176 to 200 of 809 ISO/IEC 27001 Jobs in London

into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS / IPS, & other security tools. Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using log analysis, packet captures … forensic techniques. Lead containment, eradication, and recovery efforts during security incidents. Maintain alerting for security events & integrate with SIEM / SOAR platforms. Security Strategy & Programme Delivery: Define, own, and drive delivery of Asta’s end-toend security programme spanning PAM, EDR, NDR, SIEM, penetration testing, DLP, and compliance. Translate ...

Location: Hybrid / Monument St, London EC3R 8AJ, UK job type: Permanent / Full-time Sector and subsector: IT | Data Engineer Salary: Competitive salary Platform Architecture & Engineering responsibilities: Design and implement scalable Databricks Lakehouse platforms on AWS and / or Azure aligned to client requirements Architect … layers Build and configure cloud infrastructure using infrastructure-as-code (e.g. Terraform & Declarative Automation Bundles(DAB's)) Establish secure, compliant environments including networking (VNet / VPC, Private Link), identity (IAM / Entra ID), data governance (Unity Catalog), and access controls Define environment strategies (dev / test / ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience conducting risk … insight generation, or risk management outcomes.Preferred Qualifications:Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA, NIS2, ECB, EBA, or similar regulatory frameworks. Knowledge of operational resilience requirements, including ...

cyber risk management, operational resilience, business continuity, disaster recovery, and incident response principles. Knowledge of common security and risk frameworks such as NIST, ISO 27001, COBIT, CIS Controls, and FFIEC guidance. Familiarity with financial services regulatory requirements relating to technology risk and resilience. Experience conducting risk … generation, or risk management outcomes. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, CBCI, ISO 27001 Lead Implementer / Auditor, or equivalent. Experience supporting regulatory programmes involving PRA, FCA, DORA, NIS2, ECB, EBA, or similar regulatory frameworks. Knowledge of operational resilience requirements, including ...

information rights processesLead the annual NHS DSPT submission and keep us at "Standards Met" year-round, alongside DSCR and clinical risk alignment (DCB0129 / 0160) where applicableAssure our NHS interoperability connections - GP Connect, PDS, and future health data integrations - meet compliance and data flow standardsMaintain Birdie's risk register … running third-party risk assessments and internal audit cyclesLead incident response for data protection and compliance breaches, from root-cause analysis through remediationBuild KRIs / KPIs for leadership and the board, and champion a proactive, risk-aware culture across tech, product and go-to-market teams You’ll thrive ...

Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly interested … experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer. Suitable Backgrounds May Include Third Party Cyber Risk Manager Cyber Risk Manager Technology Risk Manager Supplier Assurance Lead Vendor Risk Manager Operational Resilience ...

Cloud Security Engineer - City of London (Hybrid) - Azure, Terraform, Powershell, ISO 27001, SOC 2 - £110,000 - £140,000 A leading financial services business is looking for a Cloud Security Engineer to join its growing Security team. This is a high-impact role for someone … operating independently in a highly regulated environment. To be considered for the Cloud Security Engineer role you will require the following skill-set: Terraform / Infrastructure as Code Git & CI / CD security CSPM / Wiz Zero Trust & least privilege You’ll shape security architecture, strengthen identity ...

standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM / SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware … / Hyper-V), Windows Servers, and Azure IaaS workloads.Data Protection: Manage the certificate lifecycle (PKI / AD CS) and implement data classification and DLP strategies using Microsoft Purview.Cloud Security Posture: Manage Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall and VPN configurations.Compliance ...

standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM / SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments … VMware / Hyper-V), Windows Servers, and Azure IaaS workloads. Data Protection: Manage the certificate lifecycle (PKI / AD CS) and implement data classification and DLP strategies using Microsoft Purview. Cloud Security Posture: Manage Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall ...

monitoring Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks Guiding the hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure AD) Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO … emerging technologies including passwordless authentication, decentralised identity frameworks, and adaptive access controls What We're Looking For Qualifications & Experience Proven background in IAM / identity engineering or architecture within large enterprise environments Prior global or large-scale enterprise experience preferred Microsoft Certified: Identity and Access Administrator Associate CISSP ...

with the FCA and PRA’s Conduct Rules.Job DescriptionDefine and execute the Infrastructure and Cloud strategy, ensuring alignment to enterprise objectives, regulatory requirements (FCA / PRA), and organisational risk appetite, with a strong focus on resilience and security.Assess and continuously evolve the infrastructure estate across cloud and on‐premise … proactive service management with continuous improvement of MTTR and service stability.Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness.Act as control owner for infrastructure and cloud services, ensuring ...

more quickly and widely adopt emerging technologies while ensuring the integrity of their intellectual property; information flow during disaster response scenarios, and zero‐trust / least‐privilege environments for M&A, attorney‐client privileged communications, etc. And we’ve only scratched the surface. At our core, we're driven … 27001, Cyber Essentials Plus, and NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI / CD pipelines; oversee pentesting, red teaming, and threat modeling across our core infrastructure. Enable Enterprise Sales: Serve as the technical security authority in high‐stakes ...

Conduct Rules. Job DescriptionDefine and execute the Infrastructure and Cloud strategy, ensuring alignment to enterprise objectives, regulatory requirements (FCA / PRA), and organisational risk appetite, with a strong focus on resilience and security. Assess and continuously evolve the infrastructure estate across cloud and on‐premise environments, defining a clear … proactive service management with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud ...

Cyber Risk Lead Up to 90,000 p / annum Hybrid Working - 3 days onsite CPS Group are supporting a global financial services organisation with the recruitment of a Cyber Risk Lead to own and develop their third-party cyber risk management framework. This is a great opportunity … experienced Cyber Security / Third-Party Risk professional to take ownership of a growing vendor risk function and work closely with IT, Procurement, Legal and senior stakeholders. The Role: Own and continuously improve the third-party cyber risk and security due diligence process. Lead vendor criticality assessments and ensure ...

Cyber Risk Lead Up to £90,000 p / annum Hybrid Working - 3 days onsite CPS Group are supporting a global financial services organisation with the recruitment of a Cyber Risk Lead to own and develop their third-party cyber risk management framework. This is a great opportunity … experienced Cyber Security / Third-Party Risk professional to take ownership of a growing vendor risk function and work closely with IT, Procurement, Legal and senior stakeholders. The Role: * Own and continuously improve the third-party cyber risk and security due diligence process. * Lead vendor criticality assessments and ensure ...

Conduct Rules. Job Description Define and execute the Infrastructure and Cloud strategy, ensuring alignment to enterprise objectives, regulatory requirements (FCA / PRA), and organisational risk appetite, with a strong focus on resilience and security. Assess and continuously evolve the infrastructure estate across cloud and on‐premise environments, defining … proactive service management with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud ...

Operations to design and advance service builds, DevOps tooling, and drive operational excellence.Partner with Core Engineering to architect and govern GitHub Actions CI / CD with quality gates, canary / blue‐green strategies, and AI‐assisted redeploy checksOwn observability in Datadog—define SLIs / SLOs, dashboards, alerting … Teams integrations—and reduce incidents via telemetry-driven automation and blameless postmortems. Champion AI‐enabled operations using AWS Bedrock / SageMaker and Model Context Protocol (MCP) for log analysis, anomaly detection, incident triage, and workflow orchestration; establish adoption guardrails. Define and enforce cloud guardrails and security controls (SCPs / ...

functional Technology and non-Technology teams.Ability to translate technical risks into business-relevant language for both technical and non-technical stakeholders, including executive leadership.EDUCATION / QUALIFICATIONS / TECHNICAL COMPETENCIESEssentialRecognised cybersecurity certification: CISSP and / or CISMStrong knowledge of:Ivanti LANDesk, Qualys, SplunkWindows Server / Desktop, RHEL … / OEL LinuxPowerShell and Python scriptingProven experience leading strategic security initiatives and process automation in large-scale environmentsDesirableAdditional certifications: CCSPFamiliarity with:CyberArk PAM, ServiceNow SecOps Vulnerability Response / Application Vulnerability Response.VMWare, Nutanix, Java VMMSSQL, Oracle, MongoDBRed Hat Satellite, Active Directory, LDAP, KerberosConfluence, JIRAGDPR and SOX compliance frameworksPERSONAL REQUIREMENTSExcellent ...

Secret Manager, including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless workload and CI / CD authentication Experience with observability tooling including Cloud … Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry and Grafana Experience setting up Google Workspace / Google Cloud Identity Experience with automation using Python or Go Experience implementing CI / CD pipelines Understanding of RESTful API and event-driven concepts Comfortable writing RFCs and ADRs through ...

full-stack experience Strong product instincts — you think about the why as much as the how Frontend excellence: React, TypeScript Backend proficiency: Node.js / NestJS or Python / FastAPI Solid understanding of distributed systems patterns and when to apply them Experience working alongside design functions and translating designs … visible in how clinicians work every day. Our stack GCP · GKE · Terraform · GitOps & ArgoCD · PostgreSQL + Redis · TypeScript across the stack (React, NestJS) · Python / FastAPI for ML workloads · Pub / Sub for events · Self-hosted ML models What we offer 28 days holiday + bank holidays Latest ...

Jersey, Leeds, Liverpool, London, Manchester, Milton Keynes, Newcastle, Nottingham, Port Talbot, Reading, Southampton, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 10-Sep-2026 Req # 25068 Job description Connect to your IndustryDeloitte’s Quality, Risk and Security (QRS) community is the overarching identity … second-line cyber risk, privacy and confidentiality functions and relevant business teams.· Oversee the ISMS, ISO certifications, and CPS-related ISQM1 / QC1000 components, maintaining strong governance over regulatory and internal / firm audit requirements.· Lead a forward-looking regulatory radar, monitoring UK and EU developments ...

requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles / services as a requirement, across multiple technical areas.Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect … response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security ...

LondonION Analytics – Information Security & Compliance / Full-time / On-siteThe Role:This is an exciting opportunity to join our dynamic Information Security team at ION. We are seeking a highly skilled and experienced Information Security Officer to join our team. The ideal candidate will have a strong … company adheresto regulatory requirements and maintaints the trsut of our clients.Key Responsibilities: Develop, implement, and maintain compliance policies and procedures in accordance with ISO 27001 standards. Knowledge of SOC2 is beneficial.Conduct regular audits and assessments to ensure compliance and certifications are maintained.Serve as the primary point ...

NCSC’s Cyber Assessment Framework (CAF) and the Network and Information Systems (NIS) landscape. Extensive experience conducting or supporting Information Security audits , including ISO 27001 certification audits. Strong technical knowledge of domestic and international Information Security standards and associated processes, with expert knowledge in relevant specialist … regulators, industry and technical communities. Proficiency in Microsoft Office and an openness to learning and adopting new programmes, tools and methodologies. Relevant academic and / or professional experience. ISO 27001 Lead Implementer and CISSP qualifications. SC Clearance , or willingness to attain SC Clearance following ...

security perspective, to identify and mitigate security risks.Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs. Be a trusted advisor to senior clients on security topics.Conduct risk assessments and assurance reviews to validate that … clients, preferably in the Health, Central Government or Public Safety domains.Minimum of 5 years’ security consulting experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance roleMinimum of 5 years’ experience in a Governance, Risk and Compliance roleA track record of delivering security solutions for large ...