1 to 25 of 38 ISO/IEC 27001 Jobs in the East of England

Cyber Security Lead / Information Security Lead Bedford | Hybrid – 1–2 Days per Week in the Office Cyber Security | Information Security | GRC | ISO 27001 | ISMS | Security Audits | Infrastructure Security Are you an experienced Cyber Security / Information Security professional with a technical background … strong GRC, ISO 27001 and security audit experience? We're recruiting a Cyber Security Lead / Information Security Lead for a leading international SaaS software house, offering the opportunity to take broader ownership across Information Security, Cyber Security, GRC and security assurance. The ideal candidate ...

Vulnerability Management Analyst – Qualys VM Role Summary We are looking for a hands‐on Vulnerability Management professional with strong operational experience on Qualys VM / VMDR to support BAU vulnerability operations for large enterprise environments. The role is execution‐heavy and requires day‐to‐day ownership of scanning, validation … stakeholder coordination , rather than advisory or governance‐only work. Key Responsibilities Qualys VM Operations Perform authenticated and unauthenticated vulnerability scans using Qualys VM / VMDR across: Servers (Windows & Linux) Network devices Endpoints Cloud workloads (AWS / Azure) Manage asset discovery, tagging, and grouping within Qualys. Configure and maintain ...

security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO / IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What … Essential Demonstrable experience in information security assurance and technical cyber‐security operations within a UK organisation Strong working knowledge of ISO / IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR / DPA 2018 Hands‐on experience with modern security tooling ...

maintain risk registers, risk assessments and PESTLE analysis. Support the investigation and resolution of non-conformances and corrective actions. Monitor and maintain GDPR / data protection compliance, including audits and security incident investigations. Support environmental compliance, waste management and regulatory reporting. Maintain and test Business Continuity and Disaster Recovery … Minimum 3 years’ experience in audit, compliance, quality or a related role. ISO 9001 and ISO 14001 Internal Auditor certification / experience. Good working knowledge of GDPR and data protection requirements. Strong understanding of legal, regulatory and statutory requirements. ISO 27001 ...

Information Security & Assurance Officer Salary: up to £50,000 + 15% Project Uplift + Company Car / Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional … utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor / Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life ...

complex incidents. AI Tooling & Enablement Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding / agent tools), including integrations, MCP server configuration, and connector management. Manage user access, permissions, and governance for AI tools, ensuring least‐privilege access … secure connector / integration setup. Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements. Cybersecurity Develop and implement security measures to protect Bulk’s IT environment, continuously enhancing the security framework. Monitor, investigate, and remediate security alerts, incidents, and Indicators ...

frameworks applicable to enterprise security platforms, such as: GDPR (General Data Protection Regulation) – governing the protection and privacy of personal data ISO / IEC 27001 – an international standard for information security management systems (ISMS). SOC 2 (System and Organisation Controls) – focusing … standards of privacy and regulatory conformity throughout all data handling and system operations. System Integration & Projects Lead the integration of CCURE 9000 with Victor / VideoEdge and other third-party security solutions to ensure cohesive interoperability and efficient data flow. Plan and deliver system upgrades, migrations, and expansion projects ...

security risks associated with AI, machine learning, and advanced analytics. Solid knowledge of recognised security frameworks and standards (e.g. NCSC CAF, ISO / IEC 27001, CIS Benchmarks). Ability to balance technical depth with delivery pragmatism, providing advice that enables progress while remaining ...

Essex.They will be responsible for ensuring the security, reliability, compliance and performance of the IT infrastructure across the different offices. Responsible for on-premises / cloud systems, servers and network architecture, overseeing day-to-day IT support and managing escalated incidents for network, security, server and hardware / … disruption. Manage and support the design, implementation, development and maintenance of the practice network architecture including cloud platforms, servers, networking, Wi‐Fi and site / internet connectivity for high availability and business continuity requirements. Implement, manage, test and monitor the status of practice security measures, including firewalls, network segmentation ...

They will be responsible for ensuring the security, reliability, compliance and performance of the IT infrastructure across the different offices. Responsible for on-premises / cloud systems, servers and network architecture, overseeing day-to-day IT support and managing escalated incidents for network, security, server and hardware / … disruption. Manage and support the design, implementation, development and maintenance of the practice network architecture including cloud platforms, servers, networking, Wi-Fi and site / internet connectivity for high availability and business continuity requirements. Implement, manage, test and monitor the status of practice security measures, including firewalls, network segmentation ...

Present security risks and recommendations to senior leadership. Essential Experience 5+ years' experience in Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into … deliver pragmatic, risk-based solutions. Highly Desirable Medical Devices, HealthTech or Software as a Medical Device (SaMD). Product Cybersecurity experience. Knowledge of ISO 13485, ISO 14971, GDPR, HIPAA and FDA cybersecurity guidance. Experience with connected devices, mobile applications or cloud-hosted healthcare platforms. Qualifications Professional ...

colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com. Job Description Role: DLP Security Engineer Location: London / Bristol / Norwich-any We are looking for a Data Protection Analyst with hands-on experience in Microsoft Purview DLP and Security Operations. … Security Operations, Data Protection, or SOC environments. Strong hands-on experience with Microsoft Purview DLP. Experience managing security incidents and ticketing platforms (ServiceNow / JIRA / Remedy). Understanding of Data Classification, Information Protection, and Compliance concepts. Basic knowledge of PKI, digital certificates, encryption, and key management. Good ...

track record of successfully managing responses to both internal and external audits. Sound knowledge of core GRC practices and industry frameworks, such as ISO 27001, ISO 9001, ITIL, and COBIT. Document & Quality Control - Expertise in quality management principles, policy governance, and administering Document Management … everything we do. For more information visit www.mundipharma.com. For more information about Mundipharma's guiding principles and commitment to diversity and inclusion visit: www.mundipharma.com / people #J-18808-Ljbffr ...

track record of successfully managing responses to both internal and external audits.* Sound knowledge of core GRC practices and industry frameworks, such as ISO 27001, ISO 9001, ITIL, and COBIT.* Document & Quality Control - Expertise in quality management principles, policy governance, and administering Document Management ...

lead security risk and assurance activities, derive product security requirements and ensure appropriate security controls are incorporated into product design. This is a Product / Systems Security Engineering role rather than a corporate IT or enterprise cyber security position. Key Responsibilities Undertake security risk assessments and develop risk mitigation … assessment, risk mitigation and technical assurance experience. Experience deriving and managing technical security requirements for products or systems. Experience producing Security Cases, RMADS and / or comparable security assurance documentation. Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs ...

Soletanche Limited, a leading geotechnical contractor, seeks an Information Security & Assurance Officer to implement ISMP controls, manage ISMS and align with ISO / IEC 27001. You’ll interface with client security operations, oversee governance, and drive continuous improvements across systems and suppliers. You will ...

support continuous learning from production data Building Rust and Python services across serving, workers, training workflows, and internal tooling Working with Postgres, Redis, queues / streams, migrations, and event-driven workflows Making reliability, observability, and deployment safety part of the product from the beginning Core responsibilities Write production-grade … Helm, Terraform, GitHub Actions, or release automation Exposure to LLM infrastructure, model routing, embeddings, GPU workers, or ML platform systems Experience with SOC 2 / ISO 27001 readiness, audit trails, secrets handling, or production compliance What to expect: £40k–£90k (+equity) based on location ...

skills. Ability to manage multiple priorities and deadlines effectively. Proficient in Microsoft Office applications. Desirable Requirements: Experience working with ISO 13485 and / or ISO 27001 standards. Experience using electronic Quality Management Systems (eQMS). Previous experience within the medical device or healthcare ...

Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF / CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk … CISSP, CRISC) or equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS / IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing ...

Training During this apprenticeship, you will follow a fully supported training programme with LearnTech, delivered through combined weekly remote classroom-based training, workplace assessment / training and online learning working towards completing the Information Communications Technician standard. The training covers the following core occupational duties: www.instituteforapprenticeships.org / apprenticeship … standards / information-communications-technician-v1-1 Upon completion, the successful apprentice will have a level 3 ICT qualification Apprenticeship Standard Information communications technician (level 3) Training Provider TECHNICAL PROFESSIONALS LIMITED Working Week Monday - Friday Expected Duration 1 Year 5 Months Positions Available 1 Closing Date Sunday, 18th October ...

Description As a Senior Associate / Manager – Technology Risk and Assurance, you will use your skills and experience to support Governance Risk and Compliance (GRC) team responsible for delivering technology and cyber regulatory engagements. Working closely with the wider GRC teams and their subject matter experts, further engagement will … address to the relevant regulatory requirements they address. Facilitate in attesting and demonstrating compliance with relevant authorities, regulators and auditors during compliance assessment and / or audits. Regulatory Engagements Programs: Collaborate in the developing and shaping Regulatory engagement operating model and standard processes. Devise and upkeep templates and tools ...

compliance standards and business support tools. Capture and track internal feedback on processes to drive continuous improvements. Delivery internal training on continuous improvement / operational excellence where required. Champion information management within BlueBear. Support internal project activity where required and manage the activities of the Facility Coordinator. Qualifications … organisation. Proven experience managing risks and implementing risk management policies inc. business continuity plans. Experience with implementation Quality Management Systems and compliance with ISO 9001. Experience with ISO 27001 desirable. Awareness of critical compliance areas including UK export control, health & safety and environmental management ...

compliance standards and business support tools. Capture and track internal feedback on processes to drive continuous improvements. Delivery internal training on continuous improvement / operational excellence where required. Champion information management within BlueBear. Support internal project activity where required and manage the activities of the Facility Coordinator. Qualifications … organisation. Proven experience managing risks and implementing risk management policies inc. business continuity plans. Experience with implementation Quality Management Systems and compliance with ISO 9001. Experience with ISO 27001 desirable. Awareness of critical compliance areas including UK export control, health & safety and environmental management ...

cloud security architecture Experience with Microsoft Entra ID, Conditional Access and identity security Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001 Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps Desirable Experience Experience working within ...

address to the relevant regulatory requirements they address. Facilitate in attesting and demonstrating compliance with relevant authorities, regulators and auditors during compliance assessment and / or audits. Technology and Cybersecurity Regulatory Engagements Programs Collaborate in the developing and shaping Regulatory engagement operating model and standard processes. Devise and upkeep … subject. Ideally extensive years of work experience in Information Security, Information Technology or Risk Information security certifications (e.g. CISSP, CCSP, CISA, CRISC, CISM, ISO 27001 LA) are preferable. Project Management certification (e.g. PMP) is also preferable. What we offer Enjoy a benefits package designed to help ...