1 to 25 of 74 ISO/IEC 27001 Jobs in Central London

Full-time Permanent L3 - Senior / Specialist Posted 17 Oct 2026 Description Job title: Compliance Manager Report to: Operations Director Location: Remote within the UK, with regular travel to our group companies and to clients, typically four to six days a month, more around audits Hours: Monday to Friday … happen. First, it takes every company in our group to ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, with controls aligned to the NCSC Cyber Assessment Framework (CAF) v4.0. Second, it builds the compliance service ...

komplexe Sicherheitslösungen zu gestalten, Kunden zu beraten und innovative Projekte umzusetzen? Dann werde Teil unseres engagierten Teams und unterstütze als Senior Security Consultant (m / w / d) Unternehmen aus Healthcare, Finance und öffentlichem Sektor auf ihrem Weg zur sicheren digitalen Transformation. Deine Aufgaben bei uns Du entwickelst … Architekturen – egal ob on-premises, hybrid oder in der Cloud Technisches Know-how in Enterprise Networks, Cloud-Security und modernen Security-Lösungen (z.b. SIEM / SOC, Secure Access, RAS Lösungen). Idealerweise Zertifizierungen wie CISSP, CISM, ISO 27001 Lead Implementer, CISA, Cisco Cybersecurity Associate, CCNA ...

client organisations in line with UK regulations. Assess compliance against UK GDPR and the Data Protection Act 2018, the NIS Regulations, ISO / IEC 27001, Cyber Essentials and Cyber Essentials Plus, and the Telecommunications (Security) Act 2021. Identify risks, provide actionable recommendations … consultancy or client‐facing role, with strong knowledge of UK legal frameworks and compliance standards. Relevant certifications, for example CISA, CISSP or ISO 27001 Lead Auditor. Excellent communication and stakeholder engagement skills, with the ability to work independently across multiple client engagements. Why Consultants choose ...

organizations, with relevant sector knowledge. Familiarity with recognized cybersecurity and governance frameworks such as NIST Cybersecurity Framework, NIST Zero Trust Architecture, ISO / IEC 27001, CIS Controls, COBIT or Cloud Security Alliance guidance. Experience with DevSecOps, CI / CD controls, cloud security … collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com / us / careers. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized ...

with 5 days onsite and the option to work from home 1 day per week. Responsibilities include hands-on Microsoft 365 / Entra / Intune support, ISO 27001 audit readiness, and IT activities related to an office relocation, supported by a Junior IT Technician. ...

safer, insurance rates more accurate, commerce more transparent, business decisions easier and processes more efficient. You can learn more about LexisNexis Risk at https: / / risk.lexisnexis.com / . About the Role As an Senior Information Security professional, you will manage and support security, compliance and risk … helping protect the confidentiality, integrity and availability of organisational systems and information. Responsibilities Lead and support customer security reviews, due diligence questionnaires, virtual / on-site assessments and internal and external compliance or certification audits. Coordinate evidence collection, assess control effectiveness, track findings through resolution and maintain organised documentation ...

week onsite with the possibility of working from home 1 day a week. It’s a slightly broader requirement than a standard IT Manager / Senior IT Support contract. They specifically need someone who can help with: Hands-on Microsoft 365 / Entra / Intune / endpoint IT operational support ISO 27001 and SOC 2 audit evidence / readiness (expected in December) IT and infrastructure activities associated with an office relocation (expected end of December) General hands-on IT operational support, supported by Junior IT Technician Previous ISO ...

network, server, storage, backup or virtualisation administration. Experience within the media, localisation, post‐production or content services sectors. Knowledge of International Organization for Standardization / International Electrotechnical Commission (ISO / IEC) 27001, Cyber Essentials Plus, Trusted Partner Network (TPN) or similar security ...

oversight of cyber security compliance against relevant regulatory obligations, industry standards and organisational policies. Support alignment with recognised frameworks, including NIST Cybersecurity Framework, ISO 27001, NCSC guidance and applicable sector-specific requirements. Monitor the effectiveness of cyber risk management processes, ensuring risks are accurately recorded, assessed … developing and delivering cyber assurance reports for senior management, executive leadership and governance committees. Experience assessing cyber security control effectiveness across complex IT and / or OT environments. Strong understanding of cyber security risk management, control frameworks and assurance methodologies. Experience developing assurance metrics, KRIs, KPIs and management information ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

client relationships. Contribute to thought leadership in OT security through publications, presentations and client engagements. The Candidate Essential 10+ years' experience in OT / ICS cybersecurity or critical infrastructure security. Hands-on OT security industry experience, for example in Manufacturing, with time spent on plants and sites. Ability … CISSP, GRID. Experience across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence or CNI. Knowledge of NERC-CIP and IEC / ISA 62443. Background in both advisory work and hands-on technical implementation. What's on Offer Prestigious projects across CNI, advanced manufacturing and defence clients. The chance ...

regular system audits, diagnose technical issues and implement firmware or software updates to minimise operational disruption. Lead the integration of CCURE 9000 with Victor / VideoEdge and other third‐party security solutions to ensure cohesive interoperability and efficient data flow. Be the primary point of contact for internal departments … . Familiarity with compliance frameworks applicable to enterprise security platforms, such as: GDPR – governing the protection and privacy of personal data ISO / IEC 27001 – the international standard for information security management systems (ISMS) SOC 2 – controls relevant to security, availability, processing integrity ...

Identity Center, privileged access, role-based access control, conditional access, MFA, service principals and workload identities. Evaluating cloud network architecture and segmentation, including VNets / VPCs, security groups, firewalls, private endpoints, internet exposure and hybrid connectivity. Assessing cloud security configuration and posture using native and third-party tooling (e.g. … Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, CSPM / CNAPP platforms) against CIS Benchmarks and Well-Architected security guidance. Reviewing data protection controls, including encryption, key management (Azure Key Vault, AWS KMS), secrets management, storage exposure and backup resilience. Assessing logging, monitoring and detection capabilities, including Azure Monitor ...

APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns for AI application development, including permission boundaries, identity controls, sandboxing, auditability, input / output validation and human‐in‐the‐loop controls. Help clients establish governance and assurance processes for AI systems across the lifecycle, from experimentation through … prompts, APIs, tools and users. Awareness of emerging AI security risks such as prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model / data poisoning, vector or embedding weaknesses and AI supply chain risk. Ability to perform threat modelling for complex systems, including AI‐assisted or agentic ...

PLEASE NOTE THIS ROLE SITS WITHIN IR35***PLEASE NOTE THIS ROLE SITS WITHIN IR35*** AV Support Assistant / Audio Visual Specialist / AV Engineer A fantastic opportunity has arisen for an AV Support Assistant / Audio Visual Specialist / AV Engineer to join our London based … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / Audio Visual Specialist / AV Engineer ***PLEASE NOTE THIS ROLE SITS WITHIN IR35***PLEASE NOTE THIS ...

sector, including: NCSC NIS Guidance and CAF, ISO 27001 and ISO 27005, NERC CIP, ISA‐99 / IEC 62443, NIST CSF. All PA people are required to undergo background checks and to achieve the Baseline Personnel Security Standard; some UK roles ...

Owlis Technology Limited is seeking a Compliance Manager to lead our group-wide ISO 9001 / 27001 implementation and Cyber Essentials Plus programme. The role focuses on policy, risk management, audits, and continuous improvement across UK operations. You will coordinate certifications, manage GRC tooling ...

using one or more of these or comparable tools: Cloud platforms: AWS, Google Cloud, Microsoft Azure Infrastructure as code: Terraform with Terragrunt, CloudFormation CI / CD: CircleCI, GitHub Actions, GitLab CI / CD Security testing (static analysis, software composition analysis, container scanning, and infrastructure as code scanning): Snyk … GuardDuty, Google Security Command Center Detection and logging: Splunk, Elastic, Datadog, Microsoft Sentinel, Google Security Operations Has built or specified security gates in CI / CD pipelines that stop a change that fails a security requirement. Has hands-on experience with infrastructure as code guardrails, secrets and key management ...

Manager / Senior Manager - Cyber Strategy & Transformation If you feel your experience is a strong match for this opportunity, please apply today for a confidential discussion about the role. Join a leading Cyber Strategy & Transformation team, helping major organisations manage complex cyber risk and deliver meaningful change. … issues into clear business implications and recommendations for senior stakeholders. Working with recognised cyber security frameworks, standards and regulatory requirements, including NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2. Leading multidisciplinary teams, setting direction and maintaining high-quality delivery. Managing delivery risks, dependencies, competing priorities ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI / CD pipelines and development workflows. Help development teams embed secure‐by‐design principles throughout the software development lifecycle. Act as the technical lead … practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI / CD pipelines and DevSecOps environments. Experience with automation and scripting tools such as Terraform, PowerShell, Python and REST APIs. Experience leading technical teams ...

leavers, rehires and contractors across regions and platforms Implement identity governance, access reviews and reporting for least-privilege access and compliance (SOX, GDPR, ISO 27001) Oversee workforce privileged access management (PAM) and multi-factor authentication (MFA) strategies Manage non-human identities (service accounts, application credentials … hires by 30% through modern workplace automation Complete modern workplace transformation roadmap milestones on schedule Optimise all request provisioning time from days / hours to minutes through automation and process optimisation Required Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, or related field Master's degree preferred ...

sites, including Microsoft 365, hardware, user lifecycle management and business systems. Leading the organisation's IT security and governance, including Cyber Essentials certification, ISO 27001 alignment, risk management and data protection requirements. Managing technology vendors, contracts, licences and renewals, ensuring strong commercial control and avoiding unnecessary … outsourced IT managed service provider and holding suppliers accountable for service and commercial performance. A working knowledge of Microsoft 365 alongside Cyber Essentials, ISO 27001 principles, GDPR and data protection requirements. Experience managing IT contracts, licences, renewals, budgets and vendor relationships. The ability to manage technology ...

indtrængen, firewalls og løsninger til beskyttelse af slutpunkter Yde rådgivning om omfattende risikostyringsstrategier og bistå med compliance-indsatser i forbindelse med rammeværker såsom ISO 27001, GDPR, HIPAA, PCI-DSS og branchespecifikke regler Være mentor for, vejlede og udvikle junior sikkerhedsmedarbejdere og dermed fremme en samarbejdskultur præget … cybersikkerhed, trusselsmodellering og forsvarsstrategier Dokumenteret ekspertise i at designe og implementere løsninger inden for sikkerhedsarkitektur Indgående kendskab til sikkerhedsværktøjer og -teknologier (SIEM, IDS / IPS, firewalls, endpoint-beskyttelse, sårbarhedsscannere) Indgående kendskab til compliance-rammer og lovgivningsmæssige krav (ISO 27001, GDPR, HIPAA, PCI-DSS eller lignende ...

Walkers seeks an Internal Auditor to strengthen its Internal Audit function, focusing on the ISMS and alignment with ISO 27001. The role involves risk-based audits, control assessment and reporting, with hybrid London work patterns and interaction across jurisdictions. The ideal candidate will hold ISO 27001 ...