1 to 25 of 1,198 ISO/IEC 27001 Jobs in the UK

bias, misuse, hallucination, privacy, IP, safety), proposing mitigations and helping companies to define documentation. Advice is aligned to recognised frameworks (e.g., ISO / IEC 23894 AI risk management, ISO / IEC 42001 AI management systems, ISO / IEC 27001 / 27701, NIST AI RMF) and emerging AI assurance standards from the National Physical Laboratory. Evaluate & Monitor Progress: TDAs track organisational progress throughout the deployment journey, providing targeted technical assurance input for high-risk or complex projects. They use the baseline assessment ...

have an exciting, permanent opportunity for a Senior Risk & Resilience Consultant / Information Security Consultant & Manager (Associate level) to join any of our UK offices (hybrid working) as we continue to grow. You’ll provide day-to-day hands-on strategic level leadership within a growing high-performing … Information Security practice. You will oversee the delivery of client engagements across a range of security and assurance frameworks, including ISO / IEC 27001 and Cyber Essentials, while identifying opportunities to enhance service offerings, strengthen team capability and support business growth. Working closely ...

implementation and continual improvement of the organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO / IEC 27001, Cyber Essentials Plus and other required standards. Monitor the security, health and performance of the IT environment, identifying … System (ISMS). Good understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO / IEC 27001 and Cyber Essentials Plus. Experience mentoring or providing technical leadership to junior IT professionals. Experience with infrastructure automation ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

based services and other digital media. As a Digital Forensic Analyst, you will provide digital forensic investigation services on wide variety of data sources / digital devices, such as personal computers, digital storage devices, mobile phones, corporate computer networks and cloud hosted content. Being responsible for all levels … wide range of responsibilities including; Utilising digital forensic equipment to capture, process and analyse data within an accredited laboratory environment or at scene / client locations. Conduct forensic examinations and analysis across a range of digital evidence types, including CCTV and video systems, audio recordings, computers, digital storage media ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world’s largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

that values ownership, technical excellence, and cross‐functional partnership. Your main tasks: Security Leadership & Compliance Drive adoption of standards such as ISO / IEC 27001 and IEC 62443 and ensure alignment with the Cyber Resilience Act. Architecture & Design Define secure architectures … secure OTA) and establish cloud security best practices across IAM, encryption, and workload isolation. Align projects with relevant industry standards (e.g., ISO / SAE 21434, IEC 62443). Risk Management Lead product TARA activities and maintain risk tracking through the security case and register. Secure ...

Databricks environments. Working closely with our managed SOC, you'll investigate alerts and incidents, close monitoring gaps, and keep our ISO / IEC 27001:2022 controls backed by complete, audit-ready evidence — including running customer and client security-assurance questionnaires on the business … service levels. Close monitoring gaps by improving detection use cases, alert logic, playbooks and escalation criteria. Own the evidence cycle for ISO / IEC 27001:2022 controls — mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners. Support internal, certification ...

ensuring that policies, controls, evidence and compliance activities remain effective and auditable, the role directly supports the maintenance of our ISO / IEC 27001 certification and wider security assurance programme. The successful candidate will help demonstrate compliance to customers, regulators and auditors while … suppliers and partners. What you will be doing: Information Security Management System (ISMS): Support the maintenance and continual improvement of the ISO / IEC 27001 Information Security Management System. Maintain security policies, standards, procedures and supporting documentation. Ensure ISMS records remain accurate, complete ...

Code generation + Automated code review + Intelligent testing + Documentation support + Development acceleration* Establishing responsible AI governance aligned with ISO / IEC 42001 principles* Ensuring AI-assisted development practices are implemented securely and consistently* Promoting AI literacy and prompt engineering capability across engineering … opportunities**Security, Compliance & Engineering Standards**You will:* Lead secure-by-design engineering practices* Support ISO 27001 and ISO / IEC 42001 initiatives* Define and enforce coding standards, review processes, and quality expectations* Improve engineering quality metrics and continuous improvement practices* Support ...

Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across the Marco Group … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

Security Architect Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

work you do here directly contributes to Europe’s technological independence. What you'll do You co-own our natively ISO / IEC 27001-based ISMS: policies, Statement of Applicability, risk management, internal audits and the preparation of certification and customer audits. Because … handling and management reporting. Who you are You have several years of experience in information security management or GRC and know ISO / IEC 27001 thoroughly. You have worked with BSI IT-Grundschutz in practice and understand how it differs from a native ...

Location: UK (Hybrid) with travel to client sites 2 days p / w across Bristol, Portsmouth and Taunton Contract: Permanent, full-time Security clearance: Minimum SC (active & lapsed would be ok) Notice - ideally 1 month notice Briefing notes: Defence experience desirable Sonar work and underwater mapping Hydrographic office experience … provenance, quality, representativeness, bias checks, privacy & IP considerations, synthetic data controls). Model selection support (fit-for-purpose criteria, interpretability needs, security constraints, compute / cost trade-offs). Test & evaluation (appropriate metrics and acceptance thresholds; robustness, fairness, privacy, and safety testing; secure red-teaming where applicable). Operational ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

Information Security Lead / ISO27001 / SOC / GRC / Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001 … Wallingford, Oxford and looking for someone who can do 3 days minimum on site ideally more. Any experience within robotics or start up / scale up environments highly desirable. Responsibilities / Skills Own the day-to-day execution of Dexory's ISO 27001 ...

explain security requirements clearly and build relationships with the people responsible for implementing them. Experience with PCI DSS, security audits, ISO 27017 / 27018 / 22301 or working within a regulated technology environment would be a bonus. Qualifications such as ISO 27001 … Lead Implementer / Auditor, CISA, CRISC or CISSP are welcome, but they’re not essential. Why Vix? You’ll work on security that has genuine real-world impact, protecting technology behind public transport and payment systems used by millions of passengers. You’ll join an international security organisation, work ...

drive our GRC Team’s service offering. The ideal candidate will have experience working as a ISO 27001 implementor and / or auditor and familiarity with other industry standards such as NIST and HMG standards such as CAF The candidate will be assisting in supporting … Lead Implementer ISO 27001 Internal Auditor ISO 9001 Implementor ISO 9001 Lead Auditor CISM / CISSP: Skills Required: Skilled in time, priority and task management Interpersonal skills to interact with customers and team members Ability to anticipate problems, resolve ambiguity ...

environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal / external audit functions. Develop understanding of regulated industry compliance requirements and communicate how we control activities to meet global regulatory obligations. Liaise with customers … being a trusted advisor, facilitator and creative problem solver. Implement continuous improvements to the security organization and the program management process. Share program / project process frameworks, tools, and best practices that can be adopted throughout the organization. Apply a working knowledge of global information security regulation and policy ...

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO / IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy … annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO / IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against ...

defend at AI speed, leaders can lead through crisis, and AI agents can be validated before they are trusted in live workflows https: / / www.immersivelabs.com / why-immersive-labs We help the world’s biggest brands like Citi, Pfizer, Humana, and HSBC, protect their revenues … over 300 employees globally, announced funding of more than $180 million and been voted a Best place to work on multiple occasions! https: / / www.immersivelabs.com / company / our-story "The speed at which Immersive produces technical content is hugely impressive, and this turnaround ...

first line of defence for our clients’ technical environments. While the core of the position involves ad-hoc technical support (diagnosing issues, configuring hardware / software, and troubleshooting networks), every action you take will be guided by strict security protocols and data protection regulations. You will not only resolve … software, and network systems. Industry-specific certificates in networks, security (e.g., CompTIA Security+, CISSP Associate, or ISO 27001 Lead Implementer / Auditor) are highly desirable. Successful security clearance and vetting is mandatory for this role. Soft Skills: Excellent problem-solving skills with a focus ...

engagement with regulators and external stakeholders where required. Track regulatory findings, recommendations and actions through to closure. Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus. Knowledge & Skills: Strong understanding of cyber security principles, governance frameworks and compliance management practices. Knowledge of compliance … stakeholder engagement and communication skills, with the ability to work effectively across technical and business functions. Familiarity with ISO 27001 / 27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF). Understanding of the UK regulatory landscape for cyber security ...