Victoria James • 03 February 2025 We are looking for an experienced Data and Security Compliance Manager to lead and maintain our compliance with ISO 9001, IS0 14001, ISO 27001, CyberEssentials Plus, MOD-level SAQs, FSQS and GDPR regulations. The role is crucial in ensuring our agency adheres to best practices and legislation in data protection, information security … and regulatory requirements. Key responsibilities Compliance and certification management Ensure we have the processes and infrastructure in place to maintain and oversee compliance with: ISO 9001, 14001 and 27001 CyberEssentials Plus certification MOD-level SAQs FSQS (Financial Services Qualification System) GDPR and UK Data Protection Law PCI-DSS compliance New requirements as applicable Manage our internal and … contracts and project teams to ensure we are meeting our commitments Supplier/vendor management including vendor specific assessments and flow down policy control and compliance Information security and CyberEssentials Plus Oversee CyberEssentials Plus compliance ensuring security controls are in place Work closely with the IT team to assess vulnerabilities, manage risk and implement More ❯
Cheltenham, England, United Kingdom Hybrid / WFH Options
Bailie Group
and consultancies with the collective mission to improve people's lives by sharing knowledge. CDS DS is an industry leading technical consultancy delivering world class services in Support Engineering, Cyber Security & Information Assurance, Training & Leadership Development and Communications. We exist to make the world a safer place and do this by providing sophisticated training solutions, operational support, information assurance … legislation, including: HMG/NCSC Information Assurance Policies, Standards and Guidelines Cross-government security accreditation and secure by design processes JSP440 (plus other standard MoD IA methods) DCPP's Cyber Security Model List X, List N CyberEssentials Office for Nuclear Regulation (ONR) Security Assessment Principles (SyAPs) NIST GDPR, DPA, Computer Misuse Act, Official Secrets Act NIS … to clients. A proactive interest in maintaining and enhancing technical and consultancy skills. Examples of Professional Qualifications, Certifications and Security Clearances Full Member of CIISec and/or UK Cyber Security Council (Security and Information Risk Advisor, Auditor or Security Architect) or the agreement and ability to achieve such certification within 6 months of employment. Holder of current key More ❯
Cheltenham, England, United Kingdom Hybrid / WFH Options
Ripjar
our mission of delivering secure, resilient technology to governments and enterprises around the world. As Chief Information Security Officer (CISO), you will be responsible for developing and executing our cyber risk strategy, driving alignment with international frameworks such as ISO27001, SOC2, DORA and regional frameworks like CyberEssentials, and leading executive team engagement on security governance, regulatory … and compliance posture to support international expansion and customer growth. Manage and own the Information Security budget, investments, and ROI. Governance, Risk, and Compliance Maintain compliance with ISO27001, SOC2, CyberEssentials and evolving DORA regulations. Lead internal risk assessments, security audits, and regulatory readiness efforts. Oversee third-party and supply chain security due diligence and assurance processes. Operational … security and its practical application to our organisation as it scales. Ideally, you will have: Proven leadership in high-growth scale-up environments. Expertise in ISO27001, SOC2, NIST CSF, CyberEssentials, and DORA. Experience with modern cloud infrastructure and security (AWS, Azure, GCP, PaaS/IaaS/SaaS). Familiarity with IAM, DLP, and Linux-based environments. Strong More ❯
Gloucester, England, United Kingdom Hybrid / WFH Options
LM RECRUITMENT SOLUTIONS LTD
root cause analysis is performed to prevent future occurrences. Security and Compliance: Ensure that all IT operations adhere to industry standards and regulatory requirements, including ISO 27001, GDPR, and Cyber Essentials. Drive the implementation of cybersecurity measures, risk assessments, and regular audits to maintain a secure IT environment. Disaster Recovery and Business Continuity: Own the development and execution of … and within budget. Familiarity with project management methodologies like Agile or Waterfall is a plus. Security and Compliance: Deep understanding of security frameworks such as ISO 27001, GDPR, and Cyber Essentials. Ability to implement security protocols and manage compliance with industry regulations. Problem-Solving and Incident Management: Strong problem-solving skills, with the ability to address high priority incidents More ❯
About the role Do you want to be at the forefront of cyber security, protecting people, data and systems from the evolving digital threat landscape? Are you looking to apply your technical expertise in a collaborative and forward-thinking environment? As a Technical Security Analyst, you'll be part of our Security team who are responsible for keeping our … technology, processes and people safe. You'll apply an understanding of cyber security to protect the organisation, systems, information, personal data and people from attacks and unauthorised access. Particular focus will be applied to Security Assessment, analysis, and giving advice on risk mitigations to a broad range of colleagues, internally and externally, including suppliers and customers. As a Technical … engagements with internal and external customers. Assisting in ongoing investigations, with forensic and response activities, information Security Incidents, events, and issues in accordance with relevant procedures and standards. Identifying cyber threats and vulnerabilities, ensuring that findings are managed appropriately and remediated according to agreed timescales. Assisting in the creation, testing, and implementation of response and recovery plans in support More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Scott Logic Ltd
end-user experience. Establish, operate, and govern common platforms for collaboration, DevOps tooling, data management, and business applications (e.g., Finance, HR, CRM) across all entities. Own the group-wide cyber security posture: set policy, oversee risk assessments, incident response, and third party vendor assurance in accordance with recognised standards such as ISO27001 and CyberEssentials Plus. Develop … transformation programmes. Deep understanding of software development lifecycles, DevOps, and cloud native architectures. Board level communication skills with experience influencing diverse stakeholder groups. Fluent understanding of UK data protection, cyber standards, and financial regulations. Willingness to travel to other offices as required. What you'll get in return: Hybrid working with 1 day a week in the office. More ❯
cheltenham, south west england, united kingdom Hybrid / WFH Options
FR Secure
Cyber Security & Information Assurance Consultants (eDV Cleared) Salary: £50,000 – £85,000 (DOE) Location: Manchester or Cheltenham (Hybrid Working) Clearance Required: Existing eDV (Enhanced Developed Vetting) Join a Leading Consultancy Driving National Security Innovation FR Secure is partnering with a rapidly expanding consultancy that delivers cutting-edge cyber and information assurance solutions for high-security government and industry … clients. We’re looking for multiple Cyber Security & Information Assurance Consultants at junior to senior levels to support long-term, mission-critical programmes in the National Security sector. Your Role As a Cyber Security & Information Assurance Consultant, you will: Deliver expert security advice for BAU, technical refresh, and new project initiatives. Implement and improve governance models aligned with … client business needs. Identify cyber risks and propose risk-based mitigation strategies. Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Develop, refine, or review security policies and procedures to align with corporate and regulatory standards. Build strong relationships with clients and internal teams to enhance the value of Cyber Security & Information More ❯
gloucester, south west england, united kingdom Hybrid / WFH Options
FR Secure
Cyber Security & Information Assurance Consultants (eDV Cleared) Salary: £50,000 – £85,000 (DOE) Location: Manchester or Cheltenham (Hybrid Working) Clearance Required: Existing eDV (Enhanced Developed Vetting) Join a Leading Consultancy Driving National Security Innovation FR Secure is partnering with a rapidly expanding consultancy that delivers cutting-edge cyber and information assurance solutions for high-security government and industry … clients. We’re looking for multiple Cyber Security & Information Assurance Consultants at junior to senior levels to support long-term, mission-critical programmes in the National Security sector. Your Role As a Cyber Security & Information Assurance Consultant, you will: Deliver expert security advice for BAU, technical refresh, and new project initiatives. Implement and improve governance models aligned with … client business needs. Identify cyber risks and propose risk-based mitigation strategies. Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Develop, refine, or review security policies and procedures to align with corporate and regulatory standards. Build strong relationships with clients and internal teams to enhance the value of Cyber Security & Information More ❯
Gloucester, Gloucestershire, South West, United Kingdom Hybrid / WFH Options
Forward Role
Cyber Security & Information Assurance Consultants (eDV Cleared) Salary: £50,000 – £85,000 (DOE) Location: Manchester or Cheltenham (Hybrid Working) Clearance Required: Existing eDV (Enhanced Developed Vetting) Join a Leading Consultancy Driving National Security Innovation FR Secure is partnering with a rapidly expanding consultancy that delivers cutting-edge cyber and information assurance solutions for high-security government and industry … clients. We're looking for multiple Cyber Security & Information Assurance Consultants at junior to senior levels to support long-term, mission-critical programmes in the National Security sector. Your Role As a Cyber Security & Information Assurance Consultant, you will: Deliver expert security advice for BAU, technical refresh, and new project initiatives. Implement and improve governance models aligned with … client business needs. Identify cyber risks and propose risk-based mitigation strategies. Conduct compliance assessments across systems and processes to evaluate cyber and information assurance posture. Develop, refine, or review security policies and procedures to align with corporate and regulatory standards. Build strong relationships with clients and internal teams to enhance the value of Cyber Security & Information More ❯