1 to 25 of 29 ISO/IEC 27001 Jobs in Gloucestershire

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

Title: Product Security Engineer Information AssuranceLocation: Ashton Vale, Bristol + Hybrid Working ArrangementsCompensation: Competitive Salary + BenefitsRole Type: Full time / PermanentRole ID: SF75386At Babcock, we’re working to create a safe and secure world, together. If you join us, you can play your part as a Product Security … similarly regulated sectors (desirable).Qualifications for the Product Security Engineer - Information AssuranceRelevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor.Security ClearanceThe successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must be Sole ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.Strong understanding of relevant standards and frameworks (e.g. ISO / IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability.Ability … workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and / or to perform the essential functions of the role. We will do everything we can to support you.Our Application ProcessTo understand what to expect ...

business intelligence and decision-making.Digital Systems & CDE ManagementLead the configuration, administration, and optimisation of digital platforms including:Common Data Environments (CDEs)Microsoft 365 / SharePoint OnlineAutodesk and related BIM platformsGovern access controls, workflows, metadata schemas, and automation.Ensure systems support ISO 19650 workflows and digital delivery requirements.Team Leadership … Information Management, Data Science, or a related discipline.Experience aligned to senior-level frameworks (e.g., GKIM Level 6 or equivalent).Professional certifications desirable:Microsoft 365 / AzureISO 19650 PractitionerInformation Governance or Records Management certificationsSecurity RequirementsMust have or be able obtain SC Security Clearance.Additional InformationAt AECOM, we are committed to maintaining ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

engineering Strong understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree … this vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

Senior IT Infrastructure Engineer is sought by an Engineering company in the Cheltenham / Gloucester area. YOUR NEW JOB Among your responsibilities will be managing and optimizing the company's IT infrastructure, and ensuring that the infrastructure is secure, scalable, and aligned with business needs. You will also lead … ensuring they are completed on time, within scope, & budget and implement and maintain robust cybersecurity measures and ensure compliance with industry standards like ISO 27001, GDPR, and Cyber Essentials. Disaster Recovery and Business Continuity is also a vital; part of the role as you will ...

maintaining network segmentation, secure remote access, and monitoring controls for OT environmentsCollaborating with engineering teams to secure industrial protocols (e.g., OPC UA, Modbus TCP / IP, Ethernet / IP)Defining requirements for authentication, encryption, certificate management, and key infrastructure within subsea systemsProviding technical guidance and mentorship to junior … Bachelor’s or Master’s degree in Cyber Security, Computer Engineering, Electrical Engineering, or a related fieldSignificant experience in cyber security engineering within industrial / OT environments, preferably in oil & gas or energyStrong knowledge of industrial control systems (ICS), SCADA, and subsea production systems architecturesProven experience with cyber security ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

Supply & Trading GmbHTo start as soon as possible, full time / part time, permanentJoin our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate the AWS platform that teams across RWE Supply and Traiding GmbH (RWEST) rely on to build … bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI / CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating ...

location hosting environments supporting business-critical financial systems.Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management.Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned to business … / RTO and regulatory expectations.Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks.Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency.Manage third-party suppliers and strategic partners ...

Senior Software Engineer to join our existing Software Engineering team and support the development of our in-house Engineering Software tools, including Python / C++ wrappers and automation interfaces for industrial CAD, CAE and CAM platforms.What will you be doing? From day one, you will be developing novel approaches … house Computer Aided Manufacturing software. You will also build and maintain the integration layer between iCOMAT’s software tools and industrial CAD / CAE / CAM systems, automating parts of the composite design workflow and improving feedback between manufacturing and design disciplines.As well as writing software code ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

CISSP, CISM, CISA, or equivalent demonstrable experienceStrong communication, analytical and report-writing skillsDesirable ExperienceKnowledge and application of Secure by Design principlesExperience working with ISO 27001, NIST or similar security frameworksUnderstanding of security assurance and compliance activitiesFamiliarity with classified or highly regulated environmentsExperience within Defence, Government, Critical ...

solutions are built and operated in line with security standards. The role aligns to three key areas: supporting safe adoption, understanding attacker use / exploitation of AI, and applying AI to enhance security capability.Why Join us? If you think all banks are the same, you’re wrong. … interest in and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within ...

Description Senior Engineer - 3rd Line (IT Modern Workplace & Security) Stonehouse - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security and IT services … aligned controls, GDPR considerations)Endpoint & Device Management Architect and manage device estates using: Microsoft IntuneWindows AutopilotDefine secure baseline configurations for Windows 11 / macOS, IOS & AndroidImprove device security posture, patching and lifecycle managementAutomation & Engineering QualityUse PowerShell and automation to: Reduce manual effortImprove consistency and reliabilityContribute to documentation, runbooks ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Stonehouse - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security and IT services … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

environment Work with global teams to align standards and processes Ensure systems are secure, scalable, and compliant Support disaster recovery and business continuity planning / testing Provide technical guidance and leadership to team members Engage with vendors and manage third-party services. What Were Looking For Strong experience … growing global environment Benefits include 25 days annual leave, plus statutory days. 8% non-contributary Pension Life Assurance 3 x salary Income Protection / long term sickness cover Employee Assistance Programme Cycle to Work scheme ...

literate (including fluency in Microsoft Office tools)Minimum of 2-3 years of experience in security vulnerability, risk, audit & complianceUnderstand relevant NIST frameworks and ISO27001 standards and how to apply in practiceKnowledge of MITRE ATT&CKThe ability to work in accordance with Secure by Design approachesPrevious experience communicating effectively with ...

Basic information Location Bristol, Edinburgh, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24166 Job description Connect to your IndustryCyber security is critical to every organisation. We are shaping strategies and transforming the management of cyber risk … maturity, security architecture, cyber transformation and regulatory compliance for cyber.Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2 or equivalent.Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.Desire ...

Role: Infrastructure Systems Administrator Location: Cheltenham - 3 days / week on-site Salary: £65,000 - £80,000 + benefits Infrastructure Systems Administrator needed to join our client, an established defence engineering firm based in Cheltenham. We're looking for an Infrastructure Systems Administrator to play a critical role … projects and / or programmes Contribute to the development of new principles & concepts Follow, maintain and disseminate approved procedures, including adherence to ISO20000 & ISO27001 standards Collaborate with vendors for application support, upgrades, and issue resolution. Troubleshoot and resolve complex issues related to deployment, infrastructure, and system performance. What experience ...

system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting / adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet … design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good ...

Management: Undertaking risk and maturity assessments, providing strategic guidance on how to improve cybersecurity posture using a risk-based approach with articulation of mitigations / controls and their respective impact on reducing risk. Communication: Utilising strong written and verbal communication skills to support presentations, reports, and broader communications … contributing towards the company strategy and helping to shape our future. Our Values: Representing us and our core values: transparency, fairness and daring. Skills / Knowledge You have relevant industry experience undertaking strategic, cyber security projects. You may have a degree or qualification in cybersecurity, IT or a related ...