1 to 25 of 27 Permanent SOC 2 Jobs in London

reducing technical debt and strengthening the overall cloud platform. Security currently sits within the DevOps/Platform function, and with the business working towards SOC 2 compliance by Q1 2027, they’re looking for someone who can bring together strong DevOps fundamentals with a security-first mindset. Responsibilities … processes Supporting ongoing client migrations into AWS and Azure Working alongside the wider Platform/DevOps and Compliance functions as the business progresses towards SOC 2 compliance Helping shift security further left within the engineering lifecycle Required Skills You don't need to be a career Security Engineer. ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP) You have experience of improving security controls, architecture and operational processes You're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2 You have excellent communication skills, able to explain technical risks and recommendations ...

including IAM, network segmentation, encryption, logging and monitoringOwn security controls around identity, permissions, tenant isolation, audit trails and incident responseLead security assurance activity covering SOC 2, ISO 27001 and wider customer security requirementsSupport enterprise customer security reviews, questionnaires and due diligence while helping shape security standards across … application security experience across threat modelling, OWASP and secure software developmentGood understanding of cloud security, identity, access controls, encryption and monitoringExperience delivering or implementing SOC 2 and/or ISO 27001 programmesExperience supporting enterprise security reviews, questionnaires, audits or customer due diligenceStrong communication skills with the ability ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

innovation and business objectives.Nice to HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud.Security certifications such as CISSP, CISM, CCSP ...

business objectives. Nice to HaveExperience securing AI-enabled products, platforms or digital services. Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud. Security certifications such as CISSP, CISM, CCSP ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

and web application firewalls. Encryption at rest and in transit, and key management across multi-cloud environments. Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture. FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost ...

native firewalls, and web application firewalls.Encryption at rest and in transit, and key management across multi-cloud environments.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture.FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost Explorer ...

containerised workloads and software supply chains, such as SBOMs and artifact signingExperience applying security and compliance frameworks such as NIST, CIS, ISO 27001, or SOC 2 in regulated or enterprise environmentsRelevant certifications such as OSCP, CISSP, GWAPT, Microsoft Certified Azure Security Engineer Associate, or equivalentAdditional InformationOur Hiring Process25 … challenge: A hands-on task to assess your problem-solving and technical skillsCombined technical and cultural interview (in-person)Technical Interview: 1-hour with 2 of our engineers to discuss your solution to the take-home challengeCulture fit: 30-minute meeting with our leadership teamWhy Join Us Work ...

and hybrid mail flow.Familiarity with identity and access management concepts, including Okta, Azure AD and SSO/SAML, and how email security integrates with SOC and SIEM/SOAR workflows.Experience working with technical administrators, CISOs, C-level executives, and legal and compliance teams. You can explain complex security architecture … CompTIA Security+, CISSP (Associate or full), CEH, or vendor-specific email or cloud security certifications.Familiarity with FINRA, HIPAA, FCA, GDPR, ISO 27001 and SOC 2 compliance frameworks.Ability to interpret API logs, review connector health and diagnose integration issues without first-level escalation.Stay curious about products, customer environments and ...

enterprise platforms such as Okta, Google Workspace, Slack, GitHub, Atlassian, or endpoint management solutions. Familiar with security, compliance, and audit frameworks such as SOX, SOC2, or ISO 27001. Comfortable managing technical projects and collaborating across multiple teams and business functions. Curious, collaborative, and motivated by solving problems through automation and ...

Terraform, and cloud security experience. Strong understanding of SRE, observability, incident response, and disaster recovery. Experience operating within regulated environments such as ISO 27001, SOC 2, or GxP. Comfortable balancing strategic leadership with hands-on operational delivery. AWS Solutions Architect - Professional certification required. CKA or CKS certification highly ...

building institutional trust with customers. WHAT YOU’LL DO Deal Acceleration & Questionnaire Mastery: Take absolute ownership of technical security, data privacy, and compliance questionnaires (SOC 2, ISO 27001, GDPR, CCPA, NIST) submitted by enterprise prospects. Deliver highly accurate, polished, and rapid turnarounds to maintain deal momentum. Customer-Facing ...

relating to technology, cybersecurity, privacy or operational controls. Strong ITGC testing understanding. Strong understanding of assurance frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC ...

skills.Experience positioning business value, ROI, and risk reduction outcomes to executive stakeholders.Preferred QualificationsKnowledge of cybersecurity frameworks and regulations including ISO 27001, NIST, NIS2, DORA, SOC 2, PCI DSS, GDPR, and related compliance requirements.Understanding of cyber risk management, security governance, operational resilience, and regulatory compliance programs.Experience engaging with executive ...

positioning business value, ROI, and risk reduction outcomes to executive stakeholders. Preferred QualificationsKnowledge of cybersecurity frameworks and regulations including ISO 27001, NIST, NIS2, DORA, SOC 2, PCI DSS, GDPR, and related compliance requirements. Understanding of cyber risk management, security governance, operational resilience, and regulatory compliance programs. Experience engaging ...

and engineering teams to embed security across the product lifecycle. Key responsibilities Own and evolve the information security strategy. Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance. Embed secure-by-design and DevSecOps across engineering. Drive security improvements through AI, automation and technical controls. Lead … security risk, threat modelling, vulnerability management and incident response. Oversee third-party/supplier security and operational security controls. Partner with SOC and engineering teams to improve detection and response. Support client assurance and security audits. Experience required CISSP, CISM or equivalent. Strong knowledge of ISO 27001, NIST ...

that investment professionals can trust and audit (citations, provenance, approve flows)Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring5+ years of software engineering with real full-stack ownership in productionStrong TypeScript, React, Python and PostgreSQLAuth ...

that investment professionals can trust and audit (citations, provenance, approve flows) Ship and operate on AWS with solid CI/CD, observability and SOC 2/UK GDPR awareness What you bring 5+ years of software engineering with real full-stack ownership in production Strong TypeScript, React, Python ...

solutions. • Stakeholder Management: Exceptional executive presence, with experience advising public-sector and Fortune-level clients. • Governance & Compliance: Deep understanding of GDPR/UK GDPR, SOC2, ISO27001, and ethical-AI frameworks. Preferred Qualifications • Certifications: Azure Solutions Architect Expert, CISSP, or equivalent. • Experience with AI policy bodies, standards organizations, or government advisory ...

Stay informed about emerging threats and trends, integrating this knowledge into the security testing processes Support the firm's certification activities, such as ISO27001, SOC2, and Cyber Essentials Plus, by assisting with audits, documentation, and continuous improvement efforts. Engage with security industry groups and collaborate with external industry partners ...