1 to 25 of 64 ISO/IEC 27001 Jobs in the North of England

Manager - Manchester Manchester (Hybrid – 3 days office / 2 days home) Competitive Salary + Excellent Benefits Are you an experienced IT Manager with a strong background in IT operations, infrastructure and information security? Have you owned an ISO 27001 Information Security Management System (ISMS … ISO 27001 external audits and maintaining certification (essential) Ownership of Cyber Essentials Plus certification (essential) Microsoft 365 administration Azure Identity / Entra ID Microsoft Intune Microsoft Defender Endpoint Management Identity & Access Management Cisco Meraki or similar enterprise networking technologies Vendor and supplier management Experience managing ...

Quality Assurance Officer (QAO) Role Profile Touchstar Technologies Limited / Touchstar plc Job Title Quality Assurance Officer (QAO) Reporting To Chief Executive Officer (CEO) Purpose of the Role The Quality Assurance Officer (QAO) is responsible for establishing, managing, auditing, maintaining, and continuously improving the companys integrated management systems, compliance … Ability to challenge operational practices constructively Experience managing corrective and preventive actions Strong communication and stakeholder management skills Desirable Experience with NSI Gold and / or BAFE environments Knowledge of cybersecurity governance frameworks Experience in AIM-listed or regulated businesses Experience building integrated management systems from fragmented environments Internal ...

data classification through Azure Information Protection labelling. Help maintain the evidence and controls that support the company's accreditations, including ISO / IEC 27001, 27017, and 27018, Cyber Essentials Plus, and SOC 2. Learn and apply the principles of risk and information governance … Technical Requirements Two or more years' experience in a cyber security, SOC, or information security analyst role. Experience working within an ISO / IEC 27001 (or equivalent) accredited environment. Familiarity with ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding ...

Information Security / GRC Manager Overview We're looking for an Information Security / Governance, Risk & Compliance (GRC) Manager to lead enterprise-wide risk, governance, and assurance across a fast-growing B2B technology business. This is a senior strategic position with responsibility spanning information security, governance, compliance, quality … ability to influence at executive and board level. Relevant certifications such as CISM, CISSP or ISO 27001 Lead Auditor / Lead Implementer (or be working towards them). Strong commercial awareness alongside excellent judgement. Outstanding communication skills with the ability to influence both technical ...

best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving and maintaining compliance with standards and regulations such as ISO 27001, NIST and GDPR . Develop and review security policies, procedures and documentation. Perform vulnerability assessments and coordinate remediation efforts. Deliver threat … consultancy or advisory environment. Desirable Qualifications & Experience Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor . Experience in consultancy or client-facing roles. Exposure to penetration testing or security engineering. Knowledge of secure software development practices and DevSecOps . ...

aligned to business objectives. Core Responsibilities Support the development, implementation, and ongoing maintenance of the Information Security Management System (ISMS) aligned to ISO 27001Implement and enforce information security policies, standards, and procedures across the organisationConduct security risk assessments, ensuring risks are identified, assessed, and managed through appropriate controlsMaintain … risks and vulnerabilitiesLead the investigation and response to information security incidents, ensuring lessons learned and improvements are implementedSupport internal and external audits, including ISO 27001 certification and surveillance activitiesManage third-party and supplier security risk assessments and assurance processesWork with IT and project teams to ensure ...

lead on security compliance activities, coordinate responses to security incidents, deliver engaging awareness programmes and support alignment with recognised frameworks including ISO 27001 and the NIST Cybersecurity Framework . Key Responsibilities Lead IT security compliance activities, supporting alignment with ISO 27001 … external partners. Good Microsoft 365 and digital skills. Commitment to continuous professional development and creating an inclusive workplace. Desirable Relevant Cyber Security and / or Information Governance qualification. CompTIA Security+ certification. CISSP (Certified Information Systems Security Professional) certification. Experience using Microsoft 365 security and compliance tools, including Purview, Defender ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

risk register. Develop and maintain security policies, standards and governance documentation. Support and improve cyber governance frameworks including NIST CSF, CIS Controls and ISO 27001 . Conduct cyber risk assessments across projects, systems and suppliers. Coordinate internal and external audits and compliance activities. Produce cyber risk … senior stakeholders. A proactive approach with the ability to manage multiple priorities. Experience with GRC platforms, ISO 27001 certification, GDPR / NIS2, cloud security (Microsoft 365 / Azure) or security certifications (CISA, CISSP, CRISC, Security+ etc.) would be advantageous. This is a fantastic opportunity ...

using Agile Software Development practices such as XP and Continuous Delivery. Experience of managing and prioritising effort across multiple deliverables that are in scoping / development. Experience of working with cross-functional teams to discover and deliver product features that achieve the right outcomes. Knowledge & Skills Strong communication skills … with the ability to use data and narrative to drive action and decision-making with both internal / external stakeholders and delivery teams. Strong knowledge of Microsoft Excel, PowerPoint and Word. An understanding of using Atlassian Jira for product delivery. A strong understanding of how to construct a cohesive ...

monitoring. Troubleshoot local area network (LAN) connectivity issues and support internal teams to re-establish remote access to customer environments via SSH, Terminal Services / Remote Desktop Services or Remote Access Controllers. Basic troubleshooting of structured cabling links between racks identifying any faults or inconsistencies and liaising with internal … timeframes. Ensure Data Centre’s are always kept in a clean and presentable manner. Knowledge and experience required: Experience working in a Managed Hosting / Public and or Private Cloud Enterprise Data Centre Environment. Proficient in Server, Storage & Network deployment and ongoing break fix support. Basic knowledge and understanding ...

with infrastructure and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend … with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong ...

with infrastructure and technical teams to implement secure configurations Support and maintain security policies, procedures and controls Ensure alignment with recognised frameworks including ISO 27001 and NIST Deliver user awareness initiatives such as phishing simulations and training Stay up to date with emerging threats and recommend … with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding of data protection legislation including GDPR Ability to investigate incidents, analyse findings and communicate clearly with stakeholders Strong ...

escalation through governance forums Produce consolidated certificate reporting, dashboards and metrics for operational and security governance boards Define evidence requirements and support internal / external audit and assurance activities Essential Skills & Experience: Experience in Digital Certificate Management, PKI Governance, Cyber Security Governance, Information Assurance or GRC Strong understanding … certificate life cycle management, certificate-related operational risk, and governance / assurance practices Experience working within multi-supplier, SIAM or complex outsourced environments Strong stakeholder management and supplier coordination skills Experience producing governance reporting and risk-based management information Desirable: Knowledge of enterprise PKI, Public CAs (DigiCert, Sectigo, Entrust ...

looking for: Experience in supplier assurance, risk management, compliance, or audit Understanding of third-party risk and data protection requirements Knowledge of ISO 27001, ISO … NIST, or similar frameworks Strong stakeholder management and communication skills Ability to assess controls and present findings clearly Relevant certifications (CISA, CRISC, CIPP / E) desirable What's in it for you? Work within a collaborative security and compliance function Exposure to complex supplier, regulatory, and client environments Opportunity ...

dashboards, and metrics for internal stakeholders Maintain and update assurance documentation, including assessment records, evidence logs, and action tracking registers Identify control weaknesses and / or gaps that create or increase risks Collaborate with ICT, engineering, and supply chain teams to gather evidence, validate control implementation, and support remediation … Experience in cyber security, audit, risk management, or assurance within a regulated or technical environment Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53) Strong attention to detail and ability to follow structured assurance processes Good communication and documentation skills ...

remediation programmes. Managing and optimising security tools to maximise their effectiveness across the business. Conducting security risk assessments, audits and compliance activities. Supporting ISO 27001 accreditation and continual improvement initiatives. Assessing third-party suppliers from a security perspective and helping manage ongoing supplier assurance. Producing security … ideally have experience in some of the following: Information Security, Cyber Security or IT Security. Security risk assessments, vulnerability management or security operations. ISO 27001 or other security governance frameworks. Working with security technologies and helping improve security controls. Supporting infrastructure, cloud or enterprise technology environments. ...

public, patients and colleagues. Understanding of Information Governance and Confidentiality. Understanding of NHS Data Security and Protection Toolkit, NIS-D, and other IG / cybersecurity frameworks Qualifications Essential Degree in IT or relevant subject, or equivalent experience ITIL Intermidiate Certificates in Transition, Service Operations and Continual Service Improvement Prince … applicants. Employer details Employer name Bradford Teaching Hospitals NHS Foundation Trust Address Bradford Royal Infirmary Bradford BD9 6RJ United Kingdom Employer's website https: / / www.bradfordhospitals.nhs.uk ...

experience in process design and improvement, ideally within a cyber security or ICT environment Familiarity with process frameworks such as ITIL, COBIT, or ISO 27001 Understanding of cyber security principles and regulatory requirements (e.g., CAF, NISR, ONR SyAPs) Experience with process mapping tools and techniques (e.g. … stakeholder engagement skills Degree or equivalent in cyber security, business process management, or a related field Relevant certifications (e.g., ITIL, Lean Six Sigma, ISO 27001 Implementer) Desirable: Experience in the nuclear or CNI sector; familiarity with CAF maturity assessments and process audit readiness; experience with process ...

Role Title: Senior Cryptography & Information Security SME Duration: contract to run until 26 / 02 / 2027 Location: Knutsford, Hybrid 3 days per week onsite Rate: up to £662.40 p / d Umbrella inside IR35 Role purpose / summary We are seeking an experienced Senior Cryptography … Foundation or Practitioner ISO 27001 Lead Implementer or Lead Auditor Cryptography & PKI Certifications Entrust PKI Certification Thales Luna HSM Training / Certification DigiCert PKI Certifications Venafi Professional Certification Microsoft Security Certifications Preferred Technical Tools & Platforms HSM Platforms Thales Luna HSM Entrust nShield HSM AWS CloudHSM ...

Azure and Entra ID Servers, networks, firewalls, VPNs, Wi-Fi, storage and backups Identity and access management, MFA and privileged access Endpoint security, EDR / XDR, vulnerability management and patching Security monitoring and threat management Cybersecurity incident response and recovery Disaster recovery, business continuity and cyber resilience … experience and are still comfortable being hands-on. We’re particularly interested in experience across areas such as: Microsoft 365, Azure and Entra ID / Active Directory Windows Server and Windows endpoint environments Networking, VLANs, routing, switching, DNS, DHCP and VPNs Firewalls, IDS / IPS, EDR / ...

highly successful, specialist engineering business to find an Information Security Coordinator. The heavy lifting has already been done: the foundational policies, procedures, and ISO 27001 alignments are fully established and working well. Your mission is to pick up the baton, maintain the system … reporting. Who We Are Looking For Experience: You likely have 3+ years of experience since completing a graduate scheme or an initial junior compliance / security role, and you are ready for a position with more autonomy. Bold & Confident: You are not afraid to direct a room, chair ...

product's integrity, leading the charge in cybersecurity. Your key responsibilities will include: Driving and supporting compliance with standards such as IEC 62443, IEC 62351, ISO 27001, NIS2, CRA, and customer security requirements. Defining secure architectures for for embedded devices and firmware … discipline. Strong knowledge of ARM architectures, Real-Time Operating Systems (RTOSs), bootloaders, and embedded communication protocols. Hands-on experience in software development using C / C++. Experience in product development within a lean product development process environment. Expertise in any of the following security topics: Secure Boot & Secure Firmware ...

match the skill requirements for this role, as well as associated experience, then apply with your CV below. Duration: contract to run until 31 / 03 / 2027 Location: Inverness or Preston. Fully onsite, 5 days per week Rate: up to £644 p / d Umbrella inside … IR35 Clearance required: Sole UK Nationality with Active SC Clearance. Role purpose / summary The Senior Vulnerability Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership, assurance, and strategic oversight of vulnerability management across a complex multi-supplier environment. The role is responsible for ensuring ...