19 of 19 ISO/IEC 27001 Jobs in Gloucestershire

schemes, including: * Defence Cyber Certification (DCC) up to and including Level 2 (with support to Level 3 progression) * Cyber Essentials * ISO / IEC 27001 and supporting standards (e.g. ISO / IEC 27002, ISO / IEC … clear commitment to completing, a recognised audit chartership pathway • Lead auditor or assessor experience against frameworks such as ISO / IEC 27001, NIST, Cyber Essentials, and defence-oriented assurance schemes. • Ability to communicate clearly and authoritatively in writing and verbally, including presenting findings ...

such as the Cyber Assessment Framework and Cyber Essentials MOD security assurance approaches, including JSP 440, Secure by Design and CSMv4 ISO / IEC 27001 and NIST frameworks FSC, IPSA and List N ONR Security Assessment Principles (SyAPs) UK GDPR, the Data Protection … Certifications & Clearance We would expect you to hold intermediate-level certifications, or be working towards them. Examples include: BCS CISMP or ISO / IEC 27001 Lead Implementer or Lead Auditor. Associate Membership of CIISec and / or Associate Cyber Security Professional (ACSP ...

such as the Cyber Assessment Framework and Cyber Essentials • MOD security assurance approaches, including JSP 440, Secure by Design and CSMv4 • ISO / IEC 27001 and NIST frameworks • FSC, IPSA and List N • ONR Security Assessment Principles (SyAPs) • UK GDPR, the Data Protection … hold intermediate-level certifications and professional recognition, and to be working towards expert level. Examples include: • BCS CISMP or ISO / IEC 27001 Lead Implementer or Lead Auditor, and ideally holding, or actively studying for, ISC2 CISSP, ISACA CISM or CRISC. • Associate Membership ...

/ Third Party Risk Analyst Remote - occassional ad hoc travel to Cheltenham Dureaction - 6 months Day rate - £350 - 425 a day We are looking for a detail-driven GRC / Third-Party Risk Analyst to join our team on a full-time basis. In this role, you will … security questionnaires, vendor self-assessments, and risk artifacts. Evidence & Contract Review: Inspect security documentation (e.g., SOC 2 reports, policies, technical whitepapers) and review security / data protection clauses in third-party contracts. ISO 27001 Validation: Validate ISO 27001 certifications, Statements ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

Senior Cyber Security Consultant (Defence) Department: Consultancy Employment Type: Full Time Location: United Kingdom / Hybrid Reporting To: Matt Gibson Description At Actica, our Cyber Security Consultants play a critical role in supporting Defence, national security, government and critical national infrastructure organisations and protecting some … professional development through mentoring, structured career pathways and industry-recognised certifications including: CISSP CISMP CREST Certifications ISO 27001 Lead Implementer / Auditor SABSA TOGAF NIST Programmes UK Cyber Security Council Professional Registration Each consultant is supported by a dedicated Mentor and Performance & Development Manager ...

operating system updates and endpoint security controls. Troubleshoot hardware, operating system, encryption, connectivity and application issues, including FileVault, BitLocker and macOS Keychain. Support iOS / iPadOS devices and a small number of Linux endpoints. Work with Security colleagues to maintain device compliance and endpoint protection. 3. Google Workspace Administration … automated workflows using tools such as Slack, email and scripting to reduce manual effort. Maintain IT asset records and configuration information through Jira Assets / Insight or an equivalent CMDB. Build operational dashboards and reports to monitor service performance and identify improvement opportunities. 5. AV and Meeting Room Technology ...

performance and robust protection. INFORMATION SECURITY CONSULTANT ESSENTIAL SKILLS: Information assurance and risk management experience within government or regulated environments Strong knowledge of ISO 27001, NIST, and government security standards Experience reviewing AWS security controls including IAM, logging, and encryption Strong stakeholder engagement and communication skills … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Information Security, Risk Management, ISO 27001, NIST, AWS, Cloud Security, Stakeholder Engagement ...

Plus, and GDPR. Investigate security alerts, support incident response (containment, eradication and recovery), and conduct threat hunting. Analyse logs from firewalls, SIEM platforms, IDS / IPS, and endpoint security tools. Manage and support firewalls, VPNs, web proxies, and network access control solutions. Configure and maintain network segmentation, security zones … Experience of working in an environment where security is a key consideration, e.g. Government or other cyber security related field. Strong understanding of TCP / IP, routing, switching, DNS, DHCP, and network protocols. Experience administering enterprise firewalls. Experience with IDS / IPS, VPN technologies (IPSec, SSL VPN), Network ...

platform, network and security teams Desirable experience: Cohesity, NetBackup or Zerto Azure, Microsoft 365 and Hyper-V Operational Resilience and Business Continuity programmes ISO 22301, ISO 27001, NIST or CAF frameworks You'll play a key role in designing, building, testing and transitioning recovery ...

influence architectural decisions, improve security visibility and help shape the resilience of complex infrastructure environments. Responsibilities: Designing and reviewing secure network architectures across LAN / WAN, cloud environments and perimeter infrastructure. Strengthening network security through segmentation, access controls and secure connectivity. Developing centralised logging and telemetry capabilities, ensuring critical … network engineering, network security or infrastructure security, with some exposure to architectural design. You'll also have experience with: Core networking technologies including TCP / IP, BGP, OSPF, IPsec, TLS / SSL, DNS and VLAN segmentation. Network perimeter security, firewalls and secure connectivity. SIEM, centralised logging or telemetry ...

Lead Penetration Tester / CHECK Team Leader (CTL) Location: Bristol - Hybrid (2 days per week onsite) Salary: £80,000 - £100,000 per annum + Company Benefits Employment Type: Permanent The Opportunity We are looking for an experienced Lead Penetration Tester / CHECK Team Leader (CTL) to join … environments. Additional certifications such as CREST CCT, OSCP, OSEP, OSWE or CRTO. Cloud penetration testing experience across AWS, Azure or GCP. Operational Technology (OT / ICS) security testing experience. Experience developing penetration testing tools, automation or frameworks. Knowledge of NCSC CAF, NIST, ISO 27001 ...

architecture: AWS Well-Architected Framework, multi-account environments, landing zones, cloud governance, secure-by-design principles and disaster recovery. • AWS services: EC2, ECS and / or EKS, Lambda, API Gateway, S3, RDS, DynamoDB, EventBridge, SNS, SQS, IAM, CloudWatch, Systems Manager, Secrets Manager and Route 53. • Software and integration architecture … systems, enterprise integration patterns and Domain-Driven Design. • Architecture disciplines: Enterprise, solution, API and security architecture, alongside cloud migration strategy. • Engineering and DevOps: CI / CD pipelines, Git, GitHub, GitLab and / or Azure DevOps, Docker, Kubernetes, Terraform, Infrastructure as Code and automated testing. Leadership and delivery skills ...

Posted on: 09 / 11 / 2026 – Application Deadline: 23 / 11 / 2026 Are you ready tochart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking the capabilities … assurance activities. Essential Criteria: Experience providing proactive controls testing advice to Technology / IT teams. Familiarity with IT control frameworks and standards (e.g., ISO27001, NIST, COBIT). Understanding of S.29 Corporate Code of Governance Act (Material Controls). Desirable Criteria: Experience in the financial services sector. Awareness of automation ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills ...

experience with Microsoft 365 and Windows 11 administration. A good grasp of security basics: MFA, patching, phishing and least privilege. Networking fundamentals: TCP / IP, DNS, DHCP and Wi-Fi. Clear written communication. You will write tickets, guides and records others rely on. A methodical approach. You follow process … Microsoft MD-102 or SC-900. A full UK driving licence. One funded professional certification, such as CompTIA Security+, Microsoft MD-102, ISO 27001 Foundation or equivalent. Structured mentoring and a clear route to a Security and IT Engineer role. Hands-on experience of a certified ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Gloucester (Allocated Parking) - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach Selecting, understanding and adapting / adopting appropriate security control frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet … design reviews, security requirements management and pragmatic risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good ...

assurance activities. Essential Criteria: Experience providing proactive controls testing advice to Technology / IT teams. Familiarity with IT control frameworks and standards (e.g., ISO27001, NIST, COBIT). Understanding of S.29 Corporate Code of Governance Act (Material Controls). Desirable Criteria: Experience in the financial services sector. Awareness of automation ...