51 to 75 of 99 ISO 27001 Lead Implementer Jobs in the UK

compliance and risk management through to board-level reporting and incident readiness. As an Information Security Consultant you will act as the vCISO lead on a portfolio of client engagements. You will be the security voice in the room: setting direction, running the compliance and assurance cycle … consultancy, vCISO or senior in‐house security role. Demonstrable experience delivering against recognised security frameworks — Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, ISO 27001, NIST CSF or equivalent. Proven track record of building and maintaining an ISMS, including policy authorship and risk assessment. ...

Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing still is not an option … certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor ...

Cyber Security Consultant, Information Security Strong client-facing and stakeholder management skills Experience working with recognised security frameworks and standards, including: ISO 27001, NISTCyber Security Framework (CSF), CIS Controls, Cloud Security Controls, Secure by Design principles The ability to balance security best practice with … commercial realities Someone who is naturally curious, proactive and enjoys solving problems Desirable Certifications CISSP CISM CCSP ISO 27001 Lead Implementer or Lead Auditor Please note that applicants must have the right to work ...

wing structures used on Airbus commercial aircraft worldwide. Prestwick Aerosystems is seeking a Cyber Security Manager to own the complete GRC estate and lead the operational delivery of digital security and compliance across the organisation. Reporting directly to the Digital Security Officer (DSO), this role bridges strategic … audit evidence. ISMS Build & Policy Governance: Build, localize, and sustain the Information Security Management System (ISMS) policy suite from scratch, aligning controls with ISO 27001:2022, the Airbus Digital Handbook, and mandatory Airbus Group Directives. Airbus Compliance & Audit Management: Maintain full operational compliance ...

their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments … interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier ...

managed.Facilitate security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans.Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.Translate security frameworks and regulatory requirements into practical, operational standards and controls.Analyse security … Risk, Security Governance or Security Compliance.Experience developing and maintaining security policies, standards, controls and governance documentation.A strong understanding of security frameworks such as ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / ...

security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans. Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes. Translate security frameworks and regulatory requirements into practical, operational standards and controls. Analyse … Governance or Security Compliance. Experience developing and maintaining security policies, standards, controls and governance documentation. A strong understanding of security frameworks such as ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / ...

posture and ensure consistent and compliant responses to client inquiries.Risk & Compliance Support:Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses.Quality & Continuous Improvement:Support … related field.Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.Experience responding to client security questionnaires, due diligence requests, audits ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk data and translating findings into … Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) ISO 27001 Lead Implementer or Lead Auditor NCSC or other recognised cyber ...

ensure consistent and compliant responses to client inquiries. Risk & Compliance Support: Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST) and help translate technical security concepts into business-relevant assurance responses. Quality & Continuous Improvement: Support … related field. Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities. Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations. Experience responding to client security questionnaires, due diligence ...

assurance.Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat intelligence … guardrails for autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms.Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training.Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

assurance. Familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM / SOAR platforms, detection engineering, threat … autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring and rollback mechanisms. Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer / Auditor, cloud security certifications or AI / security-focused training. Please ...

/ or DV Clearance Join Us in Protecting Critical Defence Operations We are seeking a highly motivated and experienced Security & Information Officer to lead the security and information assurance agenda across our Defence, Marine & Aerospace business. This is an exciting opportunity to play a pivotal role … deliver governance excellence, and support business growth in a highly regulated environment. What You'll Be Doing As Security & Information Officer, you will: Lead and coordinate information security activities across Defence, Marine & Aerospace operations. Manage and maintain security accreditation programmes including Cyber Essentials Plus, Secure by Design ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … leverage AI-enabled tools to improve efficiency, insight generation, or risk management outcomes.Preferred Qualifications:Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience … enabled tools to improve efficiency, insight generation, or risk management outcomes. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA ...

full-time Salary: 80000 Posted Date: 04 Sep 2026 Closing Date: 18 Sep 2026 We’re looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning … Elexon. What you’ll do: Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group. Lead and contribute to the development and maintenance of Threat and Risk Assessments , ensuring cyber risks are identified, assessed and appropriately treated. Monitor ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

Doing As the Infrastructure & Security Manager, you'll play a pivotal role in keeping systems secure, resilient and scalable. You'll lead infrastructure strategy while remaining hands-on with day-to-day technical delivery. Key responsibilities include: Managing cloud infrastructure, networking, firewalls, servers, storage and security technologies. … acting as the first point of contact for security incidents. Managing backup and disaster recovery solutions to ensure business continuity. Driving and maintaining ISO 27001 compliance, audits and security improvements. Developing infrastructure roadmaps and implementing technical change. Supporting colleagues with internal IT infrastructure issues ...

closely with our managed SOC, you'll investigate alerts and incidents, close monitoring gaps, and keep our ISO / IEC 27001:2022 controls backed by complete, audit-ready evidence - including running customer and client security-assurance questionnaires on the business's behalf. Responsibilities … gaps by improving detection use cases, alert logic, playbooks and escalation criteria. Own the evidence cycle for ISO / IEC 27001:2022 controls - mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners. Support internal, certification and surveillance audits, tracking ...

external (standards auditors) including preparation, execution and remediation tracking. Maintain documentation and evidence of certifications and attestations Maintain key standards such as ISO 27001, adding business value. Recruit, Manage, coach and develop the Risk & Compliance team, setting clear goals & objectives, cultivating an inclusive culture … accountability, continuous learning and collaboration. Proactively participate as senior member and leader within the ISO leadership team contributing to overall strategy, engagement, team dynamic and programmes within ISO. Act as a trusted advisor to executive and SME stakeholders, providing actionable insight and guidance to support risk-aware ...

external (standards auditors) including preparation, execution and remediation tracking. Maintain documentation and evidence of certifications and attestations Maintain key standards such as ISO 27001, adding business value. Recruit, Manage, coach and develop the Risk & Compliance team, setting clear goals & objectives, cultivating an inclusive culture … accountability, continuous learning and collaboration. Proactively participate as senior member and leader within the ISO leadership team contributing to overall strategy, engagement, team dynamic and programmes within ISO. Act as a trusted advisor to executive and SME stakeholders, providing actionable insight and guidance to support risk-aware ...

CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CCSP (Certified Cloud Security Professional) GIAC Security Certifications SABSA Foundation or Practitioner ISO 27001 Lead Implementer or Lead Auditor Cryptography & PKI Certifications Entrust ...

Third Party Cyber Risk Lead Please read carefully and contact Lorenz Pasch at Hays on 07863107173 or if you are from the Insurance or Financial Services sector only, and are interested in the position. London | Hybrid£90,000 + Benefits We are seeking a Third Party Cyber … Risk Lead to take ownership of cybersecurity risk across its supplier and vendor ecosystem. This is a key role within the Business Information Security Office, responsible for ensuring third-party cyber risks are identified, assessed, managed and reported effectively across a complex and regulated insurance environment. Working ...

frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. Represent … systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...