1 to 25 of 31 Permanent SOC 2 Jobs in London

security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due‐diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across … and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance Partner on customer due‐diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire‐drilled. Build repeatable security workflows that embed controls into existing engineering processes ...

security, technology, and service delivery controls.* Coordinate and lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting … and customer collaborators.* Strong understanding of audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities. ...

Consultant Seeking an experienced GRC Consultant to join a critical certification programme midway through delivery and take ownership of driving successful outcomes across SOC 2 and ISO 27001 initiatives. Day Rate: £650-£700pd IR35 Status: Inside Location: 2 days a month in London Office Duration: 6 months … initially Responsibilities Take ownership of existing SOC 2 and ISO 27001 certification programmes, rapidly assessing current status, identifying gaps, and driving remediation activities through to successful audit and certification outcomes. Recover and stabilise compliance programmes that have fallen behind schedule, establishing clear accountability, coordinating stakeholders, and ensuring delivery ...

and cross‐border transfer mechanisms (UK/EU/US/SG). Work closely with our vCISO to maintain ISO 27001 and SOC 2 compliance – owning the legal and policy layer, supporting audit cycles, and closing out action items. Draft and maintain privacy notices, DPAs, and internal … improve contracts, not just mark them up. Working knowledge of UK GDPR and practical experience managing compliance programmes or certification cycles (ISO 27001/SOC 2 exposure strongly preferred). Genuine AI literacy – you use Claude or equivalent tools in your workflow; drafting without them would feel like ...

Fosse-1 is seeking an experienced GRC Consultant to lead a critical certification programme focusing on SOC 2 and ISO 27001. You will take ownership of driving successful outcomes, while ensuring compliance with standards. Your role will involve recovering compliance programmes, leading engagements with auditors, and strengthening ISMS ...

Auditor & Controls Analyst Key Experience: IT Audit, Technology Risk, ITGC, IT Application Controls, ISA 315, SOC 1, SOC 2. Required Skills/Experience: - Deliver testing over ITGCs, IT application controls, interface controls, automated controls and IPE with limited supervision. - Support ISA 315-aligned IT understanding and risk assessment … and risks arising from IT. * Prepare clear, review-ready workpapers, testing templates, issue summaries and RACMs. * Support financial statement audit-related technology controls assurance, SOC 1, SOC 2 and regulatory assurance engagements as required. Required Skills/Experience: - Experience in IT audit, technology risk, controls assurance ...

and resolve production issues. Security & compliance aware engineering Work closely with Security and GRC teams to ensure services meet security and compliance requirements (e.g. SOC 2, ISO 27001). Implement secure coding practices, strong authentication and authorization patterns, and data protection controls. Contribute to internal documentation and standards … Opportunity to travel (if applicable) Flexible vacation policy Private Healthcare Employee stock ownership (ESOP) Flexible working and autonomy Pay it forward days - we offer 2 annual pay it forward days where you can take time to volunteer for a charitable cause that is important to you. Wellness days ...

design, data modelling, and integration with internal and external financial systems. Security & Compliance Ensure systems meet regulatory, security, and audit standards (PCI-DSS, SOC2, GDPR). ...

deployments, and observability-first culture. Drive metrics for deployment frequency, lead time, MTTR, change failure rate; implement platform reliability standards (target 99.95%+ uptime, SOC 2 Type II, GDPR/data sovereignty). Champion developer experience and AI-assisted development tools (e.g., Copilot, Claude Code, Cursor) and rapid ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

e.g., pen tests, scanning). Experience delivering security awareness and incident exercising programmes. Working knowledge of assurance frameworks and resilience expectations (e.g., ISO 27001, SOC 2, NIST CSF. Candidates should be strongly motivated by BII’s development mission and ideally demonstrate some commitment to development or social goals ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...

role distinct from product engineering Open-source contributions or public portfolio demonstrating data engineering or AI/agentic work Experience with security compliance frameworks (SOC 2) for AI systems #J-18808-Ljbffr ...

Drive Security & Compliance: Integrate security-by-design principles into our architecture, ensuring that our transaction-heavy environment meets strict financial compliance standards (PCI-DSS, SOC2). Influence & Mentor: Act as a force multiplier for the engineering organization by mentoring senior engineers, leading architecture review boards, and guiding major technical decisions. ...

strictest international regulatory frameworks.## Responsibilities* Lead threat modeling and vulnerability assessments for all infrastructure components.* Develop automated security auditing and incident response pipelines.* Manage SOC2 and ISO27001 compliance programs.* Work closely with product engineering to build secure-by-default features.## Requirements* 8+ years in infrastructure security, preferably within cloud-native ...

client workflows, leveraging Tungsten Automation's cutting-edge technologies Security & Compliance Enterprise Security : Maintain a strong grasp of enterprise security practices (IAM, data encryption, SOC2, GDPR, HIPAA) when integrating AI into regulated industries What You Bring Educational Foundation Bachelor's degree in Computer Science, Information Systems, or a related technical ...

across cultures, functions, and geographies. Familiarity with the development and maintenance of privacy information management systems, including frameworks based on ISO/IEC 27701, SOC 2, and relevant ISO audit and compliance programs. CIPP/E, CIPP/M, or equivalent privacy certification. Desirable Qualifications Experience advising … cybersecurity regulators, or other relevant supervisory bodies. What’s in it For You? Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2‐3 days a week in the office depending on the role) for our office‐based roles while delivering a seamless experience that is digitally ...

postmortem afterward. You understand that reliability is built through good design, not just good monitoring. Awareness of security best practices and compliance requirements (SOC 2 or similar). Cost consciousness: not just making things work, but making them work economically at scale. You've rightsized compute, managed Spot ...

platforms or ways of working across multiple teams. Experience working in regulated environments or with strict compliance requirements (e.g., GDPR, PCI‐DSS, SOC 2, DMA, and EU AI Act). Demonstrated ability to establish programme governance and operating models from scratch in ambiguous or fast‐moving environments. Experience ...

shared risks, incidents, and cross-cutting initiatives. Represent AppSec externally where relevant — with customers, auditors, and in the context of compliance programmes such as SOC2 and ISO 42001. What's in it for you: Lead a small, senior team with high autonomy, focusing on creating leverage rather than running ...

Hands-on depth with enterprise identity (SAML, OIDC, SCIM) across major IdPs (Okta, Entra ID, Ping, Google Workspace, etc.) and with security review processes (SOC 2, ISO 27001, HIPAA, FedRAMP). Experience running on or supporting Bedrock/Vertex/multi-cloud LLM deployments. Experience with regulated customers ...

contract value, someone who knows what good looks like and isn't shy about demanding it Security, compliance and resilience end to end: GDPR, SOC2, Cyber Essentials+ and disaster recovery across customer and financial data Cost and TCO optimisation: rationalising the application stack, auditing SaaS licensing, and freeing up budget ...

architectures, and ensure compliance with leading regulatory frameworks across cloud and on-premises environments. You will lead threat modeling, automate security pipelines, and drive SOC 2 and ISO 27001 programs, collaborating with product engineering to ship secure-by-default features and robust incident response #J-18808-Ljbffr ...

DevSecOps Engineer Location: London (Hybrid 2-3 Days Per Week) Salary: £65,000 - £90,000 + Benefits Type: Permanent About the Company 167 Solutions is partnering with an innovative technology organisation that is scaling its cloud engineering and platform capabilities. We are seeking a hands-on DevSecOps Engineer … container runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering lifecycle rather than acting as a gatekeeper. Automated controls reduce ...

DevSecOps Engineer Location: London (Hybrid 2-3 Days Per Week) Salary: £65,000 - £90,000 + Benefits Type: Permanent About the Company 167 Solutions is partnering with an innovative technology organisation that is scaling its cloud engineering and platform capabilities. We are seeking a hands-on DevSecOps Engineer … container runtime security. Experience within highly regulated or enterprise-scale environments. Exposure to cloud-native security platforms and zero-trust architectures. Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks. What Success Looks Like Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper. Automated controls ...