26 to 50 of 52 ISO/IEC 27001 Jobs in Scotland

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

modelling). Experience with modern data transformation approaches — familiarity with analytics engineering principles is beneficial. Deep understanding of data platforms, orchestration, metadata management, CI / CD and architectural components such as DevOps. Demonstrable experience architecting solutions using medallion architectures, including curated gold-layer models designed for analytics consumption. Strong … providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body ...

seeking a Lead Cyber Security Advisor for an initial 6 assignments with the option to extend. Location: East Kilbride (Glasgow) or London / Hybrid The ideal candidate will have an active security clearance and a strong background in Cyber Security and risk management within a high-threat government environment. … Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30 / 37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. ...

enforce engineering standards for: Resilience, scalability, security, and performance Lead adoption of: Infrastructure as Code (IaC) Platform automation and DevOps practices Partner with architecture / governance forums to ensure alignment to enterprise guardrails Lead engineering delivery of cloud migration and modernisation initiatives Support transition from legacy / … platform foundations Supports the end-to-end service model and shared accountability across towers Ensure cloud platforms are secure by design and aligned to ISO27001 / Cyber Essentials Embed: Identity and access controls Patching, vulnerability management, and monitoring Work with security stakeholders to enforce governance and audit readiness Work ...

clearance. I am keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30 / 37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat … supervision and engaging senior stakeholders, customers and suppliers with strong written and verbal communication skills. Familiarity with tools such as Microsoft Visio, Atlassian Jira / Confluence and standard Microsoft Office applications, and a broad understanding of common enterprise IT technologies and their associated security risks. #J-18808-Ljbffr ...

business (fully remote – must be UK based). This is an exciting opportunity for someone with a strong cybersecurity background and an interest / experience in AI to play a key role in developing security controls, managing emerging risks and ensuring new technologies can be adopted safely and responsibly. … platforms, machine learning environments or AI governance and security controls. A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. Experience ...

business (fully remote - must be UK based). This is an exciting opportunity for someone with a strong cybersecurity background and an interest / experience in AI to play a key role in developing security controls, managing emerging risks and ensuring new technologies can be adopted safely and responsibly. … platforms, machine learning environments or AI governance and security controls. ** A solid understanding of cybersecurity principles, frameworks and best practices, such as NIST, ISO 27001 and GDPR. ** Knowledge of AI-specific security risks, including prompt injection, data privacy, model security and AI supply chain vulnerabilities. ** Experience ...

understanding of security controls, vulnerability assessments and how to identify and remediate weaknesses in systems and applications. ** Familiarity with security standards such as ISO 27001 and an understanding of how operational security contributes to wider compliance requirements. ** Strong communication skills, comfortable working with technical colleagues … CompTIA Security+, CySA+, CISSP or similar would be advantageous. The Offer A competitive salary and benefits package is on offer, alongside hybrid working (2 / 3 days) in a modern Glasgow city centre office. The organisation also offers excellent opportunities for professional development, including structured learning programmes and support ...

gaps, vulnerabilities and opportunities for improvement. Evaluate OT security arrangements against recognised cyber security standards and frameworks, including NCSC Cyber Assessment Framework (CAF), IEC 62443 and NIST. Undertake evidence gathering and control validation, ensuring assurance findings are supported by clear and appropriate documentation. Identify and assess cyber security … stakeholder engagement. Knowledge or experience of recognised cyber security frameworks, standards and regulatory requirements would be beneficial, including: NCSC Cyber Assessment Framework (CAF) IEC 62443 NIST Cybersecurity Framework Network and Information Systems (NIS) Regulations ISO 27001 Experience working within critical national infrastructure, utilities, energy ...

Analyst £50,000- £54,000 Hybrid - 2 days per week in either Glasgow / Edinburgh office depending on location We are looking for a brilliant SOC Analyst to join a market leading organisation within the energy sector embarking on a transformation of their IT Security Team. This well-established … primary contact when assisting with Security Incident remediation. You will possess strong technical and security knowledge, and will provide technical / non technical security support to the wider Security team and organisation. We are looking for an individual that has: Expertise in Cloud (IaaS, PaaS, SaaS) in particular ...

Security Engineer Location: Aberdeen / Remote (Hybrid) Day Rate: Up to £700 per day (Inside IR35) Contract: 12 Months Start Date: ASAP Working Arrangement: Remote working considered, with occasional travel to Aberdeen About We are currently recruiting for an experienced OT Security Engineer to join a major cybersecurity improvement … appropriately documented, tested and supported by assurance evidence. Produce security risk reports, remediation updates and management dashboards. Essential Skills & Experience Strong experience in OT / ICS / Industrial Cybersecurity . Proven experience with OT cybersecurity assessments, risk remediation and security control improvements . Good understanding of industrial control ...

Senior Azure Cloud & Security Engineer Glasgow / Hybrid (2 days a week in the office) Salary up to £48,000 Our client, an established online education provider based in Glasgow, runs its learning platform and business systems on Microsoft Azure and Microsoft 365. They're looking for a senior … bring 5+ years' hands-on experience with Azure in production Strong Azure networking and Entra ID skills Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus Confident PowerShell scripting The ability to explain technical risk in plain English It would be a bonus ...

protect data pipelines and prevent leakage. Independent Audit & Compliance: Lead technical audit preparations and continuous evidence gathering for Cyber Essentials Plus and ISO 27001, acting as an independent assessor to our internal IT support team. Incident & Threat Management: Act as the lead first responder during cybersecurity … costs or usage throttling. Compliance Familiarity: Proven experience preparing for technical audits and working with industry frameworks such as Cyber Essentials Plus and ISO 27001. Communication: Strong communication skills with the ability to demystify and confidently articulate complex security and AI concepts to clients, sales teams, and internal ...

supporting the broader security function. The role requires experience with security tools (SIEM, SOAR, EDR) and familiarity with security frameworks like NIST and ISO 27001. #J-18808-Ljbffr ...

part of an experienced team, build your skills, and grow professionally. Dionach by Nomios holds impressive certifications, including CREST, CHECK, PCI QSA, and ISO 27001. With our focus on enhancing customers' security and fostering team development, you'll be joining a company that prioritizes both your growth ...

driving continuous improvement across security controls. Ideal candidates have broad experience in GRC, strong leadership, and deep knowledge of regulatory requirements such as ISO 27001, NIST CSF, GDPR, and SOC 2. #J-18808-Ljbffr ...

project activities, whilst promoting compliance with Government security guidance to internal stakeholders. What you bring: Knowledge of security frameworks and standards such as ISO 27001, NIST, OWASP, MITRE. Experience of performing risk assessments, providing recommendations for meeting the security requirements of systems and information systems … Pathways development programme and offer an excellent benefit and rewards package that includes: 28 days annual leave plus 8 public holidays Option to buy / sell annual leave Flexi-time and enhanced flexible working options available Option to join the Civil Service pension scheme Life insurance cover ...

infrastructure, Microsoft 365, identity, digital workplace, cyber security, resilience and managed services. Strong working knowledge of Microsoft Azure, Microsoft 365 and Microsoft Entra ID / Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender / Sentinel, NCSC, NIST and ISO ...

Digital Resilience and Business Continuity (BCDR) include: Advanced Azure Site Recovery implementation experience Azure Recovery Services and backup platform expertise CISSP certification Extensive ISO 27001 experience Knowledge of government business continuity audit requirements Experience working within central government or highly regulated environments In return ...

architectural outcomes across the life of the service Experience working with public sector or regulated customers Familiarity with security and compliance frameworks (e.g. ISO 27001, GDPR) Exposure to cloud, hybrid, or sovereign cloud platforms Experience in environments focused on automation, infrastructure-as-code, and platform standardisation ...

large, global business environment, with a hands-on approach to people leadership. Knowledgeable with a deep understanding of security frameworks and proven experience with ISO27001, Cyber Essentials Plus, NIS-2, and SOX compliance and audit standards. Experienced in modern security tooling with hands-on experience with Palo Alto, Cortex … strong technical awareness of Azure / AWS cloud environments. Proficient in identity and access management with strong knowledge of Microsoft 365 capabilities and Entra / Active Directory (AD) Identity platforms. Skilled in advanced vulnerability management, with demonstrated ability in enterprise-level scanning, analysis, and resolution. Here’s What ...

integration layer between them. We run Salesforce, NetSuite and Workato; equivalent platforms translate. Accountable ownership of a SOC 2 Type II or ISO 27001 programme, rather than supplying evidence into someone else’s. Identity and access, SSO and device estate ownership at a hundred-plus headcount … personal information submitted as part of your application in accordance with the Reachdesk Candidate Privacy Notice. Please review Reachdesk’s Privacy Policy here: www.reachdesk.com / candidate-privacy-policy #J-18808-Ljbffr ...

complete Support life cycle covering defining and reviewing support requirements, reviewing support agreements, definition and reviewing of SLAs, facilitating the handover from development / delivery into operational support, management of Change Management, Incident Management, Problem Management and Service Reporting processes. • Demonstrable networking and influencing skills: Track record of managing … Special Requirements • Knowledge of ITIL. • Knowledge of Security. • Budget management experience. • 5 years’ experience in people management as a team leader. • Knowledge of NIS / NIS2 Regulations • Knowledge of Security Industry Standards, IEC-62443, ISO-27001 Minimum Criteria • Track record of ideas generation ...

ensure incident response excellence across our global operations. You will work with Palo Alto, Cortex XDR, and cloud environments (Azure / AWS), enforce ISO27001, Cyber Essentials Plus, NIS-2 and SOX controls, and collaborate with suppliers to shape security roadmaps. #J-18808-Ljbffr ...

test records, quality documentation, and compliance artefacts Automation and tooling Design and evolve test automation frameworks and supporting infrastructure Integrate automated testing into CI / CD pipelines in collaboration with engineering teams Identify and introduce tools or technologies that improve test coverage, reliability, and efficiency Cross team collaboration … sector Knowledge of satellite operations, ground systems, or mission planning workflows Experience testing real‐time systems or embedded software Familiarity with standards such as ISO27001, ISO9001, ECSS, DO‐178C, or other relevant industry guidelines Hands‐on experience with test management and defect tracking platforms Knowledge of reliability engineering principles ...