20 of 20 ISO/IEC 27001 Jobs in Gloucestershire

Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across the Marco Group … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

Technology Team. This is a critical role within our orthopaedic medical device business, ensuring that software and system development processes comply with FDA, ISO and European Medical Device regulations and standards. What you’ll do: Software & System Quality Oversight Provide expert quality assurance guidance and oversight for software … quality-focused approach. Ability to drive continuous improvement and influence positive change across teams. Desirable Qualifications & Experience Trained Internal Quality System Auditor and / or Software Quality Auditor. Experience with Medical Device Regulation (MDR) and MDSAP requirements. Knowledge of: ISO 27001 ISO ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

collaboration tools. Desirable Experience working within NHS, health research, analytics or Secure Data Environment (SDE / TRE) programmes. Knowledge of SATRE, DSPT, ISO27001 or other relevant standards and assurance frameworks. Experience of cloud-based data engineering using Azure, AWS or equivalent platforms. Experience of infrastructure-as code, automation, DevOps … Care Board Address Bristol, Gloucester and hybrid working Floor 2, North Wing, 100 Temple Street Bristol Gloucester BS16AG United Kingdom Employer's website https: / / bnssg.icb.nhs.uk / ...

collaboration platforms. Desirable Experience working within NHS Secure Data Environments (SDEs), Trusted Research Environments (TREs) or health research infrastructure programmes Knowledge of SATRE, DSPT, ISO27001 or related assurance and security standards. Cloud or technical certifications such as AWS, Azure, CISSP, TOGAF or equivalent. Experience of DevOps, automation, infrastructure-as-code … Board Address Bristol, Gloucester and hybrid working Floor 2, North Wing, 100 Temple Street Bristol Gloucester BS1 6AG United Kingdom Employer's website https: / / bnssg.icb.nhs.uk / ...

macOS and Windows 11 estates using MDM platforms like Jamf Pro and Microsoft Intune. SaaS & Identity Administration: Strong background administering Google Workspace and SSO / Identity platforms, including security controls, JML processes, and least-privilege access. ITSM & Atlassian: Hands-on experience configuring and managing Jira Service Management (JSM), Jira … touch enrollment, deployment, secure wipe). Administer MDM platforms (Jamf Pro, Intune) for compliance, patching, and app deployment. Troubleshoot hardware and OS faults (FileVault / BitLocker, Keychain, network issues) and maintain endpoint security posture in partnership with Security. Support a mixed estate including iOS / iPadOS and residual ...

Senior Cyber Security Consultant (Defence) Department: Consultancy Employment Type: Full Time Location: United Kingdom / Hybrid Reporting To: Matt Gibson Description At Actica, our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some … professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer / Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager ...

performance and robust protection. INFORMATION SECURITY CONSULTANT ESSENTIAL SKILLS: Information assurance and risk management experience within government or regulated environments Strong knowledge of ISO 27001, NIST, and government security standards Experience reviewing AWS security controls including IAM, logging, and encryption Strong stakeholder engagement and communication skills … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Information Security, Risk Management, ISO 27001, NIST, AWS, Cloud Security, Stakeholder Engagement ...

cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR / XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively ...

industry quality representatives. Essential Experience Previous experience within Software Quality Assurance, Software Assurance or Quality Engineering environments. Qualified Lead Auditor in AS9100, ISO9001, ISO27001 or similar quality management systems. Experience planning, conducting and supporting audits. Knowledge of software development lifecycles and software quality assurance methodologies. Experience working within highly regulated … Experience conducting root cause analysis and driving process improvement initiatives. Desirable Experience Defence, Aerospace, Aviation, Maritime or other highly regulated industries. Knowledge of ISO 27001 and ISO 20000. Experience working within Agile development environments. Familiarity with software and systems engineering processes. Experience supporting supplier ...

risk analyses and security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS / IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security … Standards & Frameworks: Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills #J ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills ...

experience with Microsoft 365 and Windows 11 administration. A good grasp of security basics: MFA, patching, phishing and least privilege. Networking fundamentals: TCP / IP, DNS, DHCP and Wi-Fi. Clear written communication. You will write tickets, guides and records others rely on. A methodical approach. You follow process … Microsoft MD-102 or SC-900. A full UK driving licence. One funded professional certification, such as CompTIA Security+, Microsoft MD-102, ISO 27001 Foundation or equivalent. Structured mentoring and a clear route to a Security and IT Engineer role. Hands-on experience of a certified ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Gloucester (Allocated Parking) - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

environment Work with global teams to align standards and processes Ensure systems are secure, scalable, and compliant Support disaster recovery and business continuity planning / testing Provide technical guidance and leadership to team members Engage with vendors and manage third-party services. What Were Looking For Strong experience … growing global environment Benefits include 25 days annual leave, plus statutory days. 8% non-contributary Pension Life Assurance 3 x salary Income Protection / long term sickness cover Employee Assistance Programme Cycle to Work scheme ...

Compliance: Strong understanding of security principles in Defence IT systems, including Secure by Design. Familiarity with relevant standards (e.g., JSP 440, JSP 604, ISO 27001, NIST). Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting / adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet … design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good ...