15 of 15 ISO/IEC 27001 Jobs in the City of Westminster

Databricks environments. Working closely with our managed SOC, you'll investigate alerts and incidents, close monitoring gaps, and keep our ISO / IEC 27001:2022 controls backed by complete, audit-ready evidence — including running customer and client security-assurance questionnaires on the business … service levels. Close monitoring gaps by improving detection use cases, alert logic, playbooks and escalation criteria. Own the evidence cycle for ISO / IEC 27001:2022 controls — mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners. Support internal, certification ...

work closely with client security leadership (BISOs and CISOs), assurance specialists, architects, engineers, product owners and delivery teams, acting as the cyber security authority / SME across projects, technology releases, and product implementations. Join our Digital & Data team working alongside product, design and a wide range of other experts … right controls in place. Embed into interdisciplinary client teams as a cyber security SME, providing authoritative advice and guidance on the design, application / implementation and operation of security controls of all types of security controls and technologies. Act as a trusted cyber security specialist within client delivery teams. ...

assurance across Microsoft, AWS, and Databricks environments. You will collaborate with our managed SOC, investigate alerts, close monitoring gaps, and ensure ISO / IEC 27001:2022 controls are backed by complete, audit-ready evidence and responses to client security questionnaires. Role involves monitoring ...

APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns for AI application development, including permission boundaries, identity controls, sandboxing, auditability, input / output validation and human-in-the-loop controls. Help clients establish governance and assurance processes for AI systems across the lifecycle, from experimentation through … prompts, APIs, tools and users. Awareness of emerging AI security risks such as prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model / data poisoning, vector or embedding weaknesses and AI supply chain risk. Ability to perform threat modelling for complex systems, including AI-assisted or agentic ...

experience, and skills), we provide a comprehensive benefits package to enable holistic well-being for you and your family. YOUR QUALIFICATIONS AND SKILLS BSc / MSc in Information Security, Computer Science or other technical discipline 3+ years of experience in a similar information security role Working experience with cloud … architectures and technologies, such as networking, server infrastructure, operating systems, web applications, databases, containerization, mobile Expertise defining system boundaries and the applications and security / compliance / infrastructure support services operating therein Understanding of common security and privacy management frameworks and participation in audit / certification such ...

expansion. The key responsibilities include: Developing and maintaining a Group-wide compliance framework aligned with business objectives. Leading the implementation and management of ISO standards, initially ISO 27001 and ISO 45001, across the organisation. Overseeing internal and external audits, ensuring corrective actions … information. Driving continuous improvement initiatives and integrating management systems from acquired businesses. The ideal candidate will have: Proven experience in managing and improving ISO management systems and certification processes. Strong understanding of audit methodologies and compliance assurance. Desirable experience working within the waste, heavy manufacturing or a related ...

data platforms. We move quickly and ship often and our infrastructure has to keep up without breaking things. We're looking for a Platform / DevOps Lead: a hands‐on engineer who codes their infrastructure, automates the manual stuff, and sets the standard for shipping trusted changes. … production and a safe, repeatable promotion path between them. This is the headline gap and your first big win. Build and harden CI / CD. GitHub Actions with OIDC, matrix container builds to ECR, plan‐on‐pull‐request with deliberate applies, and multi‐environment staging production promotion. Make deploys ...

defined. Engage risk review and assurance activities across existing suppliers. Provide IT and business advice on aspects of security standards and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2. Engage with I&T system owners to provide training in relation to information security, cyber resilience, phishing … both IT and manufacturing environments in manufacturing or similar industries. Experience working with information security standards and frameworks such as and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2. Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills. Demonstrable experience of engaging across ...

serving as a senior security advocate for sales, customer audits, and incident communications. You will own full-lifecycle detection and response (telemetry, automation, CI / CD detection-as-code, and MTTR / ATT&CK metrics) and serve as Incident Commander, running regular tabletop / purple-team exercises … postmortem improvements. A major focus is driving AI security and internal AI governance: integrating LLMs / ML into SOC triage and anomaly detection, defending AI attack surfaces (agent activity, prompt injection, machine identities), hardening against AI-driven threats (phishing-resistant MFA, supply chain / developer guardrails, help desk ...

highest data protection standards for our clients' and employees' data. All our employees are instrumental in ensuring the utmost care, GDPR, and ISO compliance, including ISO 27001, in handling sensitive information. Parloa is an e-verify employer in the USA. * We provide equal opportunities ...

systems, networks and cyber-security best practices. Strong knowledge of IT risk and security management and IT compliance (Cyber Essentials and ISO 27001). Knowledge of hospitality systems, including web and app development, CRM, membership management, ePOS, finance and booking systems. Excellent problem-solving skills, with ...

Salesforce or equivalent sales and quoting tools. You’ll bring strong domain knowledge across cybersecurity services, with an understanding of areas such as OT / IT security, Continuous Assurance, Continuous Threat Exposure Management, Digital Identity and Access Management, and complex managed services. Familiarity with regulatory frameworks such as GDPR … healthy with our cycle‐to‐work scheme. Special Time Off: Take time off for those big moments in life, like getting married / entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. Family Planning: Benefit from our generous maternity and paternity leave, as well ...

central and manufacturing sites. You will review responses to customer requests on security, support supplier due diligence, manage IT risk registers, and help maintain ISO27001 related controls. #J-18808-Ljbffr ...

wide end-to-end architecture. The role is a combination of internal activities and accountabilities (defining the target architecture for your domain, initiating and / or leading important transformations and new wide-scale deployments, supporting the design and engineering teams) as well as external activities (working with key vendors … support compliance / security enforcement projects Ensure our client networks are compliant with relevant regulations, standards and frameworks such as TSA, DORA, ISO27001 and more Technology watching and ability to translate research into actionable data and present up to management (research memos, strategy papers, etc) Work with our Business ...

/ WAN, SD-WAN, cloud connectivity, datacentre, and identity integration Embedding security-by-design principles and ensuring compliance with standards such as ISO27001 and NIS2 Providing governance and technical assurance through architecture forums and design reviews Supporting project delivery through technical leadership, planning, and risk management Driving improvements ...