Central London, London, United Kingdom Hybrid/Remote Options
Velocity Talent Ltd
Location: London / Greater London / Home-based with regular travel Reports To: Certification Manager / Head of Audit and Compliance Department: Information Security Certification About Us We are a UKAS-accredited certification body delivering independent audit and certification services across multiple management system standards, including ISO 9001, ISO 14001, and ISO … Lead Auditor based in or around London to join our expanding audit team. Youll lead and conduct Information Security Management System (ISMS) audits in line with ISO/IEC27001:2022 , ISO 17021 , and UKAS requirements. Key Responsibilities Plan, conduct, and report Stage 1, Stage 2, surveillance, and recertification audits for … ISO 27001. Assess client ISMS implementations for conformity and effectiveness against ISO/IEC27001:2022. Lead audits independently or as part of a multi-standard team (e.g. ISO 9001, ISO 22301, ISO 27701). Produce clear, objective audit reports with evidence-based findings and More ❯
business applications Desirable: Able to demonstrate a clear understanding of, and capability to work within, relevant ICT related standards including HMG Security Policy Framework, IITIL V3, ISO/IEC 38500, ISO/IEC27001, ISO/IEC 22301, ISO/IEC 20000, PRINCE2 and MSP Good written and verbal communication skills with ability to present information in simple and accessible language to a wide range of audiences Experience of balancing the needs of users with organization priorities to make the right … decisions and empowering teams to act upon them Evidence of continual professional development to keep pace with technical and business change that meet defined SFIA V7 competencies Organisational Behaviours / Professional Competence Implementing changes and continually evaluating service to improve the area of work, while maintaining the highest possible levels of service quality are continually delivered Working collaboratively within More ❯
Technical skills in JSON, Power Fx, JavaScript, HTML, and SQL. Demonstrable expertise with relevant vendor business applications. Desirable Knowledge of ICT standards: HMG SPF, ITIL V3, ISO/IEC 38500, ISO/IEC27001, ISO/IEC 22301, ISO/IEC 20000, PRINCE2, MSP. Strong written and verbal communication skills, with the ability to simplify technical concepts. Experience balancing user needs with organisational priorities. Evidence of continuous professional development aligned with SFIA V7 competencies. What We re Looking For A commitment to continuous improvement and delivering high-quality services. Collaborative working style across teams and functions. Strong More ❯
Technical skills in JSON, Power Fx, JavaScript, HTML, and SQL. Demonstrable expertise with relevant vendor business applications. Desirable Knowledge of ICT standards: HMG SPF, ITIL V3, ISO/IEC 38500, ISO/IEC27001, ISO/IEC 22301, ISO/IEC 20000, PRINCE2, MSP. Strong written and verbal communication skills, with the ability to simplify technical concepts. Experience balancing user needs with organisational priorities. Evidence of continuous professional development aligned with SFIA V7 competencies. What We're Looking For A commitment to continuous improvement and delivering high-quality services. Collaborative working style across teams and functions. Strong More ❯
Technical skills in JSON, Power Fx, JavaScript, HTML, and SQL. Demonstrable expertise with relevant vendor business applications. Desirable Knowledge of ICT standards: HMG SPF, ITIL V3, ISO/IEC 38500, ISO/IEC27001, ISO/IEC 22301, ISO/IEC 20000, PRINCE2, MSP. Strong written and verbal communication skills, with the ability to simplify technical concepts. Experience balancing user needs with organisational priorities. Evidence of continuous professional development aligned with SFIA V7 competencies. What We’re Looking For A commitment to continuous improvement and delivering high-quality services. Collaborative working style across teams and functions. Strong More ❯
We're looking for a Cyber Security Analyst who is passionate about closing security gaps and ensuring robust compliance. This is a permanent role where your expertise in ISO27001 implementation AND ongoing maintenance will be the cornerstone of our security strategy. Why This Role Matters Gap Analysis at the Core: You'll lead regular risk … assessments and gap analyses to identify vulnerabilities and strengthen our security posture. ISO27001 Expertise: Beyond implementation, you'll ensure continuous compliance and drive improvements to maintain certification year after year. Strategic Impact: Your work will influence audits, security operations, and business continuity planning across the organisation. What You'll Do Own the ISO … Looking For Experience: 3-5 years in information security or compliance roles. ISO27001 Mastery: Proven track record in implementing AND maintaining ISO/IEC27001 certification . Analytical Strength: Skilled in gap analysis, risk management, and vulnerability identification. Certifications: ISO27001 Lead Implementer /More ❯
London, South East, England, United Kingdom Hybrid/Remote Options
Adecco
We're looking for a Cyber Security Analyst who is passionate about closing security gaps and ensuring robust compliance. This is a permanent role where your expertise in ISO27001 implementation AND ongoing maintenance will be the cornerstone of our security strategy. Why This Role Matters Gap Analysis at the Core: You'll lead regular risk … assessments and gap analyses to identify vulnerabilities and strengthen our security posture. ISO27001 Expertise: Beyond implementation, you'll ensure continuous compliance and drive improvements to maintain certification year after year. Strategic Impact: Your work will influence audits, security operations, and business continuity planning across the organisation. What You'll Do Own the ISO … Looking For Experience: 3-5 years in information security or compliance roles. ISO27001 Mastery: Proven track record in implementing AND maintaining ISO/IEC27001 certification . Analytical Strength: Skilled in gap analysis, risk management, and vulnerability identification. Certifications: ISO27001 Lead Implementer /More ❯
Aberdeen, Aberdeenshire, United Kingdom Hybrid/Remote Options
Orion Group
a current opportunity for a Senior InfoSec Advisor (IRM Manager) on a 12 month PAYE contract basis. The position will be based in Aberdeen and will have a 3 / 2 hybrid working pattern Key ResponsibilitiesRisk Assessment & Secure by Design Perform structured IT and information security risk assessments and threat modelling for new IT platforms, systems, and applications and … for material changes. Provide security architecture advice (patterns, guardrails) aligned to NIST CSF /ISO27001 and company standards. Define and agree control selection (prevent / detect / correct) proportionate to risk, including identity, data and platform controls. Conduct IT control walkthroughs to validate design and operating effectiveness; document evidence and issues. LOD2 … systems; define test scopes, frequency and metrics. Track high-risk deviations and risk acceptances; drive remediation and report residual risk to the CISO, CIO and business risk owners. OT / ICS Security Own the LOD2 assurance plan across OT sites against the OT security standard, deciding the order and frequency of assessments aligned to risk and risk appetite. Provide More ❯
Aberdeen, City of Aberdeen, United Kingdom Hybrid/Remote Options
Orion Group
a current opportunity for a Senior InfoSec Advisor (IRM Manager) on a 12 month PAYE contract basis. The position will be based in Aberdeen and will have a 3 / 2 hybrid working pattern Key ResponsibilitiesRisk Assessment & Secure by Design Perform structured IT and information security risk assessments and threat modelling for new IT platforms, systems, and applications and … for material changes. Provide security architecture advice (patterns, guardrails) aligned to NIST CSF /ISO27001 and company standards. Define and agree control selection (prevent / detect / correct) proportionate to risk, including identity, data and platform controls. Conduct IT control walkthroughs to validate design and operating effectiveness; document evidence and issues. LOD2 … systems; define test scopes, frequency and metrics. Track high-risk deviations and risk acceptances; drive remediation and report residual risk to the CISO, CIO and business risk owners. OT / ICS Security Own the LOD2 assurance plan across OT sites against the OT security standard, deciding the order and frequency of assessments aligned to risk and risk appetite. Provide More ❯
Edinburgh, Midlothian, Scotland, United Kingdom Hybrid/Remote Options
Lorien
technology enables their staff and operations, is looking to hire a security-savvy professional with a passion for protecting sensitive data. Right now they're seeking an exceptional InfoSec / Information Security Manager to take the reins and lead their information security programme; safeguarding their clients, organisation data, and core systems. They're a great firm we've seen … more), so take a look and apply if this looks like a great next step for your career: Key Responsibilities: Develop, execute, and maintain the overarching information security strategy / policies / relevant frameworks in adherence to ISO standards and other key regulations Oversee the firm's ISO27001 accreditation and oversee … regular risk assessments; taking ownership of the register and plans Draft and implement InfoSec metrics / key performance indicators / reporting (up to board level) to demonstrate security / control / initiative effectiveness Audit and improve the firm's security operations across the spectrum, including incident response and escalation / best coding and config practice More ❯
Edinburgh, Stockbridge, City of Edinburgh, United Kingdom Hybrid/Remote Options
Lorien
technology enables their staff and operations, is looking to hire a security-savvy professional with a passion for protecting sensitive data. Right now they're seeking an exceptional InfoSec / Information Security Manager to take the reins and lead their information security programme; safeguarding their clients, organisation data, and core systems. They're a great firm we've seen … more), so take a look and apply if this looks like a great next step for your career: Key Responsibilities: Develop, execute, and maintain the overarching information security strategy / policies / relevant frameworks in adherence to ISO standards and other key regulations Oversee the firm's ISO27001 accreditation and oversee … regular risk assessments; taking ownership of the register and plans Draft and implement InfoSec metrics / key performance indicators / reporting (up to board level) to demonstrate security / control / initiative effectiveness Audit and improve the firm's security operations across the spectrum, including incident response and escalation / best coding and config practice More ❯
Incident Response (CSIRT) / Security Operations Centre (SOC) Level 3 Analyst 2-3 Days onsite - Crawley 6-9 Month duration Reporting line: The Analyst will report to the Cyber Security Response Manager and work within the Information Systems directorate, based in the Crawley office. Job purpose: The role of an Incident Response (CSIRT) / SOC Level 3 Analyst … are contained and eradicated. Cyber Crisis Testing: Participate in cyber-attack simulations and scenario exercises to test resilience and improve preparedness. Reporting: Develop and improve reporting dashboards and security / performance metrics to drive continuous improvement in security operations. Security Tools Support: Support the implementation, maintenance, and configuration of security tools and systems for prevention, detection, and response. Audit … OT environments. SOC-specific training, qualifications, or a degree in Computer Science, Cybersecurity, IT, or a related subject. Ideally hold recognised security qualifications such as CISSP, AZ-500, GIAC / GCIA / GCIH, CASP+, CEH, or SIEM certifications. Strong knowledge of log correlation, analysis, forensics, and chain of custody requirements. Familiarity with regulatory frameworks (NCSC CAF, ISOMore ❯
Bradley Stoke, Gloucestershire, United Kingdom Hybrid/Remote Options
Matchtech
ground up. Key Responsibilities: Identify and integrate security requirements throughout the product and system development lifecycle. Lead threat modelling and risk assessments, applying frameworks such as ISO/IEC27001, NIST 800-30 / 53, and ISO 31000. Advise on secure architectures and develop strategies to mitigate identified information risks. … Collaborate with multi-disciplinary teams to ensure compliance with MOD and HMG standards, including JSPs, Def Stan 05-, and ISN 23 / 09 Secure by Design. Support incident response and remediation activities for security events affecting products and systems. Produce and maintain security documentation, policies, and training materials. Communicate risk findings, recommendations, and mitigation strategies to both technical and … the Defence, Aerospace, or National Security sectors. Deep understanding of HMG Security Policy Framework and MOD-specific standards. Familiarity with risk management methodologies (ISO27001/ 2, ISO 27005, NIST frameworks). Strong analytical and problem-solving abilities - able to assess complex data and provide actionable insights. A collaborative communicator who can balance More ❯
working in the building & construction industry to hire a CISO. This is a strategic leadership role which is responsible for defining, implementing, maintaining and evolving the firm's information / cybersecurity strategies. As part of the position, you will support the CDTO across Operational Resilience and Business Continuity practices, to ensure that systems, processes, and people are prepared for … threats and that firm practices remain aligned with relevant laws, regulations (including PRA, FCA, GCPR, UK DPA, etc). The company are looking for people with the following skills / experience: Previous experience and success working in a senior cybersecurity position. Experience working with modern cloud and SaaS based environments. Exeprience with legacy system migration. Experience working in a … possessing good knowledge of PRA regulation. Good knowledge of Operational Resilience. Solid understanding of relevant legal, regulatory and security management frameworks requirements, such as PRA, CBEST, ISO/IEC27001, ITIL, COBIT or equivalent. Experience with vendor and contract negotiations. Excellent communicator and stakeholder management skills. Ability to lead and motivate InfoSec teams More ❯
risks, and programme delivery. Security Operations & Risk Management Design, implement, and continuously improve a comprehensive enterprise information security programme, encompassing preventive, detective, and responsive controls. Establish and maintain 24 / 7 security monitoring and incident response capabilities appropriate for a RegTech serving banking customers working with our outsourced MDR service. Lead the response to security incidents and breaches, including … working closely with sales and customer success teams. Maintain and improve our investor cyber security score and other investor-required security metrics. Lead supplier onboarding and ongoing security assessment / assurance activities, supporting Legal, Procurement, and Finance teams as required. Infrastructure & Cloud Security Oversee security architecture and controls across our hybrid infrastructure including: Multi-cloud environments (Azure primary, with … thinking in daily operations Required Experience & Qualifications Essential Experience 10+ years of progressive experience in information security, risk management, and IT leadership roles Proven track record of building and / or scaling information security functions in regulated firms, preferably in financial services or RegTech Hands-on experience achieving and maintaining ISO27001 and SOC More ❯
as a trusted advisor to senior stakeholders, providing guidance on cyber risk management, operating models, and regulatory requirements. Offer expertise in frameworks such as DORA , NIS2 , ISO/IEC27001 , and wider industry standards. Commercial Contribution Contribute to the growth of existing accounts through identifying additional advisory opportunities. Support proposal creation where needed … ideal candidate will demonstrate: Proven experience leading cyber advisory projects within a consulting or professional services environment. Strong knowledge of regulatory and security frameworks, particularly DORA , NIS2 , and ISO27001 . Excellent communication skills with the ability to distil complex topics for senior and executive audiences. Experience mentoring or managing junior team members. Strong report-writing … Commercial awareness and the ability to expand existing client relationships (upsell, not BD). Relevant certifications such as CISSP, CISM, CCSP, ISO27001 Lead Auditor / Implementer, or MSc Information Security. Additional Information Full package: Up to £90,000 + bonus + benefits Hybrid Model: London-based with one day per week office presence. Travel More ❯
and operational delivery of all information and cyber security activities. You'll develop and implement robust security policies, oversee incident response, and ensure compliance with GDPR, PCI DSS, ISO27001, and Cyber Essentials Plus. You will be the single point of accountability for all security matters, reporting directly to the executive team and influencing critical business … wide information, cyber, and data security governance. Define and implement security frameworks, policies, and operating models. Ensure compliance with GDPR, PCI DSS, Cyber Essentials Plus, and ISO/IEC27001:2022 aligned practices. Lead Data Protection Impact Assessments (DPIAs), data mapping, classification, and retention programs. Oversee incident response, vulnerability management, patch compliance, and … Candidate Profile: Proven senior leadership experience in information, cyber, or data security. CISSP, CISM, or CISA certified (or equivalent). Track record of delivering security programs aligned to ISO27001, NIST, PCI DSS, and Cyber Essentials Plus. Hands-on experience with cloud platforms (Azure, AWS), on-premise networks, and hybrid architectures. Strong experience in Zero Trust More ❯
and operational delivery of all information and cyber security activities. You'll develop and implement robust security policies, oversee incident response, and ensure compliance with GDPR, PCI DSS, ISO27001, and Cyber Essentials Plus. You will be the single point of accountability for all security matters, reporting directly to the executive team and influencing critical business … wide information, cyber, and data security governance. Define and implement security frameworks, policies, and operating models. Ensure compliance with GDPR, PCI DSS, Cyber Essentials Plus, and ISO/IEC27001:2022 aligned practices. Lead Data Protection Impact Assessments (DPIAs), data mapping, classification, and retention programs. Oversee incident response, vulnerability management, patch compliance, and … Candidate Profile: Proven senior leadership experience in information, cyber, or data security. CISSP, CISM, or CISA certified (or equivalent). Track record of delivering security programs aligned to ISO27001, NIST, PCI DSS, and Cyber Essentials Plus. Hands-on experience with cloud platforms (Azure, AWS), on-premise networks, and hybrid architectures. Strong experience in Zero Trust More ❯
bristol, south west england, united kingdom Hybrid/Remote Options
Tempo Audits
Remote (working on UK time) Join Tempo Audits to shape the future of information security and AI auditing Got a passion for IT / information security and AI? Develop your skills and be trained up to become an information security and AI auditor at a fast-growing startup audit-body that is challenging the traditional players in the market. … with a belief that work should be enjoyable. We are UK-based, but willing to work with the right candidate in any location that can reasonably work on UK / EU timezone. You should apply if: You have a passion for technology, and specifically information security and AI (Nb you do not need to be a qualified information security … auditor already, provided you have IT and / or AI experience as set-out below) You're excited about working directly with the leadership team, and thrive on taking responsibility and growing You want to be part of a growth journey at a company You have excellent written and spoken English skills You have excellent communication and interpersonal skills More ❯
OT Cyber Security Specialist (SC Cleared) Contract: 12 months Location: 2 days per week onsite (London or Capenhurst) Industry: Industrial / Utilities / Nuclear Clearance: Must hold active SC clearance Start: ASAP / Jan Rate - £(Apply online only) / day inside IR35 Purpose of the Role The OT Cyber Security Specialist will support the design, development … Training Develop and support the delivery of a global OT security awareness campaign. Prepare and deliver tailored training materials to stakeholders across the OT governance structure. Work with marketing / communications to coordinate the rollout of security awareness materials. Performance Indicators Effective design and delivery of the awareness programme. Number of training sessions delivered to OT security stakeholders. 4. … delivery of KPI and programme reports. Job Requirements Vocational Qualifications (Preferred) Bachelor’s or Master’s degree in Automation, Robotics, Cyber Security, Computer Science, or related discipline. Relevant OT / IT cyber security certifications such as: ISA /IEC 62443 Series CISSP / CISM / CISA CEH GICSP CSSA Behavioural Competencies Strong collaboration and More ❯
Cyber Security Risk Manager Cyber Security Risk Manager - Cyber Security Risk Assessments, Audits, GRC, Information Security Management, CRISK, CISM, CompTIA Security+, NIS, NIST, ISO27001 - Hybrid (Manchester) - to £61,500 + excellent bonus + bens This is an outstanding opportunity to become my clients primary Cyber Security Risk Advisor working within a high-profile and growing … business - Play a key role in the ongoing management of Cyber Security Risk boards and Risk Management platforms - Carrying out detailed assessments of the current threat landscape including risks / threats and supporting Cyber Security audits - Creating and presenting detailed Cyber Security reporting including the management of escalations - Contribute to Cyber Security testing, training and company-wide communication - Use … stakeholder management skills including the ability to write and present detailed reports - Certification in Information Security Management would be ideal (CRISK, CISM, COMPTIA Security+) - Cyber Security audit experience (NIS / NIST /ISO27001) would be preferred, along with knowledge of vulnerability management platforms The role also involves consulting on ratings for IT /More ❯
United Kingdom, Kenilworth, Warwickshire Hybrid/Remote Options
Goodman Masson
organisations build trust, security, and resilience across their digital operations. Their specialist services span AI Governance as a Service (AIGaaS) , Virtual Data Protection Officer (vDPO) support, ISO/ TISAX compliance , and digital resilience strategy . To support their next phase of growth, they're seeking a commercially driven Business Development professional to accelerate expansion across the SME … makers. Highly self-motivated with a proactive, start-up mindset. Excellent communication, negotiation, and commercial acumen. Organised approach to pipeline management and CRM usage. Familiarity with AI governance, GDPR / data protection, and cyber risk frameworks . Understanding of ISO/ TISAX /ISO27001 or other compliance standards desirable. More ❯
Gloucester, Gloucestershire, South West, United Kingdom Hybrid/Remote Options
Fdo Consulting Limited
IT Security and Governance Manager, ISO27001, c £ 50000 - 60000+ benefits, nr Cheltenham, Gloucestershire. 3 days in the office, 2 days WFH Growing company are looking for an IT Security and Governance Manager who will co-ordinate all the governance and compliance including Certifications such ISO27001, Cyber Essentials and NIST. You will support the ongoing production … and publication of Policies, Awareness and Risk across the business. These controls are provided in the Information Security Management system. Main responsibilities include - Manage the compliance Portal / Information Security Management System. Manage supplier engagements based on IT Security Certifications and to drive improvements where required. Manage the relevant Certifications. Primarily ISO27001, Cyber Essentials … is a great chance to join a global company that is going through an exciting period of growth and expansion. If you have the required skills and experience around ISO27001 please send your CV for a full brief. This role is based in the Cheltenham / Gloucester area and requires 3 days a week in the office. Salary is More ❯
