17 of 17 ISO/IEC 27001 Jobs in Reading

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

agreed SLAs and escalating complex or high‐impact issues when needed. Troubleshoot and maintain a diverse IT estate spanning Windows, macOS and Linux desktop / server environments, cloud services, applications and end‐user hardware. Monitor IT systems proactively, identifying performance or availability risks and supporting incident, problem, backup, recovery … support , with exposure to 3rd line support, in an SLA-driven technical environment. Strong troubleshooting capability across hardware and software, including Windows 10 / 11 and Windows Server, macOS, and Ubuntu Linux desktop / server environments . Hands‐on experience with modern workplace and cloud technologies such ...

agreed SLAs and escalating complex or high-impact issues when needed. Troubleshoot and maintain a diverse IT estate spanning Windows, macOS and Linux desktop / server environments, cloud services, applications and end-user hardware. Monitor IT systems proactively, identifying performance or availability risks and supporting incident, problem, backup, recovery … support , with exposure to 3rd line support, in an SLA-driven technical environment. Strong troubleshooting capability across hardware and software, including Windows 10 / 11 and Windows Server, macOS, and Ubuntu Linux desktop / server environments . Hands-on experience with modern workplace and cloud technologies such ...

which need a human tester to check the results. Research and develop testing tools, techniques and methodology. Contribute to automating security testing in CI / CD pipelines. Advise on secure design through threat modelling and architecture reviews. Share current attacker techniques with the incident response and threat monitoring teams. … least one of the following fields: Network penetration testing Web and mobile application assessments Cloud penetration testing (Azure, AWS,...) Mastery of Unix / Linux / Windows operating systems, including bash and PowerShell, shell scripting or automation of simple tasks using Python, Ruby or Perl AI-assisted penetration ...

Assurance Lead security risk identification, assessment, treatment and acceptance activities. Conduct threat modelling, security assessments and architectural risk reviews. Apply recognised frameworks including ISO 27001, NIST RMF and NIST 800-53. Support security accreditation, governance and assurance processes. Provide recommendations to reduce risk while enabling … compliance activities. Strong understanding of security architecture frameworks and methodologies. Experience conducting threat modelling, risk assessments and security assurance activities. Working knowledge of ISO 27001, ISO 27002, NIST RMF and NIST 800-53 frameworks. Experience designing secure cloud, infrastructure and network solutions. Strong stakeholder ...

such as: Cyber security governance, risk and compliance. Security control design and assessment. Cyber security frameworks, standards, regulatory and contractual requirements (ISO / IEC 27001, Cyber Essentials, Defence Cyber Certification, NIST Cybersecurity Framework and more) Evidence gathering, review and traceability. Gap assessments, compliance ...

Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO / IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy and drive, with a real appetite for improving … team works Desirable: Experience in a large or highly regulated organisation Knowledge of ISO 27001, NIST and OWASP CISSP, CISM or equivalent Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built ...

identifying areas for improvement. Advising on security strategy, governance, risk management and the implementation of good practice. Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF). Supporting existing OT security engagements, learning the client … information security risk assessment, risk treatment, security controls and governance. Security frameworks: Practical knowledge of ISO 27001, NIST CSF and / or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically. Independent delivery ...

demonstrate risk managed and controls operating effectively. The role requires building security assurance across ISO 27001, PCI-DSS, NIST / CIS, with vendor risk management and cloud security in Microsoft 365, Azure, AWS or Google Cloud. #J-18808-Ljbffr ...

Power BI or Tableau to visualise and report automation outcomes. Desirable technical skills and qualifications Professional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor. What’s in it for you? Competitive salary of up to £80,000 per annum, depending on experience. Annual ...

other areas: Minimum of 3 years' experience in a relevant full-time security position A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor / Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. … ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of managing Security incident and investigations including APT threat actors Some knowledge of specialized security tools would be highly desirable (e.g. Palo Alto ...

Control Tester - Cyber Security Location: UK - details available on application Sector: Cyber Security / IT Risk & Assurance About the Role We are seeking a Control Tester to support the delivery of cybersecurity control testing across a complex technology environment. You will assess the design and operational effectiveness of security … Experience working in a regulated or complex organisation. Exposure to critical national infrastructure environments. Relevant professional certifications, such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll play an important role in strengthening information security assurance by helping assess whether cybersecurity controls ...

identity management. Experience with reporting and analytics tools such as Power BI or Tableau. Relevant certifications such as CISA, CISSP, CRISC or ISO 27001 Lead Auditor. The Opportunity You'll have the opportunity to improve control assurance through automation, strengthen continuous monitoring and help deliver more ...

leadership or management position. A strong track record of achieving revenue targets, winning new business and developing strategic customer accounts. Experience selling AWS and / or Azure solutions, including cloud migration, modernisation, managed services or FinOps. A sound understanding of cloud economics, total cost of ownership and the commercial … forecast revenue. AWS, Azure or FinOps certifications would be advantageous, as would an understanding of security and compliance frameworks such as Cyber Essentials, ISO 27001 and NCSC guidance. What You Will Get in Return : This role offers a high six-figure base salary , plus performance-based ...

Barclay Simpson is seeking an experienced cyber security leader to own end-to-end security for major digital platforms, embedding security from strategy and design through to deployment and live operation. You will work across ...

bugs, including the awkward ones that only show up in production. Give and receive useful code reviews. We run small, frequent releases through CI / CD, and review is how we keep the quality bar high. Work in our cloud infrastructure on AWS and Atlassian Forge, and pick … company, Automation Consultants, which is a Platinum Solution Partner and Atlassian Partner of the Year (App Innovator). We’re SOC 2 and ISO 27001 certified and a recognised UK Best Workplace. We’re a small team, so your work reaches customers quickly, and there ...