17 of 17 ISO 27001 Lead Auditor Jobs in the UK

information security strategies, frameworks, and best practices Conduct security risk assessments, gap analyses, and audits Support clients in achieving and maintaining compliance (e.g. ISO 27001, NIST, GDPR) Develop and review security policies, procedures, and documentation Perform vulnerability assessments and coordinate remediation efforts Deliver threat … embed security into business processes Required Skills & Experience Proven experience in an Information Security Consultant or similar role Strong understanding of security frameworks (ISO 27001, NIST, CIS Controls) Experience conducting threat modelling exercises and risk-based security assessments Knowledge of AI security principles ...

Title: Head of Governance, Risk & Compliance (GRC) – MSP Practice Lead Location: London Hybrid (3 Days Onsite, 2 Remote) Job Type: Full-time, Permanent The Opportunity Are you a senior GRC expert ready to step out of a corporate cost-center and run your own practice … market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. Internal Audit ...

play a key role in strengthening the organisation’s security, compliance and resilience capabilities. Reporting to the Head of GRC, you will lead assurance activities across the business, ensuring security controls, policies and processes remain effective, compliant and aligned with best practice.This is a highly visible role … business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated.The role offers significant exposure ...

play a key role in strengthening the organisation’s security, compliance and resilience capabilities. Reporting to the Head of GRC, you will lead information security governance, assurance and risk management activities across the business, ensuring security controls, policies and processes remain effective, compliant and aligned with best … business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated.The role offers significant exposure ...

architecture level Design Authority interactions are informed, structured and technically robust Key Responsibilities Design end-to-end secure architectures (HLD / LLD) Lead Design Authorities and Technical Design Authorities Ensure security is consistently embedded into system design across all programmes Align architectural decisions with Secure-by-Design … Solutions Architect (AZ-303 / 304), Microsoft MCSE CCIE (#38006), CCNP, CCDP, VCP, VCAP-NV, VCP-NV, Check Point CCSE / CCSA, PCNSE ISO 27001 Lead Auditor, ISO 27005 Prince2 Practitioner, MSP, Chartered Engineer ...

such as Audit, Risk, or Information Security Committees. Knowledge & Skills Deep knowledge of cyber security governance frameworks – ISO / IEC 27001:2022, NIST CSF 2.0, CIS Controls – and their practical application in complex enterprise environments. Familiarity with continuous controls monitoring / CAASM tooling … inconsistent maturity baseline, including framework design, tooling selection, and team development. Leading or contributing to an ISO / IEC 27001 certification programme: ISMS design, gap analysis, internal audit, and management review. Coordinating or participating in cyber crisis exercises at enterprise level, including ...

risk, control and governance services, working with clients across a variety of industries and beyond. If you’re an experienced Interim Cybersecurity Internal Auditor who’s tired of choosing between freedom and meaningful work, there’s another route. Within Business Risk Services you’ll be given … organisations in line with UK regulations. Assess compliance with: UK GDPR & Data Protection Act 2018 NIS Regulations ISO / IEC 27001 Cyber Essentials / Plus Telecommunications (Security) Act 2021 Identify risks and provide actionable recommendations. Produce clear audit reports and present findings ...

operational lifecycle Ensure alignment with Security by Design principles, frameworks, and organisational security policies Assess compliance against relevant standards and regulatory requirements, including ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSPs, and other applicable frameworks Collaborate with development, engineering, and security … environment such as defence, aerospace, government, critical infrastructure, or enterprise IT. Strong knowledge and practical application of IT assurance frameworks and standards, including: ISO 144001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN and JPS. Proven experience implementing and assuring Security by Design across ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within a nationally significant organisation. ...

tangible impact. You’ll be joining a sharp, collaborative team while owning your own workstream and influencing critical security outcomes. Key Responsibilities Lead accreditation activities across multiple CNI systems Specify, assess, and validate security controls across Windows and Linux environments Apply broad technical understanding across the full … formal risk frameworks Ability to assess and articulate security control effectiveness Strong stakeholder engagement and communication skills Desirable Qualifications CISSP CISM TOGAF SABSA ISO 27001 Lead Auditor Azure or AWS certifications ...

will ideally have: Experience developing or managing cyber security policies, standards, or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, or information assurance programmes. Excellent stakeholder … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within a nationally significant ...

Responsibilities: Plan and conduct audits of customer's processes and systems to ensure compliance with regulatory requirements such as CAF and Go Assure. Lead audit teams in conducting thorough and accurate audits, ensuring that all findings are properly documented and reported. Communicate audit findings and recommendations … taken. Stay current with regulatory requirements and industry best practices related to auditing, compliance, and risk management. What we're looking for: Relevant ISO certifications; ISO27001 Lead Auditor or equivalent qualification At least 3 years' experience in auditing, compliance, or risk ...

Responsibilities: Plan and conduct audits of customer's processes and systems to ensure compliance with regulatory requirements such as CAF and Go Assure. Lead audit teams in conducting thorough and accurate audits, ensuring that all findings are properly documented and reported. Communicate audit findings and recommendations … taken. Stay current with regulatory requirements and industry best practices related to auditing, compliance, and risk management. What we're looking for: Relevant ISO certifications; ISO27001 Lead Auditor or equivalent qualification At least 3 years' experience in auditing, compliance, or risk ...

role would suit a Security Architect with strong UK Defence experience, ideally gained across Army, MOD or similarly secure government programmes. Key responsibilities Lead security architecture reviews across complex Defence or Central Government systems and programmes. Identify risks, control gaps and design changes required to achieve … secure integration, cloud security, data flows and security architecture patterns. Experience reviewing HLDs, LLDs, current-state and future-state designs. CISSP, CISM, ISO27001 Lead Auditor, Microsoft Cybersecurity Architect, AWS Security or similar certifications. TPBN1_UKTJ ...

role would suit a Security Architect with strong UK Defence experience, ideally gained across Army, MOD or similarly secure government programmes. Key responsibilities Lead security architecture reviews across complex Defence or Central Government systems and programmes. Identify risks, control gaps and design changes required to achieve … secure integration, cloud security, data flows and security architecture patterns. Experience reviewing HLDs, LLDs, current-state and future-state designs. CISSP, CISM, ISO27001 Lead Auditor, Microsoft Cybersecurity Architect, AWS Security or similar certifications. ...

Your level of experience will determine the amount or responsibility given to you, as a result you may also have the opportunity to lead assignments and be responsible for supervising direct reports whilst ensuring the overall success of the engagement. You will be given the opportunity … such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey ...