1 to 25 of 27 ISO/IEC 27001 Jobs in Berkshire

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

delivery of secure, resilient network infrastructure across on-premises data centres and hybrid cloud environments Architect network segmentation, Zero Trust access models, and VPC / VLAN designs that enforce security policy without over-complicating operations Define network resilience, failover, and disaster recovery strategies aligned with business continuity requirements Security … runbooks, decision trees, and architectural standards that allow teams to move fast while staying secure Infrastructure Security Implementation: Implement and manage firewalls, intrusion detection / prevention, DDoS mitigation, and threat monitoring across network layers Establish secure supply chain practices for infrastructure: vendor management, procurement policy, and third-party risk ...

understand business requirements and convert them into technical specifications and solutions. Experience working alongside functional consultants and business stakeholders. Familiarity with SAP S / 4HANA development concepts and frameworks. Exposure to SAP BTP and modern SAP development tools. Experience working within Agile delivery methodologies. Strong analytical and problem-solving … Fiori, SAP UI5, and OData development. Exposure to CDS Views and RAP development frameworks. Experience working within consultancy or client-facing project environments. Location / Working Pattern Based in Slough, UK Hybrid working arrangement. Required onsite in Slough Tuesday to Thursday each week. Remote working available on remaining working ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding of information security control tools Experience ...

delivery of secure, resilient network infrastructure across on‐premises data centres and hybrid cloud environments Architect network segmentation, Zero Trust access models, and VPC / VLAN designs that enforce security policy without over‐complicating operations Define network resilience, failover, and disaster recovery strategies aligned with business continuity requirements Security … runbooks, decision trees, and architectural standards that allow teams to move fast while staying secure Infrastructure Security Implementation: Implement and manage firewalls, intrusion detection / prevention, DDoS mitigation, and threat monitoring across network layers Establish secure supply chain practices for infrastructure: vendor management, procurement policy, and third‐party risk ...

Advanced KQL skills, with the ability to develop and optimise complex detections and threat hunting queries. Strong scripting and automation experience using PowerShell and / or Python, including API integrations and workflow automation. Experience administering Microsoft Entra ID, Conditional Access, Intune and Microsoft 365 security solutions. Good understanding … meet strict deadlines. Excellent written and verbal communication skills. Candidates must be able to pass security vetting (BS7858). Salary: £60,000 | Location: Reading / hybrid 2 days from home #J-18808-Ljbffr ...

response Oversee external security partners and supplier security audits Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus, ISO 27001 and similar frameworks Improve security monitoring, logging and SIEM capabilities Support business continuity, disaster recovery and acquisition due diligence Produce clear … security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT / cyber security professional with a strong background in security governance, risk and compliance, ideally within a multi-site or international environment. You’ll bring ...

providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body … Cyber Essentials Plus certified. Find out more about our accolades here: https: / / fsp.co / about-fsp / Why work for FSP? At FSP, we are committed to providing: A collaborative and supportive environment in which you can grow and develop your career The tools ...

security‐impacting changes. Install, configure and troubleshoot end‐user hardware, software, peripherals and networking equipment. Maintain asset, configuration and knowledge‐base records. Support backup / recovery processes and administer user accounts, permissions and access rights. Assist with ISO, Cyber Essentials and other security accreditations. Review and improve … server, application). Required Skills Strong understanding of ITIL practices. 5+ years experience: Desktop, Networking, Server or application support Solid knowledge across networking, Microsoft / VMware / Cloud tech, and security tooling. Experience with firewalls, patching, AV / EDR (CrowdStrike preferred). Confident communication skills ...

engineers and driving adoption of AI-first ways of working. We're looking for someone with strong hands-on experience in cloud automation, Terraform / Pulumi, CI / CD, scripting, security, and AI-powered tooling who enjoys solving complex technical challenges and influencing engineering standards across the organisation … automation and scripting experience across multiple languages Advanced Infrastructure as Code across Azure and OCI (Terraform, Bicep) Proven design and delivery of CI / CD and automation solutions Experience building and operating AI / LLM-assisted tooling or agents Strong grasp of security, identity (Microsoft Entra / ...

demonstrate risk managed and controls operating effectively. The role requires building security assurance across ISO 27001, PCI-DSS, NIST / CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

accountability. About you... Bachelor’s degree in Computer Science, Engineering or related subject (or equivalent experience) Strong experience in software QA, ideally within Agile / Scrum environments In-depth knowledge of QA methodologies, tools, and processes Experience with automated testing tools and scripting Skilled in usability, performance or security … similar database technology (desirable) Excellent analytical, problem-solving, and organisational skills High attention to detail with clear communication skills Experience working with ISO 9001 and ISO 27001 standards is an advantage Previous leadership or mentoring experience is desirable About the Company... Content Guru ...

projects, ensuring identity requirements are understood and implemented. Contribute technical expertise to the ongoing development of Computacenter’s identity strategy. Participate in a 24 / 7 response capability for identity‐related incidents. What you’ll need At least five years’ experience working with directory services, including Active Directory … ideally AZ‐500 and SC‐300. It would be great if you also have Knowledge of frameworks and standards such as CIS, NIST, ISO 27001, Cyber Essentials and GDPR. An SC‐100 or CompTIA Cybersecurity Analyst+ certification. Existing Security Check clearance, or the ability to obtain ...

utility industry or other large, complex critical national infrastructure organisations. Desirable technical skills and qualifications Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor. What's in it for you? Competitive salary between £40,000 and £55,000 per annum, depending on experience. ...

other areas: Minimum of 3 years' experience in a relevant full-time security position A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor / Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. … ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of managing Security incident and investigations including APT threat actors Some knowledge of specialized security tools would be highly desirable (e.g. Palo Alto ...

looking for: Proven Third Party Risk Management (TPRM) or Vendor Risk experience Strong understanding of ISO 27001, SOC 2, NIS / CAF and supplier assurance Experience conducting cyber security assessments and risk reviews Ability to challenge suppliers and drive remediation activity Strong stakeholder management ...

Title: Account Manager Location: Hybrid / Newbury with Client travel typically twice per week Salary: Competitive + Commission Job Type: Full Time, Permanent About the role: Netteam tX is seeking a commercially focused Account Manager to retain and grow a portfolio of approximately 30 existing small and mid-sized … disclosure. Please click on the APPLY button to send your CV and Cover Letter for this role. Candidates with experience of: IT Account Manager / B2B IT Sales Executive, Client Relationship Manager - MSP / Tech, Managed Services Account Manager, MSP Sales Account Manager, Client Success Manager may also ...

Manager Location: UK Wide / Hybrid Career Level: Consultant / Manager We're working with a global technology consultancy delivering secure, large-scale digital transformation programmes across Health, Public Sector, Defence and Central Government. This is an excellent opportunity for an experiencedPrivileged Access Management (PAM) professional to join … leading security transformation initiatives Desirable experience: Experience with SailPoint, Saviynt, Omada, Okta, One Identity, or other IGA platforms Knowledge of security frameworks including ISO 27001, NIST, and COBIT Exposure to Active Directory, cloud identity solutions, and reporting platforms such as Power BI Experience onboarding applications ...

Control Tester - Cyber Security Location: UK - details available on application Sector: Cyber Security / IT Risk & Assurance About the Role We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment. You will assess the design and operational effectiveness of security … Experience working in a regulated or complex organisation. Exposure to critical national infrastructure environments. Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll play an important role in strengthening information security assurance by helping assess whether cybersecurity controls ...

identity management. Experience with reporting and analytics tools such as Power BI or Tableau. Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll have the opportunity to improve control assurance through automation, strengthen continuous monitoring and help deliver more ...

value. What you'll be doing as a Digital Programme Manager Lead and manage the delivery of significant Digital and business change programmes and / or portfolios of projects across Thames Water. Define and baseline programme scope, delivery plans, budgets, milestones, resources, dependencies, and business outcomes. Work closely with … technology functions. Experience managing Cyber programmes involving significant organisational, technology, and business change. Desirable technical skills and qualifications PRINCE2 Practitioner or equivalent programme / project management qualification. Strong understanding of modern Digital and technology delivery practices and transformation approaches. What's in it for you? Competitive salary ...

vulnerabilities and provide appropriate mitigation actions. Liaise and coordinate with technology and business stakeholders in relation to cyber security patching and vulnerability management issues / actions. Maintain a cyber threat assessment methodology, align to evolving industry standards and integrate into BAU and project-based business processes. Support with proactive … penetration testing enterprise environment. Prepare detailed reports and the ability to present findings to key stakeholders. Cyber security industry certification(s) such as CSTM / CRT / OSCP / CTL. Understanding of different patching management techniques and approaches for different technology stacks (e.g. SaaS, IaaS, End-User ...

Solid Windows Server, Active Directory and MS365 experience VMware experience is an advantage Desirable: Fortigate, SCCM, Azure Virtual Desktop, scripting and automation, Linux, ISO 27001 or Cyber Essentials Plus Microsoft or Cisco certifications are welcome, but hands-on experience is valued most Additional information Fully … site initially, with up to 2 days a week remote after probation Monthly travel to a second UK site, with occasional European travel 24 / 7 on-call rota every other week, with an on-call allowance, enhanced pay for call-outs and additional holiday Applicants must have ...