1 to 25 of 29 ISO 27001 Lead Auditor Jobs in the UK excluding London

Information Security / GRC Manager Overview We're looking for an Information Security / Governance, Risk & Compliance (GRC) Manager to lead enterprise-wide risk, governance, and assurance across a fast-growing B2B technology business. This is a senior strategic position with responsibility spanning information security, governance, compliance … certifications such as CISM, CISSP or ISO 27001 Lead Auditor / Lead Implementer (or be working towards them). Strong commercial awareness alongside excellent judgement. Outstanding communication skills with the ability to influence both technical ...

governance, manage cyber and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO / IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer … manage multiple client tasks or engagements, work under pressure and meet deadlines. Relevant professional certification such as ISO / IEC 27001 Lead Auditor, ISO / IEC 27001 Lead ...

networks), and direct proactive patch management cycles. Compliance & Audits: Drive internal control testing and maintain alignment with structured information security standards such as ISO 27001, supporting both internal evaluations and external auditor walkthroughs. Incident Handling: Manage the end-to-end lifecycle … security alerts or breaches, lead formal root-cause analysis, and embed corrective actions into future preventive safeguards. Third-Party Risk: Evaluate external vendors and technology partners to ensure compliance with internal security policies and benchmark security standards. Cross-Functional Collaboration: Partner directly with IT infrastructure, application support ...

Doing As the Infrastructure & Security Manager, you'll play a pivotal role in keeping systems secure, resilient and scalable. You'll lead infrastructure strategy while remaining hands-on with day-to-day technical delivery. Key responsibilities include: Managing cloud infrastructure, networking, firewalls, servers, storage and security technologies. … acting as the first point of contact for security incidents. Managing backup and disaster recovery solutions to ensure business continuity. Driving and maintaining ISO 27001 compliance, audits and security improvements. Developing infrastructure roadmaps and implementing technical change. Supporting colleagues with internal IT infrastructure issues ...

doing? Act as the cyber security subject matter expert across technology and business change, providing pragmatic security advice throughout the project lifecycle. Lead security risk assessments, control assurance activities and penetration testing to identify and mitigate cyber risks before solutions go live. Help maintain and evolve … Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS. Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into new and existing technology solutions. Produce clear security documentation, risk reporting and recommendations that ...

identify and mitigate cyber risks before solutions go live.Help maintain and evolve our Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS.Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into … Consultant, Cyber Security Consultant, Security Architect or Cyber GRC role within a complex technology environment.Strong knowledge of information security frameworks and standards, including ISO 27001, PCI DSS, NIST or equivalent industry best practice.Experience conducting security risk assessments, security assurance activities and advising on secure ...

best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving and maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. … processes. Required Skills & Experience Proven experience working as an Information Security Consultant or in a similar role. Strong understanding of security frameworks including ISO 27001, NIST and CIS Controls . Experience conducting threat modelling exercises and risk-based security assessments. Strong client-facing ...

systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective … auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ...

systems to ensure compliance with regulatory requirements such as the NCSC Cyber Assessment Framework (CAF) and GovAssure. Support and, over time, help lead audit activity, ensuring findings are properly documented and reported. Communicate audit findings and recommendations, working collaboratively with management to help develop and implement effective … auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience of cyber report writing. Relevant ...

Title: Head of Governance, Risk & Compliance (GRC) – MSP Practice Lead Location: London Hybrid (3 Days Onsite, 2 Remote) Job Type: Full-time, Permanent The Opportunity Are you a senior GRC expert ready to step out of a corporate cost-center and run your own practice … market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. Internal Audit ...

Trust Framework Design Threat Intelligence & Incident Response Advisory Cloud Security (AWS, Azure, GCP) OT / ICS / SCADA Cybersecurity Regulatory Frameworks: NIST CSF, ISO 27001, SOC 2, SAMA, NCA, DPDP, PCI‐DSS Required Skills & Experience Develop and advise on enterprise cybersecurity strategy aligned … senior leadership, providing strategic guidance on risk posture and security investments. Develop and present cybersecurity roadmaps, maturity improvement plans, and investment justifications. Lead cybersecurity governance initiatives including policy development, standards, and framework alignment. Oversee and direct security assessments, penetration testing programmes, and red team exercises. Advise ...

architecture level Design Authority interactions are informed, structured and technically robust Key Responsibilities Design end-to-end secure architectures (HLD / LLD) Lead Design Authorities and Technical Design Authorities Ensure security is consistently embedded into system design across all programmes Align architectural decisions with Secure-by-Design … Solutions Architect (AZ-303 / 304), Microsoft MCSE CCIE (#38006), CCNP, CCDP, VCP, VCAP-NV, VCP-NV, Check Point CCSE / CCSA, PCNSE ISO 27001 Lead Auditor, ISO 27005 Prince2 Practitioner, MSP, Chartered Engineer ...

their business goals instead of the underlying infrastructure. Why we need this role We are looking for a Security Regulatory Compliance Specialist to lead and manage compliance with key security regulations such as NIS2, DORA, Telecom Security Act , and other applicable laws and standards. This role … Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g. ...

working to create a safe and secure world, together, and if you join us, you can play your part as an Information Security Lead at our Devonport Royal Dockyard site.The roleAs an Information Security Lead, you’ll play a vital role in safeguarding critical … infrastructure and major defence programmes. Working across key projects within the Defence Nuclear Enterprise, you’ll lead the delivery of robust information security assurance, ensuring systems, data, and operations remain secure and compliant.Day-to-day, you’ll collaborate with technical specialists, programme teams, and external stakeholders ...

working to create a safe and secure world, together, and if you join us, you can play your part as an Information Security Lead at our Devonport Royal Dockyard site.The roleAs an Information Security Lead, you’ll play a vital role in safeguarding critical … infrastructure and major defence programmes. Working across key projects within the Defence Nuclear Enterprise, you’ll lead the delivery of robust information security assurance, ensuring systems, data, and operations remain secure and compliant.Day-to-day, you’ll collaborate with technical specialists, programme teams, and external stakeholders ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within a nationally significant organisation. ...

skills, with the ability to influence decision making is paramount.Ideally, you’ll have achieved industry recognised security certification, such as CCSP, CISSP, CISM, ISO 27001 Lead Auditor / Implementor, or a BCS certificate in Information Security Management. Additional ...

with the ability to influence decision making is paramount. Ideally, you’ll have achieved industry recognised security certification, such as CCSP, CISSP, CISM, ISO 27001 Lead Auditor / Implementor, or a BCS certificate in Information Security Management. Additional ...

documentation Cloud security across Microsoft Azure or AWS Secure architecture and enterprise security frameworks Useful qualifications may include: CISSP CISM SABSA TOGAF ISO 27001 Lead Auditor Microsoft Azure or AWS security certifications Candidates do not need to hold ...

with technical and non-technical stakeholders to gather information and support risk or assurance activity. Professional security qualification such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Auditor, or willingness to work towards one. Knowledge of governance ...

with technical and non-technical stakeholders to gather information and support risk or assurance activity. Professional security qualification such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Auditor, or willingness to work towards one. Knowledge of governance ...

with technical and non-technical stakeholders to gather information and support risk or assurance activity. Professional security qualification such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Auditor, or willingness to work towards one. Knowledge of governance ...

with technical and non-technical stakeholders to gather information and support risk or assurance activity. Professional security qualification such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Auditor, or willingness to work towards one. Knowledge of governance ...

Cyber Security Auditor +Permanent opportunity +Hybrid working - Corsham / West Country +SC / DV clearance is essential We are looking for Cyber Security Auditors to join a growing team delivering high-impact assurance services across UK Government and Defence programmes. This role is suited to auditors already … operating within NCSC-aligned frameworks , with the ability to lead and deliver audits across nationally significant cyber assurance schemes. Essential Requirements (Must Have) ISO27001 Lead Auditor qualification (or equivalent) Chartered Auditor and Assessor accreditation Active presence ...

governance, information security, risk management and data protection activities. You will play a key role in maintaining the organisation's compliance framework, supporting ISO certifications, coordinating audits, managing risk activities, and providing compliance input into client bids and due diligence processes. The successful candidate will be comfortable … experience Experience supporting bids, tenders or customer due diligence processes Previous experience supporting a DPO or acting as a data protection contact ISO27001 Lead Auditor, CISSP or CISM certification Experience deputising for a senior Risk, Compliance or Information Security leader Robert Half Ltd acts ...