1 to 25 of 29 ISO/IEC 27001 Jobs in the City of London

Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus on supporting the organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed … 27001 controls, evidence, audits and remediation. Experience managing security risks and driving actions through to completion. Exposure to third-party / supplier assurance and customer security requirements. Knowledge of NIS2 would be particularly valuable. Excellent stakeholder management and communication skills. You'll need the confidence to challenge ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle. Oversee Conditional Access deployment, risk-based authentication, and device / state signals. Guide the operation and hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure … Experience and Personal Attributes Bachelor’s degree in Computer Science, Information Technology, or related field; equivalent experience considered. Approx. 7–10 years in IAM / identity engineering / architecture within large or enterprise environments; 3+ years leading complex IAM design initiatives. Prior global / large‐scale enterprise ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

Manage the cyber security risk framework and risk register. Lead security governance, assurance and reporting. Support audits and certifications, including Cyber Essentials and ISO 27001. Lead and coordinate responses to cyber security incidents. Oversee security controls and third-party cyber risk. Drive cyber security awareness and organisational security … Security Manager or similar role. Strong cyber governance, risk and assurance experience. Knowledge of ISO 27001, NIST, CIS Controls and / or Cyber Essentials. Experience with security audits, certifications and incident response. Experience working within a complex, multi-site organisation. Strong stakeholder management and communication ...

team of security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft / Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … impact. What You’ll Be Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR / XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

with at least one major cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security … control designs and configurations for effectiveness in risk mitigation A collaborative, consultative approach with a genuine desire to help your team succeed Service delivery / project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

Position PAM Manager – Location: UK Wide / hybrid As a PAM Manager, you will lead the delivery of complex Privileged Access Management programmes across enterprise environments, leveraging platforms such as CyberArk, BeyondTrust, Delinea, and One Identity. You will act as a trusted advisor to senior stakeholders, working closely with … including managing risks, dependencies, and complex workstreams. Experience producing IAM governance and operational documentation (e.g. operating models, runbooks, DR plans). Desirable Skills IAM / IGA platform certifications. Familiarity with security frameworks (e.g. ISO 27001, NIST, COBIT). Exposure to identity infrastructure (e.g. Active Directory ...

procedures. - Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date. Required Skills / Knowledge: - Experience with Microsoft Defender or similar endpoint anti-virus solutions. - Experience with Mimecast or similar email security platforms and understanding of SPF, DMARC ...

Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI / CD pipelines. Remained technically hands-on whilst leading teams. Worked closely with engineering leadership to improve security culture. Highly Desirable Experience applying AI within ...

standards and ensuring compliance with regulations. The ideal candidate will have over 8 years of information security experience, including hands-on knowledge of ISO 27001 and SOC programs. Strong cloud security experience, particularly AWS, and excellent stakeholder management skills are required. #J-18808-Ljbffr ...

ensuring compliance with key standards. The ideal candidate will have a strong background in both enterprise and product security, hands-on experience with ISO27001, SOC2, and SOX, along with excellent leadership and project management skills. This position offers a range of employee benefits including annual leave and a matched pension ...

technical roles and role hierarchies. Managing user provisioning, de-provisioning and access approval workflows. Integrating SAP IAG with SAP IAS, SAP IPS, SAP S / 4HANA, ECC and cloud applications. Supporting integrations with third-party IAM solutions where required. Configuring multi-stage approval workflows and risk-based access request … within hybrid SAP landscapes. Exposure to SAP Fiori, ABAP or automation technologies. Experience integrating third-party IAM solutions such as SailPoint. Knowledge of GDPR, ISO27001 or wider security governance frameworks. SAP Security, SAP IAG, SAP GRC, CISSP or CISA certifications. Why This Role: Work on large-scale enterprise SAP security ...