1 to 25 of 45 ISO/IEC 27001 Jobs in the Thames Valley

Cyber Security Implement Cyber Security policies under the SIRO. Lead ISO 27001 recertification, internal audits, and remediation. Work with infrastructure / product teams on data security and incident handling. Oversee playbooks and ensure measurable risk reduction. Digital Clinical Safety Collaborate with IT, Clinical, Legal … SIRO, and Caldicott Guardian. Maintain the Digital Clinical Safety Policy with CMO / CTO. Lead biennial reviews for DCB0129 / 0160 and MDD compliance. Oversee training compliance and safety case documentation. Quality Management Lead the ISO 9001aligned Quality Management System. Manage ISO 9001 audits ...

Policy & Governance Lead / GRC Analyst (SC Cleared) - Reading (Hybrid) We're recruiting a Policy & Governance Lead / GRC Analyst to support sensitive MOD / UK aerospace programmes with Edgewing . You must hold active SC clearance and be able to work on-site in Reading (hybrid … / custom working available where appropriate). The Role (Policy, Governance & Assurance / GRC) You'll define, maintain and assure compliance with the organisation's ISMS policy framework , supporting audit readiness and ongoing control assurance aligned to ISO 27001 . Key Responsibilities ...

Head of Internal Audit, you will build and lead a modern, insight-led assurance capability across IRISs multi-product SaaS portfolio, including accountancy, payroll / HCM, and education, as well as core group functions and processes. This role combines Third Line (Internal Audit) leadership with support from … Audit Charter, methodology , and quality framework in line with IIA Global Internal Audit Standards Lead end-to-end audits across operational, financial, compliance, product / technology, and change domains, directing co-sourced SMEs where required , and introducing agile, data-enabled auditing techniques to increase coverage and reduce cycle time ...

Cybers Security Architect Contract Details Role Title: Cybersecurity Architect Location: Hybrid 2-3 days onsite per week Wokingham Contract Duration: 12 Months Rate: £570 / day inside IR35 Active SC Clearance Required Core Responsibilities Design and maintain secure architecture frameworks for enterprise systems across cloud, on-premises, and hybrid … across infrastructure and application layers Define and enforce security standards, reference architectures, and policy controls aligned with frameworks such as NIST, ISO / IEC 27001, and CIS Evaluate, select, and integrate security technologies including: Identity and Access Management (IAM) Security Information and Event ...

Information Security & Data Protection Manager Based: Remote (UK) / High Wycombe / London (N7) / Hybrid Term: Permanent, Full time Reporting to: Chief Information Officer (CIO) Salary: £60k - £85k pa + excellent benefits The Role We're looking for an Information Security Compliance Specialist to take ownership … business, own the incident management process (including phishing response and simulation exercises), and manage vulnerability scans and penetration testing (including external Red / Purple / Blue Team engagements) Risk & resilience: conduct risk assessments across products, systems, and processes; own the Information Security and Data Protection risk register, contributing ...

Role : PAM Specialist ( Privileged Access Management) Location : Abingdon , UK With Hybrid (2 to 3 Days / Week onsite) Contract: Contract | InsideIR35 | 6 months (possible and likely extension) Overview: The Client is seeking a PAM (Privileged Access Management) Specialist to implement, configure, and manage the BeyondTrust PAM platform. The role … rotation and manage privileged account workflows Record, monitor, and manage privileged sessions Onboard servers, network devices, and applications to PAM Discover and vault service / application / shared accounts Configure session proxies, Just-in-Time access, and break-glass procedures Integrate PAM with SIEM and Active Directory / ...

diligence, contractual security commitments and third‐party risk management Help define how security responsibilities and capabilities are allocated across Aurora’s technology, legal / compliance and business functions, ensuring clear accountability, effective challenge and strong delivery Drive security by design across Aurora’s products, platforms, systems and infrastructure, working … sufficient depth to guide strategy, challenge decisions and work effectively with specialist software engineering and IT teams Broad experience across areas such as product / application security, cloud / infrastructure security, identity and access management, incident response, vulnerability management and security governance Proven experience developing and delivering ...

enable global coverage Driving continuous improvement across security and network operations processes and performance Essential Experience Proven experience leading a Security Operations Centre (SOC / NSOC) or cyber security function within a complex organisation. Experience in security operations, incident response, risk management, and service delivery. Experience maintaining compliance with … response, and security monitoring. Good knowledge of network infrastructure, cloud technologies, and endpoint security. Experience with Microsoft Azure, Microsoft Sentinel, Microsoft Defender, and Windows / macOS environments. Understanding of security governance, compliance, and audit requirements. Leadership & Communication Strong leadership, people management, and team development skills. Ability to drive continuous ...

Design and evolve scalable backend services in Python using FastAPI for high-availability, high-throughput workloads. Build well-versioned RESTful APIs aligned to OpenAPI / Swagger, with strong conventions for consistency, idempotency, and backward compatibility. Implement authentication and authorization using OAuth2 / OIDC, session management, and fine-grained … meet performance budgets and latency goals. Integrate with AI pipelines and model-serving endpoints, including streaming responses, async inference jobs, and robust error / retry semantics. Palantir Foundry Integration Work with Palantir Foundry to build and maintain data pipelines, ontologies, and integrations that connect backend services to Foundry-based ...

public sector accounts. This is a remote, client-facing role for a highly technical and experienced presales professional with a strong MoD / Government / Public Sector background and current SC clearance. Key Requirements Essential skills and experience: 10+ years’ experience in IT, with at least 3 years … Government or public sector clients Ability to translate technical challenges into clear commercial value Strong expertise in: Cisco routing, switching, gateways, and applications TCP / IP, SNMP, Netflow, VoIP LAN / WAN topologies (MPLS, Frame Relay, ATM) Security concepts and network infrastructure design Network performance and fault / ...

Location: Culham, Oxfordshire (2 days / week on-site) Contract: Until 18 / 12 / 2026 IR35: In Scope Rate: 50 / hr Umbrella Clearance: Active SC or lapsed within 12 months Role Overview We are seeking an experienced OT Cyber Security Analyst to support … implement and maintain effective OT security controls. Key Responsibilities Implement OT security controls (segmentation, secure remote access, monitoring tools) Integrate OT environments into SIEM / SOC platforms and tune detections Support OT asset discovery, inventory, and security assessments Identify vulnerabilities and support remediation planning Assist with OT incident response ...

delivery teams in remote environments Desirable Experience Experience supporting government or critical national infrastructure environments Knowledge of NCSC guidance, Secure by Design principles, ISO 27001, NIST or JSP standards Experience delivering maturity assessments or audit activities Professional certifications such as CISSP, CISM, ISO 27001 … progression pathway into our consultancy service, and we will passionately support professional growth to develop our employees. Flexible working is available, including part‐time / term‐time patterns. All suggestions are welcomed and will be discussed as part of a proposed employment package. Logiq is dedicated to fostering ...

support new opportunities Provide technical leadership across problem management and complex change activities What We’re Looking For Essential Skills & Experience Strong 3rd Line / Infrastructure experience (3–5 years minimum) Experience in a Managed Services environment Expertise in networking technologies including: Juniper (Mist), Aruba, or Cisco (switching, routing … wireless) VLANs, DNS, DHCP, and certificate services Firewalls (Fortinet, Cisco, Palo Alto, Check Point) ESX / virtualisation experience Network Access Control (Cisco ISE / Aruba ClearPass) Familiarity with ITSM tools (e.g. ServiceNow) Confident working directly with customers and senior stakeholders Desirable Cisco CCNP (or equivalent) ITIL v4 Foundation ...

with technical teams across the domain & drive the security solution deployment.Should have experience in configuring and managing security products such as firewalls, intrusion detection / prevention systems (IDS / IPS), SIEM (Security Information and Event Management) systems, Log Collector and Identity Management solution.Should have customer facing skills … least in one of the following solutions: Logging, PKI Infrastructure, Identity, and access management, Security testing in telecom networks.Experience with 3GPP 5G Release 15 / 16 will be a plus.Security certifications (e.g., CISSP, CISA, CCIE, CISM) or knowledge of security frameworks and best practices (e.g., NIST, ISO ...

Specialist - £592 PD (Inside IR35) – 6 Month Contract – Hybrid 2 / 3 Days in Oxford – BPSS Required Overview: We are seeking an experienced Privileged Access Management (PAM) Specialist to join a major UK government research organisation on a long-term programme of work. This is a hands-on technical … Responsibilities: Implement, configure, and manage enterprise PAM toolkits. Configure and support Privileged Remote Access solutions. Manage credential vaulting, automated password rotation, and check-in / check-out workflows. Configure and maintain session monitoring and recording. Support discovery, onboarding, and lifecycle management for service accounts. Onboard Windows, Linux / ...

security reporting, SIEM alignment, and incident response coordination Oversee security incident management in line with the client Cyber Security Incident Response Plan Own joiner / mover / leaver processes, RBAC, PAM, and monthly access control audits Ensure delivery of security assurance artefacts for internal and external audit requirements … Support and coordinate penetration testing, vulnerability management, and disaster recovery exercises Ensure compliance with GDPR / DPA 2018, NCSC IAS5, CAF, and related government standards Maintain and enforce security controls across Oracle Cloud environments and SaaS applications Ensure secure configuration of Oracle ERP (HCM, ERP, EPM) security models including ...

Cyber Security analyst Until December £45 - £50 / Hr Inside IR35 Oxfordshire Clearance: SC We are seeking a Cyber Security Analyst for our Government client based in Oxfordshire. This role will be office based 2 days per week and the remainder remote. The Cyber Security analyst role will … initial contract until 18 / 12, paying between £45- £50 / Hr Inside IR35. This role is inside IR35 - Due to the service of the role it will now be based on an Umbrella solution. Clearance: SC Role Profile We are seeking an experienced OT Cyber Security Analyst ...

Cyber Security ConsultantMainly remote with occasional UK office / site visits£55,000-£65,000 depending on experience, + Benefits An established and expanding information security consultancy is looking to appoint a Cyber Security Consultant to support a growing portfolio of client engagements across the UK. This … governance documentation Experience required: 2+ years experience in information or cyber security Previous consultancy experience with the ability to engage effectively with clients / customers and understand their requirements Ability to simplify complex topics and offer practical, grounded advice An understanding of ISO 27001, GDPR ...

Role: OT Cyber Security Analyst Location: Culham - 2 days per week on site (hybrid) Contract length: Until 18 / 12 / 2026 Day rate: Approx. 50 / hour (Umbrella) or 36.43 / hour (PAYE) IR35: In scope This role sits at the heart of operational technology … ensure security controls are implemented and sustained. Contribute to governance artefacts - policies, standards and documentation that underpin OT security. Support integration with SIEM / SOC functions for OT environments. What our client is looking for Strong OT security experience within ICS or critical infrastructure - ideally from oil & gas, rail ...

full network cycle services for fixed, private and mobile operators. Private networks- We find the best technology, manage assets and refresh systems. With 24 / 7 network operations, we keep things running smoothly, while operating comprehensive network repair and maintenance to keep everything in top shape. Want to come … customer-facing roles; strong knowledge of vulnerability management, PEN testing, and risk mitigation; expertise in network security, device management, and governance; familiarity with PUAM / UAM tools and practices; excellent communication, reporting, and stakeholder management. Desirable: Certifications such as CISSP, CISM, or CEH; knowledge of CAF, ISO ...

Policy & Governance Lead / GRC Analyst Active SC Clearance – required to work on‐site MOD / aerospace programmes. Aerospace and Defence Experience – demonstrable background delivering architecture within MOD, Defence Digital, or UK aerospace environments. This role will be based in Reading with hybrid / custom working options … where appropriate. Area: Policy & Governance, GRC / Assurance Purpose of the Role Define, maintain, govern, and assure compliance with the organisation’s ISMS policy framework, standards, and procedures, while supporting audit readiness and control assurance. Key Responsibilities Own and maintain all policies, standards, procedures, and guidelines aligned to ISO ...

expert knowledge of KPMG's technology ecosystem, incl. the main applications and technologies that interact with integration technologies If required, provide advice to and / or seek to learn from other Member Firms, client teams and / or clients that are seeking to implement or improve their … Management, Logic Apps, Event Grid, Service Bus, Key Vault, and Blob Storage. Demonstrable knowledge of DevOps & IaC, including Azure DevOps, GitHub, Terraform, Azure Bicep / ARM, and Azure Policy. Knowledge of other leading Cloud-based integration platforms, e.g., AWS Integration Services, MuleSoft, Dell Boomi, Informatica Knowledge of security aspects ...

transport protocols (TCP, UDP, ICMP, ARP), infrastructure protocols (DNS, DHCP, BGP, SNMP), common application protocols (SMB, RDP, HTTP, FTP etc) and security protocols (TLS / SSL, IPSec, SSH, SAML, OAuth etc) Proven history of identifying, assessing and remediating network related security risks / misconfigurations Strong technical knowledge … projects spanning multiple countries and cultures Background of defining security standards and processes in large corporate IT environments Working knowledge of Cyber Security frameworks / methodologies (such as NIST, ISO 27001, MITRE ATT&CK, Lockheed Martin Kill Chain etc) Network Security Architect ...

/ 4 HANA Finance Enterprise Architect The role of the SAP S / 4 HANA Finance Enterprise Architect is to develop the UK Firm’s technology strategy for Finance and Engagement Management domain and translate this into a roadmap that determines our investment priorities and transformation portfolio. … solutions; and govern relevant technology choices within the Firm. In addition to the FEM domain, you will be expected to cover other business and / or technology domains as and when required. Core knowledge Maintain a high level of technical knowledge incl. current, emerging and future technology market trends ...

Policy & Governance Lead / GRC Analyst Active SC Clearance – required to work on-site support sensitive aerospace programmes. Aerospace and Defence Experience– demonstrable background delivering architecture within MOD, Defence Digital, or UK aerospace environments. This role will be based in Reading with hybrid / custom working options where … appropriate. Area: Policy & Governance, GRC / Assurance Purpose of the Role Define, maintain, govern, and assure compliance with the organisation's ISMS policy framework, standards, and procedures, while supporting audit readiness and control assurance. Key Responsibilities Own and maintain all policies, standards, procedures, and guidelines aligned to ISO ...