1 to 25 of 30 ISO/IEC 27001 Jobs in Gloucestershire

Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across the Marco Group … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

Title: Product Security Engineer Information AssuranceLocation: Ashton Vale, Bristol + Hybrid Working ArrangementsCompensation: Competitive Salary + BenefitsRole Type: Full time / PermanentRole ID: SF75386At Babcock, we’re working to create a safe and secure world, together. If you join us, you can play your part as a Product Security … similarly regulated sectors (desirable).Qualifications for the Product Security Engineer - Information AssuranceRelevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor.Security ClearanceThe successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must be Sole ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

collaboration tools. Desirable Experience working within NHS, health research, analytics or Secure Data Environment (SDE / TRE) programmes. Knowledge of SATRE, DSPT, ISO27001 or other relevant standards and assurance frameworks. Experience of cloud-based data engineering using Azure, AWS or equivalent platforms. Experience of infrastructure-as code, automation, DevOps … Care Board Address Bristol, Gloucester and hybrid working Floor 2, North Wing, 100 Temple Street Bristol Gloucester BS16AG United Kingdom Employer's website https: / / bnssg.icb.nhs.uk / ...

Senior Cyber Security Consultant (Defence) Department: Consultancy Employment Type: Full Time Location: United Kingdom / Hybrid Reporting To: Matt Gibson Description At Actica, our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some … professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer / Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager ...

information security strategy and continually strengthen our cyber security maturity Ensuring appropriate compliance with standards and requirements including GDPR, PCI DSS, Cyber Essentials / Cyber Essentials+ and ISO 27001 Overseeing cyber threat monitoring, detection and incident response, taking the lead on significant incidents Developing, maintaining … venues Pension scheme Free Parking Refer-a-Friend scheme Excellent Induction and training programme Perkbox Online benefits and discounts On-line Doctor support (appointments / prescriptions) A fun, supportive and inclusive work environment with loads of development opportunities People say you can’t choose your family, well we choose ...

Centre (ISAC). Advisory: Advise the Board and Senior Leadership Team on security implications of new contracts, office moves, or changes in company ownership / structure. Integrated Security Support Collaborate with the IT Manager (responsible for ISO 27001 / Cyber Essentials Plus) to ensure … Security "List X" environment. Regulatory Knowledge: Deep understanding of the Security Policy Framework (SPF), Cabinet Office security controls, and List X requirements (specifically FSA / iv). Vetting: Active eDV clearance Detail Oriented: Meticulous record-keeping skills for musters, visitor logs, and classified document registers. Desirable: DISA / ...

multiple stakeholders Familiarity with CRM systems such as Salesforce or equivalent sales and quoting tools Strong domain knowledge across cybersecurity services Understanding of OT / IT security, Continuous Assurance, Continuous Threat Exposure Management, Digital Identity and Access Management, and complex managed services Familiarity with GDPR, HIPAA and ISO … Systems ATS Optimization Keywords Hard Skills Pricing Strategy Contract Structure Margin Analysis ROI Models Opportunity Qualification Complex Deal Structuring Cybersecurity Services Knowledge OT / IT Security Understanding Continuous Assurance Digital Identity Management Soft Skills Collaboration Skills Mentoring Engagement With Senior Stakeholders Certifications & Qualifications GDPR Familiarity HIPAA Familiarity ISO ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our software is securely built. Requirements - Product Security Engineer - not exhaustive: A strong ...

cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR / XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively ...

cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR / XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively ...

industry quality representatives. Essential Experience Previous experience within Software Quality Assurance, Software Assurance or Quality Engineering environments. Qualified Lead Auditor in AS9100, ISO9001, ISO27001 or similar quality management systems. Experience planning, conducting and supporting audits. Knowledge of software development lifecycles and software quality assurance methodologies. Experience working within highly regulated … Experience conducting root cause analysis and driving process improvement initiatives. Desirable Experience Defence, Aerospace, Aviation, Maritime or other highly regulated industries. Knowledge of ISO 27001 and ISO 20000. Experience working within Agile development environments. Familiarity with software and systems engineering processes. Experience supporting supplier ...

industry quality representatives. Essential Experience Previous experience within Software Quality Assurance, Software Assurance or Quality Engineering environments. Qualified Lead Auditor in AS9100, ISO9001, ISO27001 or similar quality management systems. Experience planning, conducting and supporting audits. Knowledge of software development lifecycles and software quality assurance methodologies. Experience working within highly regulated … Experience conducting root cause analysis and driving process improvement initiatives. Desirable Experience Defence, Aerospace, Aviation, Maritime or other highly regulated industries. Knowledge of ISO 27001 and ISO 20000. Experience working within Agile development environments. Familiarity with software and systems engineering processes. Experience supporting supplier ...

risk analyses and security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS / IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security … Standards & Frameworks: Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand ...

Knowledge Experience working within information assurance, cyber security or information security environments. Familiarity with information security legislation, governance and compliance requirements. Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks. Experience developing policies, standards and procedures to support compliance and assurance … detail. Desirable Experience Knowledge of Secure by Design principles. Experience of MOD Supply Chain Assurance processes. Knowledge of supply chain assurance frameworks, including ISO 28001. Understanding of Commercial Off-The-Shelf (COTS) assurance activities. Degree-level qualification or equivalent relevant experience. Most importantly, we're looking for individuals ...

knowledge: Experience working within information assurance, cyber security or information security environments. Familiarity with information security legislation, governance and compliance requirements. Knowledge of ISO 27001, NIST 800-171, NCSC CAF v3 and CSM v4 frameworks. Experience developing policies, standards and procedures to support compliance and assurance … attention to detail. Knowledge of Secure by Design principles. Experience of MOD Supply Chain Assurance processes. Knowledge of supply chain assurance frameworks, including ISO 28001. Understanding of Commercial Off-The-Shelf (COTS) assurance activities. Most importantly, we're looking for individuals who are passionate about protecting information, people ...

equivalent demonstrable experience Strong communication, analytical and report-writing skills Desirable Experience Knowledge and application of Secure by Design principles Experience working with ISO 27001, NIST or similar security frameworks Understanding of security assurance and compliance activities Familiarity with classified or highly regulated environments Experience within ...

success of the company as a whole Ticket logging, escalating and regular feedback to the Service Desk Lead.Comply with the client’s ISO27001 and Cyber Essentials Plus information security policies and proceduresREQUIRED QUALIFICATIONS:A good understanding of IT and networksKnowledge of desktop, server and printer hardware and their components Knowledge ...

Basic informationLocationBristol, Edinburgh, London, ManchesterBusiness LineTechnology & TransformationJob TypePermanent / FTCDate published18-Sep-2026Req #25131Job descriptionConnect to your IndustryCyber security is a critical business issue. Organisations are navigating an increasingly complex threat and regulatory landscape while transforming their businesses, adopting new technologies and seeking to grow with confidence. The choices … day. And you’ll never stop growing, whatever your level.Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk / careersWPFULL SLTTECH BACYBER BADEFEN LOCBRI LOCEDI LOCMAN ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills #J ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Gloucester (Allocated Parking) - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

environment Work with global teams to align standards and processes Ensure systems are secure, scalable, and compliant Support disaster recovery and business continuity planning / testing Provide technical guidance and leadership to team members Engage with vendors and manage third-party services. What Were Looking For Strong experience … growing global environment Benefits include 25 days annual leave, plus statutory days. 8% non-contributary Pension Life Assurance 3 x salary Income Protection / long term sickness cover Employee Assistance Programme Cycle to Work scheme ...