151 to 175 of 615 ISO/IEC 27001 Jobs in the UK excluding London

Platform Architecture & Engineering responsibilities: Design and implement scalable Databricks Lakehouse platforms on AWS and / or Azure aligned to client requirements Architect end-to-end data platforms including ingestion, storage (Delta Lake), processing, and consumption layers Build and configure cloud infrastructure using infrastructure-as-code (e.g. Terraform & Declarative Automation … Bundles(DAB's)) Establish secure, compliant environments including networking (VNet / VPC, Private Link), identity (IAM / Entra ID), data governance (Unity Catalog), and access controls Define environment strategies (dev / test / prod), CI / CD pipelines, and release processes for Databricks deployments Implement ...

management solutions to companies in the distributive trade – wherever they are in the world. With a unique depth of knowledge and experience in ERP / SaaS solutions, Klipboard has a wide range of clients includes wholesalers, distributors, merchants and retailers from small traders to multinational enterprises. Klipboard has offices … Manage and maintain cloud infrastructure using Infrastructure as Code (IaC) methodologies and tools, ensuring consistency, scalability, and operational efficiency. Design, build, and support CI / CD pipelines to enable efficient, automated, and reliable deployment processes. Ensure services operate within defined Service Level Objectives (SLOs) and error budgets, using monitoring ...

remediation. Implement and maintain AWS security controls aligned to ISO 27001, NIST and cloud security best practices. Proficiency in building / configuring SOAR platforms such as Shuffler and Tracecat. Develop security automation tooling, scripts, and infrastructure as code processes to streamline security operations. Take ownership … stages of your career with us to look something like this: Within 1 month: Familiarity with Company Policies and Security Infrastructure Familiarity with AWS / Azure Security Best Practices and the business Setup Integration into DevOps Workflow for UK Within 3 months: Familiarity with Company Policies and Security Infrastructure ...

candidate will work with key business stakeholders, SOC, IT and 3rd party vendors, to ensure that we operate a robust Cyber Security infrastructure and ISO27001 ISMS that, is highly effective in protecting the business, in line with our commitment to clients and our regulatory obligations. Key Responsibilities: Working with … practice and company procedures. Operational Excellence: Continually delivering and improving excellence for all clients and customers. Client and Customer Focus: Add value to client / customer, adhere to Treating Customers Fairly principles, and operate as a true business partner. Communication: Communicate clearly and concisely, tailoring content and style, with ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

adding friction to their day. Technical Compliance and Assurance - Own the technical controls behind our certifications and assurance activity, including Cyber Essentials Plus, ISO 27001, evidence gathering, and remediation. Technical Risk Assessment - Lead technical security risk assessment across projects, suppliers, and internal services, identify where … data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. ...

Title: Cyber Security Governance & Assurance Specialist - ESN Req ID: 62449 Job Function: Cyber Security Posting Start Date: 04 / 09 / 2026 Posting End Date: 15 / 09 / 2026 Division: UK Business Job Location: GBR Bristol - Assembly, GBR-Birmingham-Three Snowhill, GBR-London-BTHQ … Contract. Deliver and verify the implementation of end to end security services as defined within specified the ESN contracts. Deliver and implement ISO27001 compliant security strategies, policies, procedures, processes, threat identification & responses that provide wrap-around security services and solutions for the ESN service. Deliver the required Security accreditation ...

security and privacy assessments, including Data Protection Impact Assessments (DPIAs) and associated reviews. Support the ongoing maintenance and development of the firm's ISO 27001 management system, as well as future ISO 42001 requirements. Contribute to information governance initiatives, including data classification and records … developing or supporting policies, procedures and governance frameworks. Strong stakeholder management and communication skills. Excellent analytical and problem-solving abilities. Relevant information security and / or data protection certifications would be beneficial. Degree-level education would be advantageous. What You'll Bring You will be someone who is: Professional ...

Advanced KQL skills, with the ability to develop and optimise complex detections and threat hunting queries. Strong scripting and automation experience using PowerShell and / or Python, including API integrations and workflow automation. Experience administering Microsoft Entra ID, Conditional Access, Intune and Microsoft 365 security solutions. Good understanding … meet strict deadlines. Excellent written and verbal communication skills. Candidates must be able to pass security vetting (BS7858). Salary: £60,000 | Location: Reading / hybrid 2 days from home ...

actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents. Education / Experience Qualifications: Bachelor's Degree with 8 or more years of related experience is preferred. An equivalent combination of education and / … organization. Experience building an IT Third-Party Risk function within a global organization. Industry recognized certifications such as the CRISC, CISA, CISSP, CISM, and / or CGEIT are preferred. Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC). Physical Requirements: Professional office ...

role offers real social impact and the opportunity to shape how our platform is built. Key Responsibilities Manage our Azure cloud estate and CI / CD pipeline. Provision and manage cloud and server infrastructure programmatically. Support desktop clients with Windows, database, and application hosting expertise. Enforce security, coordinate penetration … Skills & Experience Practical, hands-on exposure to Azure cloud services (App Service, Azure SQL, Service Bus, Entra) or similar PaaS. Working understanding of CI / CD pipelines and containerisation. Strong Windows Desktop and Server administration (setup, maintenance, troubleshooting). Awareness of UK data protection and security compliance frameworks (GDPR ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

trusted with real responsibility early, including independently handling live production issues. IO’s product is trust: we help businesses achieve ISO 27001, SOC 2, GDPR and other certifications. That means our own infrastructure must model the standards we sell — security and availability come before speed … techniques and their implementation Experience of AI hosting Certification in AWS or Kubernetes Familiarity with ISO 27001 or other security / compliance standards Experience with Ruby on Rails Experience in a regulated or compliance-driven environment Why you’ll love it here A fast-growing ...

Centre (ISAC). Advisory: Advise the Board and Senior Leadership Team on security implications of new contracts, office moves, or changes in company ownership / structure. Integrated Security Support Collaborate with the IT Manager (responsible for ISO 27001 / Cyber Essentials Plus) to ensure … Security "List X" environment. Regulatory Knowledge: Deep understanding of the Security Policy Framework (SPF), Cabinet Office security controls, and List X requirements (specifically FSA / iv). Vetting: Active eDV clearance Detail Oriented: Meticulous record-keeping skills for musters, visitor logs, and classified document registers. Desirable: DISA / ...

policies, NAT, and high-availability configurationsDeploy and support FortiADC load balancers, including application delivery, traffic distribution, and high-availability designsConfigure and manage Dell L2 / L3 switching environments, including VLANs, trunking, and inter-VLAN routingDesign and maintain core routing architecture using protocols such as OSPFProvide secure VPN access into … carrier handoffsEnsure resilient and redundant network designs aligned to production requirementsFortinet Firewalls (FortiGate)FortiADC (load balancing and application delivery)Dell networking (Layer 2 / Layer 3 switching platforms)Routing (OSPF)VLAN design and network segmentationLayer 2 / Layer 3 switchingWhat You Bring to the Role:Education:Bachelor ...

multiple stakeholders Familiarity with CRM systems such as Salesforce or equivalent sales and quoting tools Strong domain knowledge across cybersecurity services Understanding of OT / IT security, Continuous Assurance, Continuous Threat Exposure Management, Digital Identity and Access Management, and complex managed services Familiarity with GDPR, HIPAA and ISO … Senior Stakeholders Mentoring Account Teams Coaching Sales Teams Certifications & Qualifications GDPR Familiarity HIPAA Familiarity ISO 27001 Familiarity Industry Keywords OT / IT Security Continuous Assurance Continuous Threat Exposure Management Digital Identity and Access Management Managed Services Tools & Technologies Salesforce CRM Systems #J-18808-Ljbffr ...

benefits. Application Details Location: Based at client locations, working remotely, or based in our Godalming or Milton Keynes offices. Start Date: ASAP. Reference: PR / 010824_1774544720. Posted 26 March '26. Enquiries: enquiries@triad.co.uk 01908 278450 Salary £75k, plus excellent company benefits. About Us Triad Group … 27001, NIST, CIS, OWASP, NCSC guidance Experience working in the UK Public Sector and associated security standards and guidance including GovAssure / NCSC CAF, HMG Security Policy Framework. Knowledge of cloud security principles across platforms such as AWS, Azure, or GCP Experience with identity and access management ...

with clear communication, supporting both operational delivery and the continual improvement of NICE's cyber security posture.What the candidate will be expected to do / bring:o Act as a hands on cyber security specialist, investigating security alerts, responding to incidents and supporting day to day operational cyber resilienceo … escalation point for complex security issues, contributing expert analysis and practical solutions o Support compliance with recognised security standards and frameworks (e.g. Cyber Essentials, ISO27001), maintaining clear and auditable records o Communicate complex technical risks and findings clearly to both technical and non technical stakeholders About us The Infrastructure, Cyber ...

role where you can keep your feet firmly on the Microsoft stack, without getting pulled into round-the-clock SOC shifts or systems build / configuration? This could be exactly the move you're after. We're working with a fast-paced financial services group, currently evolving through … doing Monitoring and auditing security across the Microsoft stack (Defender, Purview) to spot, flag and escalate risks - this is a second-line, monitoring / audit role rather than a build or configuration one Producing management information and reporting, using some light scripting (e.g. JSON) to support this Supporting audits ...

response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting for IT leadership and senior business stakeholders. Conduct security due diligence for acquisitions and support … Strong understanding of cyber security governance, risk management, and compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security ...

secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes / container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI / CD pipelines Perform security code reviews and provide secure coding … PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS / IPS rules and technical runbooks Monitor emerging threats and continuously improve security controls Work across engineering, security and compliance teams to drive security improvements ...

office systems. Our total focus at Cloudfy is to help you sell more, reduce costs to serve, allow your customers to self-service 24 / 7 and provide a completely integrated solution. Back in 2010, a team of seasoned e-commerce experts formed Cloudfy to address the need … improve the automation, security, scalability and reliability of Cloudfy's platform and supporting services. You will be responsible for building and maintaining CI / CD pipelines, managing cloud infrastructure, supporting operational excellence initiatives, and helping embed DevSecOps principles across the software development lifecycle. Note: This role ...

Agentic SDLC. You will own blueprints, guardrails and platform fabric, enabling product teams to ship at world-class velocity while ensuring security, compliance (UK / EU GDPR and ISO 27001 / 42001), and scalable, resilient #J-18808-Ljbffr ...

DevOps / Infrastructure Engineer Location: Shoreham-by-Sea, West Sussex Working pattern: Hybrid – minimum 2 days per week in the office Type: Permanent We’re looking for a hands-on DevOps / Infrastructure Engineer to join an established infrastructure team during a significant programme of work. The team … while helping to improve automation, security, reliability and day-to-day infrastructure operations. Security is a key focus, with the team working towards 24 / 7 patching through increased automation and improved processes. You’ll need to be someone who can balance technical delivery with security and customer impact. ...

experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP / IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and / or ISO … 27001 Security incident investigation and remediation You don’t need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems rather than just identify them. CISSP, CCSP or Security+ would be useful, but practical experience carries ...