24 of 24 ISO/IEC 27001 Jobs in the City of London

Security, you'll take ownership of Governance, Risk and Compliance activities across the business, with an immediate focus on supporting the organisation through ISO 27001 certification. This is an opportunity to have genuine ownership. We're not looking for someone who has simply contributed … 27001 controls, evidence, audits and remediation. Experience managing security risks and driving actions through to completion. Exposure to third-party / supplier assurance and customer security requirements. Knowledge of NIS2 would be particularly valuable. Excellent stakeholder management and communication skills. You'll need the confidence to challenge ...

visit www.hcltech.com Job Title : Senior Vulnerability Management Engineer Location: London, UK ( Hybrid mode at client location ) Experience: 3 – 6 years in vulnerability management / information security ROLE SUMMARY The L2 Senior Vulnerability Management Engineer owns the organisation's end-to-end vulnerability management programme, spanning EUC, Data Center, Network … technology domains (endpoints, servers, network devices, web applications, cloud). • Design and maintain scan policies, asset groups, and scanning schedules in Qualys VMDR / Tenable Security Centre / Rapid7 InsightVM to ensure full coverage. • Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

Network Sales Engineer / Solutions Architect Public Sector £80,000£120,000 + 20% bonus + car allowance + excellent benefits Remote / Home-Based | UK | Regular Customer Travel UK Government & Public Sector | Networking | Technical Presales SC Clearance highly desirable We're looking for an experienced Network Sales … Engineer / Solutions Architect to join a leading technology organisation and support its growing UK Public Sector business . If you're technically strong in enterprise networking , have a background in technical presales and understand how to work with UK Government and Public Sector customers , this could ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

Develop meaningful risk reporting, dashboards and management information for senior stakeholders. Ensure alignment with regulatory and industry frameworks including DORA, NIS2, NIST and ISO 27001. Act as the subject matter expert for third-party cyber risk across the organisation. What We're Looking For We are particularly interested … experience engaging both technical and non-technical audiences. Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer. Suitable Backgrounds May Include Third Party Cyber Risk Manager Cyber Risk Manager Technology Risk Manager Supplier Assurance Lead Vendor Risk Manager Operational Resilience ...

sites, including Microsoft 365, hardware, user lifecycle management and business systems. Leading the organisation's IT security and governance, including Cyber Essentials certification, ISO 27001 alignment, risk management and data protection requirements. Managing technology vendors, contracts, licences and renewals, ensuring strong commercial control and avoiding unnecessary … outsourced IT managed service provider and holding suppliers accountable for service and commercial performance. A working knowledge of Microsoft 365 alongside Cyber Essentials, ISO 27001 principles, GDPR and data protection requirements. Experience managing IT contracts, licences, renewals, budgets and vendor relationships. The ability to manage technology ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

reports, and automated policy workflows Manage project timelines, deliverables, and escalations with minimal oversight Regulatory & Compliance Map client data flows to GDPR, DPDP, CCPA / CPRA, HIPAA, and ISO 27001 obligations Support RoPA, DPIA, and PIA documentation for client compliance programs Advise on data retention … deletion, and breach notification protocols TECHNICAL SKILLS BigID Platform Data discovery & scanning (structured, unstructured, cloud) Classification policies, labeling, and tagging DSR / DSAR automation workflows Risk & privacy modules — correlation, remediation BigID Open SDK, APIs, and custom app development Data & Cloud SQL / NoSQL databases — Snowflake Cloud platforms ...

Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI / CD pipelines and DevSecOps integration Threat modelling techniques and tools Understanding of OWASP Top 10 and common vulnerability classes Experience with API security … application security, secure development or software engineering with a security focus Hands-on experience conducting application security reviews Experience implementing security in CI / CD processes Experience working with development teams in an enterprise environment Desirable Experience building or contributing to a security CoE or capability model Experience working ...

Bonus Onsite WORKING Location: Central London, Greater London - United Kingdom Type: Permanent Chief Security Architect Location: UK - Hybrid / Remote Salary: Up to £110,000 + senior consultancy / leadership package Clearance: Active DV clearance essential Sector: Defence, Government, National Security & Critical National Infrastructure The Opportunity … looking for an exceptional Chief Security Architect / NCSC Head Consultant to take senior technical ownership of Security Architecture across a high-assurance cyber security consultancy. This is a senior, client-facing architecture role where you will act as a technical authority for security architecture , leading complex engagements across ...

design and implementation of new technologies, working within an Azure and Office 365 environment, as well as IT security, cyber security, ISO 27001, and business continuity planning. You will also be responsible … Director for ensuring data security, regulatory compliance, and staff training in relevant areas, making sure the business remains compliant with GDPR and financial / insurance regulations, including KYC / AML, and Consumer Duty. To be successful in this IT Director role, you will need to have previous experience ...

most productive and happy. 🕰️ Working Hours : 8hrs per day Mon-Fri, 40hrs per week. 🎓 Training : individual training plan and budget for one certification / course per year. 🍺 Socials : We meet regularly to have a drink, throw some axes. 🍾 Start Date : October 2026 Minimum Requirements You must meet … clients and prospects by maintaining professional accreditations. A Senior Consultant would be expected to have at least 2 professional accreditations such as CompTIA+, ISO27001 Lead Auditor or CC (Certified in Cyber Security) or CISSP or CISM. ⚙️ Practice Development Regularly support the improvement of our internal operations under direction from ...

Privacy and Protection Security Architecture Operational Technology Security Governance, Risk, and Compliance Ideally,You’llAlso Have Security-related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, or IAPP. Experience operating within an NCSC Assured Cyber Consultancy. Understanding of the cybersecurity regulatory landscape and assessment frameworks (e.g. ...

role Position Digital Technology Director Contract type Permanent / Full Time Reporting to Executive Management Location London Overview of role The Digital Technology Director is pivotal in steering the company through an extensive digital transformation and establishing a long-term technology strategy to meet the growing demands … implementing cybersecurity strategies across enterprise and operational domains. Experience in threat detection, and incident response. Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST). Budgeting & Resource Allocation Strong financial management skills, including budgeting, forecasting, and cost optimisation. Experience managing multi-million-pound technology ...

improving security across Microsoft 365, Azure, endpoints and identity; building incident response, business continuity and disaster recovery capability; managing GDPR, PCI-DSS and ISO 27001 initiatives; strengthening supplier security; and providing clear cyber risk reporting to senior leadership. You will work closely with IT, infrastructure, project ...

infrastructure-as-code technologies Familiarity with cloud platforms including Azure, AWS or GCP An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls Experience operating in regulated environments and working with security and data protection requirements Excellent communication skills ...

expertise and clever thinking, we redefine GRC and IT strategies, empowering organisations to shine. From wielding cyber-superpowers to mastering security frameworks like ISO 27001:2013 and NIST, we're certified wizards ready to chart a course to success, strengthen defenses, and turn challenges into opportunities ...

Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI / CD pipelines. Remained technically hands-on whilst leading teams. Worked closely with engineering leadership to improve security culture. Highly Desirable Experience applying AI within ...

culture and resilience. What you'll need to succeed Previous experience leading Information Security or Cybersecurity functions Strong knowledge of security frameworks such as ISO27001 and NIST Experience developing security strategy, governance and risk management frameworks Ability to influence senior stakeholders and drive organisational change A passion for building high ...

oversee policies and governance. You will manage a small security team, coordinate with outsourced providers, and drive risk management, incident response, and regulatory compliance (ISO27001, SOC2). Strong communication in English required. #J-18808-Ljbffr ...

Role: Cyber Assurance Lead Position: Contract Location: Hybrid / London Days on Site: Minimum 1 Duration: Approx until 31st March 2027 Pay: Up to 750£ per day Umbrella Job Purpose / Overview Cyber assurance is an umbrella term for several processes aimed at ensuring individual system components … conduct efficient assessments. Convince stakeholders of the importance of audit, assurance and security. Knowledge & Skills Formal method or standards, such as COBIT 5 or ISO27001 and associated best practices. Legal and regulatory standards on data protection and privacy. Knowledge across a range of Security technologies: Azure identify management and networking ...

Security Analyst, Cyber Security, ISO27001, Defender, Mimecast, CompTia CySA+, Central London Security Analyst required to work for a fast growing and exciting company based in London. However, this is a hybrid role and you will only be expected to be in the office circa twice a week. The Security Analyst … email security platforms and understanding of SPF, DMARC and DKIM. Experience with Zscaler or similar endpoint proxy solutions. Good understanding of Cyber Essentials and ISO27001 It is essential you have a certifications in CompTia CySA+ and Microsoft Security Operations This is a great opportunity and salary is dependent upon experience. ...

Security Analyst, Cyber Security, ISO27001, Defender, Mimecast, CompTia CySA+, Central London Security Analyst required to work for a fast growing and exciting company based in London. However, this is a hybrid role and you will only be expected to be in the office circa twice a week. The Security Analyst ...