326 to 350 of 882 ISO/IEC 27001 Jobs in the UK

segregation of duties are consistently embedded by design. Own privileged access strategy and outcomes, including vaulting, session isolation, credential rotation and Just-in-Time / Just-Enough-Access controls - with day-to-day PAM operation delegated to specialist team leads. Own the access governance strategy - including recertification cadence, role … Access Management and Identity Governance & Administration, gained in a complex, regulated environment (financial services strongly preferred). Demonstrable experience leading a multi-year IAM / PAM / IGA transformation programme end-to-end, including target operating model design, tooling modernisation and measurable maturity uplift. Deep working knowledge ...

customer assets are handled securely and processed in accordance with company procedures, customer requirements, and the requirements of the Integrated Management System (ISO 9001, ISO 14001 and ISO 27001). Why Re-com? We are a young, ambitious business where your contribution ...

Develop and report meaningful security metrics to inform leadership decisions and continuous improvement.**Requirements:*** Several years’ experience in a BISO or senior security leadership / advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR / XDR, CSPM, SAST / DAST).* Experience embedding security into CI / CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

Role Title: Vulnerability Management Lead Duration: contract to run until 31 / 03 / 2027 Location: Inverness or Preston. Hybrid Rate: up to £644 p / d Umbrella inside IR35 Clearance required: Sole UK Nationality with Active SC Clearance. Role purpose / summary he Senior Vulnerability … remediated, evidenced, and reported to the client through a risk-based and audit-ready approach, without performing technical remediation activities. What This Role Does / Does Not Do Does Govern, assure, challenge and coordinate Provide enterprise-wide vulnerability risk visibility Drive supplier accountability Support risk-informed decision making Does ...

embed security into how engineers work every day. You’ll report directly to the CTO and have broad scope across the platform (from CI / CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection … LLMs and agents to accelerate security workflows (triage, code review, evidence gathering) with guardrails you trust and help secure and monitor the (code / application / device) fleet. Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews ...

Alert Location(s): Swindon, Wiltshire, GB, SN5 6PB Essen, NW, DE, 45141 RWE Supply & Trading GmbH To start as soon as possible, full time / part time, permanent Join our AWS Platform team as an (Senior) AWS Cloud Security Engineer. You will help secure, evolve and operate … bridge between application delivery, and security departments. Your focus will be to ensure that AWS services, platform patterns, infrastructure as code, CI / CD pipelines, identity and access controls, monitoring, and security tooling are designed and operated securely from the start. You will support teams in identifying and remediating ...

Proven experience delivering Information Assurance, risk management, and security assurance within Defence, Government, Intelligence, or other highly regulated environments. Strong understanding of NIST RMF / CSF, ISO 27001, and Government security frameworks, with experience developing assurance artefacts such as SyOPs, RMADs, Security Impact Assessments, risk … CISSP, CRISC) or equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS / IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing ...

support to the business, helping to maintain our standards and support effective ways of working. Your focus will include: Maintain Binnies certification to ISO 9001, ISO 14001 and ISO 45001 Maintain Binnies Integrated Management System known as PROSYS Support quality management and assurances processes … ensure compliance with PROSYS Coordinate and host external audits Provide advice to Project Teams on quality-related matters Support Binnies journey towards ISO 27001 certification Support ProjectWise administration and configuration activities Support Business Divisions with governance and KPI monitoring Essential Requirements This role is suited ...

Manager of Product Solutions, EMEA with a strong background in any of the following areas: Internal audit, internal controls over financial reporting (ICFR) / Sarbanes-Oxley (SOX), or enterprise risk management. The Manager of Product Solutions, EMEA will be a product expert in the Optro platform and be able … navigate the client's risk / audit / control environment and convey a high value proposition. This person will facilitate product demonstrations, answer product / sales questions, and consult clients on industry best practices as they learn about Optro. Internally, the Manager of Product Solutions will partner ...

notices, breach logs and SAR logs. Support development of the Information Security Management System. Compliance Management: Lead audits and compliance activities to meet UK / EU GDPR, PECR and other regulatory requirements. Run the GDPR and data privacy steering committee. Monitoring & Audit: Conduct ongoing assessments and internal audits … appropriate stakeholders. What you'll need: Strong risk management capability and ability to deliver practical, commercially-aware solutions. Strong influencing skills (soft / hard / active listening etc.) - and the ability to blend and adapt them to the situation and intended audience. Able to implement a holistic security ...

Oversee the technical accuracy, completeness and consistency of every physical security design produced by the team. Chair technical design reviews, peer reviews and QA / QC reviews across all projects. Ensure all designs comply with relevant legislation, European & British Standards, International Standards and client-specific design requirements. Provide final … design assurance procedures and governance frameworks. Engineering Design CCTV Access Control Perimeter Intrusion Detection Systems (PIDS) Intrusion Detection Systems Intercom Security Management Systems (SMS / PSIM) Security Networks Review and validate security strategies, system architectures, calculations, specifications, schedules, schematics and detailed design drawings. Ensure coordinated multidisciplinary design integration with ...

Computacenter Tech Ops Res service and will focus on mapping resilience obligations, evidence requirements and reporting gaps against key regulatory frameworks including DORA, FCA / PRA Operational Resilience requirements, NIS2 and customer-specific control frameworks. This is an excellent opportunity for a compliance, risk or resilience professional with experience … detail. Experience producing management information, audit packs, control evidence and regulatory reporting. Excellent communication and stakeholder management skills. Desirable Experience : Knowledge of: DORA FCA / PRA Operational Resilience requirements NIS2 ISO 22301 ISO 27001 ITIL frameworks Experience working within highly regulated industries. Understanding ...

global client seeking a Senior OT Consultant to join their team. Role Purpose: Deliver OT cyber security services focused on securing industrial systems (ICS / SCADA). Responsibilities include managing client relationships, overseeing delivery teams, supporting business development, and contributing to the expansion of global OT capabilities alongside … Director. Required Skills: Expertise in OT cyber security (ICS, SCADA, IT / OT convergence)Familiarity with industry frameworks such as NIST, IEC 62443Ability to assess, design, and implement industrial security controlsProven experience leading teams and delivering client reportsUnderstanding of OT-specific threats, vulnerabilities, and security technologiesWillingness ...

Contract Cyber Security Analyst / Engineer 💷 Salary: £400 a day - Outside IR35 📍 Location: City - London 📅 Working pattern: Hybrid – Office presence required in London weekly I'm supporting a growing transport organisation that is looking to hire a Cyber Security Analyst / Engineer to strengthen its IT Security function … proxy, next-generation endpoint protection and email security (DMARC / DKIM / SPF, DNS). Familiarity with the MITRE ATT&CK framework, ISO27001, CIS benchmarks and NCSC Cyber Essentials. Knowledge of GDPR, data protection, and governance, risk and compliance. Knowledge of NIS-R or NIST, TCP / ...

stewardship . Experience developing governance policies, standards and operating models. Practical experience with AI governance, AI assurance or responsible AI . Understanding of AI / model testing, evaluation and risk assessment. Strong consulting, stakeholder management and communication skills. Desirable: UK Central Government, Defence or regulated-sector experience. Defence, maritime … DMBOK, NIST AI RMF, ISO 23894, ISO 27001 or UK GDPR . MLOps, model monitoring or AI risk / control experience. Benefits: Salary up to £80,000 25 days holiday + bank holidays Private Medical Insurance Hybrid working with 2 days per week ...

Description Cyber Security Manager - Resources Industry Location: London / hybrid Please Note:Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside … time onsite with our clients and partners to enable delivery of the first-class services we are known for. Closing Date for Applications: 31 / 08 / 2026 Accenture reserves the right to close the role prior to this date should a suitable applicant be found. #LI ...

Senior Cyber Security Engineer (CyberArk & PAM) Edinburgh, United Kingdom | Posted on 16 / 07 / 2026 SysGroup ishiring a Senior Cyber Security Engineer specialising in privileged accessmanagement, with CyberArk as the core platform. This is the senior tooling andidentity specialist role in the Cyber Security team under … managed clients, with PAM as your deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA / ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead ...

integral role in helping shape the future of SOC products and security operations tools. Reports to: Senior Product Manager Place of Work: Hybrid Remote / Office in Horsham Responsibilities and Duties The SOC Subject Matter Expert role requires a professional who combines extensive SOC operational experience with strategic product … environments. Their primary responsibility lies in translating SOC analyst pain points, workflows, and use cases into actionable product features, with particular focus on alert / incident prioritisation and intelligent playbook execution that helps analysts make critical security decisions. Their responsibilities will include: Providing expert SOC operational guidance to product ...

cloud platforms, with an interest in expanding knowledge across cloud-native services and AI technologies. Working knowledge of AWS (core services, networking, IAM, migration / DR patterns) and the ability to compare / contrast against Azure for multi-cloud client conversations. Cyber security technologies including Next Generation Firewalls … Zero Trust, Identity Management and Microsoft Security solutions (Defender, Entra, Purview). Understanding of SOC / SIEM concepts — log ingestion, threat detection, alert triage, and how managed detection & response (MDR) services fit into a client's security posture. Backup, resilience and disaster recovery design (e.g. Veeam), including recovery point ...

security, micro-segmentation and secure access technologies Proficiency in cloud security across Azure, AWS or equivalent platforms Knowledge of security technologies including SIEM, EDR / XDR, DLP, CASB, ZTNA, WAF and firewalls Understanding of cryptography, encryption standards and secure communication protocols Familiarity with MOD security requirements, defence standards … accreditation processes Knowledge of ISO 27001, NIST CSF and CIS Controls frameworks Personal Attributes Exceptional strategic thinking combined with strong technical depth Outstanding communication and stakeholder engagement skills Strong problem-solving and analytical capabilities Proven ability to influence technical teams and executive stakeholders Passion for cyber ...

ready to broaden your remit and take genuine ownership, we'd love to hear from you. The Role at a Glance Senior / 3rd Line IT Engineer Colchester, Essex | Hybrid - 3 Days Office / 2 Days Home | Occasional out-of-hours working and travel to London will … required. Competitive Salary + Excellent Benefits Full Time | Permanent Focus: Infrastructure | Cyber Security | Cloud | AI Enablement Your Background / Skills: 3rd Line Engineering, IT Infrastructure, Cyber Security, Azure, Google Workspace, Networking, CrowdStrike, Cisco, VMware vSphere, Windows Server, Jamf, Intune, Incident Response, Cyber Essentials, AI Tooling Who We Are Bulk ...

managed settings) and turn new capabilities into field-ready demos and guides within days of release. Own enterprise deployment and identity conversations: SSO (SAML / OIDC), SCIM provisioning, role, seat, and spend-limit management, sandbox and permission design. Sit credibly across from CISOs and security architects. Advise and unblock … customers running production workloads on the the company API and on Bedrock / Vertex, in close partnership with Applied AI. Teach. Design and deliver enablement that turns users into daily active developers, for audiences ranging from senior staff engineers to business users new to AI and develop the customer ...

Cyber Security Manager - Resources Industry Location: London / hybrid Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside … time onsite with our clients and partners to enable delivery of the first-class services we are known for. Closing Date for Applications: 31 / 08 / 2026Accenture reserves the right to close the role prior to this date should a suitable applicant be found.#LI-EU #LI-MPAbout ...

business that works with global pharmaceutical and bio medical organisation for someone to join their Governance, Risk and Compliance team in a broad assurance / Audit role to help them build and design their own internal programme. This is a very hands-on role with the potential to build … level Core dutiesManaging Internal, External and Client AuditsManagement and implementation of multiple existing and new compliance Frameworks including but not limited to SOC2, FISMA / NIST, ISO 27001 and 27701GRC tool management (implementation and operation for multiple compliance frameworks)Detailed Job DescriptionThe Technology Audit ...

Online. Data Governance & ComplianceEstablish and maintain data governance frameworks. Implement Metadata tagging and classification and data lifecycle and retention policies. Ensure compliance with GDPR / Data Protection requirements. Support data audits, DPIAs, and data sharing agreements. Infrastructure Ownership & ManagementNetwork Infrastructure: LAN / WAN, switching, firewalls, and connectivity. Server … Cloud Platforms: Hybrid environments (on-premise and Azure), and Virtualisation (Hyper-V).End User & Device Management: Microsoft Intune / Endpoint Manager, and Autopilot and device lifecycle management. Telephony & Communications: VoIP and unified communications platforms. Physical Security Systems: CCTV and access control systems. Cyber Security & ArchitectureDesign and enhance enterprise security ...