51 to 75 of 809 ISO/IEC 27001 Jobs in London

information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure / Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: ISO / IEC … Plus NIST Cyber Security Framework CIS Controls Familiarity with risk assessment methodologies and security governance practices. Experience with security tooling such as SIEM, EDR / XDR, vulnerability scanners and email security platforms. Experience within a law firm, professional services organisation, financial services firm or other highly regulated environment. Experience ...

Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Embed DevSecOps and secure SDLC practices into CI / CD pipelines Oversee penetration testing, red teaming, and threat modeling across core infrastructure Serve as the technical security authority in customer procurement reviews, vendor risk … Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Experience embedding DevSecOps and secure SDLC practices into CI / CD pipelines Experience overseeing penetration testing, red teaming, and threat modeling Experience with customer procurement reviews, vendor risk assessments (DDQs), and defense customer evaluations ...

intelligence gathering and analysis Maintain and improve the Information Security Management System (ISMS) Conduct security risk assessments and maintain risk registers Assist with ISO 27001, Cyber Essentials, and client assurance audits Review and update security policies, standards, and procedures Support secure adoption and governance … improvements to security controls and risk reduction Requirements Strong experience in a cyber security, information security, or security operations role Good understanding of ISO 27001 Good understanding of NIST Cyber Security Framework Good understanding of Cyber Essentials Plus Good understanding of risk management methodologies Experience investigating ...

Alfa is seeking an Information Security Analyst to strengthen our ISMS and ensure ISO 27001 / 27018 compliance across the business. You’ll participate in SSAE 18 / ISAE 3402 audits, document controls, and support internal and external audits while coordinating with engineers, auditors ...

Security / Python / DevSecOps / Azure / Security Engineer Role: Senior Application Security Engineer Remote UK | 1 day per week in London Salary: Up to £85,000 We’re looking for a Senior Application Security Engineer to join our security team and help embed security … architecture teams to drive a shift-left, DevSecOps approach and build secure applications and platforms. The role Embed security into the SDLC and CI / CD pipelines, including GitHub Actions. Implement and operate SAST, DAST, IAST and SCA tooling. Secure applications, APIs, Kubernetes and containers. Develop security and policy ...

Alfa Financial Software Limited is seeking an Information Security Analyst to strengthen our ISMS and lead ISO 27001 / 27018 audits. You will work with Jira and Confluence, support SSAE 18 / SOC audits, and help translate complex security requirements for engineers, auditors ...

function.This is an excellent opportunity for someone looking to develop their career within Information Security Governance, Risk and Compliance (GRC), with exposure to ISO 27001, risk management, supplier assurance, audits and information security governance within a professional services environment.The RoleAs an Information Security Analyst, you will … management, reporting and security awareness activities.Key ResponsibilitiesSupport the administration and continual improvement of the firm's Information Security Management System (ISMS).Assist with ISO 27001 certification, surveillance and internal audit activities.Coordinate the collection of audit evidence and support remediation tracking.Support the management and maintenance of information ...

Databricks. You will work with our managed SOC to investigate alerts, close gaps and provide audit-ready evidence for ISO / IEC 27001:2022 controls. You'll map evidence, support audits, and respond to client security questionnaires while improving detection use cases ...

multi‐cloud, hybrid data center networks at scale while driving network performance &resiliency Deploy and manage cloud constructs such as subnet allocations, routing‐tables / associations, VPCs, VPC‐peering / PrivateLink, Hub‐spoke topologies, gateways, direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root‐cause analysis Participate in on‐call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...

products Education, Skills & Experience Proven experience in assessing information security risk and developing an ISMS. Experience of ISO 27001 / 2 version 2022. Experience of risk frameworks such as ISO 27005 / 31000. Knowledge of applicable data privacy practices and laws. Demonstrable … experience in a similar role. ISO 27001 Lead Implementer / Lead Auditor certification or, extensive security audit experience CISSP and CISM or equivalent certifications Strong written, oral and presentation communication skills. Excellent inter-personal skills and ability to present ideas and proposals in user‐friendly ...

information security.Certification such as Certified Information Systems Security Professional (CISSP) strongly preferred.Deep understanding of cybersecurity principles, frameworks (such as NIST, ISO / IEC 27001), and compliance standards.Experience with financial service regulations and regulations such as FCA, SEC, MAS, DORA. Proficient knowledge of network … security principles and controls such as Firewalls, IPS / IPD, TCP / IP, DHCP, and DNS Extensive experience in securing Operating Systems such as Windows, UNIX / Linux and Mac systems. This includes security access rights, implementing configuration best practicesKnowledge of cloud service models (IaaS, PaaS, SaaS ...

security. Certification such as Certified Information Systems Security Professional (CISSP) strongly preferred. Deep understanding of cybersecurity principles, frameworks (such as NIST, ISO / IEC 27001), and compliance standards. Experience with financial service regulations and regulations such as FCA, SEC, MAS, DORA. Proficient knowledge … network security principles and controls such as Firewalls, IPS / IPD, TCP / IP, DHCP, and DNS Extensive experience in securing Operating Systems such as Windows, UNIX / Linux and Mac systems. This includes security access rights, implementing configuration best practicesKnowledge of cloud service models (IaaS, PaaS ...

assurance across Microsoft, AWS, and Databricks environments. You will collaborate with our managed SOC, investigate alerts, close monitoring gaps, and ensure ISO / IEC 27001:2022 controls are backed by complete, audit-ready evidence and responses to client security questionnaires. Role involves monitoring ...

City Recruitment Associates is helping a London-based client recruit a Governance, Risk and Compliance professional to lead ISO / IEC 27001 internal audits, risk reviews and supplier due diligence. You will translate requirements into actions, create client-facing reports and work with ...

vendor, multi-cloud, hybrid data center networks at scale while driving network performance & resiliencyDeploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connectsDevelop and maintain IaC (ansible, Terraform) and automation tooling throughout CI / … network solutions meeting regional compliance and data sovereignty requirements (ISO 27001, Cyber Essentials Plus, UK G-Cloud, EU data residency / GDPR, PCI-DSS)What You Need:Proven track record in driving agile cross-functional projects to completion independently with minimal supervision7+ years expert design ...

Notified Body audits, with a focus on Design and Development aspects. Champion compliance in software development by translating complex and opaque IEC / ISO standards into clear, actionable processes that engineering teams can follow. What we will look for SaMD Experience : Prior experience working … rest easy knowing you’re doing the defining work of your career. We offer comprehensive private medical and dental cover through Bupa, 24 / 7 mental health, coaching and wellbeing support through Sonder, a £100 / month Healthy Heidi's wellness stipend, a £500 home office budget ...

multi-cloud, hybrid data center networks at scale while driving network performance & resiliency Deploy and manage cloud constructs such as subnet allocations, routing-tables / associations, VPCs, VPC-peering / PrivateLink, Hub-spoke topologies, gateways, direct connects Develop and maintain IaC (ansible, Terraform) and automation tooling throughout … / CD pipeline (Python, Go) to provision networks at scale, while improving the efficiency and velocity of network deployments Troubleshoot complex production issues and contribute to incident root-cause analysis Participate in on-call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001 ...

Line Azure Cloud Engineer Location: London (hybrid: typically 2 days on-site; opportunities to work from Croydon / London area and possible moves towards Corsham / Farnborough based on project needs) Duration: 3 month initial + extensions Clearance : SC preffered / eligable candidates UMBRELLA ONLY … with dependable 3rd line support. What you'll be doing: * Build and manage cloud infrastructure in Microsoft Azure (IaaS-first, with exposure to SaaS / PaaS as needed) * Provide 3rd line infrastructure support for cloud and on-premises services and business applications * Support ongoing business projects-configuring and rolling ...

France / LondonSecurity – Security / Full Time / RemoteJoin Pigment: The AI Platform Redefining Business PlanningPigment is the AI-powered business planning and performance management platform built for agility and scale. We connect people, data, and processes in one intuitive, feature-rich solution, empowering every team—from … scale, we’d love to hear from you.Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI / CD environment, and you'll build much of it yourself. This is a hands-on role: expect to read code, threat model new services ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / We're looking for a Senior Infrastructure Engineer to help us design, build … including cryptographic key ceremonies Experience designing hybrid connectivity from GCP to co‐located Payment HSMs using Network Connectivity Center (NCC), Cloud VPN and Dedicated / Partner Interconnect Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience with observability tooling ...

grow with them. What You'll Do Own end-to-end project management of the compliance programme: support ISO 27001 / SOC 2 audits, manage the policy lifecycle, and handle customer security questionnaires and KYC onboarding Manage data protection operations and training, with UK GDPR … automate manual, currently ad hoc processes (evidence collection, policy tracking, questionnaire responses) rather than running them from scratch each time Coordinate business continuity: BCP / DR obligations and ownership of the Major Incident process, including testing and evidencing Support our AI governance work — our internal AI and engineering ...

This includes: NCSC NIS Guidance NCSC Cyber Assessment Framework (CAF) ISO 27001 ISO 27005 NERC CIP ISA-99 / IEC 62443 NIST Cybersecurity Framework (NIST CSF) The successful candidate should be comfortable applying security standards and frameworks to real-world … knowledge sharing, coaching and mentoring. Work on projects where cybersecurity has a direct impact on the resilience and security of critical services. Reference: AMC / RHU / OT #ryhu ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

Auditor or Internal Auditor would be highly desirable. Experience carrying out ISO gap assessments, readiness assessments or control reviews. Strong programme management / PMO experience, with the ability to manage actions, risks, dependencies and deliverables. Comfortable working with senior stakeholders in a client-facing environment. Strong communication … European stakeholders or international organisations would be beneficial. Contract: Contract: Initial 4 months Hours: 20 hours per week Location: London - Hybrid Working Industry: Payments / Financial Services Working Pattern: Part-time contract Inside IR35 Robert Half Ltd acts as an employment business for temporary positions and an employment agency ...

Party Security ManagerInternal AuditRisk and Compliance FunctionsData Privacy and DPO FunctionTechnology and Change TeamsHuman ResourcesLearning & DevelopmentBusiness UnitsExternal Auditors and AssessorsOperational Resilience FunctionPerson SpecificationKnowledge / Experience / Skills:Strong experience in cyber security operations, incident response or security monitoring.Experience managing security service providers, SOC or MDR capabilities.Knowledge of cyber … NIST CSF, FCA / PRA expectations and operational resilience requirements.Strong stakeholder management, communication and reporting skills.Qualifications:Minimum of one below is required:ISO27001 Lead Implementer or Lead AuditorDesirable: CISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)GIAC Incident Handler (GCIH)Certified Cyber Defender (CCD) or equivalentISO ...