1 to 25 of 30 Permanent SOC 2 Jobs in London

security, technology, and service delivery controls. Coordinate and lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements. Maintain audit readiness throughout all iLottery regions by conducting … and customer collaborators. Strong understanding of audit methodologies, internal controls, risk management, and governance frameworks. Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks. Strong analytical, problem-solving, and decision-making capabilities. ...

security, technology, and service delivery controls.* Coordinate and lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting … and customer collaborators.* Strong understanding of audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities. ...

Lead structured pilots with signed mutual action plans, clear success criteria, and measurable exit criteria before they start. Navigate enterprise procurement end-to-end: SOC 2, DPAs, MSAs, redlines, and vendor security reviews. Feed tight feedback loops to product and engineering on objections, competitive context, and pilot learnings. … Comfortable selling to and holding conversations with deeply technical buyers (engineering, AI/ML, security teams). Experience navigating enterprise security and compliance procurement (SOC 2, DPAs, MSAs). Startup experience (Seed Series B) you thrive in ambiguity and can iterate fast. Tech stack at company : Voice ...

Consultant Seeking an experienced GRC Consultant to join a critical certification programme midway through delivery and take ownership of driving successful outcomes across SOC 2 and ISO 27001 initiatives. Day Rate: £650-£700pd IR35 Status: Inside Location: 2 days a month in London Office Duration: 6 months … initially Responsibilities Take ownership of existing SOC 2 and ISO 27001 certification programmes, rapidly assessing current status, identifying gaps, and driving remediation activities through to successful audit and certification outcomes. Recover and stabilise compliance programmes that have fallen behind schedule, establishing clear accountability, coordinating stakeholders, and ensuring delivery ...

and cross‐border transfer mechanisms (UK/EU/US/SG). Work closely with our vCISO to maintain ISO 27001 and SOC 2 compliance – owning the legal and policy layer, supporting audit cycles, and closing out action items. Draft and maintain privacy notices, DPAs, and internal … improve contracts, not just mark them up. Working knowledge of UK GDPR and practical experience managing compliance programmes or certification cycles (ISO 27001/SOC 2 exposure strongly preferred). Genuine AI literacy – you use Claude or equivalent tools in your workflow; drafting without them would feel like ...

Fosse-1 is seeking an experienced GRC Consultant to lead a critical certification programme focusing on SOC 2 and ISO 27001. You will take ownership of driving successful outcomes, while ensuring compliance with standards. Your role will involve recovering compliance programmes, leading engagements with auditors, and strengthening ISMS ...

and resolve production issues. Security & compliance aware engineering Work closely with Security and GRC teams to ensure services meet security and compliance requirements (e.g. SOC 2, ISO 27001). Implement secure coding practices, strong authentication and authorization patterns, and data protection controls. Contribute to internal documentation and standards … Opportunity to travel (if applicable) Flexible vacation policy Private Healthcare Employee stock ownership (ESOP) Flexible working and autonomy Pay it forward days - we offer 2 annual pay it forward days where you can take time to volunteer for a charitable cause that is important to you. Wellness days ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

design, data modelling, and integration with internal and external financial systems. Security & Compliance Ensure systems meet regulatory, security, and audit standards (PCI-DSS, SOC2, GDPR). ...

Senior Security & Compliance Architect London/Hybrid (1–2 days onsite per week) Salary: Up to £140,000 + Package Experience as an end-to-end Security Solution Architect within large-scale enterprise transformation programmes is essential. Security clearance or eligibility for clearance is essential Key Responsibilities Define and … platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

deployments, and observability-first culture. Drive metrics for deployment frequency, lead time, MTTR, change failure rate; implement platform reliability standards (target 99.95%+ uptime, SOC 2 Type II, GDPR/data sovereignty). Champion developer experience and AI-assisted development tools (e.g., Copilot, Claude Code, Cursor) and rapid ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

business before. Bonus points if you've helped shape DevOps roadmaps, mentored others, or worked with cost optimisation, security, or compliance frameworks (ISO, SOC2, etc.). This is more than just another DevOps role - it's a chance to join a company at the perfect stage: profitable, scaling, tech ...

following would be a distinct advantage: Experience with Microsoft Sentinel, Splunk, Tenable, Qualys, or Defender TVM. Knowledge of NIST, ISO 27001, CIS, or SOC 2 frameworks. Familiarity with Azure Automation, Logic Apps, PKI, and certificate management. Daily Responsibilities Lead the investigation and remediation of complex security incidents. Enhance ...

review techniques relevant to identifying cryptographic weaknesses in application code or infrastructure-as-code. Experience developing and managing security related controls and processes to SOC2 standards, ensuring ongoing audit-readiness. Understanding of certificate lifecycle management, including X.509 certificate operations, renewal processes, and associated tooling. Familiarity with relevant cryptography related regulatory ...

client workflows, leveraging Tungsten Automation's cutting-edge technologies Security & Compliance Enterprise Security : Maintain a strong grasp of enterprise security practices (IAM, data encryption, SOC2, GDPR, HIPAA) when integrating AI into regulated industries What You Bring Educational Foundation Bachelor's degree in Computer Science, Information Systems, or a related technical ...

across cultures, functions, and geographies. Familiarity with the development and maintenance of privacy information management systems, including frameworks based on ISO/IEC 27701, SOC 2, and relevant ISO audit and compliance programs. CIPP/E, CIPP/M, or equivalent privacy certification. Desirable Qualifications Experience advising … cybersecurity regulators, or other relevant supervisory bodies. What’s in it For You? Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2‐3 days a week in the office depending on the role) for our office‐based roles while delivering a seamless experience that is digitally ...

Azure, the Microsoft 365 (M365) ecosystem, and Cisco networking technologies Salary up to £75,000 9:30am to 6:00pm working hours Hybrid working (2 or 3 days in the office) Generous employee benefits The ideal candidate will bring deep technical expertise, a security-first mindset, and experience operating … access management, including SSO and MFA. Knowledge of backup, disaster recovery, and business continuity strategies. Familiarity with compliance frameworks relevant to legal environments (e.g., SOC 2 ...

documentation, including policies, procedures, standards and operational controls. Oversee compliance frameworks, audits and certification programmes, supporting standards such as ISO 27001, ISO 42001 and SOC 2 where applicable. Lead audit readiness activities, internal control testing and regulatory responses. Manage the organisation's Trust Centre and ensure governance, security ...

postmortem afterward. You understand that reliability is built through good design, not just good monitoring. Awareness of security best practices and compliance requirements (SOC 2 or similar). Cost consciousness: not just making things work, but making them work economically at scale. You've rightsized compute, managed Spot ...

shared risks, incidents, and cross-cutting initiatives. Represent AppSec externally where relevant — with customers, auditors, and in the context of compliance programmes such as SOC2 and ISO 42001. What's in it for you: Lead a small, senior team with high autonomy, focusing on creating leverage rather than running ...

About StackOne StackOne is the universal integration layer for modern SaaS products. We’ve raised $24m in 2 years, and we’re backed by top tier investors like Google Ventures and Workday Ventures. Our unified API platform lets vendors ship hundreds of native, white label integrations in days … provide AI Agent Actions so customers can build agentic workflows without wrangling OpenAPI specs. StackOne sits behind the scenes as an embedded iPaaS: SOC 2 compliant, multi-tenant, and invisible to end users powering integrations for future-of-work SaaS categories such as HR, Compliance, and AI Agents. ...

testing, and deployment. It’s trained on the company's decades of delivery expertise and more than 30,000 curated payments documents. Certified to SOC 2 Type II, the Payments Expert Agent deploys inside the bank's environment and enables modernization teams deliver complex programs faster, at lower ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing … Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and ...