126 to 150 of 1,164 ISO/IEC 27001 Jobs in the UK

seeking a Senior Identity Security Engineer to design, implement and enhance large‐scale identity environments across Microsoft Active Directory, Entra ID, PKI / ADCS and modern hybrid platforms. This role combines hands‐on engineering with leadership in security design, implementation and assessment, requiring someone who can resolve complex identity … providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body ...

Party Security ManagerInternal AuditRisk and Compliance FunctionsData Privacy and DPO FunctionTechnology and Change TeamsHuman ResourcesLearning & DevelopmentBusiness UnitsExternal Auditors and AssessorsOperational Resilience FunctionPerson SpecificationKnowledge / Experience / Skills:Strong experience in cyber security operations, incident response or security monitoring.Experience managing security service providers, SOC or MDR capabilities.Knowledge of cyber … NIST CSF, FCA / PRA expectations and operational resilience requirements.Strong stakeholder management, communication and reporting skills.Qualifications:Minimum of one below is required:ISO27001 Lead Implementer or Lead AuditorDesirable: CISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)GIAC Incident Handler (GCIH)Certified Cyber Defender (CCD) or equivalentISO ...

approaches for complex OT systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments … operational safety, resilience and availability considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks ...

wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK Analyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controls Analyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders. Support Procurement … with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessments Support the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert ...

combine strong technical security knowledge with excellent governance, risk management and stakeholder-management skills. Skills and Experience: Experience leading cyber security, information security and / or compliance activities within a medium-to-large enterprise environment. Strong experience managing an enterprise information / cyber security risk register. Strong practical … internal and external security audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials / Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF / Cyber Assessment Framework and its application to organisational security. Understanding ...

similar Security Operations platforms. Familiarity with security frameworks such as: NCSC Cyber Assessment Framework (CAF) NIST Cybersecurity Framework CIS Controls ISO / IEC 27001 This role will require you to have or be willing to go through Security Clearance. As part … Strong, inspiring and thought-provoking leadership A supportive and collaborative environment Development – access to LinkedIn Learning, a management development programme, and training Wellness – 24 / 7 confidential employee assistance programme Flexible Working – including home working and part time Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays ...

Cyber Security Consultant / Security Architect Salary: Up to £90,000 This is a client-facing role supporting MOD and public sector environments across secure design, cyber assurance, risk management and technical security architecture. We need someone who can review technical designs, understand security risk, advise on controls, support … acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG / MOD assurance expectations. Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. Experience working in defence, MOD, public sector, government ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / security risk registers and risk assessments.An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management … approach to identifying gaps, risks and opportunities for improvement.Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer would be advantageous.In return for your commitment, you can expectAt Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh Promise shapes your ...

ISO 27001 and NIST CSF.Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.Experience managing or supporting IT / security risk registers and risk assessments. An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access … identifying gaps, risks and opportunities for improvement. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer would be advantageous. In return for your commitment, you can expectAt Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh Promise shapes your ...

enterprise‐grade product Experience working directly with large engineering teams on the roadmap, release planning, dependency mapping, and cross‐team sequencing Current programming / scripting experience and a familiarity with DevSecOps practices in order to drive automation without compromising quality or security Strong stakeholder communication skills when translating between … engineering, product, customer‐facing teams, and leadership Exposure to security and compliance frameworks (e.g. SOC 2 / ISO 9001 / ISO 27001) Ideally, you would also have: This is not an additional list of requirements; this reflects the tech stack currently used ...

Information Security & Assurance Officer Salary: up to £50,000 + 15% Project Uplift + Company Car / Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional … utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor / Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life ...

security architecture, cybersecurity, secure engineering, operational technology security or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CCP, ISA / IEC 62443 (Fundamentals Specialist, Risk Assessment Specialist, Design Specialist or Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer … / Lead Auditor or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. Essential skills Demonstrable application of IEC 62443, including zones and conduits, target security levels, and 62443‐3‐2 style risk ...

information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection / prevention systems (IDS / IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage vulnerability management … maintenance of all IT infrastructure, including cloud environments (e.g., Azure, AWS, GCP), networks, servers, and endpoints. Manage access controls, identity management (e.g., Entra ID / Azure AD), and privileged access management (PAM) systems. Manage access control processes to 3rd party applications, and 3rd party relations. Oversee the patching ...

project leadership team and represent security across business and technology workstreams.Manage and direct teams of architects and consultants day-to-day.Produce as-is / to-be security architecture documentation, risk assessments, and migration artefacts.Identify client opportunities, develop security-focused points of view, and support account expansion.Understand what clients … assessment; enterprise security programme design; and secure SDLC.Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO / IEC 27000 series, C2M2, or Cloud Security Alliance CCM.Familiarity with AI platform security, cloud and data security risks, and third-party / ...

leadership team and represent security across business and technology workstreams. Manage and direct teams of architects and consultants day‐to‐day. Produce as‐is / to‐be security architecture documentation, risk assessments, and migration artefacts. Identify client opportunities, develop security‐focused points of view, and support account expansion. Understand … enterprise security programme design; and secure SDLC. Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO / IEC 27000 series, C2M2, or Cloud Security Alliance CCM. Familiarity with AI platform security, cloud and data security risks, and third‐party ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

Infrastructure & Security Manager | Egham, Surrey (Hybrid / Flexible Working) | Competitive Pay Secure. Innovate. Lead. Are you an experienced Infrastructure & Security professional looking for a role where you can genuinely shape the future of a growing technology business? Our client is helping leading brands including Odeon Cinemas Group, Virgin Wines … such as GitHub, Rundeck or Ansible, alongside industry certifications including Azure, CISSP, CISM, CompTIA Security+ or ISO 27001 Lead Auditor / Implementer. Why Join? This is an opportunity to join an ambitious, growing SaaS business where your expertise will have real influence. You'll work ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). • Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. • Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...

best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving and maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. Deliver threat … consultancy or advisory environment. Desirable Qualifications & Experience Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor . Experience in consultancy or client-facing roles. Exposure to penetration testing or security engineering. Knowledge of secure software development practices and DevSecOps . ...

Apps Azure Storage Azure App Services Azure WebJobs Azure Key Vault SSIS packages (including the Azure-SSIS Integration Runtime) and KingswaySoft connectors for Dynamics / Dataverse data movement Self-Hosted Integration Runtime (SHIR) for hybrid, on-premises and SFTP-based integrations. Additional expectations Support the delivery of secure, scalable … Contribute to security testing, audit evidence provision and assurance activities aligned to ISO 27001:2022, Cyber Essentials Plus and GovAssure / CAF. Follow secure change and access-control processes appropriate to a citizen-facing public sector payments platform. DevOps, Release & Quality Management Support deployment ...

sales engagements, including opportunity qualification, solution design, and client presentations. Develop and maintain governance and compliance documentation, ensuring adherence to standards such as ISO 27001, NIST, GDPR, NIS2, and UK regulations. Provide technical input for bids, including cost modelling, risk assessments, and solution architecture clarification through … requirements. Your skills and experience Strong knowledge of cyber security principles and compliance frameworks (ISO 27001, NIST, GDPR, NIS2, ISA / IEC 62443). Experience in solution design for complex IT / security projects within public sector, including bid management and cost ...

Security Consultant – Career Adviser to Consultant UK-wide | Hybrid | DTCS / Digital & Data Cyber Security is evolving. Help shape what comes next. I’m working with a leading innovation and transformation consultancy that is growing its AI Security capability across the UK. This is not an AI Engineer role … proposals, client presentations and wider advisory engagements What we're looking for We're interested in people with a solid cyber security consulting / advisory foundation and genuine curiosity around AI. You'll ideally have experience across areas such as: Cyber Security Consulting Security Architecture Cyber Risk / ...

Architect - OutsideIR35 Contract: 6 Months IR35: OUTSIDE IR35 Location: REMOTE - UK On-site: 1 day per month (North Yorkshire) Industry: Pharmaceutical / Life Sciences Engagement: Contract Rate: 450pd+ Outside The Opportunity We are working with a pharmaceutical manufacturing organisation undergoing a significant transformation across its IT, OT, automation … leadership across pharmaceutical manufacturing, including OT, automation, MES, SCADA, DCS, PLCs, historians, BMS, EMS, laboratory systems and enterprise platforms . Define and govern IT / OT convergence and integration architectures across manufacturing and corporate environments. Develop target-state architectures and practical transition roadmaps that consider production requirements, regulatory obligations ...

within Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001 / 27002 / NIST Cybersecurity Framework / COBIT / CIS Controls Experience supporting clients through compliance assessments, control testing, remediation planning ...