security or agentic AI frameworksExperience building automation or tooling to scale ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

support the Information Security Manager in delivering security assurance activities across Experian Data Quality (EDQ). You will help ensure compliance with ISO 27001, SOC 2, Experian security standards, and regulatory requirements while supporting the continuous improvement of EDQ's security and compliance posture. You will work with … governance meetings. Audit & AssuranceHelp with ISMS internal audits and supporting Global Internal Audit activities. Support ISO 27001 certification activities across multiple regions. Help with SOC 2 attestation activities for EDQ's flagship application. Support customer, regulatory, and third-party audits. Track audit findings and supporting the completion ...

findings through resolution and maintain organised documentation and repositories. Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials. Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that build … premises, colocation and cloud environments, including cloud security and compliance technologies. Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits. Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and ...

financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific. We're co-headquartered in San Francisco and Singapore, with more than 2,700 people across 27 offices. We hire builders with founder-level energy, people who move fast with good judgment, dig in with real curiosity … complex technology risk into clear recommendations for engineers, senior executives, and board-level risk committees, drawing on frameworks and expectations including NIST, ISO 27001, SOC 1, SOC 2, DORA, MAS TRM, FCA, HKMA, ASIC, and FinCEN.You'll work from our Amsterdam or London office three days ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

Site Reliability Engineering (SRE) principles and operational excellence frameworks. Working knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments. Experience working within financial services or other highly regulated environments. Familiarity with Zero ...

innovation and business objectives.Nice to HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud.Security certifications such as CISSP, CISM, CCSP ...

business objectives. Nice to HaveExperience securing AI-enabled products, platforms or digital services. Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud. Security certifications such as CISSP, CISM, CCSP ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

high-risk architectural changes across platform and cloud network boundaries. Audit & Technical Assurance: Support technical external audits and close compliance gaps (ISO 27001, SOC 2, DORA) through direct engineering implementations rather than paperwork. What You'll BringTechnical Leadership & Hands-on Depth8+ years of total experience across software engineering ...

and web application firewalls. Encryption at rest and in transit, and key management across multi-cloud environments. Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture. FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost ...

native firewalls, and web application firewalls.Encryption at rest and in transit, and key management across multi-cloud environments.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture.FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost Explorer ...

best practices. Secure SaaS applications and infrastructure by implementing security best practices, access controls, and continuous monitoring. Ensure compliance with security frameworks (ISO 27001, SOC 2, PCI-DSS) by developing governance, implementing necessary controls, and securing business processes. Collaborate with both non-engineering teams and IT to drive … related field. You're an accomplished Security Operations Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment. You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools. You're proficient in scripting ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

automation and be reluctant for manual implementationBuild systems with security by design as a core foundationEnsure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DSDesign and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...