101 to 125 of 206 ISO/IEC 27001 Jobs in London

model. Leading the ongoing development of Moneybox’s Information Security Programme, using NIST CSF as the practical risk‐management framework while aligning with ISO 27001 for governance, control maturity and assurance. Reducing real security risk across Moneybox’s technology estate, people processes, suppliers and products. Building ...

creates trusted insight into effort, progress, and capacity (without bureaucracy). Provide technical leadership and escalation support: guide architecture and implementation choices, review designs / code when needed, and unblock high‐severity issues in production environments. Create scalable field engineering practices: build reusable patterns, playbooks, and standards that improve … reliability, maintainability, and speed across deployments. Shape the product via field learnings: translate recurring customer needs into clear productization proposals and partner with Product / Core Engineering to reduce one‐offs over time. Partner with customer engineering and enterprise stakeholders: collaborate directly with customer teams (architecture, security, platform ...

architecture Identity & Access Management (IAM), Identity Federation and IDaaS PKI and cryptography Application Security and Secure Software Development OWASP and secure coding practices CI / CD security and security automation Cloud Security (IaaS, PaaS and SaaS) Network Security, Firewalls and Endpoint Security Infrastructure Security and Infrastructure as Code Data … beneficial: Microsoft Azure or other public cloud platforms Identity Management solutions Web Application Firewalls VMware or virtualisation technologies Software Defined Networking Storage technologies (SAN / NAS) Databases and Middleware Collaboration platforms and modern workplace technologies Desirable Certifications CISSP GIAC SABSA ISO 27001 Lead Auditor ...

Work with delivery teams to ensure security is embedded throughout Experience Required This role is aligned to a technically credible and delivery focused consultant / cyber risk practioner; with an emphasis on real world risk assessment, not theory. Success will come from strong judgement, hands-on experience … impact work in high trust environments Direct engagement with senior client stakeholders Opportunity to shape risk led security decisions Ongoing professional development Flexible working / Remote first Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality are core values to us. ...

hybrid environments. Understanding of identity and access management, patch management, and security monitoring. Excellent communication and stakeholder management skills. Desirable: Exposure to ISO 27001, CIS Controls, or similar security frameworks. Security certifications such as CISSP, SSCP, GIAC, or Microsoft Security certifications. Experience with Palo Alto ...

Senior Security & Compliance Architect London / Hybrid (1-2 days onsite per week) Salary: Up to £140,000 + Package We are seeking a Senior Security & Compliance Architect to lead the design, governance, and assurance of secure cloud and SaaS platforms across large-scale enterprise transformation programmes. The successful … access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS / vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience, backup, and disaster recovery architecture patterns and standards Collaborate with ...

Strong interest in cyber security and technology, with a passion for learning Basic understanding of IT fundamentals, including networking, Windows, cloud services, and identity / access management Strong communication, teamwork, and interpersonal skills Excellent organisational, problem-solving, and attention-to-detail skills Ability to handle sensitive information with professionalism … cybersecurity concepts such as phishing, malware, MFA, or vulnerability management Familiarity with Microsoft 365 or Azure environments Understanding of cybersecurity frameworks (e.g. NIST, ISO 27001) Entry-level certifications such as CompTIA ITF+, CompTIA Security+, or Microsoft Fundamentals Qualification requirements An A-Level ...

InternalLocation: UKGlobal Grade: D1 / C2About the job you’re consideringOrganisations are facing a sustained increase in cyber risk, regulatory pressure and operational complexity as they modernise their technology landscapes. Cybersecurity is no longer a standalone technical function; it is central to business resilience, digital transformation and customer trust. … client engagementCybersecurity capability (strong experience across some of these areas):Cybersecurity strategy and operating model designCyber risk management, governance and compliance (e.g. ISO 27001, NIST, NIS2, GDPR)Security architecture and secure‐by‐design principles in cloud and hybrid environmentsIdentity and access management, security operations or cyber ...

flow justify it, you'll hire and lead a team of bid writers and coordinators. What You'll Do Design and embed a bid / no-bid qualification framework and end-to-end bid process Lead and write high-quality responses to RFPs, ITTs, PQQs and framework applications (including … pipeline, win rates and conversion to the CRO What You'll Bring Proven experience managing and winning bids in the Workforce Management / HR tech / payroll software space — you understand the buyer, the competitive landscape, and the evaluation criteria in this market Track record of leading complex ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

hiring, onboarding, and development within the security team. What you’ll bring: Proven Information Security experience in a regulated or complex environment (financial services / FCA exposure a strong plus). A track record of leading, coaching, and developing analysts. Strong leadership presence and the ability to influence across … defined and operationalised risk and control frameworks for the secure, responsible adoption of AI. Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS). Strong command of security risk management, governance, and incident response. Cloud security expertise (Azure preferred), network security ...

code security scanning Experience conducting threat modeling, secure design reviews, and engineering‐focused risk assessments Familiarity with industry standards and frameworks such as ISO 27001, SOC 2, OWASP, and NIST CSF Experience supporting digital product teams or client‐facing technology delivery units; knowledge of privacy … skills, with the ability to partner effectively with engineering teams in fast‐paced delivery environments FOR U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin ...

business leaders who share a passion for competing through an entrepreneurial approach in a multi-billion dollar marketplace. It will be incumbent upon him / her to contribute to immediate and effective relations through interactive communication, exchanging ideas and fostering an environment of teamwork and mutual respect. In this … include: Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field; Master’s preferred. 5+ years in solution delivery of Automation / IT services, leading complex team, preferably multicultural distributed teams across EMEA. Ability to work effectively across diverse cultures and geographies with proven experience with complex ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies ...

cloud-native projects Flexible and hybrid working arrangements Dedicated Career Manager and structured career development Company bonus scheme 25 days annual leave with buy / sell options Private medical and dental insurance Competitive pension scheme Cycle-to-work scheme and additional lifestyle benefits Inclusive and supportive workplace culture Opportunities … encryption and application security Experience with AWS security services such as IAM, GuardDuty, KMS, Macie and WAF Knowledge of security frameworks including NIST, ISO 27001 and CIS Benchmarks Experience with Infrastructure as Code tools including Terraform or CloudFormation Excellent stakeholder management and communication skills Strong analytical ...

Senior Information Assurance Consultant Location: London – mostly remote with up to 1 / 2 days per week on-site Salary: £80,000 – £88,000 + Benefits Employment: Permanent, full-time Security clearance: Current SC clearance required Start date: ASAPVenn Group Exclusive The Opportunity We are working with a specialist … documentation Cloud security across Microsoft Azure or AWS Secure architecture and enterprise security frameworks Useful qualifications may include: CISSP CISM SABSA TOGAF ISO 27001 Lead Auditor Microsoft Azure or AWS security certifications Candidates do not need to hold every listed qualification. Benefits Competitive salary Competitive (above ...

drive consensus without direct authority. Security Controls and Technical Program Execution Understand and implement controls for supply‐chain risk and vulnerability management, including CI / CD enforcement and dependency hygiene, and build vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. … cloud security, supply‐chain and vulnerability management, endpoint and identity, and detection and response. Are genuinely technical: comfortable in cloud environments (Azure preferred), CI / CD, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. Lead with empathy and influence ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...

such as cloud security, infrastructure security, identity and access management and application security. • Utilise your experience of working with recognised security frameworks and standards (ISO27001, NIST 800-53, CIS). • Translate technical security risks into business impact with an ability to make recommendations to technical audiences, business leaders and senior ...

highest data protection standards for our clients' and employees' data. All our employees are instrumental in ensuring the utmost care, GDPR, and ISO compliance, including ISO 27001, in handling sensitive information. * We provide equal opportunities to all qualified applicants regardless race, gender, sexual orientation ...

develop testing strategies to evaluate design and effectiveness of key controls. Independently articulate potential control gaps and risk exposures to stakeholders.* Leverage innovation / automation audit techniques to increase effectiveness and efficiency of the audit program.* Independently conduct continuous risk monitoring and assessments of the IT operations to identify … emerging / high-risk areas for coverage.* Manage stakeholder relationships and proactively provide risk and control advice with an aim to improve the Group’s control environment. Challenge and influence management to implement effective controls.* Develop sound knowledge of the Group’s strategy, products, risk management processes and operating ...