1 to 25 of 200 ISO/IEC 27001 Jobs in London

quality and regulatory matters, you will drive innovation, compliance, and transformation across Qureight. Your expertise will ensure that our clinical trial activities, SaMD / AIaMD clearances, biomarker validations, and interactions with regulatory authorities are executed with precision, integrity, and a forward-thinking approach. You will … processes and systems, implementing best-in-class frameworks to enhance efficiency, compliance, and scalability. Ensure all clinical operations adhere to ICH-GCP guidelines (R2 / R3), applicable regulations, and internal quality standards. Lead the implementation, improvement and validation of new processes, procedures, and IT systems (e.g., eQMS, eTMF ...

from one of Arups other UK locations. Purpose of the role: The role plans and delivers risk-based internal audits against ISO / IEC 27001 requirements, internal information security policies, client commitments, legal and regulatory obligations, and good-practice security controls. The postholder … Plan, scope and conduct internal audits of the ISMS, security governance processes, risk management activities and control operation. Assess conformance with ISO / IEC 27001, internal policies, procedures, standards, contractual obligations and applicable regulatory expectations. Perform audits remotely and, where appropriate, onsite across ...

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering and business … meet evolving regulatory and compliance requirements. Key Responsibilities Lead the ongoing development and continual improvement of the Information Security Management System (ISMS) Drive ISO 27001 implementation, certification and ongoing compliance activities Conduct security risk assessments and manage enterprise risk registers Develop, review and maintain Information Security ...

data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO / IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO / IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO ...

Monitor compliance with policies and conduct regular reviews and updates of security policies and procedures. Complete security assessments for third party suppliers, assets (buildings / retail) and projects to ensure adherence to cyber security policies and standards. Deliver and maintain the supplier risk assessment process. Identify and assess information … endpoint protection, identity and access management, vulnerability management, security testing). PREFERRED SKILLS ISO 27001 or nist framework experience. Surecloud / grc / alternatives. Exposure to ai governance frameworks (e.g. Nist ai rmf) or developing ai use-case risk assessments. Exposure to property technology ...

enabled automations, threat modeling, design reviews. Build secure-by-design IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI / ML workloads. Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, evidence collection, and remediation of insecure configurations to scale with … review scripts, and IaC (Python, Terraform, AWS CDK, CloudFormation, Rego). Lead exploratory POCs on emerging technologies. Define the hypothesis, success criteria, and go / no-go gates. Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure Lead the development of technical content Communicate security risk ...

organizational requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part … Proven experience with security control testing and assurance activities Strong knowledge of one or more frameworks: ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 SOC 2 / ISAE 3402 CIS Critical Security Controls Strong analytical and problem-solving ...

third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges), and advise on onboarding security priorities. Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans. … Standards & Compliance (ISO 27001 & SOC 2) Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO / IEC 27001 and SOC 2 Type II. Develop and maintain information security policies, standards, and procedures aligned to these standards ...

benefits that matter to our people and enable us to be engaged both in and outside of work. We foster a culture where work / life balance is nurtured and encouraged, offering hybrid working, generous paid time off, paid holidays, volunteer time off, and Summer half-day Fridays. … resilient. ISO 27001 evidence remains current and surveillance-ready. Risks, vulnerabilities, recommendations and remediation actions are tracked and visible. Purview / SAR activity is repeatable, secure and auditable. Leadership has clear visibility of IT risk, operational maturity and open actions. Someone who exemplifies ...

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Scripting & Automation: Strong skills in Python or Bash for automation and tooling. 4-7 years of relevant experience, ideally including startup or high growth / high load environments. Proven track record of owning infrastructure end-to-end - from architecture through production support. Experience implementing reliability, security, and compliance measures ...

excellent opportunity for someone with 1 to 2 years' Information Security or GRC experience who is looking to develop their expertise across ISO 27001, governance, risk management, supplier assurance and compliance. Salary & Benefits £38,000 to £48,000 Hybrid working, 3 days per week … Central London office Excellent career development and training Exposure to ISO 27001 certification and audit activities Work alongside experienced Information Security professionals Strong benefits package What you'll be doing Support and enhance the Information Security Management System (ISMS) Assist with ISO 27001 ...

Director in security matters as required Operation of the ISMS and Data Protection processes Managing risk register, preparing for management review meetings Developing / maintaining controls and ensuring they are implemented across the organisation Refining our security KPIs and maintaining them Proposing actions from KPIs, events and incidents … Director to create, maintain and manage policies and ensure compliance Planning and participating in incident response exercises Managing major incidents and conducting post mortems / reviews Person Specification Essential Criteria The ability to learn new skills and technologies quickly Experience of risk management Working knowledge of security standards ...

Overview Join Chambers as our next Cyber Security Analyst / Lead, a pivotal role at the heart of our commitment to safeguarding information and maintaining trust. A hands-on role, you’ll lead the development and delivery of our information security programme, protecting our systems, data, and digital assets … information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection / prevention systems (IDS / IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

Support Assistant / AV Specialist / Unified Communications Analyst A fantastic opportunity has arisen for a AV Support Assistant / AV Specialist / Unified Communications Analyst to join our London based global law firm on permanent basis. AV Support Assistant / AV Specialist / … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / AV Specialist / Unified Communications Analyst In accordance with the Employment Agencies and Employment Businesses Regulations ...

control, data security controls and AI security standards. Up to date on cybersecurity threats, risk assessment, and frameworks / regulations (GDPR, PCI, NIST, ISO27001). Proven experience in requirements identification, solution testing, and vendor product selection. Demonstrated leadership and relationship management with internal and external partners, along with excellent … risk management and security requirements with tact and tenacity to senior executives Strategic orientation with ability to act tactically as required. Strong negotiator / facilitator and consensus builder with results-oriented commitment. Ability to interact at all levels of the organisation. Key responsibilities Partner with teams for development ...

teams in London, Singapore, and Australia Define the automation strategy and prioritise cross‐tower automation initiatives for maximum cost and quality impact Establish SLA / KPI frameworks, performance dashboards, and outcome‐based metrics for all towers Lead the offshore migration strategy: define which roles move offshore, governance model … Technical Skills & Expertise Broad and deep technical knowledge across infrastructure, cloud, networking, security, IAM, SRE, and data engineering Expert‐level understanding of IaC, CI / CD, DevSecOps, GitOps, and platform engineering principles Architecture frameworks: TOGAF, cloud‐native architecture patterns, microservices, event‐driven design Cloud platform expertise across AWS, Azure ...

financial services regulation, including FCA expectations for systems and controls, operational resilience, outsourcing, third-party risk, incident reporting, UK GDPR and client asset / data protection considerations Technology & Cloud Security: Broad knowledge of Microsoft security platforms, Azure security, endpoint protection, network security, email security, secure configuration, logging, monitoring … Lead Auditor, or equivalent Experience working with external auditors, penetration testers, MSSPs, cyber insurers, regulators, clients or supplier assurance teams would be beneficial Skills / Other relevant information Practical cyber leader who can move between executive discussion, technical detail and operational delivery without losing the thread Clear communicator ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed … ambitious professional looking to own our governance roadmap and influence senior stakeholders. What you'll be doing: Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance. Designing and executing comprehensive internal audit schedules to verify adherence to security ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

sales cycle.* Engage with CISOs, security architects, and IT leaders to discuss cybersecurity strategy, industry trends and modern security architectures.* Produce high-quality RFP / RFI responses, security questionnaires and technical documentation.* Collaborate with Product Management and Engineering to ensure successful solution design, implementation and customer success.* Build trusted … occasional evenings or weekends when required.**Required Qualifications*** 5+ years' experience in technical pre-sales or solution engineering across cybersecurity, networking, Cloud or SASE / SSE.* Strong knowledge of SASE, SSE, Zero Trust, SD-WAN, NGFW, NAC, ZTNA, CASB, SWG, DLP and cloud security.* Solid understanding of networking technologies ...