226 to 250 of 809 ISO/IEC 27001 Jobs in London

Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years … information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...

commit to this. The Information Security Officer is a senior level professional position responsible for driving efforts to prevent, monitor and respond to information / data breaches and cyber-attacks. The overall purpose of this role is to ensure the execution of Information Security (IS) directives and activities … risk frameworks (NIST, ISO 27001, CSA STAR) Experience in business engagement for Information Security, Risk or Control & Compliance, IT Analysis / Design or Program / Project Management. Perform Information Security risk assessments and familiarity with Information Security Risk Governance. At least 2 years' experience ...

CISO to deliver the Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g. … regulated financial institutions* Proven experience leading cyber advisory, risk, and service delivery functions* Managing a P\\L and building a cyber security business practice / service* Deep understanding of financial services regulations, operational resilience, and client assurance* Experience operating in global, multi-entity, and acquisition-driven environments* Strong executive ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

providing operational leadership alongside the COCO Review security reports from our IT provider and act on issues with urgency, escalating appropriately Own the ISO audit process for CF, ensuring we continue to meet the requirements of ISO 27001 and other relevant standards, that … permissions Demonstrable, hands-on ownership of information security Experience of owning or leading an information security or quality accreditation process, such as ISO 27001, including preparing for and running audits Ability to build automation and integrations, using scripting, workflow or low-code tools and APIs ...

want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.We are currently seeking a Systems Integration Specialist Advisor - TCP / IP Security to join our team in London, London, City of (GB-LND), United Kingdom (GB).JOB PURPOSEAs part of Group Security, the Group Security … / ML-ops, software engineering, DevSecOps, shift-left, cloud infrastructures and application security.Experience with Security Architecture Frameworks such as NIST CSF, ISO27001, SABSA and TOGAFDevelopment of foundational Security Architectures and Designs, Security Baselines, Standards and Whitepapers.Excellent analytical and problem-solving skills, with the ability to assess complex security risks ...

engineering systemic fixes for recurring issues; Secure Software Development Life Cycle (SSDLC) Leadership: Lead the integration of security-as-code within the CI / CD pipeline. Architect the automated deployment of SAST, DAST, and SCA tooling, and partner with Engineering leads to define security gating criteria. Provide expert-level … rollout of security initiatives across multiple departments and influencing organisational change; Expert Cloud & Infrastructure Security: Expert-level knowledge of major cloud platforms (AWS / GCP), with the ability to design secure multi-tenant architectures and perform deep-dive security configuration audits; Cloud-Native & Container Security: Deep proficiency in securing ...

Secret Manager, including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co-located Payment HSMs using NCC, Cloud VPN, and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless workload and CI / CD authentication Experience with observability tooling including Cloud … Monitoring, Cloud Logging, Cloud Trace, Managed Service for Prometheus, OpenTelemetry, and Grafana Experience setting up Google Workspace / Google Cloud Identity Experience automating with a scripting language such as Python or Go Experience implementing CI / CD pipelines Understanding of RESTful API and event-driven concepts Ability ...

stages of ideation—via threat modeling, risk reviews, and abuse-case analysis.Shape and evolve Miro’s Secure SDLC practices, integrating security seamlessly into CI / CD pipelines, infrastructure-as-code, and developer tooling.Oversee execution of bug bounty and third-party testing programs, ensuring vulnerabilities are triaged, communicated, and remediated … bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI / LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.Experience working with AWS and securing API-driven, microservice-based ...

highly technical role focused on incident response, SIEM optimisation, vulnerability management, and security engineering, helping drive a Zero Trust journey and supporting ISO 27001 & CIS controls. What you'll be doing: Lead and support incident response, threat monitoring and root-cause analysis Tune and optimise SIEM … NIST, CIS or PCI-DSS Experience with modern Microsoft security tooling Experience working in Professional Services or enterprise environments Hybrid working: 3 days onsite / 2 remote If you're looking to make a real impact in a collaborative, international environment - we'd love to hear from you. ...

ideation—via threat modeling, risk reviews, and abuse-case analysis. Shape and evolve Miro's Secure SDLC practices, integrating security seamlessly into CI / CD pipelines, infrastructure-as-code, and developer tooling. Oversee execution of bug bounty and third-party testing programs, ensuring vulnerabilities are triaged, communicated, and remediated … bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI / LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations. Experience working with AWS and securing API-driven, microservice ...

detailPAM Consultant65,000.00 GBPHybrid WORKINGLocation: UK Wide Opportunity, Central London, Greater London – United Kingdom Type: PermanentSalary: Up to 65,000 + BenefitsLocation: London – Hybrid / Client TravelCareer Level: Consultant / SpecialistWe are supporting a leading global technology consultancy in recruiting a PAM Consultant to join their growing Cyber … privileged identities, reduce cyber risk and implement scalable access management solutions.Candidates should have experience of:3+ years' Privileged Access Management (PAM) experienceCyberArk, BeyondTrust, Delinea / Thycotic or similar PAM platformsDesigning and implementing PAM solutionsPAM architecture, policies and processesIdentity & Access Management (IAM)Privileged access risk assessments and remediationIntegrating PAM platforms ...

cases Sound judgement, attention to detail, and the ability to balance security requirements with business needs Nice to have: Experience working in an ISO27001-aligned or regulated environment, ISC2 CISSP / CCSP / SSCP certifications, ISACA CISM / CISA / CRISC certifications, CompTIA Security+ / CySA+ / CASP+ certifications Условия: Employee benefits supporting financial future, health and wellness, family and community, and continuous professional development. #J-18808-Ljbffr ...

Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written … Working: Remote-first with travel as needed. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI / CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure and applications align with accepted industry standards (e.g. OWASP … Well-Architected Framework ) Conduct and lead risk assessments , including third-party / vendor reviews and internal evaluations Document and maintain security policies, procedures, and controls as part of our ISO 27001-certified ISMS Partner with GTM and leadership to demonstrate our security posture and compliance ...

encryption, data residency and cloud security. Evaluate security technologies and support vendor selection. Embed security into new products, platforms and technology projects. Translate ISO 27001, NIST, CIS and GDPR requirements into practical technical controls. Present security recommendations to senior technology and business stakeholders. Required experience … injection, data leakage and model integrity. Zscaler, Palo Alto Prisma, Netskope or an equivalent SASE platform. CISSP, CISM, CCSP, TOGAF or SABSA certification. ISO 27001, NIST, NIS2 and data-residency requirements. Legal or professional-services experience. BYOK or hardware security module solutions. This position requires ...

communication, and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. … experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI / CD. Experience owning or running third-party and vendor risk management. The judgement to distinguish theoretical from practical risk and to prioritise accordingly. Clear, direct communication ...

external providers to implement effective controls and mitigations. Ensure compliance with relevant legislation, security standards and industry best practices. Support initiatives relating to ISO 27001, Cyber Essentials and information security governance. Digital Transformation & AI Lead the implementation and management of the company's AI Governance Framework. … Desirable Experience Experience with AI governance, AI implementation or automation technologies. Knowledge of Microsoft Power Platform and business process automation tools. Understanding of ISO 27001, Cyber Essentials or similar compliance frameworks. Experience within warehouse automation, robotics, industrial automation, manufacturing, engineering or technology-driven environments. Key Skills ...

external providers to implement effective controls and mitigations. Ensure compliance with relevant legislation, security standards and industry best practices. Support initiatives relating to ISO 27001, Cyber Essentials and information security governance. Digital Transformation & AI Lead the implementation and management of the company's AI Governance Framework. … Desirable Experience Experience with AI governance, AI implementation or automation technologies. Knowledge of Microsoft Power Platform and business process automation tools. Understanding of ISO 27001, Cyber Essentials or similar compliance frameworks. Experience within warehouse automation, robotics, industrial automation, manufacturing, engineering or technology-driven environments. Key Skills ...

Skills and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier … Skills and experience • Experience in Information Security, Cyber Security, Technology Risk or Security Governance • Experience in FCA-regulated financial services • Strong knowledge of ISO 27001, NIST and CIS Controls • Strong understanding of Microsoft Entra ID and AWS security • Experience conducting access reviews, risk assessments and supplier ...

standards and government security requirements SECURITY ARCHITECT ESSENTIAL SKILLS Experience operating as a Security Architect or similar senior security role Strong knowledge of ISO 27001, NIST, CIS or similar frameworks Experience with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication … submit, subject to required skills, your application to our client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

Internet Security (CIS) frameworksExperience in healthcare or another regulated industry; HITRUST experience a plusExperience building compliance roadmaps in early-stage startupsExposure to containerization (Docker / Kubernetes), serverless, and big data platformsExposure to DevSecOps and sprint-based Agile developmentVendor management experienceWhat you'll be doingYou'll be responsible for:Compliance … Management: Serve as the primary Security POC for US regulators and partners; support the wider Security team with ISO 27001 / 27701 alignment; report risk status to security leadership.Tooling: Manage and integrate GRC and compliance automation platforms to streamline monitoring and reporting.#LI-AJ1 #LI-HybridHow ...

ZeroTrust access, work app isolation, DLP, and endpoint hardening across the enterprise. You own the how, why, strategy, processes, measurement, and Tier 3 / 4 support for these services.• Site IT Support (London office): You are the walk-up technical presence for our London office. You handledevice provisioning … application control, USB and removable media controls.• Own laptop backup coverage, policy, and periodic recovery testing.• Partner with 8x8's Security team on EDR / XDR endpoint tuning and incident triage• Produce SOC 2 and ISO 27001 evidence for endpoint controls during audit cyclesLondon Site ...

multiple stakeholders Familiarity with CRM systems such as Salesforce or equivalent sales and quoting tools Strong domain knowledge across cybersecurity services Understanding of OT / IT security, Continuous Assurance, Continuous Threat Exposure Management, Digital Identity and Access Management, and complex managed services Familiarity with GDPR, HIPAA and ISO … Structure Understanding Sales Cycle Support Opportunity Qualification Deal Structuring Soft Skills Strong Collaboration Skills Mentoring Account Teams Confidence Engaging Senior Stakeholders Industry Keywords OT / IT Security Continuous Assurance Continuous Threat Exposure Management Digital Identity and Access Management GDPR HIPAA ISO 27001 Tools & Technologies Salesforce ...

ZeroTrust access, work app isolation, DLP, and endpoint hardening across the enterprise. You own the how, why, strategy, processes, measurement, and Tier 3 / 4 support for these services. Site IT Support (London office) You are the walk‐up technical presence for our London office. You handle device provisioning … application control, USB and removable media controls. Own laptop backup coverage, policy, and periodic recovery testing. Partner with 8x8's Security team on EDR / XDR endpoint tuning and incident triage Produce SOC 2 and ISO 27001 evidence for endpoint controls during audit cycles London ...