101 to 125 of 189 ISO/IEC 27001 Jobs in London

cloud-native or hybrid environments. Experience supporting security policies, standards, procedures and technical controls. Familiarity with security frameworks and regulatory standards, such as ISO 27001, NIST and CIS. Experience working with cross-functional engineering teams, technology vendors and operational stakeholders. Strong analytical, troubleshooting and problem-solving ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing ...

role . Experience within a technology consultancy, systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat … modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS / IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI / CD and automated ...

validation across L1, L2, supporting audit cycles and maintaining a clear, accountable control registry. • Draft and refine technical security standards for cloud platforms (AWS / GCP), CI / CD pipelines, and third-party integrations, working with Engineering Leads to embed these into delivery workflows. • Track exceptions and remediation … plans with technical owners, escalating risks where needed and maintaining visibility across the Three Lines of Defence. • Build and maintain KPI / KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture. What will you bring to the team? • Solid hands-on experience ...

Cyber Security Manager (IT / OT) Location: Hybrid (1 day per week in the London office, with client site travel as required) Salary: £75,000 - £90,000 + Excellent Benefits Package Security Clearance: Candidates must be eligible for BPSS and SC Clearance. The Role We are seeking a Cyber … Experience 7+ years' experience in cyber security consulting, advisory services, or security programme delivery. Strong knowledge ofcyber security frameworks and standards including: NIST ISO 27001 CAF NIS Experience managing senior stakeholders and delivering complex security projects. Expertise in one or more of the following: OT Security ...

Provide security advice to technical and business stakeholders. Support wider compliance, risk and assurance engagements. Essential Skills & Experience Security Assurance and Risk Management. ISO 27001 … NIST CSF. Risk Assessments and Risk Treatment. Stakeholder Management and Communication. Security Governance and Compliance. Knowledge of GDPR and related legislation. Desirable Azure and / or AWS knowledge. Cyber Assessment Framework (CAF) and JSP440. Cyber Essentials, GovAssure or Threat Modelling experience. CISSP, CISM or CISA. Defence, Government or regulated ...

identity security Running client workshops and presenting recommendations Experience with NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM / PAM or cloud security is useful, but nobody is expected to tick every box. Certifications like CISSP, CISM, CCSP, SABSA or TOGAF help, though ...

Strong background in Azure (IaaS, PaaS, networking, identity, storage) and on-prem data centre operations. Hands-on skills with infrastructure-as-code (Terraform, ARM / Bicep), configuration management (Ansible, PowerShell DSC), CI / CD pipelines (Azure DevOps, GitHub Actions). Experience with monitoring / observability tools, alert … continuous improvement of platforms and services in line with Cloud-First and automation-led objectives. Knowledge of networking, security, and OS fundamentals (Windows / Linux). Experience operating in ISO 27001 or similar regulated environments. Experience integrating with ITSM platforms (e.g., ServiceNow) and aligning with ...

27001, Cyber Essentials PlusUnderstanding of statutory and regulatory requirements for the handling of sensitive dataExperience of working within the legal / professional services industryBusiness continuity planning and disaster recoveryMicrosoft Azure, Intune, Configuration ManagerVirtualisation, Linux, scripting or software developmentSecurity testing experienceAbout YouAbout UsThe benefitsWith support, coaching and feedback … benefit, employee assistance programme, group personal pension, health care, season ticket loan and many more benefits (grade dependent). Finally, with Perks At Work / Home you can select a host of retail benefits that suit your needs alongside a Community Online Academy, free courses for all from fitness ...

Governance, Operational Risk, Information Security, or Audit.Experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, WizKnowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2.Experience using Power BI to develop dashboards and reporting solutions.Exposure to Microsoft Azure or other ...

Risk, Information Security, or Audit. Experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, Wiz Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials, or SOC 2. Experience using Power BI to develop dashboards and reporting solutions. Exposure to Microsoft Azure ...

shape cloud architecture, modernise a legacy platform into a cloud-native environment, and provide senior oversight across platform engineering, security, SRE, CI / CD. Key Responsibilities: Own the AWS platform architecture and modernisation roadmap, including migration from a Java monolith to microservices on EKS. Define standards for containers, runtime … environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI / SLOs, incident management, DR / BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI / CD pipelines, IaC, and software supply chain governance. Drive developer productivity through automation, self-service ...

PermanentLondon, UKPosted 18 hours ago11905ME Market + bonus + pension + hybrid workingIT Security Officer (ISO)We're seeking an experienced IT Security Officer to join a financial services organisation, supporting the protection of critical systems, infrastructure and sensitive data. You'll lead risk-based security assurance activities … controls across the business. Key requirements: 3+ years' experience in Information Security or a highly regulated UK sector. Knowledge of NIST CSF 2.0, ISO 27001, and information security frameworks. Experience in security risk assessments, audits, governance and vulnerability remediation. Strong technical understanding of cybersecurity, IT systems ...

risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable. Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues. About ...

business resilience, regulatory alignment, and risk mitigation from the outset. This is not an enterprise architecture role it is centred on enterprise networks, cloud / hybrid infrastructures, and identity / access management. What you'll do Define and implement security architecture principles across enterprise IT environments. Embed secure … migration and digital transformation programmes. What we're looking for Proven experience securing enterprise IT environments or complex business systems. Strong understanding of hybrid / cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001 ...

assurance Experience working within large or complex organisations Good understanding of cyber security frameworks, governance and risk management Knowledge of regulations including GDPR, NIS / NIS2, CAF or similar compliance frameworks Excellent communication and stakeholder management skills Strong analytical and problem-solving abilities Experience supporting cyber transformation or security … improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that protect critical national infrastructure while developing ...

perimeter firewall estates. Conducting firewall security assessments across multiple vendor platforms: rule base review, management plane exposure, VPN and remote access configuration, IPS / IDS posture, logging, and firmware currency. Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings … Designing network segmentation across cloud and on-premise environments: Azure Network Security Groups and subnet-level control, VLAN segregation, DMZ isolation, and layer 2 / layer 3 access control. Designing data classification and DLP policy, working with client data and business process owners to define label sets and handling ...

team you'll be working with: Position Title: Senior Security Analyst - Third-Party Security Assurance (TPSA) – P2 / 3 Location: United Kingdom / Remote Employment Type: Full-Time, Permanent Reporting To: Head of Information Security We are seeking an experienced security and risk professional to join the Third … TPRM, security risk, or GRC Proven ability to independently deliver third-party assessments end-to-end Strong understanding of regulatory frameworks (GDPR, ISO 27001, IS0 42001 etc.) Regular interaction with stakeholders (but limited strategiec ownership) Who we are: At NTT DATA, you have endless opportunities ...

relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review. - Ensure that proposed infrastructure architecture / design are aligned with Firms policies. Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line … party suppliers on system issues. - Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation. Required Skills / Experience: - 5+ years experience of working within a cyber security engineering lead / specialist capacity, with a focus on incident response, threat monitoring ...

optimisation. Technical Architecture: Proven ability to translate architectural designs into detailed technical implementations across complex cloud platforms, legacy workloads, microservices and containerised environments. CI / CD & Deployment Automation: Extensive experience designing, implementing and improving CI / CD pipelines and deployment automation using tools such as GitHub, GitLab … Strong experience implementing security by design, AWS security services such as IAM, WAF and KMS, and controls aligned with compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code: Extensive experience designing and implementing Infrastructure as Code solutions using Terraform, CloudFormation, CDK or equivalent ...

requirements.You will support the Risk lead in setting and measuring controls performance and support the GHR Manager and CISO in reporting against cyber issues / non-compliance across the organisation.Role responsibilitiesManage Cyber & Information Policy and Cyber & Information Security Standards updates in line with agreed refresh periodsLook to modernise … bank holidaysNon-contributory pension (8–12% depending on age) and life assurance at eight times your salaryPrivate healthcare with Bupa, income protection and 24 / 7 Employee Assistance35 hours of paid volunteering annuallyColleagues spend a minimum of 50% of their working time in the office each month ...

assurance processes using technologies such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms. * Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security and governance frameworks. Cyber Security Architect & Engineering Lead In accordance with the Employment ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...

security architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire ...