25 of 25 ISO/IEC 27001 Jobs in the City of London

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

Support Assistant / AV Specialist / Unified Communications Analyst A fantastic opportunity has arisen for a AV Support Assistant / AV Specialist / Unified Communications Analyst to join our London based global law firm on permanent basis. AV Support Assistant / AV Specialist / … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / AV Specialist / Unified Communications Analyst In accordance with the Employment Agencies and Employment Businesses Regulations ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

Title: SOC Analyst Location: On-site, London moving to hybrid 3 days on-site after 2-week induction Start Date: Immediate Contract length: 31 / 03 / 26 further extensions expected Clearance Required: BPSS (must be obtained prior to onboarding) Day rate: £400 - £500 Candidates must hold … work effectively within a collaborative SOC team Desirable Skills Experience with incident documentation and reporting Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001) Ability to adapt quickly to new tools, threats, and operational priorities Any relevant certifications (e.g., Security+, CySA+, Microsoft SC-series, GIAC ...

operational procedures. Monitor and improve key SOC performance metrics including MTTD, MTTR and SLA performance. Ensure effective use and optimisation of SIEM, EDR / XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams … technical cyber security teams. Strong understanding of incident response, threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR / XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ISO ...

Required Strong understanding of cybersecurity principles and risk management Experience working with security architecture and enterprise solution design Knowledge of technologies such as: IAM / IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with … stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience Hands-on exposure to Cloud Security and / or Network Security Security certifications such as CISSP, SABSA or equivalent Existing UK Government Security Clearance (SC / DV) Whats on Offer Competitive ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

more of the following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies ...

Senior Qualys Engineer – Contract UK-based | Hybrid / Flexible Working 6-12 Month Contract (Likely Extension) Inside IR35 £550 We're looking for an experienced Senior Qualys Engineer to support the expansion and optimisation of an enterprise-wide vulnerability management platform within a large, complex organisation. Key Responsibilities Expand … best practice guidance Skills & Experience Strong hands-on experience with Qualys VMDR Deep understanding of vulnerability management and asset discovery Strong networking knowledge (TCP / IP, DNS, firewalls, routing, VPNs) Experience working in large-scale enterprise environments Exposure to AWS, Azure or GCP is desirable Scripting and automation experience ...

with at least one major cloud PaaS provider (e.g. Azure or AWS) Strong working knowledge of information security standards and good practice (e.g. ISO 27001) Understanding of designing security management systems Experience with threat and vulnerability management systems Ability to assess security … control designs and configurations for effectiveness in risk mitigation A collaborative, consultative approach with a genuine desire to help your team succeed Service delivery / project management experience; Agile and DevOps exposure is a plus Nice to have: A track record of building trusted relationships with security stakeholders Experience ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

etc.). Industry‐recognised certifications such as CISSP, CCSP, CISM, GIAC, etc. Familiarity with compliance frameworks – GDPR, NIST AI RMF, ISO27001, SOC2, etc. Ability to build organisational culture, drive employee engagement, strengthen inclusion and diversity, reduce attrition, and attract top talent. Growth mindset, market focus, and ability to collaborate effectively ...

stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials, PCI-DSS, and data protection obligations Manage relationships with auditors, regulators, cyber insurers, and certification bodies Lead security assessments ...

standards and ensuring compliance with regulations. The ideal candidate will have over 8 years of information security experience, including hands-on knowledge of ISO 27001 and SOC programs. Strong cloud security experience, particularly AWS, and excellent stakeholder management skills are required. #J-18808-Ljbffr ...

support work assisting the support and infrastructure teams as and when required. You will develop and maintain the incident response plan, cyber essentials and ISO27001 and follow the NIST framework. You will also work with the infrastructure team on a written DR plan and BC plan. Principal Duties / … intrusion detection systems and firewalls, virtual private networks, web protocols, and email security. * Perform continuous Pen Tests and follow up remediating vulnerabilities. Principal Duties / Responsibilities * Create and update all relevant Jira tickets being worked on regularly. * Maintain system uptime and availability as close to 99.99%. * Configuring ...

Senior Project Manager with proven experience of driving cyber risk reduction, control remediation and compliance-focused delivery across multiple stakeholder groups. Projects may include ISO27001, Cyber Essentials Plus and wider cyber risk reduction frameworks or programmes, requiring the Project Manager to coordinate technical remediation activity, translate control requirements into clear … where direct line management authority may not exist. Key Responsibilities Lead the delivery of complex cyber security, technology risk and regulatory control programmes Manage ISO27001, Cyber Essentials Plus and cyber risk reduction delivery activity Translate control requirements into structured plans, milestones and measurable delivery outcomes Coordinate technical remediation across senior ...