26 to 50 of 206 ISO/IEC 27001 Jobs in London

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

sales cycle.* Engage with CISOs, security architects, and IT leaders to discuss cybersecurity strategy, industry trends and modern security architectures.* Produce high-quality RFP / RFI responses, security questionnaires and technical documentation.* Collaborate with Product Management and Engineering to ensure successful solution design, implementation and customer success.* Build trusted … occasional evenings or weekends when required.**Required Qualifications*** 5+ years' experience in technical pre-sales or solution engineering across cybersecurity, networking, Cloud or SASE / SSE.* Strong knowledge of SASE, SSE, Zero Trust, SD-WAN, NGFW, NAC, ZTNA, CASB, SWG, DLP and cloud security.* Solid understanding of networking technologies ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective AI-native security programme that keeps certifications healthy as a byproduct … enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. Act as the stakeholder for product security requirements for authn / authz, tenant isolation, and privileged access Immerse yourself in the agent security domain our customers are focused on: prompt injection, agent supply chain ...

Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting – CCNP Level, Expert Level Preferred High Availability and Disaster Recovery – CCNP Level, Expert Level Preferred Security / Cyber Security Skills Required Cisco Firepower Firewalls (ASA, FTD) – CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer … SIEM use cases for key controls etc. Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware / Ransomware and how to mitigate along with Penetration testing concepts Understanding of White / Black / Grey Box penetration testing. Developing Security policies ...

trusted boardroom advisor to mid-market clients across cyber security, risk, and resilience. Core Frameworks: Lead client assessments and certifications across Cyber Essentials / CE+, ISO 27001, and UK GDPR . Innovation: Build next-generation AI Governance and operational resilience (BC / DR) frameworks. … Strong practical knowledge of Cyber Essentials, UK GDPR, and ISO 27001. Exceptional executive presence—confident presenting risk and strategies to C-suite / board levels. Commercial acumen to partner with sales teams and expand client adoption. Desirable: CISSP, CISM, CRISC, or ISO 27001 ...

Compliance Analyst, you will be owning areas of the technology asset lifecycle and drive governance, risk and compliance activities. Role Details Location: Reading / Paddington / Manchester Daily Rate: £500 per day (inside IR35) Umbrella or £400.00 PAYE. Contract Length: 6 months (with visibility to extend) Key Responsibilities … Influence decision-making (especially around security prioritisation & spend) Potential to support TSA when needed Key Requirements Broad GRC / InfoSec background Experience across: ISO27001 / NIST / general frameworks Risk & compliance Governance reporting Strong stakeholder management (critical) Comfortable influencing senior stakeholders and challenging decisions Start Date: ASAP ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

make informed decisions while supporting commercial success. You'll drive the day‐to‐day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements. You'll serve as the subject matter expert during audits and ensure our control … information security governance, GRC, or technology risk within a SaaS or cloud environment. You've been the subject matter expert in SOC 2 and / or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional ...

GDPR and related data protection frameworks Strong regulatory interpretation and analytical skills Excellent written and verbal communication, especially for reporting Ability to translate legal / regulatory language into technical and operational requirements Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications … such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001 ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

Define ownership models for SAP roles, business processes, mitigating controls, and approval authorities. Govern access management across Wella's SAP ecosystem including ECC, S / 4HANA, SAP BTP, Datasphere, SAC, Ariba, SuccessFactors, Concur, Emarsys, and future SAP platforms. 2. Segregation of Duties (SoD) & Risk Management Own and maintain … management of privileged and emergency access, including Firefighter access controls and reviews. 3. Audit, Compliance & Controls Own SAP access-related controls supporting SOX, GDPR, ISO27001 and other regulatory requirements. Act as the primary point of contact for internal and external auditors. Lead remediation of audit findings and compliance gaps. Establish ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

Services and Security, the role will act as Nxera’s cybersecurity lead, working closely with internal IT teams, business stakeholders and specialist external partners / vendors. The successful candidate will combine strategic cyber risk leadership with practical technical judgement across Microsoft 365, Microsoft Entra ID, Azure, identity, endpoint, cloud … standards such as NIST CSF, ISO 27001, Cyber Essentials Plus or equivalent. Relevant professional certifications such as CISSP, CISM, CCSP, ISO27001 Lead Implementer / Lead Auditor or equivalent. Conversational Japanese would be advantageous. Personal attributes Strategic and pragmatic, with the ability to balance risk management ...

Title: SC Cleared Field Solutions Engineer Location: Hybrid / London / Bristol as and when required Duration: 6 months with possible extension Rate: Up to £650 per day Outside IR35 Must be willing and eligible to go through the SC Clearance process If you enjoy combining hands … bring: Strong networking and IT infrastructure understanding, with a focus on secure communications and encryption Real-world, hands-on experience with Linux plus scripting / programming (bash and Python) Solid grasp of PKI-what it provides, along with benefits and drawbacks Experience translating client requirements into practical technical solutions ...

Manage the cyber security risk framework and risk register. Lead security governance, assurance and reporting. Support audits and certifications, including Cyber Essentials and ISO 27001. Lead and coordinate responses to cyber security incidents. Oversee security controls and third-party cyber risk. Drive cyber security awareness and organisational security … Security Manager or similar role. Strong cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and / or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder management and communication ...

Digital Identity and Trust Frameworks. Familiarity with standards and frameworks such as: ISO 27001 NIST Cyber Security Framework Cyber Essentials / Cyber Essentials Plus Supplier and Third-Party Assurance frameworks Experience supporting digital identity, authentication or secure digital services programmes. Security-related certifications such … CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent. Key Competencies Security Assurance Governance, Risk & Compliance (GRC) Third-Party Risk Management Security Assessments Risk Analysis Stakeholder Management Information Security Audit & Compliance Trust Framework Compliance Security Governance This is an excellent opportunity for a Security Assurance professional ...

manage multiple priorities effectively. Desirable Experience within banking, financial services, or another regulated environment. Familiarity with industry standards and frameworks such as ISO 27001, NIST, COBIT, or CIS Controls. Exposure to vulnerability management, penetration testing, incident management, or third-party risk assessments. Relevant security certifications such … Security+, ISO 27001, CISM, CRISC, CISSP, or equivalent. Personal Attributes Proactive and eager to learn. Strong attention to detail and a methodical approach to problem-solving. Able to work independently while collaborating effectively with wider teams. Comfortable operating within a regulated and governance-driven environment. Flexible ...

Senior Network Engineer – Cloud, Security & Infrastructure Location: London (Hybrid) Employment Type: Permanent / Fixed-Term Contract Start Date: ASAP Build, Secure and Transform Enterprise Networks We're seeking a highly skilled Senior Network Engineer to join a growing technology team responsible for designing, securing, and optimizing enterprise and cloud … What We're Looking For: Minimum of 8+ years' experience in Network Engineering, Cloud Networking, and Network Security. Strong expertise across: Cisco Networking & Routing / Switching Palo Alto, Check Point, Cisco ASA, and ForeScout F5 Load Balancing Infoblox DNS / DHCP / IPAM AWS, Azure, and / ...

Role Description Senior Network Engineer – Cloud, Security & Infrastructure Location: London (Hybrid) Employment Type: Permanent / Fixed-Term Contract Start Date: ASAP Build, Secure and Transform Enterprise Networks What You'll Be Doing: Network & Cloud Infrastructure Design, implement, and support enterprise and cloud networking solutions across AWS, Azure, and GCP. … What We're Looking For: Minimum of 8+ years experience in Network Engineering, Cloud Networking, and Network Security. Strong expertise across Cisco networking, routing / switching, F5 load balancing, Infoblox DNS / DHCP / IPAM, and cloud networking in AWS, Azure, and / or GCP. Hands ...

opportunity for someone who enjoys balancing strategic security governance with technical delivery, while also supporting key networking initiatives. This is a 90% Information Security / 10% Network Engineering role, making it ideal for someone whose passion is cyber security but who is comfortable maintaining and supporting enterprise network infrastructure … firewalls and routing technologies. Contribute to disaster recovery planning, network resilience and high availability initiatives. Skills required: Enterprise firewall technologies including Cisco Firepower (ASA / FTD) and Palo Alto. Cisco networking technologies including Catalyst switching, Layer 2 / 3, OSPF and VPNs. Network security controls including Cisco ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

vendors on security matters Stay current with emerging threats, vulnerabilities, and industry best practice Essential Skills & Experience 2-4 years' experience in a cyber / information security role Working knowledge of SIEM platforms and security monitoring tools Understanding of network security fundamentals and common attack vectors Familiarity with … communication skills, with the ability to explain technical risk to non-technical stakeholders Desirable Relevant certifications (e.g. CompTIA Security+, CEH, Cyber Essentials Practitioner) Scripting / automation experience (Python, PowerShell) Exposure to incident response or digital forensics What's on Offer Competitive salary + benefits package Hybrid working Structured career ...