8 of 8 ISMS Jobs in the East of England

assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role … candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response ...

Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic ...

post-incident review activity with internal teams and third-party providers.Maintain the vulnerability management programme, including scanning, prioritisation, remediation tracking, exceptions and reporting.Support the ISMS, ISO 27001, Cyber Essentials Plus, PCI DSS and relevant security governance, risk and compliance activity.Maintain security risk, non-conformance, improvement and information asset records, escalating ...

colleagues and external associates Monitoring information security inboxes and ensuring enquiries or actions are directed appropriately Supporting the administration and maintenance of the Information Security Management System Tracking security-related actions and ensuring they are updated accurately Following up with stakeholders to obtain information and progress outstanding tasks Promoting ...

leading role in information security and cyber security activities across the organisation. You'll help develop and continually improve the Information Security Management System (ISMS), maintain ISO 27001, support internal and external security audits and ensure security controls remain practical, effective and appropriate. You'll work closely with technical teams … Azure Security, Identity & Access Management (IAM) and access controls. Security Operations: vulnerability management, patch management, penetration testing, remediation and incident response. Information Security: ISO 27001, ISMS, security audits, Cyber Essentials, security policies, governance, risk and compliance. You don't necessarily need to already hold the title of Cyber Security Lead. ...

skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Quality, Process Improvement, Continuous Improvement, ISO 9001, ISO 27001, QMS, ISMS, ISO Audits, Compliance, Process Mapping, Power Automate, Power Platform, RPA, Workflow Automation, MSP, IT Services, Health & Safety, COSHH, NEBOSH ...

security, governance and compliance environment. A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside broader compliance, risk and assurance activities. Key Responsibilities Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes. Support … will have 5–8 years’ experience in information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements. You will be confident working with technical and non-technical stakeholders, managing risk and audit activities, and translating security requirements into practical, effective controls. ...

posture across staff and customers through clear communication, documentation and participation in meetings. Maintain the Quality Management System (QMS) and Information Security Management System (ISMS), ensuring they remain accurate, relevant and effective. Be responsible for information security event monitoring, reporting and escalation. Coordinate internal and external audits, maintaining risk registers ...