1 to 25 of 36 ISO/IEC 27001 Jobs in the City of London

Note : This role could be located anywhere between Bristol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus on supporting the organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed … 27001 controls, evidence, audits and remediation. Experience managing security risks and driving actions through to completion. Exposure to third-party / supplier assurance and customer security requirements. Knowledge of NIS2 would be particularly valuable. Excellent stakeholder management and communication skills. You'll need the confidence to challenge ...

responsibilities include: Build and develop the Quality, Compliance and EHS framework across European data centre operations. Lead the implementation and ongoing management of ISO management systems, including ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO … ISO 50001. Manage certification processes, external audits and relationships with third-party assessors. Develop health and safety strategies, policies and procedures across operational sites. Conduct internal audits and ensure compliance with operational procedures, SLAs and industry best practice. Drive continuous improvement initiatives and promote operational discipline across engineering ...

compliance with ISO 27001, SOC2, GDPR, and other applicable privacy and customer requirements. Reporting & Governance: Develop and report compliance KPIs / KRIs; coordinate reporting to senior management and governance committees. Audit Management: Coordinate internal / external audits and customer due diligence; manage findings through … strong compliance culture; develop and deliver training and awareness programmes. Stakeholder Support: Support Legal, Operations, and Procurement on contractual compliance; coordinate customer / regulatory information requests. What We're Looking For 8–10+ years' progressive experience in governance, audit, risk, compliance, or assurance in a mission-critical environment (data ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). • Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. • Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle. Oversee Conditional Access deployment, risk-based authentication, and device / state signals. Guide the operation and hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure … Experience and Personal Attributes Bachelor’s degree in Computer Science, Information Technology, or related field; equivalent experience considered. Approx. 7–10 years in IAM / identity engineering / architecture within large or enterprise environments; 3+ years leading complex IAM design initiatives. Prior global / large‐scale enterprise ...

standards, leading advanced troubleshooting, and guiding network strategy and compliance in highly regulated environments. Please note this role requires strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Deliver architectural assurance, advanced support, and strategic direction for complex, multi-vendor network estates. Champion … consistent application of best practices and continuous improvement initiatives. Provide design assurance for new deployments and service modernisation across SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments Support and guide automation initiatives including Infrastructure-as-Code (IaC) pipelines, compliance validation, and drift detection Drive ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

across the network estate for financial services clients. The role focuses on complex incident resolution, change execution, and performance optimisation for SDWAN, WAN, LAN / WLAN, VPN / SASE, and load-balancing environments, ensuring all activities meet stringent regulatory, security, and compliance standards. Please note this role requires … strong Netskope experience, involving migrations / transformations / implementations at Engineering level. Primary Purpose Provide expert technical leadership for diagnosing, resolving, and optimising complex network issues. Lead configuration management and compliance, support onboarding and automation initiatives, and drive continuous improvement within regulated environments. Duties and Responsibilities Essential Roles ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

risks. What You’ll Bring Prior and proven experience gained as a Security Architect or in a technical cyber role working across public sector / government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls … / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP, CISM (or working towards CIISEC / UK Cyber Security Council registration). Soft Skills: Strong analytical thinking, communication, teamwork, and adaptability. What ...

Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI / CD pipelines and DevSecOps integration Threat modelling techniques and tools Understanding of OWASP Top 10 and common vulnerability classes Experience with API security … application security, secure development or software engineering with a security focus Hands-on experience conducting application security reviews Experience implementing security in CI / CD processes Experience working with development teams in an enterprise environment Desirable Experience building or contributing to a security CoE or capability model Experience working ...

understanding of enterprise IT environments and modern technology architectures. Experience assessing or managing one or more of the following: Cloud platforms (Azure, AWS and / or Google Cloud) Enterprise infrastructure and networks Data centres and hosting environments IT operations and service management Enterprise applications and ERP platforms Identity … business continuity Data platforms and integration architectures Familiarity with one or more of the following technology frameworks and best practices: ITIL COBIT NIST ISO 27001 Well-Architected Frameworks Cloud Adoption Frameworks Experience evaluating technology risks, technical debt and technology investment requirements. Solid understanding of core cybersecurity ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

with at least one major cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security … control designs and configurations for effectiveness in risk mitigation A collaborative, consultative approach with a genuine desire to help your team succeed Service delivery / project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience ...

improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification bodies Lead security assessments ...

Role As Change Manager, you will take ownership of the end-to-end change programme, driving adoption of D365 across: Procurement & Sourcing Commercial / Bids & Proposals Finance Operations HR You will lead the change strategy using the ADKAR methodology , managing stakeholder engagement, communications, training, resistance management, adoption reporting … CMMC environments Experience within multi-entity or holding company structures Understanding of procurement processes and ERP workflow controls Contract Details 📍 Hybrid / Remote UK 💷 £550 per day 📅 3-Month Initial Contract ⚡ Immediate Start Available 📈 Potential for extension based on programme requirements Why This Role? This is an opportunity ...

procedures. - Complete client and supplier security surveys as required, ensuring records and supporting documentation are kept accurate and up to date. Required Skills / Knowledge: - Experience with Microsoft Defender or similar endpoint anti-virus solutions. - Experience with Mimecast or similar email security platforms and understanding of SPF, DMARC ...