1 to 25 of 31 ISO/IEC 27001 Jobs in Gloucestershire

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

business operations.You will be responsible for maintaining and developing our Integrated Management System (IMS), ensuring continued compliance with internationally recognised standards including ISO 9001, ISO 20000-1, ISO 27001 and ISO 14001. You will also play a key role … working relationships across all levels of an organisation.Strong analytical, problem-solving and organisational skills, with the ability to manage multiple priorities effectively.DesirableAuditor qualification and / or working knowledge of one or more of the following standards: ISO 27001, ISO 14001, ISO ...

business operations. You will be responsible for maintaining and developing our Integrated Management System (IMS), ensuring continued compliance with internationally recognised standards including ISO 9001, ISO 20000-1, ISO 27001 and ISO 14001. You will also play a key role … across all levels of an organisation. Strong analytical, problem-solving and organisational skills, with the ability to manage multiple priorities effectively. DesirableAuditor qualification and / or working knowledge of one or more of the following standards: ISO 27001, ISO 14001, ISO ...

Aberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Essential Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

party penetration testing and remediation. Lead blameless post-mortems after significant incidents. Escalation & On-Call Management: Act as a senior escalation point for platform / application issues. Manage (and participate in / provide cover for) the out-of-hours on-call rotation for P1 / P2 incidents … into the departmental risk register and coordinate evidence, controls, and documentation required for regulatory and customer audits (e.g., ISO 27001 / ISO 9001). FinOps & Stakeholder Collaboration: Act as the primary point of contact for internal / external queries. Collaborate with FinOps ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

Basic informationLocationAberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Manchester, Milton Keynes, Newcastle, Reading, St AlbansBusiness LineEnabling FunctionsJob TypePermanent / FTCDate published17-Jun-2026Req #23719Job descriptionConnect to your IndustryDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. … security controls.Maintain and update the control testing framework, including control-to-standard mappings, technical test queries, policy configuration checks, and clearly defined pass / fail criteria.Perform control testing across identity, endpoint, network, and infrastructure-based controls, including evidence collection, validation, and documentation.Apply risk management experience to understand how tested ...

Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.Strong understanding of relevant standards and frameworks (e.g. ISO / IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability.Ability … workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and / or to perform the essential functions of the role. We will do everything we can to support you.Our Application ProcessTo understand what to expect ...

business intelligence and decision-making.Digital Systems & CDE ManagementLead the configuration, administration, and optimisation of digital platforms including:Common Data Environments (CDEs)Microsoft 365 / SharePoint OnlineAutodesk and related BIM platformsGovern access controls, workflows, metadata schemas, and automation.Ensure systems support ISO 19650 workflows and digital delivery requirements.Team Leadership … Information Management, Data Science, or a related discipline.Experience aligned to senior-level frameworks (e.g., GKIM Level 6 or equivalent).Professional certifications desirable:Microsoft 365 / AzureISO 19650 PractitionerInformation Governance or Records Management certificationsSecurity RequirementsMust have or be able obtain SC Security Clearance.Additional InformationAt AECOM, we are committed to maintaining ...

engineering Strong understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree … this vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

Senior IT Infrastructure Engineer is sought by an Engineering company in the Cheltenham / Gloucester area. YOUR NEW JOB Among your responsibilities will be managing and optimizing the company's IT infrastructure, and ensuring that the infrastructure is secure, scalable, and aligned with business needs. You will also lead … ensuring they are completed on time, within scope, & budget and implement and maintain robust cybersecurity measures and ensure compliance with industry standards like ISO 27001, GDPR, and Cyber Essentials. Disaster Recovery and Business Continuity is also a vital; part of the role as you will ...

maintaining network segmentation, secure remote access, and monitoring controls for OT environmentsCollaborating with engineering teams to secure industrial protocols (e.g., OPC UA, Modbus TCP / IP, Ethernet / IP)Defining requirements for authentication, encryption, certificate management, and key infrastructure within subsea systemsProviding technical guidance and mentorship to junior … Bachelor’s or Master’s degree in Cyber Security, Computer Engineering, Electrical Engineering, or a related fieldSignificant experience in cyber security engineering within industrial / OT environments, preferably in oil & gas or energyStrong knowledge of industrial control systems (ICS), SCADA, and subsea production systems architecturesProven experience with cyber security ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

location hosting environments supporting business-critical financial systems.Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management.Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned to business … / RTO and regulatory expectations.Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks.Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency.Manage third-party suppliers and strategic partners ...

Senior Software Engineer to join our existing Software Engineering team and support the development of our in-house Engineering Software tools, including Python / C++ wrappers and automation interfaces for industrial CAD, CAE and CAM platforms.What will you be doing? From day one, you will be developing novel approaches … house Computer Aided Manufacturing software. You will also build and maintain the integration layer between iCOMAT’s software tools and industrial CAD / CAE / CAM systems, automating parts of the composite design workflow and improving feedback between manufacturing and design disciplines.As well as writing software code ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

recruitment process. No recruitment agency working with Turner & Townsend will ask candidates to pay a fee at any time. Any unsolicited resumes / CVs submitted through our website or to Turner & Townsend personal e-mail accounts, are considered property of Turner & Townsend and are not subject to payment … agency fees. In order to be an authorised Recruitment Agency / Search Firm for Turner & Townsend, there must be a formal written agreement in place and the agency must be invited, by the Recruitment Team, to submit candidates for review. SummaryType: Full-timeFunction: Information TechnologyExperience level: Mid-Senior LevelIndustry ...

solutions are built and operated in line with security standards. The role aligns to three key areas: supporting safe adoption, understanding attacker use / exploitation of AI, and applying AI to enhance security capability.Why Join us? If you think all banks are the same, you’re wrong. … interest in and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Stonehouse - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security and IT services … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

environment Work with global teams to align standards and processes Ensure systems are secure, scalable, and compliant Support disaster recovery and business continuity planning / testing Provide technical guidance and leadership to team members Engage with vendors and manage third-party services. What Were Looking For Strong experience … growing global environment Benefits include 25 days annual leave, plus statutory days. 8% non-contributary Pension Life Assurance 3 x salary Income Protection / long term sickness cover Employee Assistance Programme Cycle to Work scheme ...

literate (including fluency in Microsoft Office tools)Minimum of 2-3 years of experience in security vulnerability, risk, audit & complianceUnderstand relevant NIST frameworks and ISO27001 standards and how to apply in practiceKnowledge of MITRE ATT&CKThe ability to work in accordance with Secure by Design approachesPrevious experience communicating effectively with ...

Basic information Location Bristol, London Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24165 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk, and we need … maturity, security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire to work with ...

Role: Infrastructure Systems Administrator Location: Cheltenham - 3 days / week on-site Salary: £65,000 - £80,000 + benefits Infrastructure Systems Administrator needed to join our client, an established defence engineering firm based in Cheltenham. We're looking for an Infrastructure Systems Administrator to play a critical role … projects and / or programmes Contribute to the development of new principles & concepts Follow, maintain and disseminate approved procedures, including adherence to ISO20000 & ISO27001 standards Collaborate with vendors for application support, upgrades, and issue resolution. Troubleshoot and resolve complex issues related to deployment, infrastructure, and system performance. What experience ...

system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting / adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet … design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good ...