351 to 375 of 882 ISO/IEC 27001 Jobs in the UK

Senior Cyber GRC Specialist – Technical Controls London / Hybrid Up to £120,000 Are you an experienced Cyber GRC professional with a genuinely strong understanding of cyber engineering and technical security controls? We’re working with a major global investment management organisation looking for a Senior Cyber GRC Specialist. … environment * Knowledge of relevant financial-services regulations, ideally including FCA requirements and DORA * Strong understanding of network security principles and controls, including firewalls, IDS / IPS, TCP / IP, DHCP and DNS * Experience of security across Windows, UNIX / Linux and ideally Mac environments * Knowledge of operating ...

Security Vulnerability Management Cloud Security Governance, Risk & Compliance (GRC) CyberArk, SailPoint, Entra ID Security frameworks such as ISO 27001, NIS / NIS2, Cyber Essentials Plus, or TSA Personal Attributes Delivery-focused and proactive Comfortable working in fast-paced environments Strong stakeholder management and influencing skills ...

disciplines such as: Risk Management Access Controls Network Security Threat Detection & Monitoring Incident Response Knowledge of regulatory or compliance frameworks such as: CAF NIS / NIS2 ISO 27001 GDPR Other governance or assurance frameworks Strong communication and stakeholder engagement skills? A genuine interest in emerging ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management. Hosting and Network ManagerDefine and assure backup, disaster recovery, and operational resilience strategies aligned … business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational efficiency. Manage third ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management . Hosting and Network Manager Define and assure backup, disaster recovery, and operational resilience … strategies aligned to business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational ...

ServiceNow Solution Architect (GRC, IRM, Risk) Architect governance platforms that stand up to scrutiny The Solution Architect – GRC / Risk is responsible for leading the architecture, design, and implementation of ServiceNow Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) solutions for Pulsar’s clients.This role combines deep … expertise through external engagement, such as industry forums or ServiceNow community contributions. What we're looking for Proven experience designing and implementing ServiceNow GRC / IRM / Risk modules. Strong architectural knowledge of the ServiceNow platform, including data models, ACLs, workflows, and integrations. Demonstrated expertise in risk, compliance ...

Reference: SBM / AR / 070467Job Type: Full-time, PermanentSalary: 70,000 - 80,000Location: LondonSector: ITPosted: 2026-07-02An opportunity has arisen for a Senior Application Security Engineer to join a well-established health research organisation and charity that supports large-scale medical research to improve disease … deployment processes. This is not a traditional vulnerability management role, it is a hands-on Application Security role centred on secure design, CI / CD security, cloud-native technologies, Kubernetes, API security, code analysis, security-as-code and supporting development teams to build secure applications. This is a full ...

Security Operations Engineer at TravelPerk, you will be responsible for designing, implementing, and maintaining advanced threat detection solutions. Collaborating with the TechOps / IT team and various engineering squads at TravelPerk, you will ensure robust security measures are applied, and capabilities are built to support comprehensive security logging … maintain secured cloud security technologies alongside the Product Security team to achieve security and compliance objectives across multiple cloud technologies (e.g. AWS GuardDuty / Security Hub / Inspector, GCP Security Command Center).Enhance threat hunting, incident response, and security operations through continuous improvement in detection, analysis, and automation. ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

Role Title: Security Operations Lead Clearance: SC Cleared Location : Inverness or Preston | 5 days onsite Initial Contract to 31 / 03 / 2027 Pay : £500 - £600 Status: Inside IR35 Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership … skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security Incident Management Framework ...

risks. What You’ll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls … / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). Soft Skills: Strong analytical thinking, communication, teamwork, and adaptability. What ...

managing access policies, forwarding profiles, application segments, connector groups, URL filtering, SSL inspection, cloud firewall controls, and data protection capabilities. Strong understanding of TCP / IP, DNS, routing, VPN technologies, proxies, firewall technologies, and secure web gateway concepts. Experience troubleshooting SSL / TLS inspection, certificate services, authentication flows … large-scale enterprise modernisation programmes. Preferred CertificationsZscaler Certified Cloud Administrator (ZCCA) or equivalent Zscaler administrator certificationZscaler Certified Cloud Professional (ZCCP) or specialised ZIA / ZPA certifications. Microsoft security, identity, endpoint, or Azure certifications. CompTIA Security+, CISSP, CISM, CCSP, or equivalent cybersecurity certifications. Microsoft Certified: Cybersecurity Architect Expert, Azure Administrator ...

Technically credible, pragmatic and comfortable working close to delivery teams Experience within Financial Services, Insurance or another regulated environment is desirable Knowledge of FCA / PRA, ISO 27001, GDPR, Zero Trust or DevSecOps is advantageous If this role sounds of interest, do not hesitate ...

network security, micro-segmentation and secure access technologiesProficiency in cloud security across Azure, AWS or equivalent platformsKnowledge of security technologies including SIEM, EDR / XDR, DLP, CASB, ZTNA, WAF and firewallsUnderstanding of cryptography, encryption standards and secure communication protocolsFamiliarity with MOD security requirements, defence standards and accreditation processesKnowledge … ISO 27001, NIST CSF and CIS Controls frameworksPersonal AttributesExceptional strategic thinking combined with strong technical depthOutstanding communication and stakeholder engagement skillsStrong problem-solving and analytical capabilitiesProven ability to influence technical teams and executive stakeholdersPassion for cyber security innovation and continuous improvementDesirable RequirementsExperience delivering Microsoft Zero Trust ...

design, development, and operation. We report into the Chief Information Security Office while working closely with regulated businesses, key lines of business, and development / engineering across Bloomberg L.P. Our colleagues depend on us to help design, run, and improve our most important security programs. What … under pressure and consistently meet program deadlines. An industry recognized certifications such as CISSP, GIAC, CISM, ISO 27001 Lead Implementor / Auditor. If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills ...

design, development, and operation. We report into the Chief Information Security Office while working closely with regulated businesses, key lines of business, and development / engineering across Bloomberg L.P. Our colleagues depend on us to help design, run, and improve our most important security programs. What … under pressure and consistently meet program deadlines. An industry recognized certifications such as CISSP, GIAC, CISM, ISO 27001 Lead Implementor / Auditor. If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills ...

Senior Software Engineer to join our existing Software Engineering team and support the development of our in-house Engineering Software tools, including Python / C++ wrappers and automation interfaces for industrial CAD, CAE and CAM platforms. What will you be doing? From day one, you will be developing novel … house Computer Aided Manufacturing software. You will also build and maintain the integration layer between iCOMAT's software tools and industrial CAD / CAE / CAM systems, automating parts of the composite design workflow and improving feedback between manufacturing and design disciplines. As well as writing software code ...

Crowdstrike Technical Consultant UK-wide / hybrid Career Level 9 / 8 We are We are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the worldwhat’spossible as you partner with clients to unlock … least two of the following: SIEM platforms (Splunk,QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability / exposure management Experiencewith enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT / ICS environments, or hybrid data center Bachelor ...

risks. What You'll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). What's in it for You Flexible Working: Remote-first with travel ...

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

succinct reporting that clearly articulates any identified vulnerabilities, associated risks, controls and risk treatment activity. Producing residual risk registers. Providing accurate and pragmatic remediation / risk management guidance / advice. Conducting Security gap analysis against security control frameworks, remediation planning and monitoring. Evaluating third-party suppliers to provide … Principal for Cyber Security Governance & Risk Management. What's in it for You? You'll enjoy: Flexibility First: Work-life balance through hybrid / remote working options. Your Growth Journey: Continuous learning opportunities and professional development. Perks with a Purpose: Comprehensive benefits package to support your wellbeing, health, family ...

succinct reporting that clearly articulates any identified vulnerabilities, associated risks, controls and risk treatment activity. Producing residual risk registers. Providing accurate and pragmatic remediation / risk management guidance / advice. Conducting Security gap analysis against security control frameworks, remediation planning and monitoring. Evaluating third-party suppliers to provide … Principal for Cyber Security Governance & Risk Management. What's in it for You? You'll enjoy: Flexibility First: Work-life balance through hybrid / remote working options. Your Growth Journey: Continuous learning opportunities and professional development. Perks with a Purpose: Comprehensive benefits package to support your wellbeing, health, family ...

LondonPlatform Engineering – Information Security / Full Time / HybridAbout MoneyboxAt Moneybox, our mission is to give everyone the means to get more out of life. We're guided by our belief that wealth isn't about the money, it's about the means to more - more freedom, opportunities … transfers to servers and databases outside the country where you provided us with your personal data. Such transfers may include for example transfers and / or disclosures outside the European Economic Area and in the United States of America. If you are unsuccessful in your application, we may keep ...

Analyst Location: Manchester, Hybrid | 80% remote, 20% onsite Duration: 31 / 10 / 2031 Rate - £480 - £520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years … control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility ...