17 of 17 ISO 27001 Lead Auditor Jobs in the UK excluding London

Lead Information Security & GRC Specialist London (Hybrid, 3 days in office) | £80,000 - £100,000 + Benefits We're partnering with a well-established organisation that's continuing to invest in its Technology and Information Security capability. As the business continues to strengthen its security posture, they … Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering ...

Information Security / GRC Manager Overview We're looking for an Information Security / Governance, Risk & Compliance (GRC) Manager to lead enterprise-wide risk, governance, and assurance across a fast-growing B2B technology business. This is a senior strategic position with responsibility spanning information security, governance, compliance … certifications such as CISM, CISSP or ISO 27001 Lead Auditor / Lead Implementer (or be working towards them). Strong commercial awareness alongside excellent judgement. Outstanding communication skills with the ability to influence both technical ...

governance, manage cyber and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO / IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer … manage multiple client tasks or engagements, work under pressure and meet deadlines. Relevant professional certification such as ISO / IEC 27001 Lead Auditor, ISO / IEC 27001 Lead ...

networks), and direct proactive patch management cycles. Compliance & Audits: Drive internal control testing and maintain alignment with structured information security standards such as ISO 27001, supporting both internal evaluations and external auditor walkthroughs. Incident Handling: Manage the end-to-end lifecycle … security alerts or breaches, lead formal root-cause analysis, and embed corrective actions into future preventive safeguards. Third-Party Risk: Evaluate external vendors and technology partners to ensure compliance with internal security policies and benchmark security standards. Cross-Functional Collaboration: Partner directly with IT infrastructure, application support ...

Doing As the Infrastructure & Security Manager, you'll play a pivotal role in keeping systems secure, resilient and scalable. You'll lead infrastructure strategy while remaining hands-on with day-to-day technical delivery. Key responsibilities include: Managing cloud infrastructure, networking, firewalls, servers, storage and security technologies. … acting as the first point of contact for security incidents. Managing backup and disaster recovery solutions to ensure business continuity. Driving and maintaining ISO 27001 compliance, audits and security improvements. Developing infrastructure roadmaps and implementing technical change. Supporting colleagues with internal IT infrastructure issues ...

best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving and maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. … processes. Required Skills & Experience Proven experience working as an Information Security Consultant or in a similar role. Strong understanding of security frameworks including ISO 27001, NIST and CIS Controls . Experience conducting threat modelling exercises and risk-based security assessments. Strong client-facing ...

systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective … auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ...

systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective … auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ...

Title: Head of Governance, Risk & Compliance (GRC) – MSP Practice Lead Location: London Hybrid (3 Days Onsite, 2 Remote) Job Type: Full-time, Permanent The Opportunity Are you a senior GRC expert ready to step out of a corporate cost-center and run your own practice … market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. Internal Audit ...

/ or DV Clearance Join Us in Protecting Critical Defence Operations We are seeking a highly motivated and experienced Security & Information Officer to lead the security and information assurance agenda across our Defence, Marine & Aerospace business. This is an exciting opportunity to play a pivotal role … deliver governance excellence, and support business growth in a highly regulated environment. What You'll Be Doing As Security & Information Officer, you will: Lead and coordinate information security activities across Defence, Marine & Aerospace operations. Manage and maintain security accreditation programmes including Cyber Essentials Plus, Secure by Design ...

their business goals instead of the underlying infrastructure. Why we need this role We are looking for a Security Regulatory Compliance Specialist to lead and manage compliance with key security regulations such as NIS2, DORA, Telecom Security Act , and other applicable laws and standards. This role … Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g. ...

working to create a safe and secure world, together, and if you join us, you can play your part as an Information Security Lead at our Devonport Royal Dockyard site.The roleAs an Information Security Lead, you’ll play a vital role in safeguarding critical … infrastructure and major defence programmes. Working across key projects within the Defence Nuclear Enterprise, you’ll lead the delivery of robust information security assurance, ensuring systems, data, and operations remain secure and compliant.Day-to-day, you’ll collaborate with technical specialists, programme teams, and external stakeholders ...

working to create a safe and secure world, together, and if you join us, you can play your part as an Information Security Lead at our Devonport Royal Dockyard site.The roleAs an Information Security Lead, you’ll play a vital role in safeguarding critical … infrastructure and major defence programmes. Working across key projects within the Defence Nuclear Enterprise, you’ll lead the delivery of robust information security assurance, ensuring systems, data, and operations remain secure and compliant.Day-to-day, you’ll collaborate with technical specialists, programme teams, and external stakeholders ...

Cyber Security Auditor +Permanent opportunity +Hybrid working - Corsham / West Country +SC / DV clearance is essential We are looking for Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already … operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification (or equivalent) Chartered Auditor and Assessor accreditation Active presence ...

governance, information security, risk management and data protection activities. You will play a key role in maintaining the organisation's compliance framework, supporting ISO certifications, coordinating audits, managing risk activities, and providing compliance input into client bids and due diligence processes. The successful candidate will be comfortable … experience Experience supporting bids, tenders or customer due diligence processes Previous experience supporting a DPO or acting as a data protection contact ISO27001 Lead Auditor, CISSP or CISM certification Experience deputising for a senior Risk, Compliance or Information Security leader Robert Half Ltd acts ...

brilliant opportunity to be part of a collaborative business where you'll embed compliance; giving you opportunity to influence growth. Compliance Manager - Responsibilities Lead GDPR and data protection operations, processes and documentation Act as DPO Maintain and operate ISO27001 and ISMS artefacts Oversee internal compliance policies whilst … environments Experience of ISO27001 audit readiness and maintenance Experience working with technology and engineering teams Certified Data Protection Officer (DPO) Ideal qualifications - ISO27001 Lead Auditor, GDPR practitioner certification Strong written and verbal English communication Energetic and dynamic individual who enjoys collaborating and being pragmatic ...

critical role in safeguarding complex engineering systems that support national security and critical infrastructure. Working within our Mission Systems team, you’ll lead and influence how security is designed into systems from concept to operation, ensuring robust protection against evolving threats.This is an exciting opportunity to contribute … meet complex customer security requirements.Lead risk management activities that align with an industry standard such as NIST SP 800-37 or the ISO / IEC 27000 series.Create and maintain security documentation including system security plans, policies, procedures, and compliance evidence.Interface with internal and external stakeholders ...