226 to 250 of 841 ISO/IEC 27001 Jobs in England

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary:Problem-Solving & Decision-Making: Capable of making informed decisions ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

ensuring traceability, documentation accuracy, and compliance.Ensure solutions meet compliance standards (e.g. ISO 27001).AI & Data AwarenessEnsure solution designs support AI / ML-enabled capabilities where relevant (e.g. data lineage, governance, feature management, and model integration patterns).Collaborate with wider technical teams to define integration approaches … credit risk solutions across application, data, integration, and infrastructure domains.Strong understanding of cloud architectures (preferably Azure) and modern delivery practices (API-led, microservices, CI / CD, DevOps).Expert-level knowledge of the Software Delivery Lifecycle (SDLC) and supporting tools.Ability to produce clear and structured documentation, including HLDs / ...

vendors on security matters Stay current with emerging threats, vulnerabilities, and industry best practice Essential Skills & Experience 2-4 years' experience in a cyber / information security role Working knowledge of SIEM platforms and security monitoring tools Understanding of network security fundamentals and common attack vectors Familiarity with … communication skills, with the ability to explain technical risk to non-technical stakeholders Desirable Relevant certifications (e.g. CompTIA Security+, CEH, Cyber Essentials Practitioner) Scripting / automation experience (Python, PowerShell) Exposure to incident response or digital forensics What's on Offer Competitive salary + benefits package Hybrid working Structured career ...

Senior IT Support Analyst Infrastructure Support Engineer SaaS - Platform based Technology Services London / Hybrid Working £50-55k salary + benefits package Our client a global technology leader is currently looking for a Senior Infrastructure Support Engineer . Reporting to the Head of IT, the Senior Support Engineer … Maintain and improve ISO-aligned workflows: access control, incident management, asset life cycle, change management Administration and support: Microsoft 365, Azure AD / Entra ID Intune configuration and compliance JIRA, CrowdStrike, Mimecast, ScreenConnect Exchange, SharePoint, Teams, M365 Office Suite Support OS deployment, endpoint hardening and infrastructure optimisation ...

Risk Assessment & AI Security Identify and assess application risks across the company's SaaS platform, data processing pipelines, including emerging risks associated with AI / ML capabilities. Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models … embed security guardrails into our software development lifecycle and agile engineering workflows. Partner with engineering teams to integrate and optimize security tooling into CI / CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning). Drive automation and developer-friendly security processes that minimize friction and support rapid delivery. ...

Group security function. Drive vulnerability, patch and exposure management in line with Group expectations. Own the IT control environment, including ITGCs across SAP S / 4HANA and other core applications. Operate IT GRC in BAU: governance forums, policy adoption and exceptions, control testing and continuous compliance against … Comfortable owning local accountability while operating within Group governance – diplomatic with the centre, decisive locally. Experience as a Head of Cyber Security, BISO, divisional / business security lead, or in a senior IT GRC leadership role (desirable). SAP / ERP, cloud (RISE), AI governance and major transformation ...

Biotech / Life Sciences Location: Liverpool or London hybrid working Contract: Permanent, full-time Reporting to: Chief Operating Officer Have you built or transformed IT infrastructure within a regulated organisation? Are you ready to create an IT function from the ground up and shape how technology supports scientific discovery … suppliers, outsourced providers and commercial agreements. Recruit and lead future IT team members. About Guilford Street Laboratories Guilford Street Laboratories is a dynamic biotech / life sciences organisation committed to advancing scientific discovery and translating cutting‐edge research into real‐world impact. We operate at the intersection of rigorous ...

Develop and report meaningful security metrics to inform leadership decisions and continuous improvement.**Requirements:*** Several years’ experience in a BISO or senior security leadership / advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR / XDR, CSPM, SAST / DAST).* Experience embedding security into CI / CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

high-availability configurations* Deploy and support FortiADC load balancers, including application delivery, traffic distribution, and high-availability designs* Configure and manage Dell L2 / L3 switching environments, including VLANs, trunking, and inter-VLAN routing* Design and maintain core routing architecture using protocols such as OSPF* Provide secure VPN access … handoffs* Ensure resilient and redundant network designs aligned to production requirements* Fortinet Firewalls (FortiGate)* FortiADC (load balancing and application delivery)* Dell networking (Layer 2 / Layer 3 switching platforms)* Routing (OSPF)* VLAN design and network segmentation* Layer 2 / Layer 3 switching**What You Bring to the Role ...

practices across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills … technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and / or GCP environments Degree qualified in Cyber Security, IT or a related discipline, or equivalent experience Reference Number: BBBH(phone number removed) Rise Technical ...

large‐scale environmentsStrong knowledge of Azure and on‐prem infrastructure (IaaS, PaaS, networking, identity, storage)Hands‐on experience with infrastructure‐as‐code (Terraform, ARM / Bicep), configuration management (Ansible, PowerShell DSC), and CI / CD tooling (Azure DevOps, GitHub Actions)Experience with monitoring and observability stacksSolid understanding … fundamentals (Windows / Linux), security, networkingBackground in scripting or software development (PowerShell, Python, Go)Experience with containers and orchestration (Docker, Kubernetes, AKS)Familiarity with ITSM practices and platforms such as ServiceNowExperience operating in ISO 27001 or similar regulated environmentsBusiness & Interpersonal SkillsExperience contributing to incident response ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. · Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. · Minimum of 5 years' experience in IT governance, risk management, cyber ...

good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. Minimum of 5 years’ experience in IT governance, risk management, cyber ...

requirements with product innovation and business objectives.Nice to HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure ...

Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years … information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

English - verbal and written communication skills. Nice‐to‐have Requirements Strong understanding of secure software development, DevSecOps and application security, including secure SDLC, CI / CD security, SAST, DAST, Software Composition Analysis (SCA), container security, API security and threat modelling. Strong technical knowledge of Identity and Access Management … Sign-On (SSO), Privileged Access Management (PAM), Conditional Access and Zero Trust security principles. Experience implementing and optimising enterprise security technologies including SIEM, EDR / XDR, vulnerability management, endpoint protection, cloud security tooling, security monitoring and threat intelligence platforms. Strong understanding of cyber threat frameworks including MITRE ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

CISO to deliver the Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g. … regulated financial institutions* Proven experience leading cyber advisory, risk, and service delivery functions* Managing a P\L and building a cyber security business practice / service* Deep understanding of financial services regulations, operational resilience, and client assurance* Experience operating in global, multi-entity, and acquisition-driven environments* Strong executive ...

providing operational leadership alongside the COCO Review security reports from our IT provider and act on issues with urgency, escalating appropriately Own the ISO audit process for CF, ensuring we continue to meet the requirements of ISO 27001 and other relevant standards, that … permissions Demonstrable, hands-on ownership of information security Experience of owning or leading an information security or quality accreditation process, such as ISO 27001, including preparing for and running audits Ability to build automation and integrations, using scripting, workflow or low-code tools and APIs ...

stages of ideation—via threat modeling, risk reviews, and abuse-case analysis.Shape and evolve Miro’s Secure SDLC practices, integrating security seamlessly into CI / CD pipelines, infrastructure-as-code, and developer tooling.Oversee execution of bug bounty and third-party testing programs, ensuring vulnerabilities are triaged, communicated, and remediated … bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI / LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing API-driven, microservice-based ...

Role: Senior Devops Engineer Contract: Permanent Location: London / Greater Oxford Area Working Pattern: Flexible & Hybrid Salary: Competitive A note from the founders Oxford Dynamics is at an inflection point. We operate in some of the most complex and high‐stakes environments in the world defence - national security … decisions can be catastrophic, partnering with defence and security organisations internationally to help protect nations, infrastructure and lives What you will be doing here / why this role matters Oxford Dynamics is a small team who rely on a collaborative and positive approach and so the right attitude ...

resilience: clear ownership, documented processes, no single points of failure. 3. Run security engineering and operations Own the security tooling end to end (EDR / XDR, SIEM, identity, vulnerability management, email security, DLP), including the deployments already in flight. Own security incident and breach response: deciding severity, directing containment … Desirable iGaming, fintech or another heavily regulated industry; UKGC or similar gaming regulation and player data protection are a strong plus Experience securing AI / LLM systems: agent architectures, model access controls, AI tooling governance Experience preparing a security function for commercial due diligence or external investment scrutiny Application ...