22 of 22 ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in England

strong technical security knowledge with excellent governance, risk management and stakeholder-management skills. Skills and Experience: Experience leading cyber security, information security and / or compliance activities within a medium-to-large enterprise environment. Strong experience managing an enterprise information / cyber security risk register. Strong … continually improving an ISMS. Experience preparing for and participating in internal and external security audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials / Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

Belfast, Birmingham, Bristol, Cambridge, Cardiff, Edinburgh, Glasgow, Leeds, Liverpool, Manchester, Milton Keynes, Newcastle, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 19-Aug-2026 Req # 24728 Job description Connect to your IndustryDeloitte Technology works at the forefront of technology development … Qualifications:Bachelor’s degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field.Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management.Strong ability to clearly communicate complex cybersecurity statements to technical ...

compliance, audits, security frameworks and continuous improvement , while managing and developing an Information Security team. We're looking for: Proven experience leading cyber / information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience … managing enterprise risk registers and security metrics Experience with ISO 27002 / Cyber Essentials Plus audits and ISMS development Strong stakeholder management and leadership skills CISSP, CISM, CISA or similar certification highly desirable Teesside | Hybrid – 1–2 days on site Full-time ...

compliance, audits, security frameworks and continuous improvement , while managing and developing an Information Security team. We’re looking for: Proven experience leading cyber / information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience … managing enterprise risk registers and security metrics Experience with ISO 27002 / Cyber Essentials Plus audits and ISMS development Strong stakeholder management and leadership skills CISSP, CISM, CISA or similar certification highly desirable Teesside | Hybrid – 1–2 days on site Full-time ...

perspective, to identify and mitigate security risks.Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs. Be a trusted advisor to senior clients on security topics.Conduct risk assessments and assurance reviews to validate that … preferably in the Health, Central Government or Public Safety domains.Minimum of 5 years’ security consulting experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance roleMinimum of 5 years’ experience in a Governance, Risk and Compliance roleA track record of delivering security solutions for large ...

direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development and modification of specifications. Develops specifications for new products / services, applications and service offerings. Assess and challenge the compatibility and integration of security products / services proposed by third parties … Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with ...

scalable, particularly for SOC 2 Type 2 and ISO 27001.Maintain a centralised, audit-ready evidence repository and coordinate internal / external audits, client reviews and due diligence.Oversee remediation plans and ensure continuous evidence collection.Develop consistent, lightweight playbooks for vendor intake, audit readiness and control … deliver risk and compliance training, including competency testing where appropriate.Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor / service provider.Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets.Reporting & Stakeholder LeadershipDeliver executive reporting on risk posture ...

coordination, access reviews, and firewall configuration reviews.Policy, Controls and Regulatory CoverageApply working knowledge of PCI DSS v4.0.1, ISO 27001 / 27002, SOC 2, DORA, NIST CSF, and other applicable frameworks to day-to-day GRC work.Support meeting regulatory change across Checkout … operating markets including FCA / PRA requirements and payment scheme obligations, flagging gaps and supporting impact assessments.Proactively identify inefficiencies in GRC processes and propose practical improvements, including automation where viable.Contribute to the development and refinement of GRC tooling, dashboards, and reporting to improve visibility of risk and compliance ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls - Verify and evidence alignment to 'Secure by Design' principles, corporate security policy / standards as well as industry recognised frameworks and best practice Contribute to deliver and continually enhance a coherent approach to the design of secure … quantify and lead risk mitigation plansWork with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIsWork closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information assurance, cyber ...

across projects and development lifecycles (SDLC), including Agile environments Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks (e.g. ISO27001 / 2, NIST, PCI DSS) Solid understanding of data protection and regulatory requirements (e.g. FCA, ICO, PRA, GDPR) and how to apply them in practice ...

across projects and development lifecycles (SDLC), including Agile environments Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks (e.g. ISO27001 / 2, NIST, PCI DSS) Solid understanding of data protection and regulatory requirements (e.g. FCA, ICO, PRA, GDPR) and how to apply them in practice ...

assets of LCH Ltd. are adequately protected, and that all related information security and cyber controls remain effective and within risk appetite and / or have appropriate risk treatment plans in place to bring them back into risk appetite.The role will best suit an experienced Information Security Manager … with extensive experience gained from having previously operated within Senior Management level InfoSec / Cyber roles within the FS or FMI industries.The successful candidate must be a subject matter expert in Information Security, as the role demands a very strong knowledge in all areas of information security ...

Title: Senior Security Solutions Architect £750 - £800 p / d - Outside IR35 2-3 Days on-site - London 6 Months initial duration Role Overview The Senior Security Solutions Architect is a tactical, results-driven role responsible for addressing specific business challenges by designing, implementing, and maintaining robust security … person entities. DevSecOps Integration: Collaborate with software development teams to “shift left,” integrating security automated checks and “policy as code” directly into CI / CD pipelines. Technical Governance & Compliance: Act as a Technical Design Authority (TDA) , reviewing artifacts for accuracy and maintaining the programme’s technical standards against ...

libraries, taxonomies, framework mappings, and enterprise control standards. Robust knowledge of: NIST Cybersecurity Framework (CSF) NIST 800-53 ISO 27002 CIS Controls COBIT Consulting, risk advisory, internal audit, or Big Four experience robustly preferred. Professional certifications such as CISSP, CISM, CISA, CRISC ...

will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI / CD security, ensuring security is embedded into how we design, build, deploy, and operate our products.This is an exciting opportunity for someone who wants … code-review tools.Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities.Automate security testing in CI / CD pipelines to detect vulnerabilities early, including building and maintaining the pipeline integrations themselves.Administer and drive adoption of GitHub Advanced Security (GHAS) : code scanning, secret ...

Information Security team. Key responsibilities include managing cyber risk, incident response, audits, and ongoing improvements across security frameworks, aligned with GDPR and ISO 27002. #J-18808-Ljbffr ...

working with owners to establish action plans. Experience: Extensive experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and / or IT Governance functions. Experience in a financial institution or a risk advisory firm providing advice to the financial services sector, or a financial … experience with laws, regulations, guidelines, and frameworks within the financial services industry such as COSO, NIST, ISO 27001 and 27002, COBIT, GLBA, SOX. Regulatory savvy, having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk management ...