226 to 250 of 881 ISO/IEC 27001 Jobs in the UK

management solutions to companies in the distributive trade – wherever they are in the world. With a unique depth of knowledge and experience in ERP / SaaS solutions, Klipboard has a wide range of clients includes wholesalers, distributors, merchants and retailers from small traders to multinational enterprises. Klipboard has offices … Manage and maintain cloud infrastructure using Infrastructure as Code (IaC) methodologies and tools, ensuring consistency, scalability, and operational efficiency. Design, build, and support CI / CD pipelines to enable efficient, automated, and reliable deployment processes. Ensure services operate within defined Service Level Objectives (SLOs) and error budgets, using monitoring ...

perspective, to identify and mitigate security risks. Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs. Be a trusted advisor to senior clients on security topics. Conduct risk assessments and assurance reviews to validate … preferably in the Health, Central Government or Public Safety domains. Minimum of 5 years' security consulting experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance roleMinimum of 5 years' experience in a Governance, Risk and Compliance roleA track record of delivering security solutions for large ...

Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy … compromises that meet multiple, sometimes conflicting, stakeholder needs. Ability to work independently and influence cross-functional teams. Required Qualifications Bachelors level degree Desirable Qualifications ISO27001 Lead Implementer or Lead Auditor Certified Information Systems Audtior (CISA) - ISACA Certified Information Security Manager (CISM) - ISACA CompTIA Security+ ITIL, COBIT or similar governance frameworks ...

Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy … compromises that meet multiple, sometimes conflicting, stakeholder needs. Ability to work independently and influence cross-functional teams. Required qualifications Bachelors level degree Desirable qualifications ISO27001 Lead Implementer or Lead Auditor Certified Information Systems Audtior (CISA) - ISACA Certified Information Security Manager (CISM) - ISACA CompTIA Security+ ITIL, COBIT or similar governance frameworks ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

Senior Network Engineer – Cloud, Security & Infrastructure Location: London (Hybrid) Employment Type: Permanent / Fixed-Term Contract Start Date: ASAP Build, Secure and Transform Enterprise Networks We're seeking a highly skilled Senior Network Engineer to join a growing technology team responsible for designing, securing, and optimizing enterprise and cloud … What We're Looking For: Minimum of 8+ years' experience in Network Engineering, Cloud Networking, and Network Security. Strong expertise across: Cisco Networking & Routing / Switching Palo Alto, Check Point, Cisco ASA, and ForeScout F5 Load Balancing Infoblox DNS / DHCP / IPAM AWS, Azure, and / ...

industry or a closely related technical environment. Experience selling services such as MEP engineering, BIM, CAD, architectural design, building services or related professional / technical services would be highly advantageous. Candidate should have prior experience in selling to Retail / Homebuilders / Architects / … latest BIM, MEP, CAD and digital engineering technologies. Opportunities to work with international clients and multidisciplinary teams. If you are an ambitious AEC Sales / Business Development professional looking for an opportunity to develop the UK market for an established international MEP and BIM services organisation, we would like ...

novel Agentic AI workflows. Drive the end-to-end delivery of security projects by working hand-in-hand with engineers, navigating the complex Alphabet / Google Ecosystem, and ensuring high-quality execution. Educate and advocate for InfoSec across the business, acting as a "product manager" regarding InfoSec's capabilities … have: Domain expertise in highly regulated, data-intensive industries (Life Sciences, Pharma, Deep Tech).Hands-on experience navigating GCP and the internal Alphabet / Google ecosystem (on-corp)Engineering background with hands-on skill regarding Cloud Architecture, Zero Trust, IAM, and security observability. Familiarity with InfoSec and AI Management ...

security and privacy assessments, including Data Protection Impact Assessments (DPIAs) and associated reviews. Support the ongoing maintenance and development of the firm's ISO 27001 management system, as well as future ISO 42001 requirements. Contribute to information governance initiatives, including data classification and records … developing or supporting policies, procedures and governance frameworks. Strong stakeholder management and communication skills. Excellent analytical and problem-solving abilities. Relevant information security and / or data protection certifications would be beneficial. Degree-level education would be advantageous. What You'll Bring You will be someone who is: Professional ...

Advanced KQL skills, with the ability to develop and optimise complex detections and threat hunting queries. Strong scripting and automation experience using PowerShell and / or Python, including API integrations and workflow automation. Experience administering Microsoft Entra ID, Conditional Access, Intune and Microsoft 365 security solutions. Good understanding … meet strict deadlines. Excellent written and verbal communication skills. Candidates must be able to pass security vetting (BS7858). Salary: £60,000 | Location: Reading / hybrid 2 days from home ...

leadership of the Digital & Information Services department, ensuring safe, effective and customer-focused operations. Own operational performance management: service levels, availability, capacity, incident / problem management, demand and prioritisation across the portfolio. Ensure robust operational governance (service reviews, risk and issue escalation, change control and clinical safety assurance where … relationships Experience of delivering and managing complex transformation programmes Knowledge of OJEU procurement and contract processes Desirable oExperience of EPR implementation programmes oFamiliarity with ISO27001 and implementation of ISMS frameworks Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … SharePoint , OneDrive , and Teams . Implement Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Deliver security awareness and phishing simulation programmes. Maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus compliance. Produce security metrics , dashboards , and executive reporting. Lead incident response and continuous security improvement. ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services. Information Assurance / Technical Security Specialist Multiple office locations considered (Doncaster, Crawley, Reading, Cheadle, Bristol) Thales is a global technology leader in the Aerospace, Defence and Digital … Data, artificial intelligence, connectivity, cyber security and quantum technology - to build a future we can all trust. We're recruiting for a Information Assurance / Technical Security Specialist to provide technical security advice and guidance on the efficient and effective secure through-life management of systems related ...

nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services. Information Assurance / Technical Security Specialist Multiple office locations considered (Doncaster, Crawley, Reading, Cheadle, Bristol) Thales is a global technology leader in the Aerospace, Defence and Digital … Data, artificial intelligence, connectivity, cyber security and quantum technology - to build a future we can all trust. We're recruiting for an Information Assurance / Technical Security Specialist to provide technical security advice and guidance on the efficient and effective secure through-life management of systems related ...

Lead to ensure a secure, well-governed, auditable IT environment. You will own governance, ISO 27001 maintenance, and Microsoft 365 / Azure governance, managing risk, documentation and project-to-BAU transitions. The role focuses on evidence collection, compliance, and change control, with responsibilities spanning Purview ...

Develop and report meaningful security metrics to inform leadership decisions and continuous improvement.**Requirements:*** Several years’ experience in a BISO or senior security leadership / advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR / XDR, CSPM, SAST / DAST).* Experience embedding security into CI / CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

role where you can keep your feet firmly on the Microsoft stack, without getting pulled into round-the-clock SOC shifts or systems build / configuration? This could be exactly the move you're after. We're working with a fast-paced financial services group, currently evolving through … doing Monitoring and auditing security across the Microsoft stack (Defender, Purview) to spot, flag and escalate risks - this is a second-line, monitoring / audit role rather than a build or configuration one Producing management information and reporting, using some light scripting (e.g. JSON) to support this Supporting audits ...

solutions and platforms. Advise on identity and access management, encryption, data residency and cloud security. Align architectural decisions with frameworks and regulations including ISO 27001, NIST, CIS, GDPR and NIS2. Support client audits, security assessments and regulatory enquiries. Evaluate and recommend security technologies, vendors and strategic … Experience with Azure cloud services and enterprise-scale architecture design. Knowledge of AI security risks, governance and secure adoption practices. Strong understanding of ISO 27001, NIST, GDPR, NIS2 and related compliance frameworks. Excellent stakeholder management and communication skills, with the ability to influence at executive level. ...

response, cyber investigations, and escalation procedures. Oversee annual penetration testing programmes and security audits. Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks. Produce security reporting for IT leadership and senior business stakeholders. Conduct security due diligence for acquisitions and support … Strong understanding of cyber security governance, risk management, and compliance. Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar. Strong knowledge of Microsoft Azure security and cloud governance. Experience working with modern identity, endpoint protection, email security ...

secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes / container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI / CD pipelines Perform security code reviews and provide secure coding … PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS / IPS rules and technical runbooks Monitor emerging threats and continuously improve security controls Work across engineering, security and compliance teams to drive security improvements ...

product innovation and business objectives. Nice to HaveExperience securing AI-enabled products, platforms or digital services. Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure ...

Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years … information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice ...