26 to 50 of 85 ISO 27001 Lead Implementer Jobs in England

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

business and manage data risk. We are looking for a Governance Risk & Regulatory Compliance (GRRC) Director to join the DBS leadership team and lead our independent second line of defence GRRC function, a key area for Deloitte UK and our clients. This is a new and exciting … behave, our beliefs, and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead ...

Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing still is not an option … certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor ...

Cyber Security Consultant, Information Security Strong client-facing and stakeholder management skills Experience working with recognised security frameworks and standards, including: ISO 27001, NISTCyber Security Framework (CSF), CIS Controls, Cloud Security Controls, Secure by Design principles The ability to balance security best practice with … commercial realities Someone who is naturally curious, proactive and enjoys solving problems Desirable Certifications CISSP CISM CCSP ISO 27001 Lead Implementer or Lead Auditor Please note that applicants must have the right to work ...

their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments … interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier ...

organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO / IEC 27001, Cyber Essentials Plus and other required standards. Monitor the security, health and performance of the IT environment, identifying risks, vulnerabilities and opportunities for improvement … understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO / IEC 27001 and Cyber Essentials Plus. Experience mentoring or providing technical leadership to junior IT professionals. Experience with infrastructure automation or scripting using technologies ...

posture and ensure consistent and compliant responses to client inquiries.Risk & Compliance Support:Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses.Quality & Continuous Improvement:Support … related field.Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.Experience responding to client security questionnaires, due diligence requests, audits ...

ensure consistent and compliant responses to client inquiries. Risk & Compliance Support: Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses. Quality & Continuous Improvement: Support … related field. Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities. Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations. Experience responding to client security questionnaires, due diligence ...

assurance.Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat intelligence … guardrails for autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms.Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training.Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

/ or DV Clearance Join Us in Protecting Critical Defence Operations We are seeking a highly motivated and experienced Security & Information Officer to lead the security and information assurance agenda across our Defence, Marine & Aerospace business. This is an exciting opportunity to play a pivotal role … deliver governance excellence, and support business growth in a highly regulated environment. What You'll Be Doing As Security & Information Officer, you will: Lead and coordinate information security activities across Defence, Marine & Aerospace operations. Manage and maintain security accreditation programmes including Cyber Essentials Plus, Secure by Design ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … leverage AI-enabled tools to improve efficiency, insight generation, or risk management outcomes.Preferred Qualifications:Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … enabled tools to improve efficiency, insight generation, or risk management outcomes. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

reducing material cyber and technology risk. Own the Information Security Management System and support continued alignment with ISO / IEC 27001:2022, the NIST Cybersecurity Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced … governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience. Strong practical knowledge of ISO / IEC 27001, PCI DSS, UK GDPR, the Data Protection Act 2018 and recognised control frameworks such as NIST. A solid understanding of technology risk ...

looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning the UK's future energy markets. This is a senior subject matter expert role, providing independent, authoritative technical … Elexon. What you’ll do: Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group. Lead and contribute to the development and maintenance of Threat and Risk Assessments , ensuring cyber risks are identified, assessed and appropriately treated. Monitor ...

closely with our managed SOC, you'll investigate alerts and incidents, close monitoring gaps, and keep our ISO / IEC 27001:2022 controls backed by complete, audit-ready evidence - including running customer and client security-assurance questionnaires on the business's behalf. Responsibilities … gaps by improving detection use cases, alert logic, playbooks and escalation criteria. Own the evidence cycle for ISO / IEC 27001:2022 controls - mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners. Support internal, certification and surveillance audits, tracking ...

external (standards auditors) including preparation, execution and remediation tracking. Maintain documentation and evidence of certifications and attestations Maintain key standards such as ISO 27001, adding business value. Recruit, Manage, coach and develop the Risk & Compliance team, setting clear goals & objectives, cultivating an inclusive culture … accountability, continuous learning and collaboration. Proactively participate as senior member and leader within the ISO leadership team contributing to overall strategy, engagement, team dynamic and programmes within ISO. Act as a trusted advisor to executive and SME stakeholders, providing actionable insight and guidance to support risk-aware ...