1 to 25 of 51 ISO/IEC 27001 Jobs in the City of London

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts ...

Evaluate the effectiveness of technical, procedural, and physical security controls against documented security requirements and standards. Assess security controls against recognised frameworks including ISO 27001 , NIST CSF , NIST 800-53 , and CIS Controls . Review security documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs … Required Skills & Experience Proven experience testing and assessing the effectiveness of security controls within complex enterprise environments. Strong knowledge of security frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) NIST 800-53 CIS Controls Experience reviewing and testing: Network security controls Firewall configurations and rule ...

komplexe Sicherheitslösungen zu gestalten, Kunden zu beraten und innovative Projekte umzusetzen? Dann werde Teil unseres engagierten Teams und unterstütze als Senior Security Consultant (m / w / d) Unternehmen aus Healthcare, Finance und öffentlichem Sektor auf ihrem Weg zur sicheren digitalen Transformation. Deine Aufgaben bei uns Du entwickelst … Architekturen – egal ob on-premises, hybrid oder in der Cloud Technisches Know-how in Enterprise Networks, Cloud-Security und modernen Security-Lösungen (z.b. SIEM / SOC, Secure Access, RAS Lösungen). Idealerweise Zertifizierungen wie CISSP, CISM, ISO 27001 Lead Implementer, CISA, Cisco Cybersecurity Associate, CCNA ...

maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant contractual and regulatory requirements. Conduct risk assessments, internal audits, compliance reviews and Data Protection … Impact Assessments (DPIAs). Support the management of security incidents, business continuity planning and incident response exercises. Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits. Work closely with Cyber Security, Group IT, HR and external service providers to assess ...

client organisations in line with UK regulations. Assess compliance against UK GDPR and the Data Protection Act 2018, the NIS Regulations, ISO / IEC 27001, Cyber Essentials and Cyber Essentials Plus, and the Telecommunications (Security) Act 2021. Identify risks, provide actionable recommendations … consultancy or client‐facing role, with strong knowledge of UK legal frameworks and compliance standards. Relevant certifications, for example CISA, CISSP or ISO 27001 Lead Auditor. Excellent communication and stakeholder engagement skills, with the ability to work independently across multiple client engagements. Why Consultants choose ...

organizations, with relevant sector knowledge. Familiarity with recognized cybersecurity and governance frameworks such as NIST Cybersecurity Framework, NIST Zero Trust Architecture, ISO / IEC 27001, CIS Controls, COBIT or Cloud Security Alliance guidance. Experience with DevSecOps, CI / CD controls, cloud security … collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com / us / careers. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized ...

finance services or insurance sectors.Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS / Azure), incident response, and governance.Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.Demonstrable experience applying artificial intelligence (AI), machine learning … concepts, including model limitations, bias, explainability, data protection and emerging AI regulation and standards (for example the EU AI Act and ISO / IEC 42001).Awareness of AI-specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain ...

client relationships. Contribute to thought leadership in OT security through publications, presentations and client engagements. The Candidate Essential 10+ years' experience in OT / ICS cybersecurity or critical infrastructure security. Hands-on OT security industry experience, for example in Manufacturing, with time spent on plants and sites. Ability … CISSP, GRID. Experience across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence or CNI. Knowledge of NERC-CIP and IEC / ISA 62443. Background in both advisory work and hands-on technical implementation. What's on Offer Prestigious projects across CNI, advanced manufacturing and defence clients. The chance ...

secure remote access. Significant experience in network engineering, network infrastructure, or network operations roles. Strong knowledge of enterprise networking fundamentals, including routing, switching, TCP / IP, WAN, wireless, VPN, and network resilience. Experience developing or maintaining network standards, architecture principles, and technical documentation. Experience supporting or governing network environments … Security Fabric ecosystem, including FortiManager, FortiAnalyzer, FortiAuthenticator, FortiNAC, or FortiEMS.Familiarity with network segmentation approaches between IT and OT environments. Experience supporting ISO / IEC 27001-aligned environments or similar management system and audit frameworks.li> Experience with configuration standards, backup management, and network lifecycle ...

regular system audits, diagnose technical issues and implement firmware or software updates to minimise operational disruption. Lead the integration of CCURE 9000 with Victor / VideoEdge and other third‐party security solutions to ensure cohesive interoperability and efficient data flow. Be the primary point of contact for internal departments … . Familiarity with compliance frameworks applicable to enterprise security platforms, such as: GDPR – governing the protection and privacy of personal data ISO / IEC 27001 – the international standard for information security management systems (ISMS) SOC 2 – controls relevant to security, availability, processing integrity ...

PLEASE NOTE THIS ROLE SITS WITHIN IR35***PLEASE NOTE THIS ROLE SITS WITHIN IR35*** AV Support Assistant / Audio Visual Specialist / AV Engineer A fantastic opportunity has arisen for an AV Support Assistant / Audio Visual Specialist / AV Engineer to join our London based … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / Audio Visual Specialist / AV Engineer ***PLEASE NOTE THIS ROLE SITS WITHIN IR35***PLEASE NOTE THIS ...

Group is seeking a skilled Information Security Officer to strengthen our SOC2 compliance and ISO 27001 governance within our Financial services clientele. The role focuses on policy development, audits, and serving as the main point of contact for client inquiries. The ideal … candidate has a Bachelor's degree, at least five years in a compliance role in finance, and strong communication skills. Certifications such as CISA / CISM / CISSP are a plus, and the ability to work both independently and #J-18808-Ljbffr ...

environments Industrial Ethernet Network segmentation Firewalls Remote access solutions Zero Trust principles Knowledge of industrial protocols such as: Modbus DNP3 OPC-UA Profinet EtherNet / IP Experience with OT cyber security frameworks and standards including: IEC 62443 NIST NIS2 ISO 27001 Experience working … Azure or AWS). Industrial IoT (IIoT) technologies. Experience with OT monitoring and threat detection platforms. Relevant certifications such as: GICSP CISSP TOGAF ISA / IEC 62443 certifications Azure Security certifications IR35 Status: Inside IR35 If you are an experienced OT Architect with a strong background ...

Information Security Management System (ISMS). Conduct security risk assessments and maintain risk registers. Assist with internal and external audits, including ISO 27001, Cyber Essentials, and client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption … controls and reducing risk. WHAT YOU'LL BRING: Strong experience in a cyber security, information security, or security operations role. Good understanding of: ISO 27001 NIST Cyber Security Framework Cyber Essentials Plus Risk Management Methodologies Experience investigating security incidents. Knowledge of Microsoft 365 security technologies. Understanding ...

deliver the Target operating Model and Cyber Security Strategy Governance, Regulatory & Compliance Oversee cyber security policies, standards, and control frameworks aligned with ISO 27001, SOC, DORA, NIST, and other related standard and frameworks and financial services best practices Ensure compliance with global regulatory requirements (e.g., GDPR … regulated financial institutions Proven experience leading cyber advisory, risk, and service delivery functions Managing a P\L and building a cyber security business practice / service Deep understanding of financial services regulations, operational resilience, and client assurance Experience operating in global, multi-entity, and acquisition-driven environments Strong executive ...

Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI / CD pipelines and development workflows. Help development teams embed secure‐by‐design principles throughout the software development lifecycle. Act as the technical lead … practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI / CD pipelines and DevSecOps environments. Experience with automation and scripting tools such as Terraform, PowerShell, Python and REST APIs. Experience leading technical teams ...

sites, including Microsoft 365, hardware, user lifecycle management and business systems. Leading the organisation's IT security and governance, including Cyber Essentials certification, ISO 27001 alignment, risk management and data protection requirements. Managing technology vendors, contracts, licences and renewals, ensuring strong commercial control and avoiding unnecessary … outsourced IT managed service provider and holding suppliers accountable for service and commercial performance. A working knowledge of Microsoft 365 alongside Cyber Essentials, ISO 27001 principles, GDPR and data protection requirements. Experience managing IT contracts, licences, renewals, budgets and vendor relationships. The ability to manage technology ...

Walkers seeks an Internal Auditor to strengthen its Internal Audit function, focusing on the ISMS and alignment with ISO 27001. The role involves risk-based audits, control assessment and reporting, with hybrid London work patterns and interaction across jurisdictions. The ideal candidate will hold ISO 27001 ...

governance, risk and compliance programme under the Head of Information Security. You will drive policy, training, risk assessments and reporting, while maintaining ISO 27001 certification and embedding security across products and services. Lead a team, partner with Legal, Privacy, Procurement and IT, and influence executives with ...

risk or a related area. You'll work alongside experienced Information Security professionals and receive support and guidance while developing your knowledge across ISO 27001, risk management, supplier assurance, security policies and compliance. This role would particularly suit someone currently working as an Information Security Assistant … support a broad range of GRC activities, including: Assisting with the ongoing maintenance of the Information Security Management System (ISMS) Supporting ISO 27001 certification, surveillance and internal audit activities Coordinating audit evidence and helping track remediation actions Assisting with the maintenance of information security policies, standards ...

junior role targets individuals with around 1–2 years of experience in Information Security, GRC or IT risk, providing guidance and development in ISO 27001 and related compliance. You will support a wide range of GRC activities, assist with ISMS maintenance and certification, coordinate audit evidence ...

platform adoption and drive measurable utilization across your portfolio, so that capability translates into protection and the outcomes each customer invested in.Lead product adoption / activation, configuration health and platform optimization across Mimecast’s full product portfolio – including Email Threat Protection, Human Risk Management (HRM), Incydr (Code42) and DMARC … market or enterprise-level accounts, preferably in a security-focused SaaS organization.Working knowledge of email security architectures: Secure Email Gateways, Microsoft 365 Defender, DMARC / DKIM / SPF, email routing and hybrid mail flow.Familiarity with identity and access management concepts (Okta, Azure AD, SSO / SAML ...

Azure Architect London - Hybrid £100,000 - £130,000 Microsoft Azure / Cloud Architecture FinTech / Banking / Financial Services I'm working with a growing business in the looking to hire an experienced Azure Architect to take ownership of its Azure architecture, cloud strategy and technical direction. … solutions, ideally within fintech, banking or financial services. Strong understanding of Azure networking, security, Microsoft Entra ID and cloud governance. Experience with Azure PaaS / IaaS, Infrastructure as Code and CI / CD. Experience designing highly available, resilient and secure cloud environments. Nice to Have Microsoft Azure certifications ...

Identity Security: Identity and access architecture across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM / PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning … distributed ledger technologies and blockchain-enabled platforms; including model and data protection, AI risk controls, prompt and output security, smart contract assurance, tokenization, wallet / key management, privacy, auditability, regulatory alignment, and integration with enterprise identity, data, cloud and application security controls. Cloud & Infrastructure Security: Secure deployment and integration ...