51 to 75 of 77 ISO/IEC 27001 Jobs in Manchester

organisation, supporting the modernisation and cyber assurance of complex engineering systems in line with UK Defence Cyber Certification (DCC) requirements. SOLUTION ARCHITECT - DEFENCE MANUFACTURING / CYBER - UP TO £600 PER DAY (INSIDE IR35) - 12 MONTH INITIAL CONTRACT - HYBRID 3 DAYS PER WEEK ON-SITE - STEVENAGE OR BOLTON - SC CLEARANCE … ELIGIBLE We're looking for a Solution Architect / Technical Architect with experience across Defence Manufacturing, engineering applications and cyber security . You'll map and document complex PLM, ALM and engineering systems, ensuring architectures, integrations and data flows meet UK defence security and DCC requirements. The role ...

technical teams and non-technical users. Familiarity with directory services (Active Directory, LDAP). Knowledge of industry security frameworks and compliance (e.g., NIST, ISO 27001). Strong written and verbal communication and collaboration skills Detail-oriented with a strong security mindset and ability to think proactively. ...

standard 37 hours per week, will be paid at 'time and a quarter' Location: Bolton or Stevenage or Bristol - depending on your preference Hybrid / Remote working: The role will be hybrid - onsite 2 days per week Duration: 12 Months with very likely extension. Contracts are often ongoing … tracking for specialized engineering apps to satisfy asset and access controls. Resilience & Lifecycle Design: Formalize and validate recovery safeguards, business continuity plans, and disconnected / operational technology (OT) procedures for critical engineering systems. Stakeholder & Assessor Liaison: Collaborate directly with engineering leaders, IT operations, and the IASME-accredited Certification Body ...

standard 37 hours per week, will be paid at ‘time and a quarter’ Location: Bolton or Stevenage or Bristol – depending on your preference Hybrid / Remote working: The role will be hybrid - onsite 2 days per week Duration: 12 Months with very likely extension. Contracts are often ongoing … tracking for specialized engineering apps to satisfy asset and access controls. Resilience & Lifecycle Design: Formalize and validate recovery safeguards, business continuity plans, and disconnected / operational technology (OT) procedures for critical engineering systems. Stakeholder & Assessor Liaison: Collaborate directly with engineering leaders, IT operations, and the IASME-accredited Certification Body ...

standard 37 hours per week, will be paid at ‘time and a quarter' Location: Bolton or Stevenage or Bristol – depending on your preference Hybrid / Remote working: The role will be hybrid - onsite 2 days per week Duration: 12 Months with very likely extension. Contracts are often ongoing … tracking for specialized engineering apps to satisfy asset and access controls. Resilience & Lifecycle Design: Formalize and validate recovery safeguards, business continuity plans, and disconnected / operational technology (OT) procedures for critical engineering systems. Stakeholder & Assessor Liaison: Collaborate directly with engineering leaders, IT operations, and the IASME-accredited Certification Body ...

Senior ICT Infrastructure Engineer to own the UK ICT platforms (Microsoft 365, Intune, Entra ID, Purview) and drive security-focused governance for government / defense contexts. You will deliver hands-on 1st-3rd line support, manage a new Microsoft 365 tenant, and implement automation via PowerShell, Graph … Terraform, while mentoring peers and ensuring ISO 27001 and Cyber Essentials compliance. #J-18808-Ljbffr ...

Solution Architect required for long term contract with multi-national defence company based in Bolton (preferred) Stevenage or Bristol Skillset / experience required: Enterprise Solution Architecture: Proven experience as a Solution Architect, Technical Architect, or Systems Designer, preferably specializing in engineering software ecosystems (e.g., PTC Windchill, IBM ELM) Cyber … tracking for specialized engineering apps to satisfy asset and access controls. Resilience & Lifecycle Design: Formalize and validate recovery safeguards, business continuity plans, and disconnected / operational technology (OT) procedures for critical engineering systems. Stakeholder & Assessor Liaison: Collaborate directly with engineering leaders, IT operations, and the IASME-accredited Certification Body ...

assessments while reporting to senior leadership on governance, risk, and compliance matters. The role requires strong experience in information security programmes, UK GDPR, ISO 27001, and cross-functional stakeholder engagement across technology and business teams. #J-18808-Ljbffr ...

risk assessment methodologies and ability to communicate findings to technical and non-technical stakeholders. Proven experience working with security standards and compliance frameworks (ISO 27001, PCI DSS, SOC 2, NIST Cybersecurity Framework). Understanding of regulatory requirements and their impact on security testing. Familiarity with NIST ...

Experience and Knowledge An ability to communicate complex technical issues. An in-depth knowledge of risk and control frameworks, payment, FCA, PRA regulations, GDPR, ISO27001, NIST?. Proven experience of managing auditors. A demonstrated ability to use positive influencing skills effectively to modify opinions, plans, or behaviours?. Strong decision ...

Experience and Knowledge An ability to communicate complex technical issues. An in-depth knowledge of risk and control frameworks, payment, FCA, PRA regulations, GDPR, ISO27001, NIST?. Proven experience of managing auditors. A demonstrated ability to use positive influencing skills effectively to modify opinions, plans, or behaviours?. Strong decision ...

opportunities for rationalisation or automation. Provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required. Remediate and / or work with Technology teams and value streams to support the remediation of security weaknesses and confirm that corrective controls have been implemented effectively. Undertake … validation. Understanding of DevOps, CI / CD and secure delivery practices in an Agile, value-stream environment. Understanding of security frameworks, such as ISO27001, NIST and PCI-DSS. Skills and Qualifications Relevant technical security qualification or equivalent experience, for example AZ-500, SC-200, SC-300, SC-100, CISSP ...

practice CISA qualified or working towards it Strong grounding in ITGCs, cyber security controls and cloud Familiarity with NIST, and ideally ISO 27001 or COBIT Someone who can challenge technical people constructively and land findings without friction Comfortable working autonomously and owning their own audits ...

parent company to maintain high security standards and adapt to evolving cyber threats. Responsibilities include implementing vulnerability management, enhancing secure development practices, and maintaining ISO27001 controls. Hybrid working from our city centre office is available. #J-18808-Ljbffr ...

risk-based approaches are applied, produce management summaries, and support governance reporting. The role requires 5+ years in information security and strong knowledge of ISO27001, NIST CSF, and PCI-DSS. #J-18808-Ljbffr ...

model, spanning London, Staines and Salford Quays. You will drive automation, mentor engineers, and partner with product, engineering and compliance teams to ensure ISO 27001, NIST and GDPR alignment across the software lifecycle. #J-18808-Ljbffr ...

seeking an Information Security Analyst to safeguard member data and support our information security program. You will advise across the business, help maintain ISO 27001, and perform risk assessments across processes and systems. You will contribute to security training, policy development, and due diligence on third ...

where required. Skills, Knowledge & Expertise Experience in an IT, infrastructure, service desk, cloud, security operations or information security role. Knowledge of Microsoft Entra ID / Azure, Microsoft Defender 365, Microsoft Defender XDR, Microsoft Sentinel, Microsoft Active Directory, Microsoft Intune or VMware. Awareness of security frameworks and standards such … healthy with our cycle-to-work scheme. Special Time Off: Take time off for those big moments in life, like getting married / entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. Family Planning: Benefit from our generous maternity and paternity leave, as well ...

chain and software vendors. 2. Technical Security & Operations (The "Hands-on") Collaborative Defence: Work alongside the internal teams to harden our cloud environments (AWS / Azure) and ensure end-user devices (laptops, mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues … vulnerability in the process before it becomes a problem. Your Toolkit (Requirements): Experience: 2-4 years in an Information Security or dual IT / Security role, ideally within a regulated industry or government-adjacent sector. Technical Knowledge: Familiarity with cloud platform security (AWS, Azure, or GCP) and MDM solutions ...

enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email / web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions … desirable) Strong understanding of core IT and networking principles Awareness of the evolving threat landscape Skills and experience Experience working within frameworks such as ISO27001, NIST or similar Significant experience in IT security Financial services or e-commerce experience preferred Strong problem-solving skills and attention to detail Ability ...

speaking to, and so be effective with relationships internally and influence senior stakeholders and teams Own some cyber security aspects of the ISO27001 Information Security Management System Manage cyber security compliance with company metrics, policies, standards, and obligations Deliver cyber security training, awareness, and communication Host and attend cyber security … vulnerability scanning, penetration testing, SIEM, IDS Experience with vulnerability management tools and processes (Rapid 7, Wiz etc.) Experience of operating with and to the ISO27001 standard Cloud computing cyber security assurance (Azure / Office 365) CORE WORKING HOURS 9am - 5pm, Monday – Friday Hybrid options are available, in our city ...

full-time basis. However, compressed hours are available. Information or cyber security including threat and risk analysis for complex, high-risk and / or mission critical systems, preferably involving the Home Office, Cabinet Office, NCSC or within industry Security Operations Centres (SOCs) and departments. Proven ability to lead, develop … appropriateness or practices. Proven track record in implementing cybersecurity risk, assurance or governance processes and procedures. Cyber risk and controls frameworks such as NIST, ISO27001, COBIT, BS EN 31111, Cyber Essentials, CAF and general wider NCSC guidelines. SFIA capability framework Skills for the Information Age (SFIA) version ...

Group Information Security Risk Framework. Assess the effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business … Risk Management principles and methodologies. Experience conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical ...

constraints you worked within and whether it delivered the intended result. Identity and application security - You understand authentication, authorisation, API security and OAuth 2.0 / OIDC. You can assess how customers, employees and services get access, how services trust each other and how application behaviour can create security weaknesses. … transactions, payments or supplier integrations. Account takeover, malicious bots or transaction fraud. Working with privacy and compliance colleagues to turn GDPR, PCI DSS or ISO27001 requirements into technical controls. You don’t need to cover every item. We’re interested in the decisions you’ve made, the improvements you delivered ...

Senior Platform Engineer – AWS & Terraform Manchester | Hybrid | £85,000 + benefits Adria Solutions is recruiting a Senior Platform Engineer / SRE for a business developing a new digital services platform. With established backing and its engineering team taking shape, the business needs an experienced engineer to build its cloud … ground up, combining cloud engineering, automation, security and production reliability. Key responsibilities Design and operate AWS infrastructure using infrastructure as code. Build CI / CD pipelines that support frequent, reliable deployments. Establish monitoring, logging, tracing and alerting, with clear service reliability targets. Lead incident response, on-call practices ...