22 of 22 ISO 27001 Lead Auditor Jobs in the UK excluding London

implementation will be your primary responsibility, helping clients establish effective Information Security Management Systems (ISMS) and achieve ISO / IEC 27001:2022 certification. You'll also contribute to the company's own ISO 27001 certification journey, giving … documentation, communication and organisational skills. Essential experience: ISO / IEC 27001 Lead / Auditor or Implementer certification, or equivalent hands-on implementation experience. Practical experience of ISO 27001 including risk assessments ...

seeking a technically skilled professional who combines strong interpersonal skills with a deep understanding of cyber security principles, data protection, and ISO 27001 standards. In this role, you will act as the first line of defence for our clients’ technical environments. While the core … security protocols and data protection regulations. You will not only resolve technical faults but also ensure that all support activities align with our ISO 27001 Information Security Management System (ISMS). This role requires direct communication global colleagues and customers to explain security implications ...

recruiting for an Information Security Officer to join a growing organisation based in Farnborough. This is a varied role combining information security, ISO 27001, data protection and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical … will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and escalating potential security incidents Ensuring support activities follow ISO 27001 and data protection requirements Maintaining accurate documentation and audit trails Supporting the implementation of security controls and best practice Identifying ...

mission-critical environments and Critical National Infrastructure. The opportunity We are looking for an IT Manager to join our IT Department. You will lead IT governance, information security and compliance, manage our IT Helpdesk, and act as a technical escalation point. The role makes sure technology change … helps us get the best value from our technology investments and supports a structured, resilient IT function. What you will be doing Lead governance for technology projects, information security and cyber security, so decisions, standards and controls are clear, consistent and aligned with business priorities. Maintain ...

delivery of the wider security strategy and improvement plan. Provide leadership, guidance and technical oversight to Information Security Officers within the team. Lead significant security projects and initiatives from assessment and design through to implementation. Own and drive improvements to the organisation's ISMS, security controls … overall cyber maturity . Lead security assessments across infrastructure, networks, endpoints, applications, cloud environments and data. Provide security input into technical architecture and design decisions. Work with technical teams to implement appropriate security controls around identity, access management, SSO and federated services . Oversee information security risk ...

continually improve the organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks … endpoints, applications and data. Identify, assess and manage information security risks, including maintaining risk registers and tracking remediation. Lead and support internal and external security audits , including evidence gathering, control testing and remediation of findings. Manage technical security risks within Data Protection Impact Assessments and policy exceptions. ...

role in helping our customers manage risk, achieve compliance and maintain trusted, resilient systems. As a Cyber Assurance Specialist, you'll support and lead a range of assurance activities across internal and customer environments, helping organisations meet recognised cyber security standards and certification requirements. Working within … compliance against security requirements. Supporting customers and stakeholders in understanding and addressing identified security gaps. Helping maintain compliance with internal security policies and ISO 27001 certification requirements. Monitoring security tooling and supporting investigation or escalation of security events where required. Assisting with vulnerability assessments ...

role in helping our customers manage risk, achieve compliance and maintain trusted, resilient systems. As a Cyber Assurance Specialist, you'll support and lead a range of assurance activities across internal and customer environments, helping organisations meet recognised cyber security standards and certification requirements. Working within … findings, observations and recommendations. Supporting customers and stakeholders in understanding and addressing identified security gaps. Helping maintain compliance with internal security policies and ISO 27001 certification requirements. Monitoring security tooling and supporting investigation or escalation of security events where required. Assisting with vulnerability assessments ...

Security Auditor Hybrid - 3 days per week in the Basingstoke office £50,000 - £55,000 CE, CE+, ISO 27002, Network / Infrastructure Security A growing cyber security consultancy is looking for an IT Security Auditor with good Cyber Essentials knowledge, technical … confident client-facing skills. You'll join a supportive specialist team, with funded training and certifications to help you broaden your expertise across ISO 27001, IASME Cyber Assurance and other security frameworks. The role Deliver and support Cyber Essentials and Cyber Essentials Plus assessments. ...

growing cyber security consultancy is looking for an IT Security Auditor with good Cyber Essentials knowledge, technical security understanding and confident client-facing skills. IT Security Auditor - You’ll join a supportive specialist team, with funded training and certifications to help you broaden your … expertise across ISO 27001, IASME Cyber Assurance and other security frameworks. The role Deliver and support Cyber Essentials and Cyber Essentials Plus assessments. Work directly with clients to review evidence, discuss security controls and explain findings. Assess technical controls across networks, endpoints and cloud ...

recruiting on behalf of a client in the nuclear / Critical National Infrastructure (CNI) sector for a Cyber Assurance Principal Advisor to lead the delivery of second-line cyber assurance across key domains including OT, technical architecture, and supply chain. This role ensures cyber security controls … verify remediation of assurance findings and contribute to lessons learned Maintain awareness of emerging threats, technologies, and regulatory expectations to inform assurance planning Lead, mentor, and develop a team of cyber assurance advisors to build capability and consistency Promote a culture of cyber risk awareness and accountability ...

Join a purpose-led organisation with ultra high growth. We're looking for an IT Audit Manager to lead independent assurance over our client's technology, digital platforms, cyber security and resilience. The role Sitting within the Internal Audit & Risk team, you'll plan and deliver … work closely with Digital, Data and Technology colleagues, and give senior stakeholders and the Audit & Risk Committee clear, evidence-based assurance. You will: Lead reviews of IT general controls, including access, change management and IT operations Assess cyber and information security controls against recognised frameworks (e.g. ISO ...

methodologies and conducting security risk assessments, including the identification of threats and vulnerabilities and the development of proportionate mitigation recommendations. Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and the NCSC Cyber Assessment Framework, together with experience delivering security audit … security certificate. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99 / 62443 and CIS Controls. ISO 27001 lead auditor / implementer qualifications. A basic understanding of IT and OT security ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

remediation strategies and residual risks to stakeholders. Supporting governance, risk and compliance activities within secure and regulated environments. Depending on experience, you may: Lead consultancy engagements and workstreams. Mentor and support the development of colleagues. Act as a trusted adviser to senior client stakeholders. Contribute to business … controls. Understanding of Defence procurement and capability delivery programmes. Beneficial Knowledge Government and industry security frameworks such as HMG Security Policy Framework (SPF), ISO 27001 and NIST. Risk management methodologies and security assurance frameworks. Enterprise and security architecture approaches including TOGAF and SABSA. Cloud ...

security policies; assist in internal and external security audits. Risk Assessment:Perform and document cyber risk assessments in line with NCSC CAF and ISO 27005 frameworks. Operational Technology (OT) Security: Collaborate with OT Security Manager to enhance security within control systems and manufacturing networks (ICS / SCADA … Experience in cyber or information security, within a regulated or critical infrastructure environment. Working knowledge of:o NCSC Cyber Assessment Framework (CAF)o ISO / IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands ...

Control Testing Automation & Monitoring Lead – Cyber Security The Role We are seeking a Control Testing Automation & Monitoring Lead to develop and implement automated control testing and continuous monitoring solutions across IT, operational technology (OT) and business functions. You will identify automation opportunities, improve control … identity management. Experience with reporting and analytics tools such as Power BI or Tableau. Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You’ll have the opportunity to improve control assurance through automation, strengthen continuous ...

Control Testing Automation & Monitoring Lead - Cyber Security The Role We are seeking a Control Testing Automation & Monitoring Lead to develop and implement automated control testing and continuous monitoring solutions across IT, operational technology (OT) and business functions. You will identify automation opportunities, improve control … identity management. Experience with reporting and analytics tools such as Power BI or Tableau. Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll have the opportunity to improve control assurance through automation, strengthen continuous ...

Experience working in a regulated or complex organisation. Exposure to critical national infrastructure environments. Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll play an important role in strengthening information security assurance ...

Experience working in a regulated or complex organisation. Exposure to critical national infrastructure environments. Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You’ll play an important role in strengthening information security assurance ...

right questions, recognise when risk is not being managed, and make sure the right people act. What you will do Creatively lead product discovery and roadmap ownership: driving novel solutions, bringing fresh ideas, and translating complex operational problems into actionable product visions, user stories, and prioritized backlogs. … technical progress, security controls, and operational risks into actionable updates for senior sponsors. Give programme and client leadership the operational support required to lead relationships and outcomes, rather than carrying every programme mechanic personally. What good looks like after 90 days You have established a clear delivery ...

role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. Key Accountabilities Governance & Strategy Lead the development and continual evolution of NESO's Security Governance Framework, ensuring alignment with organisational strategy, risk appetite and regulatory obligations. Develop … Risk Management Develop and operate NESO's enterprise cyber risk management framework, aligned to NIS Regulations, and external standards such as CAF, ISO 27001, and enterprise risk management processes. Drive a threat-informed approach to risk identification, assessment, prioritisation and treatment. Establish clear risk ...