1 to 25 of 129 ISO/IEC 27001 Jobs in the West Midlands

Social network you want to login / join with: Cybersecurity & Compliance Manager, dudley col-narrow-left Client: Tosca Location: dudley, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Views: 3 Posted: 06.06.2025 Expiry Date: 21.07.2025 col-wide Job Description: ABOUT TOSCA Tosca is a global leader in reusable packaging and pooling solutions that … time. Responsibilities Implement security protocols and manage information security programs Report performance, exceptions, and outages to all audiences transparently. Align disaster recovery with business continuity plans. Ensure compliance with ISO27001, NIST CFS 2.0, and maintain ISMS. Identify risks, develop a comprehensive security plan. Test cyber-attacks regularly to address vulnerabilities. Monitor security trends, adapt strategies. Oversee incident monitoring, detection, response … capable of working effectively with diverse teams and stakeholders. Ability to stay current with security trends, emerging threats, and best practices in the cybersecurity landscape. Experience of manufacturing and / or supply chain industry is preferred. Able to operate in a multinational corporation with several locations. You have expertise within Customer / Relationship Management. You have excellent communication More ❯

Social network you want to login / join with: Cybersecurity & Compliance Manager, birmingham col-narrow-left Client: Tosca Location: birmingham, United Kingdom Job Category: Other - EU work permit required: Yes col-narrow-right Job Views: 3 Posted: 06.06.2025 Expiry Date: 21.07.2025 col-wide Job Description: ABOUT TOSCA Tosca is a global leader in reusable packaging and pooling solutions that … time. Responsibilities Implement security protocols and manage information security programs Report performance, exceptions, and outages to all audiences transparently. Align disaster recovery with business continuity plans. Ensure compliance with ISO27001, NIST CFS 2.0, and maintain ISMS. Identify risks, develop a comprehensive security plan. Test cyber-attacks regularly to address vulnerabilities. Monitor security trends, adapt strategies. Oversee incident monitoring, detection, response … capable of working effectively with diverse teams and stakeholders. Ability to stay current with security trends, emerging threats, and best practices in the cybersecurity landscape. Experience of manufacturing and / or supply chain industry is preferred. Able to operate in a multinational corporation with several locations. You have expertise within Customer / Relationship Management. You have excellent communication More ❯

a security assurance co-ordinator (SAC). An understanding of MOD Secure by Design policy and process. Deep technical expertise in security technologies and solutions, including firewalls, intrusion detection / prevention systems (IDS / IPS), endpoint protection, encryption, identity and access management (IAM), and security information and event management (SIEM) systems. Strong understanding of security frameworks, standards, and … regulations, including ISO 27001, NIST Cybersecurity Framework, GDPR , NCSC Cyber Essentials Plus, with experience in implementing and maintaining compliance with these requirements. Excellent leadership and communication skills, with the ability to effectively communicate security-related concepts and risks to executive leadership, board members, and technical teams, and build consensus around security initiatives. Analytical mindset with strong More ❯

with at least 5 years as a security assurance coordinator. Understanding of MOD Secure by Design policies and processes. Deep technical knowledge of security technologies such as firewalls, IDS / IPS, endpoint protection, encryption, IAM, and SIEM systems. Strong understanding of security frameworks and standards, including ISO 27001, NIST, GDPR, and NCSC Cyber Essentials Plus More ❯

vulnerability management, risk mitigation, and security incident response. Strong technical expertise in security tools, technologies, and methodologies. In-depth knowledge of security frameworks and best practices (e.g., NIST, ISO 27001). Ability to work autonomously and manage multiple tasks simultaneously. Exceptional problem-solving, investigative, and analytical abilities. The adaptability to do a range of work, sometimes More ❯

to protect the firm's digital assets. Compliance: Ensure compliance with relevant laws, regulations, and industry standards, including GDPR and other data protection regulations. This will include ensuring ongoing ISO27001 and CE+ accreditation. Incident Response: Lead the firm's response to security incidents and breaches, ensuring timely and effective resolution. Develop and maintain incident response plans. Security Governance: Review, evolve … any emerging threats. What you will need: Previously led teams of Information Security professionals. Depth of knowledge of Information Security standards, tools and processes. Good understanding of GDPR, COBIT, ISO27001, PCI DSS, Cyber Essentials (including Plus) and risk management frameworks. Familiarity with industry leading security products and solutions. Practical, real-life and hands-on experience of security technologies. Knowledge and … real crisis. Member of Institute of Information Security Professionals (M.IISP) or have the qualification, skills and experience to become a member. Certification(s) in one or more of CISSP, ISO27001 Lead Auditor, CISM, CISA is expected. Organised with a proven ability to prioritise workload, meet deadlines, and utilise time effectively Strong working knowledge of risk management and previous experience working More ❯

and delivery strategy. Strong ability to work under pressure in a changing environment Qualification Broad technical knowledge of cyber security controls demonstrated by attainment of appropriate qualifications e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent Knowledge of the NIST framework, PCI DSS, GDPR and NIS as well as NCSC cyber guidance. Experience working in an agile delivery … United Kingdom 1 day ago Cyber Security Consultant - (Remote - UK) Manchester, England, United Kingdom 1 month ago Senior Security Consultant, Digital Forensics & Incident Response Senior Cyber Security Consultant - Defence / Gov Manchester Area, United Kingdom 4 days ago Identity Security Consultant - CyberArk Exp Principal Security Architect – Sentinel, Defender, Purview Manchester, England, United Kingdom 1 month ago Manchester Area, United More ❯

forefront of ARAG UK’s security strategy, ensuring the confidentiality, integrity and availability of ARAG’s information and information systems. The successful candidate will hold accountability for ensuring our ISO27001 accreditation is adhered to and successfully renewed, as well as assessing the information risk and facilitate remediation of identified vulnerabilities within the company’s network, systems and applications. In addition … improvements in the response process and standardisation. About You We are keen to hear from candidates with a good understanding of information security frameworks, standards and security best practice (ISO27001, NIST CSF, Cyber Essentials, OWASP). You’ll have demonstrable knowledge and adherence to data protection legislation and regulatory requirements (e.g. GDPR, FCA SYSC, PCI DSS), as well as extensive … experience and understanding of security analysis tools, defensive technologies and other security technologies (e.g. SIEM, VAS, IDS / IPS, Firewalls, IAM, NAC, patch management, anti-malware). In addition, the ideal candidate will have: • Solid understanding of security incident management and incident response processes and activities. • Strong working knowledge of authentication technologies (e.g. two-factor, multifactor). • Good knowledge More ❯

Optional certifications: CompTIA Security+, Cisco CCNA, CISMP, etc. Experience with security assessments, vulnerability management, risk mitigation, and incident response. Technical expertise in security tools and frameworks (e.g., NIST, ISO 27001). Ability to work independently and manage multiple tasks. Strong problem-solving and analytical skills. Excellent communication skills for technical and non-technical audiences. Benefits: Competitive More ❯

finances, business operations, or global investments. What you will do: Drive the company's information security strategy, ensuring alignment with GDPR, ISO 27001, DORA, PSD2 / 3, and other relevant regulations Identify and address local and entity-specific security requirements to maintain rigorous standards Conduct regular risk identification and develop mitigation strategies across systems, processes … and vendors Develop and maintain security policies, standards, and incident response protocols Support business continuity and disaster recovery planning for seamless resilience Lead and oversee internal / external security audits to ensure transparency and accountability Partner with engineering and ICT teams to embed secure-by-design principles in products and infrastructure Conduct security awareness training and foster a culture … GDPR, EU NIS2, and familiarity with ISO 27001, NIST, and cybersecurity best practices Risk & Governance : Skilled in conducting risk assessments, defining mitigation strategies, and creating / enforcing security policies Good technical understanding of IT infrastructure, software development, hardware, data flows, change management, and BC / DR-and how they shape security and resilience Fluent More ❯

Social network you want to login / join with: IT Security Analyst, Manchester, £45,000 An IT Security Analyst is needed to join a fast-growing global SaaS provider (UK & Europe). With a passion for adopting modern tools and security frameworks, our client offers an innovative, cloud-first environment where your skills will directly impact infrastructure resilience and … respond to security incidents and vulnerabilities Own and manage key elements of the security stack, including SIEM and DLP tools Lead audits, penetration testing, and remediation actions to uphold ISO27001 & SOC2 compliance Collaborate with product teams to embed security into the development lifecycle Produce detailed KPI-driven security reports and dashboards for internal stakeholders Experience needed: 1+ year in a … or similar cybersecurity role Hands-on experience with SIEM, IDS / IPS, and vulnerability scanning tools Knowledge of AWS, Linux, Windows, IAM (e.g. Okta), and firewalls Understanding of ISO27001, SOC2, GDPR, and third-party risk management Strong communication skills and the ability to influence across teams and time zones What this Security Analyst role offers: £45,000 salary + More ❯

Social network you want to login / join with: IT Security Analyst, Manchester, £45,000 An IT Security Analyst is needed to join a fast-growing global SaaS provider (UK & Europe). With a passion for adopting modern tools and security frameworks, our client offers an innovative, cloud-first environment where your skills will directly impact infrastructure resilience and … respond to security incidents and vulnerabilities Own and manage key elements of the security stack, including SIEM and DLP tools Lead audits, penetration testing, and remediation actions to uphold ISO27001 & SOC2 compliance Collaborate with product teams to embed security into the development lifecycle Produce detailed KPI-driven security reports and dashboards for internal stakeholders Experience needed: 1+ year in a … or similar cybersecurity role Hands-on experience with SIEM, IDS / IPS, and vulnerability scanning tools Knowledge of AWS, Linux, Windows, IAM (e.g. Okta), and firewalls Understanding of ISO27001, SOC2, GDPR, and third-party risk management Strong communication skills and the ability to influence across teams and time zones What this Security Analyst role offers: £45,000 salary + More ❯

Social network you want to login / join with: IT Security Analyst, Manchester, £45,000 An IT Security Analyst is needed to join a fast-growing global SaaS provider (UK & Europe). With a passion for adopting modern tools and security frameworks, our client offers an innovative, cloud-first environment where your skills will directly impact infrastructure resilience and … respond to security incidents and vulnerabilities Own and manage key elements of the security stack, including SIEM and DLP tools Lead audits, penetration testing, and remediation actions to uphold ISO27001 & SOC2 compliance Collaborate with product teams to embed security into the development lifecycle Produce detailed KPI-driven security reports and dashboards for internal stakeholders Experience needed: 1+ year in a … or similar cybersecurity role Hands-on experience with SIEM, IDS / IPS, and vulnerability scanning tools Knowledge of AWS, Linux, Windows, IAM (e.g. Okta), and firewalls Understanding of ISO27001, SOC2, GDPR, and third-party risk management Strong communication skills and the ability to influence across teams and time zones What this Security Analyst role offers: £45,000 salary + More ❯

respond to security incidents and vulnerabilities Own and manage key elements of the security stack, including SIEM and DLP tools Lead audits, penetration testing, and remediation actions to uphold ISO27001 & SOC2 compliance Collaborate with product teams to embed security into the development lifecycle Produce detailed KPI-driven security reports and dashboards for internal stakeholders Experience needed: 1+ year in a … or similar cybersecurity role Hands-on experience with SIEM, IDS / IPS, and vulnerability scanning tools Knowledge of AWS, Linux, Windows, IAM (e.g. Okta), and firewalls Understanding of ISO27001, SOC2, GDPR, and third-party risk management Strong communication skills and the ability to influence across teams and time zones What this Security Analyst role offers: £45,000 salary + … Bonus + Package Hybrid working with just 1 day / week in the office Projects that span both UK and US markets Exposure to best-in-class tools and frameworks (MITRE ATT&CK, OWASP) Supportive culture with a learning mindset and room to grow Involvement in the full security lifecycle from audits to implementation Opportunity to shape how cloud More ❯

through regular risk assessments and assurance processes. Develop, implement, and maintain security policies, standards, and procedures to protect digital assets. Ensure compliance with laws, regulations, and standards including GDPR, ISO27001, and CE+ accreditation. Lead incident response efforts and develop incident response plans. Review and evolve security governance structures, produce security reports, and implement security metrics. Support assurance frameworks and facilitate … updates to senior management and the board. What you will need: Leadership experience managing Information Security teams. Deep knowledge of security standards, tools, and processes. Understanding of GDPR, COBIT, ISO27001, PCI DSS, Cyber Essentials, and risk frameworks. Hands-on experience with security technologies and products. Knowledge of Business Continuity Management and crisis response. Membership or qualification in IISP or equivalent … with certifications like CISSP, ISO27001 Lead Auditor, CISM, or CISA preferred. Strong organizational skills, prioritization, and effective communication abilities. Benefits, Agile Working, and Additional Information We support flexible, hybrid working, combining home and hub-based work in London or Midlands. We value diversity and are committed to equal opportunities. Please note, some applications may close early due to high volume. More ❯

Recognised, current security certifications (e.g., CISSP, CISM). Experience managing operational security activities, including governance and compliance. Strong understanding of regulatory and compliance frameworks such as NIST CSF, ISO 27001, and GDPR. Demonstrated ability to advise on secure software development practices. Demonstrable experience with security technologies and architectures. Hands-on experience with MS Azure cloud security More ❯

guidance, standards, policies, and information risk management, covering both the Force and relevant Suppliers and 3rd parties To identify information security and assurance requirements creating Risk Assessment Reports and / or reviewing other associated assurance documentation, where there are new or changed processes, information assets or activities; working with business areas and project leads to ensure that appropriate assurance … CISSP, GCRC, CRISC, DP PDP, BCS etc) Sound practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001 / NIST Framework). Sound practical knowledge of current data protection legislation, standards and practice. Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that … Connection) 3rd party and onsite security and assurance auditing Experience Experience of operational delivery of information security in a multi-site organisation. Demonstrable experience of Public Sector Network (PSN) / Syap compliance requirements including evidenced understanding of maintaining accreditation. Experience of developing and implementing information security and assurance policies and procedures. Experience of undertaking internal audits and accreditation activities More ❯

of our legacy systems to the Microsoft cloud. Your responsibilities will include: Evaluate and enhance existing IT systems, management procedures, and security protocols to ensure robust protection. Oversee ISO 27001 and other key accreditations by collaborating with internal teams and external auditors. Manage information security requests and compliance reports, ensuring adherence to GDPR and other relevant … have the opportunity to leverage your existing skills while developing new ones, contributing to the strategic security objectives of the Company and ensuring adherence to critical accreditations, including ISO 27001, GDPR, Cyber Essentials, and PCI DSS. The successful candidate will demonstrate: Strong analytical skills with a meticulous approach to identifying and resolving security issues. Excellent verbal … attitude towards learning and developing expertise in information security. Happy to travel occasionally to other sites as required. Desirable Experience: Demonstrable expertise in external audit, compliance, and security processes (ISO27001, GDPR, Cyber Essentials and PCI DSS). Microsoft accreditation or other recognised certifications (e.g. Microsoft Learning, CISA, CISM, CRISC, CCSP) would be very beneficial. Benefits: £25,000 - £35,000 salary More ❯

JUser: :_load: Unable to load user with ID: 994 Job Summary Infrastructure Architect / Permanent / Worcestershire Country: United Kingdom Location: Malvern Sector: Architect Job Type: Permanent Technologies: infrastructure architecture Cyber Security Windows Servers 2012 Microsoft Active Directory LAN WAN office365 VPN Security Cleared Infrastructure Architect / Permanent / Worcestershire Infrastructure Architect / Permanent / … security clearance. • Infrastructure auditing and record keeping. • Design and implementation of ISO 27001 policies and procedures. • Experience of IASME Cyber Essentials. • Evaluation of candidate hardware / software solutions in a formal manner, involving requirements definition, evaluation, and presentation of recommendations. • Cloud technology including AWS and Azure. • Microsoft SharePoint and Dynamics CRM. • Docker or other lightweight More ❯

Cyber Security Consultant (SIEM / Splunk) - Bristol - New Roles! A leading organization in the Bristol area requires a Cyber Security Consultant to join its fantastic growing team. Location: Bristol (Onsite 2-3 days a week) Ideal candidates will have the following: 3-4 years of experience in SIEM consulting, SOC, or security operations roles with a focus on threat … client-facing roles or consulting, with the ability to communicate complex technical concepts clearly and effectively to clients. Strong understanding of threat detection methodologies, security frameworks (e.g., NIST, ISO 27001), and compliance requirements. Relevant cybersecurity certifications, such as CISSP, GIAC (e.g., GCIA, GCIH), or Splunk certification (e.g., Splunk Core Certified Power User), are highly desirable. This More ❯

sites supporting all departments and users, you will report to the head of department and provide support for systems and infrastructure. You will be responsible for effective provisioning, installation / configuration, operation, and maintenance of systems hardware and software and related infrastructure. This role requires the individual to participate in technical research and development to enable continuing innovation within … involvement in new project work, where a hardware or software solution is needed to deliver the project, this may include suggestions for solution delivery both in terms of hardware / software and appropriate proof of concept work and testing. The role requires the creation and maintenance of suitable documentation including network infrastructure and operating processes and procedures. The Senior … attention. In line with good security principles, the Senior SA will consider the Confidentiality, Integrity and Availability of all systems and wherever new requirements or changes are being requested / evaluated. The role requires the provisioning and maintenance of the Disaster Recovery (DR) solution for the business with regards to computer infrastructure, hardware, and software. Technologies Windows Server More ❯

Job Title: IT Banking Auditor Location: Birmingham (5 days on-site, full-time) Employment Type: / Contract Salary: Competitive, based on experience Company Overview: We are a leading financial institution committed to excellence in compliance, risk management, and technological advancement. We are currently seeking an experienced IT Banking Auditor to join our Internal Audit team in Birmingham. This is … to explain technical issues to non-technical stakeholders. Ability to work independently and manage multiple audit assignments concurrently. Desirable: Experience with core banking platforms, digital banking, cloud services, and / or fintech integration. Knowledge of data analytics tools (e.g., ACL, IDEA, Power BI) and scripting languages (e.g., Python, SQL). Previous Big 4 or internal audit experience in a … dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: roberthalf.com / gb / en / privacy-notice. More ❯

guidance, standards, policies, and information risk management, covering both the Force and relevant Suppliers and 3rd parties To identify information security and assurance requirements creating Risk Assessment Reports and / or reviewing other associated assurance documentation, where there are new or changed processes, information assets or activities; working with business areas and project leads to ensure that appropriate assurance … CISSP, GCRC, CRISC, DP PDP, BCS etc) Sound practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001 / NIST Framework). Sound practical knowledge of current data protection legislation, standards and practice. Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that … Connection) 3rd party and onsite security and assurance auditing Experience: Experience of operational delivery of information security in a multi-site organisation. Demonstrable experience of Public Sector Network (PSN) / Syap compliance requirements including evidenced understanding of maintaining accreditation. Experience of developing and implementing information security and assurance policies and procedures. Experience of undertaking internal audits and accreditation activities More ❯

guidance, standards, policies, and information risk management, covering both the Force and relevant Suppliers and 3rd parties To identify information security and assurance requirements creating Risk Assessment Reports and / or reviewing other associated assurance documentation, where there are new or changed processes, information assets or activities; working with business areas and project leads to ensure that appropriate assurance … CISSP, GCRC, CRISC, DP PDP, BCS etc) Sound practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001 / NIST Framework). Sound practical knowledge of current data protection legislation, standards and practice. Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that … Connection) 3rd party and onsite security and assurance auditing Experience: Experience of operational delivery of information security in a multi-site organisation. Demonstrable experience of Public Sector Network (PSN) / Syap compliance requirements including evidenced understanding of maintaining accreditation. Experience of developing and implementing information security and assurance policies and procedures. Experience of undertaking internal audits and accreditation activities More ❯

is located in the city Birmingham B HQ located in the country United Kingdom . This latest job opening is open to job seekers who have the latest education / graduate GCSE . Job Vacancies in this Bank field have been opened and published up to the specified time. Job Responsibility: If you're looking for a career that … level committees on key cyber risks and emerging threats. Strengthen the partnership with HSBC Cybersecurity Technology. Ensure compliance with relevant cyber security frameworks, standards, and regulations (e.g., NIST, ISO 27001, GDPR). Assess and manage the cyber security risks associated with third-party vendors and partners. To be successful in this role you should meet the More ❯