51 to 75 of 99 ISO/IEC 27001 Jobs in the South West

Description Cyber Security GRC Consultant (DV Cleared) Location: Hybrid / South West Region Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within … culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD / Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce ...

Experience: Extensive experience engaging with stakeholders at all levels, including senior leadership and C-suite executives. Proven experience operating within client-facing and / or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

Jersey, Leeds, Liverpool, London, Manchester, Milton Keynes, Newcastle, Nottingham, Port Talbot, Reading, Southampton, St Albans Business Line Technology & Transformation Job Type Permanent / FTC Date published 13-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

between technical findings and the risk decisions that senior leaders need to make. You'll bring the judgement to know when a full ISO 27001 governance programme is appropriate and when a lighter-weight approach serves the engagement better. At Lead level, your impact extends beyond … attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI / CD pipelines as part of a shift-left security approach Made Tech sponsors attainment of recognised cyber certifications for staff in scope. ...

hours per week. We are happy to discuss flexible working! Top 3 skills needed for this role:Information Security Governance & Risk LeadershipRegulatory & Framework Expertise (ISO27001, GDPR, NIST)Stakeholder Communication & Security Culture InfluenceWhat this role is all about:As our Senior Information Security Officer, you’ll drive a business-wide security … Governance team, and ensure our security posture not only protects but enables the business to thrive.Key Actions Lead the continuous improvement of Vitality’s ISO27001 framework and Information Security Management System (ISMS), ensuring ongoing compliance Deliver key security initiatives that bring the Information Security Strategy to life and drive measurable ...

week. We are happy to discuss flexible working! Top 3 skills needed for this role: Information Security Governance & Risk Leadership Regulatory & Framework Expertise (ISO27001, GDPR, NIST) Stakeholder Communication & Security Culture Influence What this role is all about: As our Senior Information Security Officer, you'll drive a business-wide security … team, and ensure our security posture not only protects but enables the business to thrive. Key Actions Lead the continuous improvement of Vitality's ISO27001 framework and Information Security Management System (ISMS), ensuring ongoing compliance Deliver key security initiatives that bring the Information Security Strategy to life and drive measurable ...

recruitment process. No recruitment agency working with Turner & Townsend will ask candidates to pay a fee at any time. Any unsolicited resumes / CVs submitted through our website or to Turner & Townsend personal e-mail accounts, are considered property of Turner & Townsend and are not subject to payment … agency fees. In order to be an authorised Recruitment Agency / Search Firm for Turner & Townsend, there must be a formal written agreement in place and the agency must be invited, by the Recruitment Team, to submit candidates for review. SummaryType: Full-timeFunction: Information TechnologyExperience level: Mid-Senior LevelIndustry ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

cloud-native projects Flexible and hybrid working arrangements Dedicated Career Manager and structured career development Company bonus scheme 25 days annual leave with buy / sell options Private medical and dental insurance Competitive pension scheme Cycle-to-work scheme and additional lifestyle benefits Inclusive and supportive workplace culture Opportunities … encryption and application security Experience with AWS security services such as IAM, GuardDuty, KMS, Macie and WAF Knowledge of security frameworks including NIST, ISO 27001 and CIS Benchmarks Experience with Infrastructure as Code tools including Terraform or CloudFormation Excellent stakeholder management and communication skills Strong analytical ...

information security, governance or security management. Demonstrable experience developing and delivering cyber or information security strategy. Strong knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting ...

such as cloud security, infrastructure security, identity and access management and application security. - Utilise your experience of working with recognised security frameworks and standards (ISO27001, NIST 800-53, CIS). - Translate technical security risks into business impact with an ability to make recommendations to technical audiences, business leaders and senior ...

Location: Bristol / Hybrid (2-3 days on-site) Security Clearance: Must have active SC clearance (DV Preferred) The Role We are looking on behalf of our client, a leading defence consultancy, for an AI & Data Governance Lead to establish and oversee robust framework models for AI deployments across … leaders. Requirements Proven background in data governance, risk management, or AI ethics within defence, aerospace, or government sectors. Strong working knowledge of ISO 27001 (Information Security Management) and ISO 42001 (Artificial Intelligence Management System). Hands-on understanding of data management principles, MLOps lifecycles ...

including Microsoft security technologies. Experience investigating security incidents across cloud and on-premise environments . Knowledge of Windows environments, with working knowledge of Linux / Unix. Understanding of threat intelligence, IOCs, TTPs and the MITRE ATT&CK framework . Experience improving detection logic, alert quality and security controls. Strong … stakeholder communication and incident management skills. Knowledge of frameworks such as ISO 27001, NIS and GDPR would be beneficial. Desirable certifications include: SC-200, SC-300, SC-400, MS-500, Security+ or similar cyber security qualifications. The role will involve participation in an out-of-hours ...

applied effectively. Willingness and ability to hold the required security clearance for highly classified environments. Professional security qualification such as CISSP, CISM, Security+, ISO 27001, Certified Cyber Professional or equivalent experience. Knowledge of cyber and information risk frameworks or methodologies. This is not an exhaustive list ...

multi–risk‐stripe review strategy; and focus on technology failure and third‐party technology risks—particularly those tied to cloud service providers and communication / collaboration products—while assessing the quality of technology risk assessments and governance across on‐premises and cloud environments. You report to the Employee Platforms … technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure.Understand and utilise trends and toolsets within AI / LLM platforms to assist and streamline assessments in order to produce faster quality outcomes. Required qualifications, capabilities, and skills BS / BA degree ...

Define privileged access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory / LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer … Enterprise-scale PAM architecture and implementation experience Strong understanding of IAM, least privilege and privileged credential lifecycle management Experience with session isolation / recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM / SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting … with: Strong hands-on experience with network infrastructure and security, segmentation, firewalls, endpoint security, XDR and access control . Experience securing Cloud ( Azure and / or AWS) and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such ...

Devonport, Plymouth, GB, PL2 2BG Onsite or Hybrid: Hybrid Job Title: Information Security Assurance Manager Compensation: Competitive Salary + Benefits Role Type: Full time / Permanent Role ID: SF75431 Help protect critical programmes that support the UK's security At Babcock we’re working to create a safe … critical information assets. This role is full time, 37.5 hours per week and provides hybrid working arrangements with 2-3 days in the office / onsite. Essential experience of the Information Security Assurance Manager Experience working within an information assurance, information security, or cyber security role. Knowledge of information ...

solutions are built and operated in line with security standards. The role aligns to three key areas: supporting safe adoption, understanding attacker use / exploitation of AI, and applying AI to enhance security capability.Why Join us? If you think all banks are the same, you’re wrong. … interest in and understanding of AI technologies, including machine learning concepts and generative AI use cases.Familiarity with security frameworks and regulations such as ISO 27001, NIST, or UK GDPR, and how these apply to AI systems.Experience supporting technical implementation, validation, and testing of security controls within ...

improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project ...

Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance ...

Senior Engineer - 3rd Line (IT Modern Workplace & Security) Stonehouse - Hybrid Working - 2 Days Onsite / 3 Days Home Salary 55-65k DOE Full-time About us We believe in making technology easy and enjoyable for businesses of all sizes, providing communications, connectivity, mobile, security and IT services … aligned controls, GDPR considerations) Endpoint & Device Management Architect and manage device estates using: Microsoft Intune Windows Autopilot Define secure baseline configurations for Windows 11 / macOS, IOS & Android Improve device security posture, patching and lifecycle management Automation & Engineering Quality Use PowerShell and automation to: Reduce manual effort Improve consistency ...

environment Work with global teams to align standards and processes Ensure systems are secure, scalable, and compliant Support disaster recovery and business continuity planning / testing Provide technical guidance and leadership to team members Engage with vendors and manage third-party services. What Were Looking For Strong experience … growing global environment Benefits include 25 days annual leave, plus statutory days. 8% non-contributary Pension Life Assurance 3 x salary Income Protection / long term sickness cover Employee Assistance Programme Cycle to Work scheme ...

engineering colleagues through identifying opportunities to optimise cloud resources, performance and cost through continuous monitoring and automation. Ensure compliance with relevant frameworks, including ISO 27001, PCI DSS, and UK financial regulations. Support cloud capabilities internally through the mentoring of new colleagues and technical teams such … storage solutions. Knowledge of containerisation, orchestration (Kubernetes), and serverless architectures. Experience with Infrastructure-as-Code (IAC) using tools like Terraform or Cloud Formation, CI / CD pipelines, Jira and Jenkins. Awareness and use of architectural frameworks. Strong problem-solving abilities and stakeholder communication skills. Experience working in a regulated ...