301 to 325 of 1,215 ISO/IEC 27001 Jobs in the UK

Responsibilities: Implementation and support for Imperva Securesphere DAM, Imperva DSF / Sonar, DRA Assist customer with configuration of Database auditing in on-premise or cloud managed based databases (AWS RDS / Azure SQL / GCP CloudSQL, etc.) Policy configuration on DAM for monitoring Configuration of DAM reports … mandatory Knowledge of Linux OS is mandatory Possession of Industry Certifications (such as Security+, CISSP, CEH, ECSA). Knowledge of NIST 800-53, ISO27001, and CIS Top 20 Controls Knowledge of scripting / automation - Python, REST / GRAPH API, Bash, Terraform Ability to communicate clearly and effectively with ...

Training & Awareness deliverables, performing risk assessments, tracking of security risks of the Information Security Office and organisation as well as maintaining and managing the ISO27001 certification and ensuring there is appropriate governance & reporting on outputs and risk posture to stakeholder groups. Primary Responsibilities Execute the UK and EU GRC Strategy … compromises that meet multiple, sometimes conflicting, stakeholder needs. Ability to work independently and influence cross-functional teams. Required qualifications Bachelors level degree Desirable qualifications ISO27001 Lead Implementer or Lead Auditor Certified Information Systems Audtior (CISA) - ISACA Certified Information Security Manager (CISM) - ISACA CompTIA Security+ ITIL, COBIT or similar governance frameworks ...

adding friction to their day. Technical Compliance and Assurance - Own the technical controls behind our certifications and assurance activity, including Cyber Essentials Plus, ISO 27001, evidence gathering, and remediation. Technical Risk Assessment - Lead technical security risk assessment across projects, suppliers, and internal services, identify where … data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. ...

ZTNA, SASE, automation and AI-driven security solutions. Working knowledge of recognised security frameworks and standards, including NIST, ISO 27001 / 27002 and CIS Controls. Understanding of regulatory and compliance requirements, including UK GDPR and experience supporting governance, audit and assurance activities. CISSP, CISM, CCSP ...

posture and ensure resilience against evolving cyber threats. The role requires strong experience in cyber assurance, familiarity with ISO 27001 / NIST CSF / SOC 2, and the ability to communicate risk to board-level audiences. #J-18808-Ljbffr ...

with support from experienced security architects. Perform cloud security configuration reviews and hardening assessments against Microsoft security guidance, CIS benchmarks, the NCSC CAF, ISO 27001 and client standards. Test changes, remediate findings and provide implementation assurance and operational handover to client and managed service teams. client … 100. Experience with Microsoft Sentinel, Defender XDR or Defender for Cloud Apps. Experience implementing security controls through Azure DevOps or GitHub CI / CD pipelines. Knowledge of the Microsoft Cloud Security Benchmark, CIS Azure benchmarks, the NCSC CAF, ISO 27001 or NIST guidance. Experience securing ...

actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents. Education / Experience Qualifications: Bachelor's Degree with 8 or more years of related experience is preferred. An equivalent combination of education and / … organization. Experience building an IT Third-Party Risk function within a global organization. Industry recognised certifications such as the CRISC, CISA, CISSP, CISM, and / or CGEIT are preferred. Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC). Physical Requirements: Professional office ...

consultancy, vCISO or senior in‐house security role. Demonstrable experience delivering against recognised security frameworks — Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, ISO 27001, NIST CSF or equivalent. Proven track record of building and maintaining an ISMS, including policy authorship and risk assessment. Strong working … compliant scanners). Experience as an IASME‐licensed assessor or Cyber Essentials assessor. Business continuity and disaster recovery planning experience, ideally aligned to ISO 22301. Data protection experience, including UK GDPR and the Data Protection (Jersey) Law 2018 or the Data Protection (Bailiwick of Guernsey) Law, 2017. Experience ...

guidance for Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with the Rackspace … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer facing ...

guidance for Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with the Rackspace … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer facing ...

Leeds is seeking a Senior IT Internal Auditor to lead internal IT audit engagements, focusing on information technology policies, procedures and controls including information / cyber security. You will develop audit plans, report findings to Audit Committees, and support SOC 1 / 2 readiness and ISO … 27001 / 27701 engagements, while building strong stakeholder relationships across business units. #J-18808-Ljbffr ...

Azure, AWS, and Oracle Cloud. Apply Service‐Oriented Architecture (SOA) and Domain‐Driven Design (DDD) principles. Design event‐driven systems using Kafka and Pub / Sub. Lead API design, integration strategies, and legacy modernization to microservices. Contribute to Disaster Recovery planning and platform resilience. Implement Identity and Access Management … cataloging, and lineage. Ensure compliance with ISO 27001, GDPR, PCI DSS, and other security standards. Embed DevSecOps principles into CI / CD pipelines and platform delivery. Produce High‐Level and Low‐Level Designs (HLD / LLD) and Solution Architecture Documents (SAD). Competitive Salary ...

Managing team priorities, delivery, and day-to-day operations. Driving continuous improvement across processes, tooling, and documentation. Embedding engineering best practices, including automation, CI / CD, and Infrastructure as Code. Championing an "everything-as-code" approach across security services. Remaining hands‐on with security engineering, automation, and solution design. … operating security platforms and tooling. Excellent automation and engineering‐first mindset. Experience with Infrastructure as Code and policy‐as‐code approaches. Knowledge of CI / CD, secure software development, and modern engineering practices. An understanding of IAM, cloud security, vulnerability management, and defensive controls. Experience using risk, intelligence ...

aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director / Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary: £50,000 – £70,000 (dependent on experience and sponsorship thresholds) Key Responsibilities … testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct ...

scale environments Strong knowledge of Azure and on‐prem infrastructure (IaaS, PaaS, networking, identity, storage) Hands‐on experience with infrastructure‐as‐code (Terraform, ARM / Bicep), configuration management (Ansible, PowerShell DSC), and CI / CD tooling (Azure DevOps, GitHub Actions) Experience with monitoring and observability stacks Solid understanding … fundamentals (Windows / Linux), security, networking Background in scripting or software development (PowerShell, Python, Go) Experience with containers and orchestration (Docker, Kubernetes, AKS) Familiarity with ITSM practices and platforms such as ServiceNow Experience operating in ISO 27001 or similar regulated environments Business & Interpersonal Skills Experience ...

trusted with real responsibility early, including independently handling live production issues. IO’s product is trust: we help businesses achieve ISO 27001, SOC 2, GDPR and other certifications. That means our own infrastructure must model the standards we sell — security and availability come before speed … techniques and their implementation Experience of AI hosting Certification in AWS or Kubernetes Familiarity with ISO 27001 or other security / compliance standards Experience with Ruby on Rails Experience in a regulated or compliance-driven environment Why you’ll love it here A fast-growing ...

safeguard the current and future technology estate, respond to security incidents, drive continuous improvements in security services and standards, and ensure compliance with ISO and Cyber Essentials Plus. Working closely with the CISO, you'll provide valuable security insights, metrics, and reporting that shape the security strategy, helping … protection controls, including Data Loss Prevention (DLP) , Sensitivity Labels , and encryption . Manage security awareness training and phishing simulation programmes. Support and maintain ISO 27001 , Cyber Essentials , and Cyber Essentials Plus certifications. Produce security metrics , dashboards , and security reports to inform security strategy . Lead ...

inform detection and control design. Working knowledge of recognised frameworks and guidance, including NCSC CAF, NIST CSF, ISO 27001 / 27005 and Cyber Essentials Plus. The confidence to communicate complex security risks clearly to technical teams, customers and senior stakeholders. A collaborative approach … online tutorials to enhance and achieve your personal and professional goals. Healthcare cash plan. This will give you access to online GP appointments, 24 / 7 access to qualified counsellors and cash back against a range of general healthcare Casual dress policy Company Pension Scheme Company social events ...

leading security and endpoint management platforms, including Tenable, Splunk, Microsoft Defender, Azure, Intune and Okta. A solid understanding of networking protocols, operating systems (Windows / Unix) and security software. Hands-on experience with security applications such as Tenable, SPLUNK and OKTA. Strong analytical skills with the ability to interpret … welcoming environment where everyone is treated with respect and supported to thrive. You'll have access to employee networks, wellbeing resources, and a 24 / 7 Employee Assistance Programme to support you and your family. We can't wait to welcome you on board! Stagecoach is proudly an inclusive ...

engineering systemic fixes for recurring issues; Secure Software Development Life Cycle (SSDLC) Leadership: Lead the integration of security-as-code within the CI / CD pipeline. Architect the automated deployment of SAST, DAST, and SCA tooling, and partner with Engineering leads to define security gating criteria. Provide expert-level … rollout of security initiatives across multiple departments and influencing organisational change; Expert Cloud & Infrastructure Security: Expert-level knowledge of major cloud platforms (AWS / GCP), with the ability to design secure multi-tenant architectures and perform deep-dive security configuration audits; Cloud-Native & Container Security: Deep proficiency in securing ...

Cyber Security Architect & Engineering Lead Hybrid / Remote: Just 1 day per month in the London office Leading UK Professional Services Firm Ready to take the technical lead on security? We're working with a leading UK professional services firm that is making a significant investment in its internal … Plus and NIST CSF The ability to communicate technical security risk clearly to senior stakeholders Experience within professional services, financial services or another regulated / client-confidential environment would be particularly useful. One of the most interesting parts of this role is the firm's investment in AI. ...

senior stakeholders and non-technical audiences. Working knowledge of recognised security frameworks, such as the NIST Cybersecurity Framework, CIS Controls and ISO / IEC 27001. Technical Knowledge The successful candidate should have working knowledge across several of the following areas: Network security: Secure network design ...

facilitation skills, with the curiosity to deepen your expertise across operational resilience, technology resilience and assurance. A relevant qualification such as CISA, ISO 27001 Lead Auditor or ISO 27001 Lead Implementer would be advantageous but not essential. And in return ...

nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.**Information Assurance / Technical Security Specialist****Multiple office locations considered** (Doncaster, Crawley, Reading, Cheadle, Bristol)Thales is a global technology leader in the Aerospace, Defence and Digital … Data, artificial intelligence, connectivity, cyber security and quantum technology – to build a future we can all trust.We’re recruiting for a Information Assurance / Technical Security Specialist to provide technical security advice and guidance on the efficient and effective secure through-life management of systems related ...

across engineering. Drive security improvements through AI, automation and technical controls. Lead security risk, threat modelling, vulnerability management and incident response. Oversee third-party / supplier security and operational security controls. Partner with SOC and engineering teams to improve detection and response. Support client assurance and security audits. Experience … GDPR. Proven leadership across information security, cyber risk or assurance. Strong technical understanding of cloud, application, network, endpoint and data security. Experience with SIEM / SOC, vulnerability management and incident response. Strong stakeholder management with a pragmatic, hands-on approach. #J-18808-Ljbffr ...