1 to 25 of 42 ISO/IEC 27001 Jobs in Bristol

Code generation + Automated code review + Intelligent testing + Documentation support + Development acceleration* Establishing responsible AI governance aligned with ISO / IEC 42001 principles* Ensuring AI-assisted development practices are implemented securely and consistently* Promoting AI literacy and prompt engineering capability across engineering … opportunities**Security, Compliance & Engineering Standards**You will:* Lead secure-by-design engineering practices* Support ISO 27001 and ISO / IEC 42001 initiatives* Define and enforce coding standards, review processes, and quality expectations* Improve engineering quality metrics and continuous improvement practices* Support ...

Analyst will help strengthen the organisations overall security posture and support a culture of continuous improvement. The role is expected to start in mid / late October 2026. DUTIES Your duties as the Cyber Security Analyst include: Support Security Compliance: Assist with maintaining compliance with applicable security standards … frameworks, including ISO / IEC 27001, ISO / IEC 27017, ISO / IEC 27018 and Cyber Essentials Plus Assist with Audit Readiness: Support the preparation, coordination and collation of evidence for internal ...

Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO / IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from threat to risk to control … related discipline. Suitable qualifications may include BSc, MSc, CompTIA Security+, CySA+, CISM, CISSP (or associate), ISO 27001 Lead Implementer / Lead Auditor, ISO 27005 risk, ISA / IEC 62443 Cybersecurity Fundamentals Specialist, or equivalent professional experience. Candidates working towards relevant ...

Title: Product Security Engineer Information AssuranceLocation: Ashton Vale, Bristol + Hybrid Working ArrangementsCompensation: Competitive Salary + BenefitsRole Type: Full time / PermanentRole ID: SF75386Shape the future of secure engineering and protect what matters most.At Babcock, we’re working to create a safe and secure world, together. If you join … similarly regulated sectors (desirable).Qualifications for the Product Security Engineer - Information AssuranceRelevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor.Security ClearanceThe successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must be Sole ...

Title: Product Security Engineer Information Assurance Location: Ashton Vale, Bristol + Hybrid Working Arrangements Compensation: Competitive Salary + Benefits Role Type: Full time / Permanent Role ID: SF75386 Shape the future of secure engineering and protect what matters most. At Babcock, we’re working to create a safe … regulated sectors (desirable). Qualifications for the Product Security Engineer - Information Assurance Relevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor. Security Clearance The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. ...

opportunity for someone who enjoys balancing strategic security governance with technical delivery, while also supporting key networking initiatives. This is a 90% Information Security / 10% Network Engineering role, making it ideal for someone whose passion is cyber security but who is comfortable maintaining and supporting enterprise network infrastructure … firewalls and routing technologies. Contribute to disaster recovery planning, network resilience and high availability initiatives. Skills required: Enterprise firewall technologies including Cisco Firepower (ASA / FTD) and Palo Alto. Cisco networking technologies including Catalyst switching, Layer 2 / 3, OSPF and VPNs. Network security controls including Cisco ...

enable interoperability across Defence systems. Establish and support data governance frameworks, including data quality, metadata, lineage, and master data management practices. Contribute to AI / data governance principles, emerging technology assessments, and horizon scanning activities. Support the development of reusable patterns, guidance, and Communities of Practice to uplift data … teams. Experience 5+ years proven experience as a Data Architect within UK Defence or Critical National Infrastructure environments. Experience working across enterprise architecture and / or solution data architecture layers, bridging strategic and technical domains. Experience delivering across full system lifecycles (e.g. CADMID), including concept, design, and in‐service ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

business intelligence and decision-making.Digital Systems & CDE ManagementLead the configuration, administration, and optimisation of digital platforms including:Common Data Environments (CDEs)Microsoft 365 / SharePoint OnlineAutodesk and related BIM platformsGovern access controls, workflows, metadata schemas, and automation.Ensure systems support ISO 19650 workflows and digital delivery requirements.Team Leadership … Information Management, Data Science, or a related discipline.Experience aligned to senior-level frameworks (e.g., GKIM Level 6 or equivalent).Professional certifications desirable:Microsoft 365 / AzureISO 19650 PractitionerInformation Governance or Records Management certificationsSecurity RequirementsMust have or be able obtain SC Security Clearance.Additional InformationAt AECOM, we are committed to maintaining ...

security architecture, cybersecurity, secure engineering, operational technology security or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA / IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer … / Lead Auditor or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. ...

levels and support sensible prioritisation of remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI / CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working … ensure engineering reality supports the security claims we make to customers, partners and auditors. Contribute to wider assurance and certification activity, including ISO 27001 or other relevant standards. Requirements - Product Security Architect - not exhaustive: Strong experience in product security, application security, secure software engineering, security architecture ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

segregation of duties are consistently embedded by design. Own privileged access strategy and outcomes, including vaulting, session isolation, credential rotation and Just-in-Time / Just-Enough-Access controls - with day-to-day PAM operation delegated to specialist team leads. Own the access governance strategy - including recertification cadence, role … Access Management and Identity Governance & Administration, gained in a complex, regulated environment (financial services strongly preferred). Demonstrable experience leading a multi-year IAM / PAM / IGA transformation programme end-to-end, including target operating model design, tooling modernisation and measurable maturity uplift. Deep working knowledge ...

stewardship . Experience developing governance policies, standards and operating models. Practical experience with AI governance, AI assurance or responsible AI . Understanding of AI / model testing, evaluation and risk assessment. Strong consulting, stakeholder management and communication skills. Desirable: UK Central Government, Defence or regulated-sector experience. Defence, maritime … DMBOK, NIST AI RMF, ISO 23894, ISO 27001 or UK GDPR . MLOps, model monitoring or AI risk / control experience. Benefits: Salary up to £80,000 25 days holiday + bank holidays Private Medical Insurance Hybrid working with 2 days per week ...

location hosting environments supporting business-critical financial systems.Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management.Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned to business … / RTO and regulatory expectations.Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks.Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency.Manage third-party suppliers and strategic partners ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management . Hosting and Network Manager Define and assure backup, disaster recovery, and operational resilience … strategies aligned to business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational ...

WORKING Location: Manchester; Bristol; Leeds; Glasgow; Birmingham; , Central London, Greater London - United Kingdom Type: Permanent Security Consultant United Kingdom Up to £85,000 S / C Clearable Ready to protect the systems that underpin the UK's most critical public services? We're hiring a Security Consultant to work … annum • Extensive benefits package • Continuous training provided for career progression To hear more about the Security Consultant role contact Daire McIlhatton at Reference: AMC / DMI / SC #damc ...

security architect and a cybersecurity consultant. The role sits at the intersection of naval architecture, systems engineering, product security, information assurance and MOD / maritime cyber compliance. The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. … management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence ...

ensure compliant, ethical, and secure AI systems. This role requires strong data governance and risk management experience in defence or government, with ISO 27001 and ISO 42001 knowledge, plus active UK SC or DV #J-18808-Ljbffr ...

Description Cyber Security GRC Consultant (DV Cleared) Location: Hybrid / South West Region Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

Jersey, Leeds, Liverpool, London, Manchester, Milton Keynes, Newcastle, Nottingham, Port Talbot, Reading, Southampton, St Albans Business Line Technology & Transformation Job Type Permanent / FTC Date published 13-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

between technical findings and the risk decisions that senior leaders need to make. You'll bring the judgement to know when a full ISO 27001 governance programme is appropriate and when a lighter-weight approach serves the engagement better. At Lead level, your impact extends beyond … attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI / CD pipelines as part of a shift-left security approach Made Tech sponsors attainment of recognised cyber certifications for staff in scope. ...