1 to 25 of 56 ISO/IEC 27001 Jobs in the City of London

Security Architect Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

Engineering and Technology teams to embed security into the software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST / DAST tooling, secrets management, application / API penetration testing, vulnerability remediation tracking and release security governance. Support DORA‐related client and contractual obligations … agreed financial controls. Operate a risk‐based third‐party security assurance framework covering supplier onboarding, periodic reassessment, critical supplier classification, contractual security controls, subcontractor / sub‐processor oversight, supplier incident monitoring and exit arrangements. Own the client security assurance process, including security questionnaires, RFP / RFI responses, client ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts ...

Evaluate the effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs … Required Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule ...

Accenture's thought leadership in OT security through publications, presentations, and client engagements What You'll Need Essential 10+ years of experience in OT / ICS cybersecurity or critical infrastructure security Proven track record leading complex security programmes in regulated industrial environments Deep understanding of Industrial Control Systems (SCADA … across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence, or Critical National Infrastructure Knowledge of security standards including NERC‐CIP, IEC 62443, ISA / IEC 62443 Background in both advisory and hands‐on technical implementation What We Offer Work on prestigious projects spanning critical national infrastructure ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

secure remote access. Significant experience in network engineering, network infrastructure, or network operations roles. Strong knowledge of enterprise networking fundamentals, including routing, switching, TCP / IP, WAN, wireless, VPN, and network resilience. Experience developing or maintaining network standards, architecture principles, and technical documentation. Experience supporting or governing network environments … Security Fabric ecosystem, including FortiManager, FortiAnalyzer, FortiAuthenticator, FortiNAC, or FortiEMS.Familiarity with network segmentation approaches between IT and OT environments. Experience supporting ISO / IEC 27001-aligned environments or similar management system and audit frameworks. Experience with configuration standards, backup management, and network lifecycle ...

London is seeking a multilingual IT Quality Auditor and Analyst. The ideal candidate will ensure compliance with data protection regulations like GDPR and ISO 27001 while evaluating software quality. Knowledge of Hindi is essential due to collaboration with Indian teams. This hybrid role requires at least ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

Group is seeking a skilled Information Security Officer to strengthen our SOC2 compliance and ISO 27001 governance within our Financial services clientele. The role focuses on policy development, audits, and serving as the main point of contact for client inquiries. The ideal … candidate has a Bachelor's degree, at least five years in a compliance role in finance, and strong communication skills. Certifications such as CISA / CISM / CISSP are a plus, and the ability to work both independently and #J-18808-Ljbffr ...

Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly interested … experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer. Suitable Backgrounds May Include Third Party Cyber Risk Manager Cyber Risk Manager Technology Risk Manager Supplier Assurance Lead Vendor Risk Manager Operational Resilience ...

Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist with internal and external audits, including ISO 27001, Cyber Essentials, and client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption … controls and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding ...

Azure, AWS, and Oracle Cloud. Apply Service-Oriented Architecture (SOA) and Domain-Driven Design (DDD) principles. Design event-driven systems using Kafka and Pub / Sub. Lead API design, integration strategies, and legacy modernization to microservices. Contribute to Disaster Recovery planning and platform resilience. Implement Identity and Access Management … cataloging, and lineage. Ensure compliance with ISO 27001, GDPR, PCI DSS, and other security standards. Embed DevSecOps principles into CI / CD pipelines and platform delivery. Produce High-Level and Low-Level Designs (HLD / LLD) and Solution Architecture Documents (SAD). Competitive Salary ...

Microsoft Purview Security Consultant - Purview, Security, Location: London / Hybrid Working Salary: £45,000 - £52,000 (Depending on Experience) + Benefits + potential bonus ________________________________________ About the Company Our client is a forward-thinking and entrepreneurial cloud consultancy that partners with major organisations across the UK. They help businesses maximise … solutions. * Willingness to travel to client sites as required. * Microsoft Security, Compliance or Azure certifications. * Experience with Microsoft Defender technologies. * Understanding of GDPR, ISO 27001 and other compliance frameworks. * Knowledge of Zero Trust security principles. * Experience delivering Microsoft 365 transformation or migration projects. Pre-Sales Experience ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

adheresto regulatory requirements and maintaints the trsut of our clients. Key Responsibilities: Develop, implement, and maintain compliance policies and procedures in accordance with ISO 27001 standards. Knowledge of SOC2 is beneficial. Conduct regular audits and assessments to ensure compliance and certifications are maintained. Serve … Qualifications: Bachelor's degree Minimum of 5 years of experience in a compliance role within the financial industry. In-depth knowledge of ISO 27001 standards and requirements. Proven experience in a client-facing role, with excellent communication and interpersonal skills. Strong analytical and problem-solving abilities. ...

sites, including Microsoft 365, hardware, user lifecycle management and business systems. Leading the organisation's IT security and governance, including Cyber Essentials certification, ISO 27001 alignment, risk management and data protection requirements. Managing technology vendors, contracts, licences and renewals, ensuring strong commercial control and avoiding unnecessary … outsourced IT managed service provider and holding suppliers accountable for service and commercial performance. A working knowledge of Microsoft 365 alongside Cyber Essentials, ISO 27001 principles, GDPR and data protection requirements. Experience managing IT contracts, licences, renewals, budgets and vendor relationships. The ability to manage technology ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

Identity Security: Identity and access architecture across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM / PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning … distributed ledger technologies and blockchain-enabled platforms; including model and data protection, AI risk controls, prompt and output security, smart contract assurance, tokenization, wallet / key management, privacy, auditability, regulatory alignment, and integration with enterprise identity, data, cloud and application security controls. Cloud & Infrastructure Security: Secure deployment and integration ...

within our consulting team, working directly with clients across cyber strategy, risk, governance, assurance and security improvement. If you’re looking for another SOC / security operations role, this probably isn’t the right fit. If you enjoy varied cyber challenges, client-facing work and taking ownership of delivery … clients and prospects by maintaining professional accreditations. A Senior Consultant would be expected to have at least 2 professional accreditations such as CompTIA+, ISO27001 Lead Auditor or CC (Certified in Cyber Security) or CISSP or CISM. ⚙️ Practice Development Designing and improving internal processes, services and ways of working. Identifying opportunities ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

identify root causes, lessons learned, and recommend measures for prevention or improvement. Conduct periodic threat simulation activities to evaluate the adequacy of deployed detective / preventative controls. About you Proficiency in incident response tooling, including SIEM, EDR, cloud security, threat intelligence and forensic analysis platforms. Demonstrable experience leading … make effective decisions under pressure whilst managing multiple incidents, priorities and stakeholders simultaneously. Experience working with cloud security technologies and environments, particularly Azure and / or AWS. Experience building, tuning and improving security monitoring, detection engineering and threat detection capabilities. Strong stakeholder management and communication skills, with the ability ...

operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control Framework & Strategy Define and maintain ...