51 to 75 of 206 ISO/IEC 27001 Jobs in London

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. · Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. · Minimum of 5 years' experience in IT governance, risk management, cyber ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

CISO to deliver the Target operating Model and Cyber Security StrategyGovernance, Regulatory & Compliance* Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices* Ensure compliance with global regulatory requirements (e.g. … regulated financial institutions* Proven experience leading cyber advisory, risk, and service delivery functions* Managing a P\L and building a cyber security business practice / service* Deep understanding of financial services regulations, operational resilience, and client assurance* Experience operating in global, multi-entity, and acquisition-driven environments* Strong executive ...

Contribute to the continuous improvement of assurance practices, maintaining awareness of emerging threats, vulnerabilities and industry best practice. Experience & Capabilities Proven experience in cyber / information security risk management and control assurance roles. Strong analytical skills with the ability to evaluate technical, procedural and design evidence. Excellent written … Working: Remote-first with travel as needed. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

Head of Cybersecurity, Information Security to implement vulnerability remediation, secure configuration and access controls. Support compliance with relevant frameworks and standards, including ISO 27001, NIST 800‐53, NIST 800‐171, CmmC, Essential Eight and Cyber Essentials Plus. Maintain effective patching, hardening, privileged‐access and configuration‐management … competitive salary and benefits package that includes 27 days holiday per year, pension contributions, private healthcare, discounted dental insurance, enhanced maternity / parental leave, plus a whole host of others including: Cultural stimulation allowance - £250 per person per year Half days off before bank holidays Emergency care days ...

conducting proactive control evaluations, identifying gaps, monitoring remediation progress, and ongoing oversight.* Partner with customer-facing teams to support regulatory reviews, customer audits, RFP / RFQ responses, and compliance due diligence activities.* Promote uniformity and harmonisation of audit procedures and control frameworks across several jurisdictions and operational models.* Serve … meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations / tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat’s gaming licenses. The specific information required may vary depending ...

conducting proactive control evaluations, identifying gaps, monitoring remediation progress, and ongoing oversight. Partner with customer-facing teams to support regulatory reviews, customer audits, RFP / RFQ responses, and compliance due diligence activities. Promote uniformity and harmonisation of audit procedures and control frameworks across several jurisdictions and operational models. Serve … meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations / tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat’s gaming licenses. The specific information required may vary depending ...

assurance and executive reporting within a complex technology environment. Key Responsibilities Governance & Compliance Maintain Information Security policies, standards and procedures Support compliance with ISO 27001, GDPR, NIS2 and related frameworks Coordinate audit evidence and compliance activities Maintain governance documentation and control frameworks Risk Management Maintain … Disaster Recovery activities About You You'll have previous experience within a Cyber Security Governance, Risk & Compliance function together with knowledge of: ISO 27001 GDPR NIS2 Risk Management Security Policies & Standards Audit & Compliance Supplier Assurance Microsoft 365 Relevant cyber security certifications would be advantageous ...

enterprise, solution or technical architecture within a large or complex organisation. You hold a professional certification or formal training in TOGAF, ITIL or ISO 27001, or you possess equivalent deep technical experience. Navigating complex landscapes is second nature to you, and you have a strong track … ensuring that our recruitment and selection process is inclusive and accessible. Job Info Job Identification 663 Job Category Lead Workers Posting Date 07 / 21 / 2026, 02:13 PM Apply Before 08 / 11 / 2026, 10:55 PM Job Schedule Full time Locations Kensington ...

systems, networks and applications Investigate security alerts, suspicious activity and potential incidents Document security risks, findings and recommended actions Assist with Cyber Essentials, ISO 27001 and compliance projects Review security policies, procedures and technical controls Prepare professional reports and supporting documentation Research emerging threats, vulnerabilities … work in the United Kingdom Knowledge of tools or frameworks such as Nmap, Wireshark, Nessus, Burp Suite, Microsoft Sentinel, Cyber Essentials or ISO 27001 would be beneficial but is not essential. What We Offer A full-time position within a growing cyber security consultancy Exposure ...

Operations & Governance Lead to keep the IT environment secure, well-governed, documented, auditable and resilient. You will own governance processes, support ISO 27001 activities, maintain runbooks and architecture records, and ensure projects transition to BAU with clear ownership. The role emphasizes Microsoft 365, Azure governance, risk ...

Information Security Officer (Cloud Security) London, United Kingdom | Posted on 08 / 07 / 2026 Contract Role: Information Security Officer (Cloud Security) Contract Location: London / Belfast (Hybrid) Contract Duration: 6 months initially (with potential extension) Contract Start Date: Immediate Contract Classification: Inside IR35 Daily Rate breakdown … architectural decisions. Provide technical leadership across complex cloud security initiatives. Qualifications Minimum 6 years’ IT experience, including at least 4 years in Cyber Security / Information Security across cloud and on-premises environments. Minimum 2 years securing AWS and / or GCP cloud environments. Experience conducting Information Security ...

Driving engineering quality, delivery performance and operational maturity Overseeing a modern technology stack including React, Node.js, JavaScript and TypeScript Leading the organisation’s ISO 27001 implementation through to certification Strengthening security, governance, risk and compliance … Overseeing an AWS cloud environment and modern cloud-native architecture Identifying and implementing practical AI opportunities across products, engineering and internal operations Improving CI / CD, automation, DevOps and software delivery practices Partnering with the CEO and senior leadership team on technology investment and strategy We’re looking ...

with the future state cloud-first strategy and architecture.* Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.)* Define and document repeatable cloud service patterns* Drive adoption and migration from traditional technology platforms to public cloud services.* Recommend tools and methodologies … managed by individuals or teams in a scalable manner.* Ensure systems and application have efficient and actionable monitoring with SLO aligned with business goals.Qualifications / Requirements:* You have expert knowledge of Microsoft Azure products and capabilities.* You have proven experience with all aspects of Cloud service models and application ...

responsibilities Execute vendor security assessments by collecting, analysing, and documenting supplier control evidence, audit reports, and risk findings against defined frameworks including ISO 27001 and NIST CSF. Identify and document third‐party security risks, recommending proportionate risk treatment options aligned to JET's risk appetite. Support … vendor reviews end‐to‐end, including evidence collection, gap analysis, and documented findings. Working knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls applied in a product or engineering context. Ability to communicate security risk clearly to both technical and non‐technical ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

Faculty is seeking an Information Security Manager to drive compliance and secure its scaling global operations. You will lead the ISO 27001:2022 management system, partner with senior stakeholders, and own the governance roadmap. This is an ambitious, individual-contributor role with high impact on security ...

London, United Kingdom | Posted on 20 / 07 / 2026 Engagement: Inside IR35 Start Date: ASAP Overview We are supporting a leading investment banking client in London who is seeking an experienced Cyber Technical Delivery Manager to join a large-scale Cyber Security Transformation Programme. This role will … 27001 CIS Controls Cyber Essentials Regulatory requirements within Financial Services Technical Knowledge Good understanding of: Microsoft Azure AWS Active Directory / Entra ID Security Monitoring Platforms Identity Management Solutions Network and Infrastructure Security Ability to engage effectively with technical architects, engineers, and security specialists. Delivery Management Proven ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

Main Responsibilities Duties will include: Setting and personally delivering target architecture for the ECP data estate the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. Driving the in-flight ETL replatform replacing legacy SSIS jobs with a table-driven, parallel ...

Main Responsibilities Duties will include: Setting and personally delivering target architecture for the ECP data estate the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. Driving the in-flight ETL replatform replacing legacy SSIS jobs with a table-driven, parallel ...

technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence … gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards / frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ...

technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration. Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing. Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence … gathering). Manage and coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards / frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ...