26 to 50 of 83 ISO/IEC 27001 Jobs in London

Deliver cyber security assessments and assurance engagements Support Cyber Essentials and Cyber Essentials Plus assessments Conduct security reviews against recognised frameworks including ISO 27001 Review the effectiveness of technical and operational security controls Identify security risks, control gaps and areas for improvement Produce clear reports … love to hear from you. You'll be a certified Cyber Essentials Plus assessor and have exposure to some of the following areas: ISO 27001 Security assurance and compliance activities Security control assessments Risk management Vulnerability management Security governance Supplier assurance Cloud security concepts Technical security ...

Azure Architect London - Hybrid £100,000 - £130,000 Microsoft Azure / Cloud Architecture FinTech / Banking / Financial Services I'm working with a growing business in the looking to hire an experienced Azure Architect to take ownership of its Azure architecture, cloud strategy and technical direction. … solutions, ideally within fintech, banking or financial services. Strong understanding of Azure networking, security, Microsoft Entra ID and cloud governance. Experience with Azure PaaS / IaaS, Infrastructure as Code and CI / CD. Experience designing highly available, resilient and secure cloud environments. Nice to Have Microsoft Azure certifications ...

Main Responsibilities Duties will include: Setting and personally delivering target architecture for the ECP data estate the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. Driving the in-flight ETL replatform replacing legacy SSIS jobs with a table-driven, parallel ...

DevOps operational control improvements. The role requires a credible engineering background. The successful candidate is expected to work directly across Azure platform engineering, CI / CD, Bicep / ARM, automation, incident response and operational controls, while leading the team and setting standards. They must be able to challenge … manager remains accountable for technical quality while enabling engineers to own their work. Set and maintain engineering standards for Azure architecture, Azure DevOps, Bicep / ARM, deployment patterns, observability, resilience, security and operational support. Challenge designs and changes using risk, maintainability, failure-mode, rollback and supportability thinking; involve senior ...

such as CAE or GSN, ideally linked to machine-readable evidence Assurance work in air-gapped or classified environments Running, auditing or developing ISO management systems such as ISO 27001 or ISO 42001 Working Environment Permanent, full-time, hybrid from Belfast ...

Contract: 12 months (subject to confirmation) Rate:£600 - £800 per day (Inside of IR35) must use an Umbrella Working Arrangement: Hybrid Sector: Financial Services / Cybersecurity / AI Transformation The Opportunity We are looking for an experienced Senior Cyber Security Business Analyst to join a major international financial … target operating models for AI-enabled cybersecurity capabilities. Identify opportunities for process optimisation, automation and improved operational efficiency. Contribute to vendor assessments, RFI / RFP requirements and technology evaluations. Cybersecurity Governance & Risk Management Work closely with cybersecurity teams to translate security requirements and control objectives into practical operational processes. ...

postholder helps to maintain a cohesive and resilient security posture. Qualifications Professional certifications (e.g., CISM, CISA, ISO 27001) and / or equivalent demonstrable experience. Knowledge Strong understanding of relevant government cyber standards and assurance approaches (e.g., NCSC guidance, Cyber Assessment Framework (CAF), GovAssure and related … risk management. Knowledge of cyber security governance and risk management, including how to define, implement and monitor controls and manage compliance obligations. Skills / Ability Strong stakeholder engagement and communication skills, including the ability to influence senior leaders, explain complex cyber risk and assurance topics clearly, and drive action ...

security assurance within UK Government or Defence related environments. Strong understanding of: NCSC Cloud Security Principles NCSC Principles for Using SaaS Securely ISN 2024 / 06 Experience working with UK Government security frameworks and standards, including: Cyber Essentials Plus Def Stan 05-138 Secure by Design Cyber Security Model … risks and controls to both technical and non-technical audiences. Strong organisational skills with the ability to manage multiple competing priorities. Desirable Experience ISO 27017 and ISO 27018. Cloud Security Alliance (CSA) CCM and STAR. Familiarity with UK Nuclear industry regulations and ONR SyAPs. Experience supporting ...

Cyber Security GRC Consultant (DV Cleared) Location: Remote / Hybrid - on-site presence as required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

technologies. Stay informed about emerging threats and trends, integrating this knowledge into the security testing processes Support the firm's certification activities, such as ISO27001, SOC2, and Cyber Essentials Plus, by assisting with audits, documentation, and continuous improvement efforts. Engage with security industry groups and collaborate with external industry partners … assurance. An organised approach to managing and prioritising multiple concurrent assignments is essential. A degree-level education is likely but not essential, as CREST / CHECK / OSCP / OSWE / OSWA status, and having various qualifications or full membership status with the IISP would ...

compliance posture against deep scrutiny from prospect CISOs and risk teams. Knowledge Base Architecture & Automation: Own, organize, and proactively scale our technical RFP / security repository ). Ensure the library adapts continuously to changing product capabilities and emerging threat landscapes. Internal Security Liaison: Collaborate closely with our internal Corporate … structured, detail-oriented project manager capable of juggling multiple high-priority enterprise deals concurrently. Certifications: Holding or actively pursuing relevant credentials such as CIPP / E, CIPP / US, CompTIA Security+, CISA, or CISSP is highly desirable. Experience: 3–5 years of blended experience spanning Solutions Consulting, Technical ...

such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent. Experience within Government, Defence, National Security, or Critical National Infrastructure sectors. Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance. Experience working within Security Operations Centres (SOC). If you receive suspicious outreach claiming ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing ...

role . Experience within a technology consultancy, systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat … modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS / IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI / CD and automated ...

Cyber Security Manager (IT / OT) Location: Hybrid (1 day per week in the London office, with client site travel as required) Salary: £75,000 - £90,000 + Excellent Benefits Package Security Clearance: Candidates must be eligible for BPSS and SC Clearance. The Role We are seeking a Cyber … Experience 7+ years' experience in cyber security consulting, advisory services, or security programme delivery. Strong knowledge ofcyber security frameworks and standards including: NIST ISO 27001 CAF NIS Experience managing senior stakeholders and delivering complex security projects. Expertise in one or more of the following: OT Security ...

Strong background in Azure (IaaS, PaaS, networking, identity, storage) and on-prem data centre operations. Hands-on skills with infrastructure-as-code (Terraform, ARM / Bicep), configuration management (Ansible, PowerShell DSC), CI / CD pipelines (Azure DevOps, GitHub Actions). Experience with monitoring / observability tools, alert … continuous improvement of platforms and services in line with Cloud-First and automation-led objectives. Knowledge of networking, security, and OS fundamentals (Windows / Linux). Experience operating in ISO 27001 or similar regulated environments. Experience integrating with ITSM platforms (e.g., ServiceNow) and aligning with ...

shape cloud architecture, modernise a legacy platform into a cloud-native environment, and provide senior oversight across platform engineering, security, SRE, CI / CD. Key Responsibilities: Own the AWS platform architecture and modernisation roadmap, including migration from a Java monolith to microservices on EKS. Define standards for containers, runtime … environments, observability, tenancy, security, and infrastructure automation. Lead SRE practices including SLI / SLOs, incident management, DR / BCP planning, post-mortems, and operational resilience. Own platform security, secure SDLC, CI / CD pipelines, IaC, and software supply chain governance. Drive developer productivity through automation, self-service ...

business resilience, regulatory alignment, and risk mitigation from the outset. This is not an enterprise architecture role it is centred on enterprise networks, cloud / hybrid infrastructures, and identity / access management. What you'll do Define and implement security architecture principles across enterprise IT environments. Embed secure … migration and digital transformation programmes. What we're looking for Proven experience securing enterprise IT environments or complex business systems. Strong understanding of hybrid / cloud convergence and securing legacy or brownfield enterprise landscapes. Knowledge of recognised enterprise security standards such as NIST CSF, ISO 27001 ...

assurance Experience working within large or complex organisations Good understanding of cyber security frameworks, governance and risk management Knowledge of regulations including GDPR, NIS / NIS2, CAF or similar compliance frameworks Excellent communication and stakeholder management skills Strong analytical and problem-solving abilities Experience supporting cyber transformation or security … improvement programmes Desirable CISSP, CISM or ISO 27001 certification Experience within highly regulated industries Knowledge of incident response and cyber assurance Experience supporting organisational change or project assurance Why Apply? This is an opportunity to work on meaningful projects that protect critical national infrastructure while developing ...

relevant to participate in and lead varied IT Infrastructure lifecycle & security projects. Including HLD creation, solution costing and review. - Ensure that proposed infrastructure architecture / design are aligned with Firms policies. Post project, participate in evaluating the success of the project, identifying best practices and lessons learned. 3rd Line … party suppliers on system issues. - Ensuring that all members of 3rd level teams have the relevant skills sharing, procedures and documentation. Required Skills / Experience: - 5+ years experience of working within a cyber security engineering lead / specialist capacity, with a focus on incident response, threat monitoring ...

optimisation. Technical Architecture: Proven ability to translate architectural designs into detailed technical implementations across complex cloud platforms, legacy workloads, microservices and containerised environments. CI / CD & Deployment Automation: Extensive experience designing, implementing and improving CI / CD pipelines and deployment automation using tools such as GitHub, GitLab … Strong experience implementing security by design, AWS security services such as IAM, WAF and KMS, and controls aligned with compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code: Extensive experience designing and implementing Infrastructure as Code solutions using Terraform, CloudFormation, CDK or equivalent ...

optimisation. Technical Architecture: Proven ability to translate architectural designs into detailed technical implementations across complex cloud platforms, legacy workloads, microservices and containerised environments. CI / CD & Deployment Automation: Extensive experience designing, implementing and improving CI / CD pipelines and deployment automation using tools such as GitHub, GitLab … Strong experience implementing security by design, AWS security services such as IAM, WAF and KMS, and controls aligned with compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code: Extensive experience designing and implementing Infrastructure as Code solutions using Terraform, CloudFormation, CDK or equivalent ...

assurance processes using technologies such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms. * Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security and governance frameworks. Cyber Security Architect & Engineering Lead In accordance with the Employment ...

maintain secure, scalable and highly available GCP infrastructure. Implement Infrastructure as Code (IaC) using Terraform and other automation tools. Develop, maintain and optimise CI / CD pipelines using tools such as GitLab CI, Jenkins, GitHub Actions or Cloud Build. Automate deployment, configuration management and operational processes using scripting languages … comply with applicable security policies, governance requirements and operational standards. Contribute to technical documentation, operational runbooks and knowledge sharing across the team. Key Skills / Experience: Proven commercial experience working as a DevOps Engineer, Cloud Engineer, Platform Engineer or in a similar role. Strong hands-on experience with Google ...