1 to 25 of 37 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skillsJoin us and you will be part of a fast-growing community of like … ensure ongoing effectivenessIdentify control gaps, deficiencies, and areas for improvementCompliance & Risk AlignmentAssess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2)Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA)Support regulatory and internal compliance initiativesEnsure controls align ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

and Access Transparency, relevant to deploying per-market for different banks' regulatorsHands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSSExperience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

Site Reliability Engineering (SRE) principles and operational excellence frameworks. Working knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments. Experience working within financial services or other highly regulated environments. Familiarity with Zero ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

and web application firewalls. Encryption at rest and in transit, and key management across multi-cloud environments. Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture. FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost ...

best practices. Secure SaaS applications and infrastructure by implementing security best practices, access controls, and continuous monitoring. Ensure compliance with security frameworks (ISO 27001, SOC 2, PCI-DSS) by developing governance, implementing necessary controls, and securing business processes. Collaborate with both non-engineering teams and IT to drive … related field. You're an accomplished Security Operations Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment. You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools. You're proficient in scripting ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

automation and be reluctant for manual implementationBuild systems with security by design as a core foundationEnsure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DSDesign and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

automation and be reluctant for manual implementationBuild systems with security by design as a core foundationEnsure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DSDesign and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

Terraform, Bicep, or other Infrastructure as Code (IaC) toolsPrevious work in a devops, platform, or infra roleFamiliarity with enterprise security, compliance, and governance requirements (SOC 2, GDPR, HIPAA)Customer Product WhispererProven ability to work with customers in a technical consulting, solutions engineering, or product engineering roleDomain expertise ...

containerised workloads and software supply chains, such as SBOMs and artifact signingExperience applying security and compliance frameworks such as NIST, CIS, ISO 27001, or SOC 2 in regulated or enterprise environmentsRelevant certifications such as OSCP, CISSP, GWAPT, Microsoft Certified Azure Security Engineer Associate, or equivalentAdditional InformationOur Hiring Process25 … challenge: A hands-on task to assess your problem-solving and technical skillsCombined technical and cultural interview (in-person)Technical Interview: 1-hour with 2 of our engineers to discuss your solution to the take-home challengeCulture fit: 30-minute meeting with our leadership teamWhy Join Us? Work ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

mission-critical enterprise platforms is required. Relevant exposure may include: Identity Governance & AdministrationPrivileged Access ManagementAccess certifications/User Access ReviewsCompliance initiatives (SOX, ISO, NIST, SOC 2)Zero Trust programsSecurity transformation effortsAdditional InformationWork PersonasWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote ...

that investment professionals can trust and audit (citations, provenance, approve flows)Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring5+ years of software engineering with real full-stack ownership in productionStrong TypeScript, React, Python and PostgreSQLAuth ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

with adoption of FAIR Threat modeling within the SDLC Familiarity with DevSecOps processes, tooling, and controls Experience gaining and maintaining certifications like ISO 270xx, SOC 2, etc. Knowledge of regional security data privacy regulations related to Minimization Encryption Cross-border data accessSalary Range: $180,000 – $225,000 Actual ...