1 to 25 of 33 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

will support organisations in building trust and confidence with their customers, regulators and business partners. You will have the opportunity to work on SOC 1, SOC 2, ISAE 3402 and ISAE 3000 engagements, certification programmes such as ISO 27001 and ISO 42001, and assurance projects focused … relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of: SOC 1/ISAE 3402, SOC 2, ISAE 3000, ISO 27001, PCI DSS, HITRUST or other recognised assurance or certification frameworks Understanding ...

Senior Security Engineer (Network IAM SOC) London/WFH to £100k Are you a senior, hands-on Security Engineer with a strong networking background? You could be progressing your career at a well-funded and profitable FinTech scale-up. As the Senior Security Engineer, you'll take ownership … Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 ...

Ensure ITSM compliance across all identity teams, with standardised incident, change, and problem management workflows. Security, Compliance & Risk ManagementEnsure alignment with ISO 27001, NIST, SOC 2, GDPR, and applicable identity-specific compliance frameworks across all teams. Partner closely with ISRM to translate policy requirements into enforceable, automated technical … and automated workloads — with appetite to shape the emerging agentic identity domain. Strong understanding of compliance frameworks and their identity implications (ISO 27001, NIST, SOC 2, GDPR).Excellent leadership, communication, and stakeholder management skills with the ability to engage from engineering teams to executive leadership. Preferred Qualifications Certifications ...

monitoring, logging, alerting, and operational runbooksManage secrets, key custody, access controls, and infrastructure governanceDeliver backup, disaster recovery, and business continuity strategiesDrive compliance readiness for SOC 2, ISO 27001, and regulatory auditsPartner with software engineering teams to ensure applications are secure, observable, and production-readyLead infrastructure migration and cloud … similar sectorsExperience taking systems from early-stage development through to secure production deploymentStrong background in cloud infrastructure, automation, and operational securityExperience supporting or leading SOC 2 Type II and/or ISO 27001 programmesStrong documentation and communication skills with the ability to create clear technical and compliance-focused ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

They specifically need someone who can help with: Hands-on Microsoft 365/Entra/Intune/endpoint IT operational support ISO 27001 and SOC 2 audit evidence/readiness (expected in December) IT and infrastructure activities associated with an office relocation (expected end of December) General hands … operational support, supported by Junior IT Technician Previous ISO 27001 audit experience is essential, with SOC 2 experience highly desirable. ...

technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM, or ISO 27001 Lead Auditor ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP)You have experience of improving security controls, architecture and operational processesYou're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2You have excellent communication skills, able to explain technical risks and recommendations to non-technical stakeholdersYou ...

timely manner.Review, assess, and prioritise escalated security related events based on severity and criticality.Ensure compliance with relevant security standards, regulations (e.g., NIST, ISO 27001, SOC 2, GDPR), and internal policies. Develop and enforce security policies, standards, and procedures across the organization.Stay up-to-date with the latest cybersecurity … infrastructure and networking components such as Windows and Linux servers, L2-L3 network switches and routers.Excellent knowledge and understanding of cryptography and cryptographic technologies.1 - 2 years proven experience of implementing AI within complex security environments and manageing the security of AI.Proven experience as an escalation point for analysis ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Experience with CI/CD tooling (GitHub Actions, GitLab CI or Jenkins) Desirable Experience with ArgoCD or Flux Prometheus, Grafana or Datadog Exposure to SOC 2 or ISO 27001 environments Previous team leadership or mentoring experience What's On Offer 28 days holiday plus bank holidays Pension with ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

Audit.Experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, WizKnowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2.Experience using Power BI to develop dashboards and reporting solutions.Exposure to Microsoft Azure or other cloud technologies.Personal AttributesPositive and proactive "can-do" attitude.Eager ...

with vulnerability management platforms such as Rapid7, Qualys, Tenable, Wiz Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2. Experience using Power BI to develop dashboards and reporting solutions. Exposure to Microsoft Azure or other cloud technologies. Personal Attributes Positive and proactive ...

Helm)Python, Node.js or Bash scriptingDatabase and messaging experience (PostgreSQL, Redis, RabbitMQ)Observability experience (Prometheus Stack , Coralogix/DataDog OpenTelemetry).Security and compliance experience (SOC 2/ISO)Production experience with uptime, DR and incident troubleshootingClear communication and a strong sense of ownershipNice to have: Go, multi-cloud ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

Management: Monitor systems for potential threats, carry out vulnerability assessments, apply patches and support security remediation. Compliance & Governance: Work alongside compliance teams to maintain SOC 2 alignment, support audits and ensure security documentation and procedures remain up to date. SRE Collaboration: Partner with the Site Reliability Engineering team … servers and PHP/php-fpm environments. Working knowledge of system monitoring tools and CI workflows. Familiarity with security frameworks and compliance standards, ideally SOC 2. Important Notice: We are expecting a high volume of applications for this role and while we do our best to respond ...

Assists in annual audits for industry specific reports, including ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS-DSO, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, CyberGRX. Conducts annual audits for industry specific reports, including GDPR, FEDRAM, CDSA.Required Knowledge:Expert-level knowledge of various Compliance Regulations/ ...

Assist in translating regulatory obligations into practical control requirements and governance processes. Coordinate evidence gathering and responses for regulatory reviews, ICT risk management assessments, SOC 2 assurance and internal audit activity. Escalate emerging compliance risks, control weaknesses and potential breaches in a timely manner. Maintain awareness of relevant ...

/latency tuning; hands-on with at least one major LLM stack.5. Enterprise governance & security IAM, row/object-level permissions, model governance, compliance (SOC2/ISO27001/GDPR ), and speaking that language to CTOs and CISOs.6. Forward-deployed temperament you are measured by customer outcomes, you travel, you tolerate ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...