1 to 25 of 62 ISO 22301 Jobs in the UK

impact analyses and defining continuity and testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define … degree in Computer Engineering, Telecommunications Engineering or a related discipline. Additional Required Qualifications At least two of the following certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 22301 Lead Auditor, CEH, CCSP or SSCP. Willingness to travel when required. Desirable ...

Integrated Management Systems Engineer, you will help shape the Graphcore way. This is our integrated approach to practical, scalable management systems. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable ways of working. Your impact will reach … reality. You will be expected to speak up, take responsibility and help Graphcore improve at pace. What we’re looking for Strong understanding of ISO 9001 principles in engineering or technology‐led organisations Lead auditor qualification in ISO/IEC 27001, ISO 45001, ISO 22301 ...

risks including cybersecurity and AI usage. Responsibilities Business Continuity Strategy & Governance Develop, implement, and continuously improve the Business Continuity Management System (BCMS) aligned with ISO 22301 and industry best practices, ensuring it aligns with risk and resilience goals. Business Impact Analysis (BIA) & Risk Assessment Lead and maintain … environments. Monitoring, Reporting & Executive Communication Provide monthly BC preparedness reports to executive leadership. Regulatory & Compliance Alignment Ensure compliance with relevant standards and regulations (e.g., ISO 22301, ISO 27001, GDPR). Continuous Improvement & Awareness Promote awareness and training on business continuity across the organisation. Stakeholder Engagement and Training ...

Experience with: Business Continuity Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications The following certifications … would be advantageous but are not essential: ISO 27001 Lead Auditor or Lead Implementer CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) ISO 22301 Business Continuity Certifications CIA (Certified Internal Auditor) ITIL Foundation or higher ...

methodology, reporting and remediation tracking. Develop supporting templates and documentation and provide knowledge transfer. Work independently while maintaining objectivity and professional challenge. Essential Requirements ISO/IEC 27001:2022 Lead Auditor certification. ISO 22301:2019 Lead Auditor certification. Demonstrable experience conducting internal audits against both standards . … reporting and stakeholder management skills. Evidence of both current Lead Auditor certifications will be required. Desirable Experience auditing complex or international organisations. Experience supporting ISO certification or surveillance audits. Information security and business continuity risk management experience. Experience with Microsoft 365, Azure and cloud environments. Consultancy ...

assignment for an accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO/IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy and detailed … establishing a repeatable annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO/IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against both standards Experience ...

Graphcore in the UK seeks an Integrated Management Systems Engineer to shape our integrated approach to ISO compliance and practical operating workflows. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable working practices across engineering, operations ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commercial Enterprise Resilience Practice into Europe, the UK, and beyond, growing a portfolio … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectations Ability to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmaps Ability ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commercial Enterprise Resilience Practice into Europe, the UK, and beyond, growing a portfolio … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectationsAbility to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmapsAbility to clearly convey ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commer cia l Enterprise Resilience Practice into Europe, the UK, and beyond, growing … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectations Ability to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmaps Ability ...

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation’s security framework, working across … business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. The Role You’ll take a hands‐on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned with recognised standards. Key responsibilities will include ...

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation’s security framework, working across … business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. 🔐 The Role You’ll take a hands-on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned with recognised standards. Key responsibilities will include ...

balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities · Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. · Conduct internal audits, control reviews, and risk assessments. · Maintain and monitor … Security Manager or similar information security role. · Strong understanding of cyber security, governance, risk, and compliance frameworks. · Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. · Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. · Strong communication, stakeholder management, and report-writing ...

balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor … Security Manager or similar information security role. Strong understanding of cyber security, governance, risk, and compliance frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing ...

highly regulated environments. Desirable Experience Experience within public sector, government, defence, or critical national infrastructure environments. Knowledge of security and governance frameworks such as: ISO 27001 ISO 22301 NIST ITIL Experience supporting resilience and operational risk programmes. Audit, compliance, or assurance certification experience. Consulting or client-facing ...

access management (PAM) capabilities, including approval workflows and continuous monitoring.Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation (e.g., ISO 27001, ISO 22301).Integrate IAM with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle.Oversee Conditional Access ...

Maintain and continuously improve the ISO 27001:2022 Information Security Management System, including policies, standards, procedures, documentation and Statement of Applicability. Provide security and data protection assurance for new initiatives, changes and projects, embedding security-by-design and privacy-by-design. Conduct information security risk assessments, prioritise threats … diligence for suppliers, processors and critical third parties. Partner with auditors, regulators and payment schemes; prepare evidence and support audits, certifications and reviews including ISO 27001, CHAPS, FPS, Bacs and SWIFT CSP. Produce management reporting, metrics, KRIs, dashboards and committee packs on security posture, incidents, vulnerabilities, data protection ...

Directory domains/forests and cloud identity components (Entra/Azure AD) Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO 27001, ISO 22301) Integrating IAM with HR, IT, and engineering systems throughout the user lifecycle Staying ahead of emerging technologies including passwordless ...

Audit Lead for a remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO/IEC 27001:2022 and ISO 22301:2019. You will plan and deliver audits, assess control effectiveness, interview stakeholders, and deliver reports ...

stakeholder management. Working within regulated or complex enterprise environments. Desirable Important Business Services (IBS) and impact tolerances. DORA, FCA/PRA Operational Resilience, NIS2, ISO 22301 or ISO 27001. Supplier exit planning and third-party resilience testing. Cloud, Infrastructure or Managed Service provider environments. ...

stakeholder management. Working within regulated or complex enterprise environments. Desirable Important Business Services (IBS) and impact tolerances. DORA, FCA/PRA Operational Resilience, NIS2, ISO 22301 or ISO 27001. Supplier exit planning and third-party resilience testing. Cloud, Infrastructure or Managed Service provider environments. ...

embed product thinking across the organisation. Ensure compliance with company policies and relevant information security, data protection, energy management and business continuity standards, including ISO 27001:2022, BS 10012:2017, ISO 50001:2018 and ISO 22301:2019. Key Skills & Experience: Proven Product Management experience in commercially ...

supporting the Operations Supervisor and Director with a variety of tasks, including: Accreditation Support: Assist in achieving and maintaining company accreditations, including BSI Quality, ISO 14064, ISO 22301, and more. Quality Checks: Conduct random checks to ensure adherence to Standard Operating Procedures (SOPs) and investigate any quality … team setting. Comfortable in a fast-paced environment, managing multiple projects with tight deadlines. Strong organisational skills with an eye for detail. Experience with ISO/NQA accreditations. Proven ability to manage change and adapt to shifting priorities effectively. Why Apply?/Benefits Excellent salary and regular reviews Free ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection assurance … Partner with auditors, regulators and payment schemes by preparing evidence, providing subject‐matter expertise, and supporting internal and external audits, certifications and reviews (including ISO 27001 surveillance and scheme assurance such as CHAPS, FPS, Bacs and SWIFT CSP). Advise stakeholders on information security and data protection regulatory obligations ...

level of growth and are leaders in their industry. Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 Information Security Management … System PCI-DSS Payment Card Industry Data Security Standard ISO 22301 Business Continuity GDPR and Data Protection Laws Conduct regular internal audits in line with the requirements of the standards. Implement compliance initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective ...