1 to 25 of 35 Permanent SOC 2 Jobs in London

Operations Contractor (ISO 27001/SOC 2) 5 days onsite, City of London (EC3N) | Contract, 3-6 months | £500 per day, Outside IR35 Our client is a data and analytics consultancy working with private equity firms and their portfolio companies. They're looking for an experienced IT Operations … contractor to support their internal IT team through an office relocation and preparation for ISO 27001 and SOC 2 audits. It's a hands-on role with a broader scope than standard IT support. You will manage the IT apprentice and work with an offshore team in Chennai. ...

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

will support organisations in building trust and confidence with their customers, regulators and business partners. You will have the opportunity to work on SOC 1, SOC 2, ISAE 3402 and ISAE 3000 engagements, certification programmes such as ISO 27001 and ISO 42001, and assurance projects focused … relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of: SOC 1/ISAE 3402, SOC 2, ISAE 3000, ISO 27001, PCI DSS, HITRUST or other recognised assurance or certification frameworks Understanding ...

Senior Security Engineer (Network IAM SOC) London/WFH to £100k Are you a senior, hands-on Security Engineer with a strong networking background? You could be progressing your career at a well-funded and profitable FinTech scale-up. As the Senior Security Engineer, you'll take ownership … Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

They specifically need someone who can help with: Hands-on Microsoft 365/Entra/Intune/endpoint IT operational support ISO 27001 and SOC 2 audit evidence/readiness (expected in December) IT and infrastructure activities associated with an office relocation (expected end of December) General hands … operational support, supported by Junior IT Technician Previous ISO 27001 audit experience is essential, with SOC 2 experience highly desirable. ...

Site Reliability Engineering (SRE) principles and operational excellence frameworks. Working knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments. Experience working within financial services or other highly regulated environments. Familiarity with Zero ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

and web application firewalls. Encryption at rest and in transit, and key management across multi-cloud environments. Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture. FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP)You have experience of improving security controls, architecture and operational processesYou're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2You have excellent communication skills, able to explain technical risks and recommendations to non-technical stakeholdersYou ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Experience with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

with vulnerability management platforms such as Rapid7, Qualys, Tenable, Wiz Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2. Experience using Power BI to develop dashboards and reporting solutions. Exposure to Microsoft Azure or other cloud technologies. Personal Attributes Positive and proactive ...

following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including DNS, WAF and Tunnels. Google Workspace administration and ...

that investment professionals can trust and audit (citations, provenance, approve flows)Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring5+ years of software engineering with real full-stack ownership in productionStrong TypeScript, React, Python and PostgreSQLAuth ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

Management: Monitor systems for potential threats, carry out vulnerability assessments, apply patches and support security remediation. Compliance & Governance: Work alongside compliance teams to maintain SOC 2 alignment, support audits and ensure security documentation and procedures remain up to date. SRE Collaboration: Partner with the Site Reliability Engineering team … servers and PHP/php-fpm environments. Working knowledge of system monitoring tools and CI workflows. Familiarity with security frameworks and compliance standards, ideally SOC 2. Important Notice: We are expecting a high volume of applications for this role and while we do our best to respond ...

Assist in translating regulatory obligations into practical control requirements and governance processes. Coordinate evidence gathering and responses for regulatory reviews, ICT risk management assessments, SOC 2 assurance and internal audit activity. Escalate emerging compliance risks, control weaknesses and potential breaches in a timely manner. Maintain awareness of relevant ...