ISO/IEC 27001 Jobs in London

1 to 25 of 293 ISO/IEC 27001 Jobs in London

Senior Cyber Security (GRC) Analyst

London, United Kingdom
UK Power Networks
. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote. Close Date: 25 / 03 / 2025 We also provide the following additional benefits: Reservist Leave - Additional 18 days full pay and 22 unpaid. Personal Pension Plan … Information Security Management System Support: Operate and maintain the information security management system and artefacts, in compliance with ISO 27001 / 27002 including the governance forum agenda and minutes. Policies and Standards: Establish GRC policies, standards and procedures to monitor UKPN information security controls, exceptions … standards. We are looking for a detailed knowledge and practical expertise in at least 3 of the following specialist areas: Specific Industry Standards. IS / IT Operational Controls and Governance. Business Continuity Planning and Disaster Recovery. Supply Chain and 3rd Party Risk Management. Problem Solving: The role must have More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Technical Project Manager

london, south east england, United Kingdom
Hybrid / WFH Options
Natcap
implement security procedures and policies Support audit readiness and ISO 27001 compliance What You Bring: Proven track record delivering infrastructure / security projects in fast-paced environments Experience with cloud platforms (AWS, GCP) and tools like Jira Knowledge of ISO 27001 … and / or SOC 2 certification processes Excellent communication skills, including reporting to senior stakeholders A collaborative, problem-solving mindset Nice to Have: Direct experience supporting ISO 27001 certification Familiarity with internal IT systems and Google Workspace Policy writing or compliance documentation experience What We … and trust in how you deliver Flexible working and hybrid setup (London-based) Potential for contract extension or longer-term opportunity 🔗 Apply now : https: / / careers.natcapresearch.com / jobs / 5796067-technical-project-manager-contract More ❯
Posted:

GRC Information Security Risk Manager

London, United Kingdom
Alvarez & Marsal Deutschland GmbH
the Global Security Office Information Security Risk Register, its supporting processes, governance and reporting requirements. The successful candidate requires a strong understanding of ISO 27001 security controls, exposure to the OnSpring GRC Tool and can effectively assess and communicate technical security requirements to teams across the … and other business leadership teams to drive a culture of risk awareness. Ensure that all security risks align with regulatory requirements such as ISO 27001, NIST, GDPR, and other international security frameworks. Provide oversight and work closely with risk owners to manage the development and implementation … insights to executive leadership and board members. Relevant senior security certifications (e.g., CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer / Auditor) are highly desirable. More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

InfoSec Third Party Assurance Specialist

London, United Kingdom
Sportradar AG
reports, and evaluate technical and non-technical controls. Maintain and enhance TPRM documentation, including policies, workflows, and assessment templates aligned with ISO / IEC 27001, NIST, and other relevant standards. Track and manage third-party risks through to remediation, working directly with vendors … functional risk assessments. Support the wider GRC team with reporting, metrics, and stakeholder communications. YOUR PROFILE: 3-5 years of experience in third-party / vendor risk management, preferably within an information security, risk, or compliance team. Strong working knowledge of information security standards and frameworks such as ISO / IEC 27001, SOC 2, NIST CSF, or SIG. Familiarity with technology systems, infrastructure, and related security controls. Experience conducting vendor risk assessments, including reviewing SOC 2 reports and security questionnaires. Familiarity with GRC platforms and tools used for third-party or enterprise More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Chief Information Officer (CIO)

London, United Kingdom
Hybrid / WFH Options
Quinyx
and direct the establishment and implementation of policies and procedures. The CISO is also usually responsible for information-related compliance (e.g. ISO / IEC 27001 and SOC 2 certification). What you'll be doing Develop, implement and monitor a strategic, comprehensive enterprise … a combination of risk management, information security and IT jobs. Knowledge of common regulatory and information security management frameworks, such as ISO / IEC 27001, NIST, SOC 2 and GDPR. Excellent written and verbal communication skills and high level of personal integrity. Innovative More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Cybersecurity Solutions Engineer

London, United Kingdom
Expleo UK LTD
cybersecurity or infrastructure security (CompTIA, ISACA, ISC2, GIAC, Microsoft, CREST, Cisco Security, or equivalent). Certifications in security governance and frameworks: ISO / IEC 27001, IEC 62443, NIST CSF, CAF, or CIS Controls. Additional vendor or platform-specific certifications (AWS, Azure … are advantageous Essential skills Strong understanding of core cybersecurity principles, including confidentiality, integrity, availability, and risk management. Practical experience implementing security controls across IT / OT infrastructure. Proficiency in system hardening techniques. Ability to conduct technical risk assessments, identify control gaps, and propose actionable remediation plans. Familiarity with enterprise … with the ability to clearly explain technical risks and solutions to technical and non-technical stakeholders. Desired skills Familiarity with UK regulatory frameworks (NIS / NIS2, Ofgem CAF, ECAF, GDPR / DPA18, ISO 27001, or Cyber Essentials Plus). Understanding secure architecture principles, including More ❯
Employment Type: Permanent
Posted:

OT Cyber Security Consultant

london, south east england, United Kingdom
Integrity360
to go above and beyond to ensure their needs are met. Listed multiple times on Gartner Market Guides for Managed Security Services. Job Role / Responsibilities Assisting our clients in securing their information systems (defining target objectives, developing action plans, implementing actions (organizational or technical), coordination, monitoring and managing … ISO 27005, EBIOS RM). Even better if you’re certified! You're curious and have already read cybersecurity frameworks and methodologies (ISO27001 / 2, IEC 62443, ANSSI, NIS, NIST…) Soft Skills Required: Mindset is key: you’re motivated, dynamic, and autonomous You enjoy teamwork … English (you can understand conversations, lead meetings, and write reports…) Other Requirements: Master’s degree or equivalent Certifications such as IEC 62443, ISO27001 / 2 / 5, EBIOS EM, ISC2 are a plus! Driver's license (B), useful for some travel Integrity360 Employee Benefits (UK) At More ❯
Posted:

Director, Data Security

London, United Kingdom
CLS Group
Owners, developers, and technical teams on options to mitigate risk. The candidate must have excellent verbal, written, analytical and interpersonal communication skills. Essential Functions / Major Duties and Responsibilities Strategic Provide strategic direction specific to data security management. Build and maintain a robust data security program while aligning closely … security strategy in its annual iterations. Provide strong knowledge of building security into business expectations for the utilization and hosting of critical CLS data / information assets. Work with the Security Architects to build security into infrastructure and architecture designs and guide the implementation with the Operations team. Provide … improve the overall controls around data security. Keep informed of new and updated industry frameworks and regulations: GDPR, ISO 27001 / 2, SANS Top 20 Critical Security Controls, NIST CSF, SP 800-53, PFMI, CPMI ISOCO and FFIEC handbook. Keep informed of new and emerging More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Cyber Risk Advisory Consultant

london, south east england, United Kingdom
Hybrid / WFH Options
55 Exec Search
posture. You’ll work with industry-leading frameworks like Cyber Essentials (CE), Cyber Essentials Plus (CE+), NIST 2, ISO 27001 / 223001, DORA , and more. This is the perfect opportunity if you’re looking for more autonomy, rapid career growth, and a dynamic environment —far … and principal consultants as needed. Lead and contribute to diverse security projects, including third-party risk management, mergers and acquisitions, security policy development, ISO 27001 implementation, audits and compliance (NIS 2, DORA), risk assessments, remediation programs, and more. Lead, manage, and deliver full cyber security engagements … Bring as a Senior Cyber Security Consultant: 2+ years of information security consulting Experience of Governance, Risk, and Compliance (GRC) frameworks such as ISO 27001, ISO 223001, NIST, DORA and other regulatory standards. Experience conducting Cyber Essentials and Cyber Essentials Plus assessments and guiding More ❯
Posted:

Senior Telemetry Engineer

London, United Kingdom
Hybrid / WFH Options
Zayo Group Holdings, Inc
network telemetry technologies. Providing support to members of the wider Operations team as required. Support & maintain the company objectives of ISO 9001 / 18001 / 27001 accreditation. Key Skills and Experience: 3 - 5 years of experience on a service provider network in Operations, Engineering … operational experience with carrier-class routers, console servers & switches, (experience with Juniper and Cisco required). Excellent knowledge of L2 & L3 routing protocols, (IPv4+IPv6 / BGP / ISIS / VPLS / IP VPN / MPLS / QinQ / ELINE) and good understanding of … culture. Our employees are driven and committed, with many options to connect and engage in our inclusive environment. Zayo Europe is an Equal Opportunity / Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to age, race, colour, religion, sex, sexual orientation, gender identity, national More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Cybersecurity (Infrastructure) Engineer

London, United Kingdom
Expleo Group
protect critical infrastructure and improve their security posture in line with industry and regulatory expectations. This delivery-focused role centres on infrastructure security, OT / IT boundary protection, and implementation of technical controls across regulated environments. You will contribute to assurance activities, support security design reviews, and assist in … cloud, on-premises, and hybrid infrastructure, including servers, endpoints, and network layers. Support the design, implementation, and validation of security controls at the OT / IT boundary, addressing segmentation, access control, logging, and monitoring. Contribute to security architecture and design reviews, providing input to ensure compliance with relevant regulations. … cybersecurity or infrastructure security (CompTIA, ISACA, ISC2, GIAC, Microsoft, CREST, Cisco Security, or equivalent). Certifications in security governance and frameworks: ISO / IEC 27001, NIST CSF, CAF, or CIS Controls. Additional vendor or platform-specific certifications (AWS, Azure, Microsoft, GCP, Palo Alto More ❯
Employment Type: Permanent
Posted:

Lead Devops

london, south east england, United Kingdom
Tata Consultancy Services
if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com or call TCS London Office number 02031552100 / +44 204 520 2575 with the subject line: “Application Support Request”. Role: Lead DevOps Job Type: Permanent Location: London / Newcastle Ready … and systems, including IAM policy design, access management, encryption standards, and compliance audits Design, implement, and manage various DevOps tools and technologies, including CI / CD platforms (Jenkins, GitLab CI), configuration management tools (Ansible, Puppet), and containerization technologies (Docker, ECS, Kubernetes) Monitor system performance, identify bottlenecks, and implement optimizations … performance metrics, and provide actionable recommendations Document and refine DevOps practices, maintaining version control, release management workflows, and configuration documentation Your Profile Essential skills / knowledge / experience: AWS Security & Compliance Expertise: Deep understanding of AWS Security, Identity, and Compliance services, including IAM, AWS Organizations, SCPs, Secrets Manager More ❯
Posted:

Group Process & Assurance Manager (Fixed-term contract)

London, United Kingdom
Hybrid / WFH Options
Eutelsat Communications SA
Select how often (in days) to receive an alert: Group Process & Assurance Manager (Fixed-term contract) Country / Region: GB Connect with Eutelsat Group Be part of a new era in communications, transforming connectivity with Eutelsat Group - the world's first GEO-LEO integrated global satellite operator. As a … and crush deadlines. What You'll Do: Reporting to the Head of Group Quality, lead and manage the cross-functional PMO portfolio of programs / projects. As a program manager, deploy the necessary methodology expertise to successful execution. Manage and support key cross-organization programs with ISO … strategy to support Quality, process assurance, and continuous improvement. Manage and build relationships with key functional stakeholders. Lead on the preparation of and execution / governance scorecards and reporting. Develop PMO support to key programs with respect to reporting and data analysis. Support executive leadership in the implementation of More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Security Consultant (GRC)

London, United Kingdom
Applicable Limited
and Procedure Management: directs, develops or maintains organisational cyber and information security policies, standards and processes, using recognised standards (e.g. the ISO / IEC 27000 family, NIST CSF) where appropriate. Applies recognised cyber and information security standards and controls within an organisation, programme, project or … or (relevant) compliance roles. Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS / NIS2, DORA, UK CNI / OT / IIOT compliance. Hands-on experience building credibility with external stakeholders, including More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

OT Manager, Cybersecurity Global

london, south east england, United Kingdom
Hybrid / WFH Options
Vantage Data Centers
be part of the leadership team responsible for protecting a rapidly expanding global enterprise. The OT Manager, Cybersecurity, will audit the Industrial Control System / Operational Technology (ICS / OT) environment and perform risk / vulnerability assessments leading to the development of an enterprise strategy / design plan. The OT Manager, Cybersecurity, will lead the team on implementation (hands-on configuration) of the enterprise ICS / OT systems Additional responsibilities include research, classification, and root cause analysis of security events that occur within the environment. The ideal candidate will have security industry knowledge that … performing security assessments in an OT environment. Excellent leadership skills as this is a people manager role. Strong understanding of cybersecurity frameworks for ICS / OT environments Strong understanding of OT network communication protocols and industrial networking topologies. Familiarity with NIST (National Institute of Standards and Technology) Special Publication More ❯
Posted:

GRC Analyst

London, United Kingdom
Hybrid / WFH Options
Miro Group
email, calls, support tickets) Contextual Understanding: Understand the customer's business context and how their compliance questions relate to their use of our products / services or their broader GRC strategy Information Dissemination: Clearly articulate complex compliance concepts to both technical and non-technical customer stakeholders Relationship Building: Build … assessment process, and Annex A controls accurately Strong familiarity and understanding of ISO 42001 (Artificial Intelligence Management Systems) and its core principles / requirements. Must be able to discuss its objectives and key components Exceptional communication skills (written and verbal), with a proven ability to explain complex … a sense of belonging for future and current Mironeers around the world, and foster an environment where everyone can collaborate and embrace differences. Resume / CV Resume / CV Attach File types: pdf, doc, docx, txt, rtf File size: max 2MB Cover Letter Attach File types: pdf, doc More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Information Security Analyst

London, United Kingdom
Hybrid / WFH Options
Morgan Law
for the better. The role is hybrid and will require 2 days a week on site in London. As the Group Information Security Analyst / Officer, you will: Lead and maintain security accreditations: Successfully manage Cyber Essentials, Cyber Essentials Plus, and ISO 27001 certifications. Deliver … comprehensive training: Develop and deliver engaging training on ISO 27001, cybersecurity awareness, AI, and data protection. Stay ahead of threats: Continuously monitor and adapt to emerging cybersecurity threats, ensuring robust governance and safeguarding measures. Manage business continuity: Oversee Business Continuity Planning (BCP) and Disaster Recovery Plans. … and maintain a strong security posture. ISMS management: Coordinate the improvement and maintenance of the Information Security Management System (ISMS) in line with ISO 27001 and Cyber Essentials. Experience Required: Information Security Management: Extensive experience in implementing and maintaining ISMS and achieving ISO 27001 More ❯
Employment Type: Permanent
Salary: £50000/annum
Posted:

Cyber Vulnerability Management Analyst

london, south east england, United Kingdom
Hybrid / WFH Options
FirstBank UK Limited
recognised, top-tier bank who provide world-class services to various institutions and individuals. Offering a comprehensive range of retail and corporate financial services / products, this thriving business with over 10 million active customers in over 700 business locations is the oldest African bank in the UK. Due … holder will work very closely with all third-party vendors involved in the remediation process. The job holder will also prepare the necessary MI / Dashboard reports for the relevant stakeholders and alleviate the workload of the IT Service desk function when required. The primary responsibilities of the role … CMSS) Incident / Response & Forensic Management Skills IT Technical Admin Support - Azure, Oracle Cloud Infrastructure (OCI Cloud) Microsoft Windows Support & administration, CE+, ISO27001 Email and Information Security Filtering / Monitoring Solutions, Egress Hands on experience on Linux and Mac Administration Support Good understanding of Windows and Linux More ❯
Posted:

Cybersecurity Engineer

London, United Kingdom
BRG
with Security, Networking, and Systems teams to ensure secure and efficient connectivity across the organization. Maintain and troubleshoot core security systems including firewalls, IDS / IPS, VPN gateways, vulnerability scanners, SIEM platforms, and security monitoring tools. Diagnose and resolve system and network issues, working across teams to remediate security … Engineering, with a focus on enterprise-scale infrastructure. In-depth expertise with Microsoft security platforms including Azure AD Conditional Access, Microsoft Defender for Endpoint / Cloud, Microsoft Sentinel, and Microsoft Purview. Strong understanding of Zero Trust principles and cloud security best practices across hybrid environments. Hands-on experience designing … 3+ years of experience with secure deployment, management, and migration of cloud and on-prem platforms in a hybrid network model. Proficient in LAN / WAN routing, switching, VLANs, and core protocols such as DNS, DHCP, HTTP / S, SNMP, NetFlow, and TACACS. Hands-on experience with Palo More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Head of Information Security

London, United Kingdom
P2P
is critical in shaping and enforcing security policies, driving enterprise-wide risk management, and ensuring ongoing compliance with frameworks such as SOC 2, ISO 27001, and other regulatory requirements . The ideal candidate is not only a technical expert but also a business-savvy leader who … Develop, implement, and maintain the company's information security governance framework. Lead the strategy and execution for security compliance initiatives including SOC 2 , ISO 27001 , NIST , and other relevant standards. Oversee and manage the enterprise risk management program , including identification, assessment, and mitigation of information security … SOC 2, ISO 27001, HIPAA, NIST, GDPR). Proven experience managing or leading successful SOC 2 audits and other regulatory / compliance initiatives. Confident engaging with auditors and enterprise clients; experience representing security to financial institutions. Strong understanding of enterprise risk management methodologies. Technical background More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Information Security (InfoSec) Manager

London, United Kingdom
Prevail
team at Prevail Partners. The ideal candidate will bring deep technical knowledge of information security risks, controls and frameworks - with practical experience managing ISO 27001-compliant systems and embedding secure practices across dynamic operational environments. You will work closely with the Counter Intelligence and Security Lead … sensitive technology solutions. Key Responsibilities Security Strategy & Governance Lead the continued development of Prevail's Information Security Management System (ISMS) in alignment with ISO 27001, driving forward maturity and integration with wider business goals. Serve as the lead advisor on information security, ensuring risk-based decision … project work. Support leadership in meeting regulatory, contractual, and reputational requirements in relation to information security. Qualifications Demonstrable experience leading or managing an ISO 27001-aligned ISMS, with a track record of successful implementation or certification. Strong understanding of information security risk management, governance, and technical More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Developer

london, south east england, United Kingdom
Slaughter and May
ROLE OVERVIEW / / We’re looking for a Developer to join the Development team within our Technology department. If you thrive on solving complex challenges, enjoy learning modern technologies, and value building secure, maintainable solutions, this role is for you. This is an exciting opportunity to help … law firm that's great but not essential. We're most interested in your skills, mindset, and ability to deliver quality outcomes. KEY RESPONSIBILITIES / / The key responsibilities of this role are set out below and there may be others which are not listed. You may be … solutions that support business processes and reporting needs. Conduct code reviews on other people's solutions to ensure quality, security, and maintainability. CANDIDATE PROFILE / / Essential Skills and Knowledge Proven experience developing with Azure Integration Services, including Logic Apps, Service Bus, Function Apps, API Management, and Data More ❯
Posted:

IT & Information Security Manager

London, United Kingdom
Hybrid / WFH Options
Zaizi Ltd
our continued growth, we are seeking an experienced Information Security Manager. In this role, you will be responsible for ensuring our ongoing compliance with ISO27001 and Cyber Essentials Plus, including the management of quarterly external audits and the facilitation of Integrated Management System (IMS) meetings. You will also oversee our … functionally across multiple teams. You can influence people of all grades to deliver the right outcomes. Security Management. IT management (ITILv4). Continuous Monitoring / Threat Alerts. Managing security incidents and non-conformances. Experience with Data protection duties and GDPR. Desirable (CISM) certification or CISSP desirable to have. We … Vitality medical insurance. Workplace Pension 5% employer contribution. Group Life Assurance. Cycle scheme. 5 days a year for approved Training. WFH equipment allowance. Buy / Sell Holiday. 2 days paid volunteering days. Other benefits: Flexible working. Work on exciting projects - make a difference. Empowered to make decisions. Encouraged to More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Consultant- Cyber Security Consulting & Advisory

London, United Kingdom
Infosys Limited
ITL UK Requisition ID: 132349BR Role - Consultant (JL5) Technology - Cyber Security Consulting & Advisory Location - London (UK) Business Unit - Cyber Security, Cyber C&A, IOT / OT Team Compensation - Competitive (including bonus) Job Description Today, the corporate landscape is dynamic and the world ahead is full of possibilities! None of … different phases of the Cyber security consulting lifecycle. You will be intensely involved in being a highly skilled Cybersecurity Engineer with expertise in OT / IoT security to join our team. The successful candidate will play a critical role in securing Operational Technology (OT) environments, including Industrial Control Systems … 27001, and NIS2 frameworks. Vulnerability & Risk Management: Perform vulnerability analysis and penetration testing, and implement risk mitigation strategies tailored for ICS / SCADA and IoT environments. IT-OT Integration: Work closely with IT, engineering, and operational teams to integrate OT security solutions seamlessly with existing enterprise More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Information Security Analyst - £70,000 - REMOTE

london, south east england, United Kingdom
Hybrid / WFH Options
Tenth Revolution Group
as policies, standards, and procedures. Report on security performance metrics to senior leadership on a monthly basis. Ensure compliance with key frameworks including ISO 27001:2022, ISO 27701:2019, and SOC 2 across multiple international offices. Lead internal audits and manage responses to external … secure behaviours through awareness training and internal communication. Essential: Hands-on experience with ISO 27001, ISO 27701 and / or SOC 2 standards. Strong grasp of global data protection laws, particularly GDPR and CCPA. Able to work independently and coordinate with a wide More ❯
Posted:
ISO/IEC 27001
London
10th Percentile
£46,850
25th Percentile
£60,500
Median
£75,000
75th Percentile
£100,625
90th Percentile
£120,000