26 to 50 of 99 ISO/IEC 27001 Jobs in the South West

business intelligence and decision-making.Digital Systems & CDE ManagementLead the configuration, administration, and optimisation of digital platforms including:Common Data Environments (CDEs)Microsoft 365 / SharePoint OnlineAutodesk and related BIM platformsGovern access controls, workflows, metadata schemas, and automation.Ensure systems support ISO 19650 workflows and digital delivery requirements.Team Leadership … Information Management, Data Science, or a related discipline.Experience aligned to senior-level frameworks (e.g., GKIM Level 6 or equivalent).Professional certifications desirable:Microsoft 365 / AzureISO 19650 PractitionerInformation Governance or Records Management certificationsSecurity RequirementsMust have or be able obtain SC Security Clearance.Additional InformationAt AECOM, we are committed to maintaining ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

GDPR and related data protection frameworks Strong regulatory interpretation and analytical skills Excellent written and verbal communication, especially for reporting Ability to translate legal / regulatory language into technical and operational requirements Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications … such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g., telecom, financial services, critical infrastructure) Familiarity with compliance tools (e.g., ServiceNow GRC, Archer, MetricStream) Experience with control frameworks such as ISO 27001 ...

monitoring. Troubleshoot local area network (LAN) connectivity issues and support internal teams to re-establish remote access to customer environments via SSH, Terminal Services / Remote Desktop Services or Remote Access Controllers. Basic troubleshooting of structured cabling links between racks identifying any faults or inconsistencies and liaising with internal … timeframes. Ensure Data Centre’s are always kept in a clean and presentable manner. Knowledge and experience required: Experience working in a Managed Hosting / Public and or Private Cloud Enterprise Data Centre Environment. Proficient in Server, Storage & Network deployment and ongoing break fix support. Basic knowledge and understanding ...

security architecture, cybersecurity, secure engineering, operational technology security or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA / IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer … / Lead Auditor or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. ...

Essential Roles & Responsibilities Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Diagnose and resolve complex incidents across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing platforms, ensuring compliance with financial services regulations Implement network … security baselines, maintaining audit trails Validate device configurations, firmware posture, and compliance with golden standards and sector-specific requirements Support onboarding of new sites / services using Zero-Touch Provisioning (ZTP) and Infrastructure-as-Code pipelines Manage routing policies, QoS, wireless performance tuning, and load balancer configuration updates Collaborate ...

engineering Strong understanding of networking, systems and application security Experience with risk assessments and security controls Knowledge of security frameworks and standards, including ISO 27001 and NIST Understanding of vulnerability management Experience using security tools and technologies Strong analytical, problem-solving and communication skills Degree … this vacancy only. KEY SKILLS Cyber Security Engineer, Security Engineering, Cyber Security, Risk Assessment, Security Controls, Vulnerability Management, Security Management Plans, Security Case, ISO 27001, NIST, CISSP, CISM, CEH, Security Clearance ...

Senior IT Infrastructure Engineer is sought by an Engineering company in the Cheltenham / Gloucester area. YOUR NEW JOB Among your responsibilities will be managing and optimizing the company's IT infrastructure, and ensuring that the infrastructure is secure, scalable, and aligned with business needs. You will also lead … ensuring they are completed on time, within scope, & budget and implement and maintain robust cybersecurity measures and ensure compliance with industry standards like ISO 27001, GDPR, and Cyber Essentials. Disaster Recovery and Business Continuity is also a vital; part of the role as you will ...

levels and support sensible prioritisation of remediation alongside feature delivery and other technical work. Help improve secure software development and delivery practices, including CI / CD and related controls. Support vulnerability remediation, including root cause analysis and long-term fixes. Contribute to security standards, metrics and ways of working … ensure engineering reality supports the security claims we make to customers, partners and auditors. Contribute to wider assurance and certification activity, including ISO 27001 or other relevant standards. Requirements - Product Security Architect - not exhaustive: Strong experience in product security, application security, secure software engineering, security architecture ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our softwareis securely built. Requirements - Product Security Engineer - not exhaustive: A strong software ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

segregation of duties are consistently embedded by design. Own privileged access strategy and outcomes, including vaulting, session isolation, credential rotation and Just-in-Time / Just-Enough-Access controls - with day-to-day PAM operation delegated to specialist team leads. Own the access governance strategy - including recertification cadence, role … Access Management and Identity Governance & Administration, gained in a complex, regulated environment (financial services strongly preferred). Demonstrable experience leading a multi-year IAM / PAM / IGA transformation programme end-to-end, including target operating model design, tooling modernisation and measurable maturity uplift. Deep working knowledge ...

stewardship . Experience developing governance policies, standards and operating models. Practical experience with AI governance, AI assurance or responsible AI . Understanding of AI / model testing, evaluation and risk assessment. Strong consulting, stakeholder management and communication skills. Desirable: UK Central Government, Defence or regulated-sector experience. Defence, maritime … DMBOK, NIST AI RMF, ISO 23894, ISO 27001 or UK GDPR . MLOps, model monitoring or AI risk / control experience. Benefits: Salary up to £80,000 25 days holiday + bank holidays Private Medical Insurance Hybrid working with 2 days per week ...

location hosting environments supporting business-critical financial systems.Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management.Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned to business … / RTO and regulatory expectations.Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks.Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency.Manage third-party suppliers and strategic partners ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management . Hosting and Network Manager Define and assure backup, disaster recovery, and operational resilience … strategies aligned to business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational ...

Title: Information Security Assurance Manager Location: Plymouth, Devon + Hybrid Working Arrangements Compensation: Competitive Salary + BenefitsRole Type: Full time / Permanent Role ID: SF75431Help protect critical programmes that support the UK's security At Babcock we’re working to create a safe and secure world, together … protect critical information assets.This role is full time, 37.5 hours per week and provides hybrid working arrangements with 2-3 days in the office / onsite. Essential experience of the Information Security Assurance Manager Experience working within an information assurance, information security, or cyber security role.Knowledge of information risk ...

Title: Information Security Assurance Manager Location: Plymouth, Devon + Hybrid Working Arrangements Compensation: Competitive Salary + BenefitsRole Type: Full time / Permanent Role ID: SF75431Help protect critical programmes that support the UK's security At Babcock we’re working to create a safe and secure world, together … protect critical information assets.This role is full time, 37.5 hours per week and provides hybrid working arrangements with 2-3 days in the office / onsite. Essential experience of the Information Security Assurance Manager Experience working within an information assurance, information security, or cyber security role.Knowledge of information risk ...

Senior Software Engineer to join our existing Software Engineering team and support the development of our in-house Engineering Software tools, including Python / C++ wrappers and automation interfaces for industrial CAD, CAE and CAM platforms.What will you be doing? From day one, you will be developing novel approaches … house Computer Aided Manufacturing software. You will also build and maintain the integration layer between iCOMAT’s software tools and industrial CAD / CAE / CAM systems, automating parts of the composite design workflow and improving feedback between manufacturing and design disciplines.As well as writing software code ...

WORKING Location: Manchester; Bristol; Leeds; Glasgow; Birmingham; , Central London, Greater London - United Kingdom Type: Permanent Security Consultant United Kingdom Up to £85,000 S / C Clearable Ready to protect the systems that underpin the UK's most critical public services? We're hiring a Security Consultant to work … annum • Extensive benefits package • Continuous training provided for career progression To hear more about the Security Consultant role contact Daire McIlhatton at Reference: AMC / DMI / SC #damc ...

security architect and a cybersecurity consultant. The role sits at the intersection of naval architecture, systems engineering, product security, information assurance and MOD / maritime cyber compliance. The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. … management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

ensure compliant, ethical, and secure AI systems. This role requires strong data governance and risk management experience in defence or government, with ISO 27001 and ISO 42001 knowledge, plus active UK SC or DV #J-18808-Ljbffr ...