11 of 11 ISO 27001 Lead Implementer Jobs in the UK excluding London

for personal finances, business operations, or global investments. What you will do: Drive the company's information security strategy, ensuring alignment with GDPR, ISO 27001, DORA, PSD2 / 3, and other relevant regulations Identify and address local and entity-specific security requirements to maintain … processes, and vendors Develop and maintain security policies, standards, and incident response protocols Support business continuity and disaster recovery planning for seamless resilience Lead and oversee internal / external security audits to ensure transparency and accountability Partner with engineering and ICT teams to embed secure-by-design … fintech), with proven Second Line of Defense responsibilities in InfoSec and IT Compliance & Frameworks : Demonstrated success meeting GDPR, EU NIS2, and familiarity with ISO 27001, NIST, and cybersecurity best practices Risk & Governance : Skilled in conducting risk assessments, defining mitigation strategies, and creating / enforcing More ❯

Head of Information Security required for online retail business. The role will initially be focused on ISO27001 & ISO9001 recertifications. Responsibilities Lead on information security strategy and implementation of security roadmap Develop security KPIs and track their progress Advise senior management on risk levels and any changes impacting … posture, including emerging threats Create, maintain, and implement information security policies Continuously validate the firm against policies and procedures to ensure compliance against ISO 27001, ISO 9001, Cyber Essentials+, and GDPR Manage and continuously improve of the firms Information Security Management … System Oversee the information security training and awareness program Lead on internal and external audits and track audit findings through to mitigation Identify and communicate emerging security threats with relevant stakeholders Provide security due diligence in procurement processes and oversee continuous supplier assurance Manage security incidents and More ❯

reliable, automated software deployments while reducing operational overhead. Set standards for Infrastructure as Code (IaC) governance, ensuring consistency and compliance. Cloud & Infrastructure Leadership Lead the transformation from traditional infrastructure to cloud-native, platform-driven operations. Provide strategic direction for hybrid, multi-cloud architecture (AWS, Azure, on-premises … . Security, Compliance & Risk Management Ensure platform security aligns with ISO 27001, NIST, and GDPR compliance. Embed security-first principles into platform governance and DevOps processes. Leadership, Collaboration & Stakeholder Management Lead and mentor a team of Platform Engineers, DevOps Engineers, and … field. Azure Solutions Architect Expert / AWS Certified Solutions Architect (Professional) Desirable. Certified Kubernetes Administrator (CKA) or equivalent (Desirable). ITIL, CISSP, or ISO 27001 Lead Implementer (Desirable). If you think you have what it takes, apply More ❯

CD governance, ensuring reliable, automated software deployments while reducing operational overhead. Set standards for Infrastructure as Code (IaC) governance, ensuring consistency and compliance. Lead the transformation from traditional infrastructure to cloud-native, platform-driven operations. Provide strategic direction for hybrid, multi-cloud architecture (AWS, Azure, on-premises … . Security, Compliance & Risk Management Ensure platform security aligns with ISO 27001, NIST, and GDPR compliance. Embed security-first principles into platform governance and DevOps processes. Leadership, Collaboration & Stakeholder Management Lead and mentor a team of Platform Engineers, DevOps Engineers, and … field. Azure Solutions Architect Expert / AWS Certified Solutions Architect (Professional) Desirable. Certified Kubernetes Administrator (CKA) or equivalent (Desirable). ITIL, CISSP, or ISO 27001 Lead Implementer (Desirable). If you think you have what it takes, apply More ❯

work across functions to support operational resilience and maintain alignment with global security and regulatory frameworks including: ISO / IEC 27001:2022 NIST Cybersecurity Framework PCI-DSS 4.0.1 UK GDPR, NIS2 Directive, CAP1753, and related sector obligations This makes it a great development … to relevant stakeholders. Collaborates with procurement and key suppliers to ensure their ongoing security posture meets Virgin Atlantic requirements. Conducts internal reviews against ISO, NIST, PCI, UK GDPR, and emerging requirements. Supports internal / external audits, evidence readiness, and corrective action tracking. Maintains the policy and control … Implementer / Auditor certification. Sound knowledge of information security governance practices, working knowledge of ISO / IEC 27001:2022, NIST CSF, PCI-DSS, UK GDPR, and NIS2, and other aviation-related legislation. Awareness of Business Continuity, IT Service Continuity, and More ❯

work across functions to support operational resilience and maintain alignment with global security and regulatory frameworks including: - ISO / IEC 27001:2022 - NIST Cybersecurity Framework - PCI-DSS 4.0.1 - UK GDPR, NIS2 Directive, CAP1753, and related sector obligations . This makes it a great … to relevant stakeholders Colloborate with procurement and key suppliers to ensure their ongoing security posture meets Virgin Atlantic requirements Conduct internal reviews against ISO, NIST, PCI, UK GDPR, and emerging requirements Support internal / external audits, evidence readiness, and corrective action tracking Maintain the policy and control … Implementer / Auditor certification Sound knowledge of information security governance practices, working knowledge of ISO / IEC 27001:2022, NIST CSF, PCI-DSS, UK GDPR, and NIS2 and other aviation related legislation.Awareness of Business Continuity, IT Service Continuity and IT More ❯

retail-sector clients, acting as a trusted advisor across longer-term engagements - shaping security strategy, influencing stakeholders, and driving real change. The Role: Lead and deliver complex GRC engagements, operating at both a strategic and tactical level Build trust with clients, challenge assumptions diplomatically, and influence senior … auditor!) A background in Cyber, Cloud or Networking is useful - even if not current / up to date. Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, PCI etc. are great - but your professionalism and confidence matter most More ❯

and cybersecurity stakeholders to ensure that security requirements are appropriately defined, evidenced, and governed in alignment with relevant defence and maritime standards. Responsibilities Lead or support integrating cybersecurity assurance activities into engineering and programme delivery for marine and defence projects. Develop, review, and maintain cybersecurity assurance artefacts … equivalent experience) in Cybersecurity, Information Assurance, Systems Engineering, or a related technical or defence-focused discipline. Recognised cybersecurity certifications: CompTIA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Implementer, or equivalent. Familiarity with MOD, maritime, or defence-specific … frameworks: JSPs, DEFSTAN, NIST, IEC 62443, IMO or ISO / IEC 27001. SC clearance (or eligibility to obtain SC as a minimum) is required; DV clearance is desirable depending on the programme needs. Essential skills Strong understanding of cybersecurity assurance principles, risk management, and regulatory More ❯

and cybersecurity stakeholders to ensure that security requirements are appropriately defined, evidenced, and governed in alignment with relevant defence and maritime standards. Responsibilities Lead or support integrating cybersecurity assurance activities into engineering and programme delivery for marine and defence projects. Develop, review, and maintain cybersecurity assurance artefacts … equivalent experience) in Cybersecurity, Information Assurance, Systems Engineering, or a related technical or defence-focused discipline. Recognised cybersecurity certifications: CompTIA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Implementer, or equivalent. Familiarity with MOD, maritime, or defence-specific … frameworks: JSPs, DEFSTAN, NIST, IEC 62443, IMO or ISO / IEC 27001. SC clearance (or eligibility to obtain SC as a minimum) is required; DV clearance is desirable depending on the programme needs. Essential skills Strong understanding of cybersecurity assurance principles, risk management, and regulatory More ❯

communication with IT personnel. Strong documentation, analytical, and presentation skills. Desirable Knowledge, Skills, and Experience Qualifications such as CISA, CISM, CEH, or ISO27001 Lead Implementer / Auditor. Experience engaging with senior management and managing relationships. Previous experience handling Information Security incidents. Benefits This role More ❯

Lead Security Architect (Cyber) 9-Month Contract Inside IR35 £650 This role requires SC Clearance The successful applicant will be responsible for: Analyse and assess cyber vulnerabilities at scale for their potential business impact, using your own skill and experience, and in consultation with business owners and … Cyber Professional (CCP), CREST Registered Technical Security Architect, BCS Practitioner Certificate in Information Assurance Architecture, ISC(2) Information Systems Security Architecture Professional, ISO27001 Lead Implementer. More ❯