26 to 50 of 74 ISO/IEC 27001 Jobs in Central London

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

engineering and leadership. You will also own security testing standards, implement Terraform controls, and coordinate with auditors for ISO 27001 / SOC 2 style assessments. This remote-first role reports to the Sr. #J-18808-Ljbffr ...

platform adoption and drive measurable utilization across your portfolio, so that capability translates into protection and the outcomes each customer invested in.Lead product adoption / activation, configuration health and platform optimization across Mimecast’s full product portfolio – including Email Threat Protection, Human Risk Management (HRM), Incydr (Code42) and DMARC … market or enterprise-level accounts, preferably in a security-focused SaaS organization.Working knowledge of email security architectures: Secure Email Gateways, Microsoft 365 Defender, DMARC / DKIM / SPF, email routing and hybrid mail flow.Familiarity with identity and access management concepts (Okta, Azure AD, SSO / SAML ...

Main Responsibilities Duties will include: · Setting and personally delivering target architecture for the ECP data estate — the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. · Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level — partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. · Driving the in-flight ETL replatform — replacing legacy SSIS jobs with a table-driven, parallel ...

Identity Security: Identity and access architecture across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM / PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning … distributed ledger technologies and blockchain-enabled platforms; including model and data protection, AI risk controls, prompt and output security, smart contract assurance, tokenization, wallet / key management, privacy, auditability, regulatory alignment, and integration with enterprise identity, data, cloud and application security controls. Cloud & Infrastructure Security: Secure deployment and integration ...

technical and risk perspective for the London office, collaborating with colleagues in New York. You will be the sole UK based security engineer / lead responsible for designing, implementing and maintaining security controls and GRC compliance. You will work closely with the global CISO team (New York / … security strategy, translate regulatory requirements into practical technical controls and provide meaningful reporting on security posture, risk and compliance to senior stakeholders. Location / WFH: You'll join colleagues in prestigious Central London offices (with onsite restaurant, gym etc.) with flexibility to work from home once a week. About ...

data platforms. We move quickly and ship often and our infrastructure has to keep up without breaking things. We're looking for a Platform / DevOps Lead: a hands‐on engineer who codes their infrastructure, automates the manual stuff, and sets the standard for shipping trusted changes. … production and a safe, repeatable promotion path between them. This is the headline gap and your first big win. Build and harden CI / CD. GitHub Actions with OIDC, matrix container builds to ECR, plan‐on‐pull‐request with deliberate applies, and multi‐environment staging production promotion. Make deploys ...

often hiring for similar roles which your background might be better suited to. 5+ years ofrelevantexperienceinthe medical devicespace (eitherindustryor through consulting / service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry … Skilled in crafting compelling proposals and other business development materials. Proficient in cultivating opportunities within the client base and network. Holds Cyber Security accreditations / qualifications such as [CISSP, CSSLP, CISM], indicating a solid foundation in the field. You thrive in problem-solving and analytical thinking You enjoy collaborating ...

senior level within complex organisations. Key Skills & Experience Proven experience developing and delivering cyber security strategies Strong understanding of security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls ...

experience in Operational Risk, Cyber security, some of which in aleadership role, ideally gained within a consulting organisation or a consulting style role, skills / experience that would beadvantageous Cyber Security and Cyber Resilience, cyber qualifications (CISA, CISC, GIAC etc) Data and AI Trust Operational Resilience and Risk Regulation … such as identity & access management (IAM), zero-trust architectures, cloud security, and data privacyframeworks, payment systems, fraud detection, digital banking security, and third-party / vendor risk management. Advise financial institutionsonregulatory compliance(e.g., FCA / PRA, - relevant regulations, , ISO 27001, NIST,CSF, Data Privacy ...

Support Engineer (2nd / 3rd Line) - London Smart Managed Solutions Smart Managed Solutions is looking for an experienced IT Support Engineer (2nd / 3rd Line) to join our IT team. This is an excellent opportunity for a hands‐on technical professional who enjoys working across modern Microsoft technologies … providers Skills & Experience Essential Proven experience in an IT support role covering 2nd and 3rd line responsibilities Strong experience with: Microsoft 365 Entra ID / Active Directory Intune / endpoint management Azure (administration, networking and identity) Solid understanding of networking fundamentals (DNS, DHCP, VPNs, firewalls) Experience supporting Windows ...

five days per week on a client site. Qualifications 5+ years of relevant experience in the medical devicespace (either industry or through consulting / service provider). Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance. Experience assessing security … Skilled in crafting compelling proposals and other business development materials. Proficient in cultivating opportunities within the client base and network. Holds Cyber Security accreditations / qualifications such as CISSP, CSSLP, CISM, indicating a solid foundation in the field. You thrive in problem‐solving and analytical thinking. You enjoy collaborating ...

technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: Project Manager – Cybersecurity Location: WFH / London 1 day per week Employment Type: Full-time Reports to: Operations Director The Role We are looking for a dynamic and experienced Project … improvement by incorporating lessons learned from client engagements and refining project delivery methodologies. Ensure all client projects adhere to industry security standards (e.g., ISO 27001, GDPR) and internal SLAs. Lead and manage client projects involving Microsoft technologies, with a primary focus on Microsoft Azure ...

Damovo Deutschland GmbH & Co. KG sucht einen erfahrenen Senior Security Consultant (m / w / d), der komplexe Sicherheitslösungen gestaltet, Kunden berät und Projekte zur sicheren digitalen Transformation begleitet. Sie entwickeln Sicherheitsarchitekturen für Cloud, On-Premises oder Hybrid-Umgebungen, unterstützen Pre-Sales und setzen Standards wie ISO … 27001, NIS2, DORA sowie DSGVO um. Deutsch- und Englischkenntnisse sind Voraussetzung. #J-18808-Ljbffr ...

successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Ability to read and interpret documents. Strong … security, server, networking, and IT Infrastructure environment. Its strongly preferred applicants possess at least 5 years of management experience. Excellent understanding of security standards / certifications such as SOC 2, ISO 27001, PCI DSS, Cyber Essentials (Plus). A good working knowledge of the Travel ...

operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control Framework & Strategy Define and maintain ...

environments. Desirable: Government, Energy or Critical National Infrastructure (CNI) experience. Knowledge of Operational Technology (OT) and IT security . Experience with NCSC CAF, IEC 62443 or ISO 27001 . Knowledge of the NIS Regulations 2018 and UK cyber resilience landscape. Experience developing security governance ...

devices, and privileges. Provide Level‐1 (L1) operational support for platform and production environments, including initial incident triage, monitoring, and structured escalation to Platform / SRE or Engineering teams for business‐critical service disruptions. Office IT & End‐User Support (In region) Act as the primary TechOps contact for your … local IT vendors, office infrastructure, and equipment as required. Compliance, Risk & Governance Support global compliance and audit readiness for: SOC 2, PCI DSS, ISO 27001, GDPR and related data protection regulations. Maintain operational security controls and contribute to audit evidence globally. Support risk assessments and remediation ...

Security architecture and engineering Define and maintain the enterprise security architecture and reference designs Lead secure design reviews for new platforms, SaaS, and AI / automation tooling Own the security engineering roadmap, aligned to GSO strategy and priorities Controls and tooling Oversee the engineering and lifecycle of core security … development and deployment pipelines) Governance alignment Map technical controls to the firm’s information security management system (ISMS) and relevant frameworks such as ISO 27001 [ Provide engineering evidence for audits, client security assessments, and regulatory inquiries Incident and threat readiness Work with security operations to convert ...

perimeter firewall estates. Conducting firewall security assessments across multiple vendor platforms: rule base review, management plane exposure, VPN and remote access configuration, IPS / IDS posture, logging, and firmware currency. Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings … Designing network segmentation across cloud and on-premise environments: Azure Network Security Groups and subnet‐level control, VLAN segregation, DMZ isolation, and layer 2 / layer 3 access control. Designing data classification and DLP policy, working with client data and business process owners to define label sets and handling ...

relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review. - Ensure that proposed infrastructure architecture / design are aligned with Firms policies. Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line … party suppliers on system issues. - Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation. Required Skills / Experience: - 5+ years experience of working within a cyber security engineering lead / specialist capacity, with a focus on incident response, threat monitoring ...

platforms · Assist with the annual cyber essentials plus audit and ensure systems and processes adhere to these requirements. · Assist with ensuring the ISO27001 information security assessments are completed on time and with ISO22301. · Assist the IT Manager with monthly reporting of the performance of the MSP to enable analysis … Management and Disaster Recovery or Business Continuity Plan. · Windows Server, Windows 11, SQL Server, O365 & Admin Center, cloud backup systems. · A good understanding of ISO27001 and ISO22301 and has written policies and participated in audits. · Cyber Essentials Plus - Good understanding has answered the Cyber Essentials questionnaire and has participated ...

role Position Digital Technology Director Contract type Permanent / Full Time Reporting to Executive Management Location London Overview of role The Digital Technology Director is pivotal in steering the company through an extensive digital transformation and establishing a long-term technology strategy to meet the growing demands … implementing cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting, and cost optimisation. Experience managing multi-million-pound technology ...

Cyber Security Technology SME (Security Validation) Hybrid - 4 days on-site p / w in London Initial Contract to 30 April 2027 Inside IR35 - £544.83pd Umbrella Rate Do you own and run security validation platforms, such as breach and attack simulation, automated penetration testing or deception, and know … security tooling through its lifecycle and integrating it with enterprise platforms Experience supporting governance and compliance activity, or knowledge of frameworks such as ISO 27001 and NIST Desirable: exposure management or CTEM, MITRE ATT&CK, Python, Bash or PowerShell scripting, vulnerability management tooling, financial services experience ...

Responsibilities Governance, Compliance & ISMS: Maintain and improve the ISMS alongside the Data Protection and Security Officer. Manage policies, track risk registers, coordinate internal / external audits, and maintain Cyber Essentials Plus (CE+) and IASME Level 2 certifications. Board & Leadership Reporting: Assist in preparing security metrics, risk position reports … annual leave + bank holidays 1 day off for your birthday Fully remote working in the UK Company pension scheme Private Healthcare (with 24 / 7 virtual GP service & mental health support) Annual eye tests and £75 contribution towards glasses This role requires candidates to have eligibility to work ...