26 to 50 of 77 ISO/IEC 27001 Jobs in the South West

andHR tools, Microsoft 365 automation) so that configuration, integration and access are managed properly Contribute to security assurance and certification (Cyber Essentials Plus, ISO 27001) as the owner of the corporate estate and its controls, working alongside the Security & Compliance Manager Own joiners, movers and leavers … change alongside business-as-usual, and of managing an IT budget and delivery plan Understanding of security controls and frameworks (Cyber Essentials Plus, ISO 27001, NIST CSF) as they apply to a corporate IT estate, without needing to be a certification specialist The ability to lead ...

security in design, code and backlog decisions. Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI / CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security … Contribute to security standards, metrics and ways of working that improve product security maturity over time. Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our software is securely built. Requirements - Product Security Engineer - not exhaustive: A strong ...

Alert Location(s): Swindon, Wiltshire, GB, SN5 6PB Essen, NW, DE, 45141 RWE Supply & Trading GmbH To start as soon as possible, full time / part time, permanent Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate … bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI / CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating ...

Agile Framework (SAFe), agile delivery practices, and automated testing into the IT services delivered to the customer. This includes ownership of the Continuous Integration / Continuous Delivery (CI / CD) pipeline design and implementation using appropriate tooling to support agile deliveries. The engineering process and supporting toolset … design governance, configuration control, change management, verification, and release processes. Ensure engineering processes align with regulatory, customer, and internal quality standards. Own the CI / CD pipeline and tooling to support agile deliveries incorporating automated test tooling. Support broader tooling used to support the engineering processes (e.g. Azure DevOps ...

cybersecurity consulting, advisory or programme delivery. Experience working within Energy, Utilities, Resources or Critical National Infrastructure. Strong knowledge of frameworks including NIST, ISO 27001, CAF and NIS. Experience managing senior stakeholders and complex security programmes. Strong knowledge of one or more areas including OT Security, Security … hear from you. To hear more, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of compliance frameworks (ISO 27001, NIST CSF, etc.) Personal Attributes Exceptional strategic thinking combined with strong technical depth Outstanding communication and stakeholder engagement skills Strong problem ...

Experience applying recognised standards and frameworks such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001 or NIS / NIS2. The ability to translate cyber risks into practical security architectures, technical controls and implementation plans. Experience working with senior stakeholders, engineering teams ...

cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR / XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively ...

Managed Service. Accountable for gateway and guard operations, segmentation controls and compliance with security boundary requirements; experienced with multi domain routing, CDS / guard patterns and high assurance boundary architectures. This is a critical, site-based role responsible for ensuring the right skills are in place at the right … Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP / IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating and governing services within accredited ...

Cyber Security GRC Consultant (DV Cleared) Location: Remote / Hybrid - on-site presence as required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

industry quality representatives. Essential Experience Previous experience within Software Quality Assurance, Software Assurance or Quality Engineering environments. Qualified Lead Auditor in AS9100, ISO9001, ISO27001 or similar quality management systems. Experience planning, conducting and supporting audits. Knowledge of software development lifecycles and software quality assurance methodologies. Experience working within highly regulated … Experience conducting root cause analysis and driving process improvement initiatives. Desirable Experience Defence, Aerospace, Aviation, Maritime or other highly regulated industries. Knowledge of ISO 27001 and ISO 20000. Experience working within Agile development environments. Familiarity with software and systems engineering processes. Experience supporting supplier ...

Senior IT Systems Administrator / Bristol (3 days on-site) / £50,000–£60,000 | DV Clearance Eligibility Required Take ownership. Solve complex challenges. Make IT better. TwinStream is looking for an experienced Senior IT Systems Administrator to help keep our IT systems secure, resilient and performing … maintaining technical documentation and working with suppliers. Desirable: Intune, Landscape, JumpCloud, Atlassian or similar tools; ITIL Foundation; Infrastructure as Code; AWS or Azure; ISO 27001; Cyber Essentials Plus; UK public-sector experience; and involvement in agile delivery or developing IT policies and standards. ...

management, and enterprise risk management, combined with strong stakeholder engagement and leadership skills to drive security transformation programmes across the organisation. Qualification: • BSC and / or MSc in Cyber Security, Computer Science, Information Technology, Information Security or related subject or relevant industry experience. • CompTIA Security+ CASP+ (or SecurityX) • Associate … membership grade with CIISEC • ICS2 Certified Cloud Security Professional (CCSP), Certified Information, Systems Security Professional (CISSP), and / or Information Systems Security Architecture Professional (ISSAP) • CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management • Additional cloud security qualifications such as Microsoft Azure, AWS, GoogleAdvanced degree ...

efficient operation of the Service Assurance Team while maintaining exceptional customer service when dealing with customer challenges on the SAT desk or on site / remotely. All while delivering exceptional customer service to our customers. You will be required to travel and work flexibly, including overnight stays. Responsibilities: Represent … deploying and supporting complex IT, telecoms, and networking solutions. Deep understanding of Draytek, Ruckus and UniFi equipment. Solid understanding of the OSI or TCP / IP model. Hands-on experience with monitoring, network diagnostic and network analytics tools. Comprehensive industry knowledge Experience of Cloud Telephony, installation and support. Thorough ...

risk analyses and security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS / IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security … Standards & Frameworks: Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand ...

risk into practical architectural solutions that support organisational objectives and digital transformation. Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments. Demonstrable experience designing ...

executive accountability for the vendor's contractual delivery obligations, outcomes and service levels across the full engagement. Chair the top-tier governance forum (programme / steering board) with the DSO sponsor; own executive escalation and final decision authority on the vendor side. Provide delivery assurance independent of the Project … Manager — health checks, gate assurance and independent quality reviews. Own the engagement commercials — margin, resource ramp-up, subcontractor and SAP-partner governance, and contract / variation posture. Secure and orchestrate vendor-side resources and specialist SMEs as demand requires, and guarantee key-personnel continuity for the named team. ...

standards. Review and remediate infrastructure vulnerabilities. Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles. Support endpoint / server security controls. Ensure appropriate logging and security monitoring is enabled and reviewed. Support encryption and certificate-management requirements. Review infrastructure against security standards … reviewing logs, identifying root causes, and implementing remediation. Knowledge & Skills Technical (Understanding, awareness or experience with the following) Strong knowledge of networking, including TCP / IP, DNS, firewalls, VPNs, proxies, and load balancers. Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash. Familiarity ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills #J ...

programmes Develop Security Management Plans Understand and define capability context; perform Risk Assessments Define and architect Security Controls Plan Vulnerability Management activity Develop Key / Certificate Management Plans Produce Security Case Reports Write clear, concise security policies and procedures Contribute to the ongoing development of the wider cybersecurity capability … cyber security roles, with a focus on security engineering Strong understanding of networking, systems, and application security Knowledge of security frameworks and standards (ISO 27001, NIST, etc.) Proficiency with security tools and technologies Excellent problem-solving and analytical skills Strong communication and collaboration skills ...

Cyber Security Consultant South West / M4 Corridor (Hybrid) | £85,000 I'm working with a growing cyber security consultancy that's looking to bring in an experienced Cyber Security Consultant to support a range of complex projects within highly regulated environments. This is a great opportunity for someone … network infrastructure Ability to assess and communicate risk in a clear and pragmatic way Experience with recognised frameworks and standards such as NIST, ISO 27001, CAF, GovAssure or Secure by Design Professional certifications such as CISSP, CISM, Lead Auditor Current SC or DV clearance Why This ...

equivalent demonstrable experience Strong communication, analytical and report-writing skills Desirable Experience Knowledge and application of Secure by Design principles Experience working with ISO 27001, NIST or similar security frameworks Understanding of security assurance and compliance activities Familiarity with classified or highly regulated environments Experience within ...

code tools such as Power Automate, Power Apps or Workato. An ITIL Foundation, Microsoft, cybersecurity or risk management certification. Awareness of Cyber Essentials, ISO 27001, business continuity and disaster recovery frameworks. About you You’ll be a confident problem‐solver who can balance technical detail with ...

LLDs), and operational runbooks. Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies. Integrate PAM solutions with Active Directory / LDAP, enterprise SIEM tools, and ITSM platforms. Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks. … Architect or Senior CyberArk SME role. Deep hands-on build and configuration experience with the CyberArk suite. Proven ability to author defence-grade HLD / LLD architecture documentation. Prior delivery experience within Defence, Aerospace, or high-assurance secure environments is highly desirable. CyberArk certifications (CDE, CDP, Sentry) or CISSP ...

Server operations. - Monitoring tools such as Azure Monitor or Grafana. - Git for version control. - AZ-104 certification or equivalent practical experience. - Supporting ISO 27001 audits or SOC 2 assessments. - Identifying and addressing AI-enabled cyber threats. - Supervising or line managing technical colleagues. Salary and benefits - Annual ...