101 to 125 of 809 ISO/IEC 27001 Jobs in London

optimized for both performance and cost. Key Responsibilities Architect, implement, and maintain cloud infrastructure to support rapid product growth. Prepare infrastructure for SOC 2 / ISO 27001 audits, aligning with customer expectations. Build and maintain CI / CD pipelines for backend, frontend, and data … Automation : Strong skills in Python or Bash for automation and tooling. Experience 4–7 years of relevant experience, ideally including startup or high‐growth / high‐load environments . Proven track record of owning infrastructure end‐to‐end — from architecture through production support. Experience implementing reliability, security, and compliance ...

operational safety - from framework to embedded practice. Trusted partner across Wayve: A leader in the org, you partner with engineering, product, safety, security, privacy / legal, and operations leaders to land outcomes and hold the bar - influencing without authority at every level. Make process simple and low-overhead: Design … scalable practices: Governance, KPIs and dashboards, audit readiness, escalations and operational reviews. Align cross-functionally: Work across every part of Wayve - and external auditors / partners where relevant; manage dependencies, risk, and trade-offs. Connect to outcomes and represent Quality & Compliance: Tie delivery to compliance status, audit readiness, risk ...

notices, user-impact messaging, and post-incident reviews with measurable corrective actions. Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO / MFA platforms, directories, IGA administration, ITSM workflows, HR source-of-truth, APIs / connectors). Lead audit and compliance execution for access controls … Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments). Strong ITSM and operational management experience: incident / problem / change / request, SLAs / SLOs, metrics, and service health reporting. Demonstrated ability to manage third-party SI partners ...

notices, user-impact messaging, and post-incident reviews with measurable corrective actions. Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO / MFA platforms, directories, IGA administration, ITSM workflows, HR source-of-truth, APIs / connectors). Lead audit and compliance execution for access controls … Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments). Strong ITSM and operational management experience: incident / problem / change / request, SLAs / SLOs, metrics, and service health reporting. Demonstrated ability to manage third-party SI partners ...

maintenance notices, user-impact messaging, and post-incident reviews with measurable corrective actions.Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO / MFA platforms, directories, IGA administration, ITSM workflows, HR source-of-truth, APIs / connectors).Lead audit and compliance execution for access controls: evidence … service delivery.Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments).Strong ITSM and operational management experience: incident / problem / change / request, SLAs / SLOs, metrics, and service health reporting.Demonstrated ability to manage third-party SI partners ...

SECURITY & COMPLIANCE LEAD Hours Full-time, 9:30am – 5.30pm with flexibility required to support system changes, upgrades and critical incidents where necessary. Department IT / Risk & Compliance The Role The Cyber Security & Compliance Lead is responsible for defining, delivering, and continuously improving the firm’s cyber security, information security … risk roles. Experience operating at a senior or lead level within a professional services or regulated environment. Strong understanding of security frameworks (e.g. ISO 27001, NIST, Cyber Essentials, GDPR). Experience managing cyber risk, audits, and compliance programmes. Experience handling security incidents and leading response activities. ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

knowledge management across IT. Deliver continuous improvement and maturity across the IT operational disciplines. Security, compliance, and resilience Ensure operational alignment with ISO 27001 controls and the firm's ISMS framework. Maintain audit‐ready evidence (patching, access reviews, monitoring, backups). Contribute to cyber security, risk … management, and business continuity planning, including managing live incidents. Ensure platforms, including AI tools, align with firm policy, ISO 27001 controls, and data protection requirements under UK GDPR. Projects, vendors, and change Manage relationships with external IT suppliers and partners, holding them accountable to SLAs ...

bureaucracy or corporate hand-holding. They are anti-bureaucracy but pro-governance, delivering regulatory compliance and security controls (ISO 27001 / NIST CSF) directly through platform automation rather than paperwork and committees. If you are an exceptionally bright, technically curious engineer who would rather design … policy oversight or ticket-monitoring position. While you will provide second-line security operations cover for alerts escalated by the group's outsourced MDR / XDR provider, your primary mission is proactive security engineering. You will own the Zero Trust security programme covering Entra ID identity controls, Microsoft Defender ...

have prior experience working with technology in Software QA environments, and have solid knowledge of Information Security practices and methodologies as they apply to ISO27001 and PCI-DSS. What You’ll Be Doing Manage and monitor corporate computing environment including but not limited to: Active Directory Service Network Routers, Switches … Wireless Access Points Office 365 setup and administration Intune (MDM) User Account Administration Data integrity and backup E-mail and Content filtering systems Windows / Apple / Linux Servers and Desktops, mobile devices and game consoles IT Asset Inventory Management of the Office 365 environment including Office, Exchange ...

compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed … ambitious professional looking to own our governance roadmap and influence senior stakeholders. What you'll be doing: Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance. Designing and executing comprehensive internal audit schedules to verify adherence to security ...

maintain and administer our key security platforms, support client-facing security assurance activities, and help strengthen Law Debenture's security posture ahead of ISO 27001 certification. Main Responsibilities: Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments.Monitor and respond to security … Copilot and AI security technologiesCISSP, CISM, CompTIA Security+ or equivalent certificationYour RewardCompetitive salary with performance bonus schemeGenerous pension contributionFull healthcare coverHealth cash planLife assuranceBuy / sell annual leave schemeAdditional InformationPeople who thrive at LawDeb make the most of this foundation to grow themselves, help us improve and have ...

influencing skills.Ability to communicate complex security matters in business terms.Strong organisational, coordination and problem-solving capabilities.Qualifications & Professional MembershipCISSP, CISM, CRISC, ISO / IEC 27001 or equivalent recognised security qualification.Professional registration or accreditation desirable.Membership of a recognised professional body.Evidence of continuing professional development.Who ...

love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI / CD environment, and you'll build much of it yourself. This is a hands-on role: expect to read code, threat model new services, reproduce … sure an agent acting for a user can never exceed what that user could do themselves. Push least privilege further across production and CI / CD. Better than it was, not where we want it. For a concrete example: here's how we built a sandboxed execution environment ...

into a data-rich business that is still relatively early in its AI journey Third-party technology: managing Salesforce, Azure, M365 and external / offshore development partners, ensuring suppliers deliver against expectations Commercial technology management: maintaining discipline around licensing, contracts, TCO and technology investment, ensuring spend creates genuine business … platforms, data processing, data models and analytics Strong understanding of GDPR, information security, resilience and regulatory governance Some experience with SOC 2 Type 2 / ISO 27001, including implementing controls, preparing for or managing audits and working through compliance requirements Experience navigating risk, compliance, audit ...

levels and influence outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both … across information security governance, risk management, compliance and audit, with a demonstrable track record of delivered outcomes. Practical implementation experience with CIS Controls, ISO 27001 or equivalent frameworks within live operating environments, including the judgement required to apply them proportionately. Sufficient technical understanding to engage credibly ...

demonstrated equivalent expert-level skill.Microsoft Certified: Azure Solutions Architect Expert — required, or clearly demonstrated equivalent expert-level skill.Google Professional Cloud Architect — strongly preferred.TOGAF 9 / 10 or equivalent enterprise architecture certification — beneficial.FinOps Certified Practitioner — beneficial.Adjacent Technical Skills (Beneficial, Not Required)Depth in the specialist area above is mandatory. Experience … following adjacent domains is a strong plus and will be valued in candidate evaluation, since it enables broader solution ownership across engagements.Networking (routing / switching, SD-WAN) given the centrality of hybrid connectivity to this role.Virtualization platforms (VMware, Red Hat OpenShift / OpenStack) as common migration source environments.Security ...

seeking an Information Security Analyst to safeguard our SaaS platform across security operations, access reviews and risk management. You will help operate ISO 27001 and SOC 2 controls while learning quickly and delivering practical security improvements across the business. Based in London with hybrid work ...

Asia Information Security Management System (ISMS) across offices in Hong Kong and Beijing. The position will play a key role in maintaining ISO 27001 certification, supporting governance, risk and compliance activities, and ensuring alignment between local regulatory requirements and global security standards Client Details Our client … operation and continual improvement of the Asia ISMS. Maintain information security policies, risk registers, incident registers and exception registers. Coordinate ISO 27001 internal and external audits and oversee remediation activities. Prepare security metrics and management reports for governance meetings. Support information security awareness and training initiatives. ...

regularly assessed through external and internal audits. You will ensure that the organisation is fully compliant with the required Information Security Standards including ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST and GovAssure. This includes the responsibility for all of the control documentation and audit process … updated in reasonable timeframes to mitigate against new risks. Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken. Ensure that the organisation is appropriately protected in line with business needs against ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding of information security control tools Experience ...

Volta is seeking a Senior Manager, Cyber Security Engineering to lead the ISO 27001 and SOC 2 Type II program across a fast-growing, security‐minded infrastructure platform. You will own controls, evidence, and ISMS documentation while collaborating with platform engineers and external auditors. ...

Customer Identity and Access Management (CIAM) Consultant Location: London / UK Wide Career Level: Specialist As a CIAM Security Consultant, you will: Partner with clients to design and implement secure, user-friendly CIAM solutions. Translate business needs into technical requirements, ensuring seamless digital experiences for millions of end-users. … management. Drive innovation by exploring new technologies (e.g. biometrics, passwordless authentication, AI-driven fraud detection) to enhance customer trust. Support complex Identity & Access Management / Digital Identity deliveries across industry groups, working with global teams Support the practice in various new initiatives across the firm, including innovation ...

first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective AI-native security programme that keeps certifications healthy as a byproduct … enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. Act as the stakeholder for product security requirements for authn / authz, tenant isolation, and privileged access Immerse yourself in the agent security domain our customers are focused on: prompt injection, agent supply chain ...

frameworks applicable to enterprise security platforms, such as: GDPR (General Data Protection Regulation) – governing the protection and privacy of personal data ISO / IEC 27001 – an international standard for information security management systems (ISMS). SOC 2 (System and Organisation Controls) – focusing … standards of privacy and regulatory conformity throughout all data handling and system operations. System Integration & Projects Lead the integration of CCURE 9000 with Victor / VideoEdge and other third-party security solutions to ensure cohesive interoperability and efficient data flow. Plan and deliver system upgrades, migrations, and expansion projects ...