9 of 9 ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in London

perspective, to identify and mitigate security risks.Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs. Be a trusted advisor to senior clients on security topics.Conduct risk assessments and assurance reviews to validate that … preferably in the Health, Central Government or Public Safety domains.Minimum of 5 years’ security consulting experience in a multi-tiered IT enterprise environment / Governance, Risk and Compliance roleMinimum of 5 years’ experience in a Governance, Risk and Compliance roleA track record of delivering security solutions for large ...

direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development and modification of specifications. Develops specifications for new products / services, applications and service offerings. Assess and challenge the compatibility and integration of security products / services proposed by third parties … Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with ...

scalable, particularly for SOC 2 Type 2 and ISO 27001.Maintain a centralised, audit-ready evidence repository and coordinate internal / external audits, client reviews and due diligence.Oversee remediation plans and ensure continuous evidence collection.Develop consistent, lightweight playbooks for vendor intake, audit readiness and control … deliver risk and compliance training, including competency testing where appropriate.Support global data protection compliance (GDPR, CCPA and equivalents) as a data processor / service provider.Own vendor and third-party risk management, ensuring proportionate due diligence of suppliers, clients and acquisition targets.Reporting & Stakeholder LeadershipDeliver executive reporting on risk posture ...

coordination, access reviews, and firewall configuration reviews.Policy, Controls and Regulatory CoverageApply working knowledge of PCI DSS v4.0.1, ISO 27001 / 27002, SOC 2, DORA, NIST CSF, and other applicable frameworks to day-to-day GRC work.Support meeting regulatory change across Checkout … operating markets including FCA / PRA requirements and payment scheme obligations, flagging gaps and supporting impact assessments.Proactively identify inefficiencies in GRC processes and propose practical improvements, including automation where viable.Contribute to the development and refinement of GRC tooling, dashboards, and reporting to improve visibility of risk and compliance ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls - Verify and evidence alignment to 'Secure by Design' principles, corporate security policy / standards as well as industry recognised frameworks and best practice Contribute to deliver and continually enhance a coherent approach to the design of secure … quantify and lead risk mitigation plansWork with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIsWork closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information assurance, cyber ...

assets of LCH Ltd. are adequately protected, and that all related information security and cyber controls remain effective and within risk appetite and / or have appropriate risk treatment plans in place to bring them back into risk appetite.The role will best suit an experienced Information Security Manager … with extensive experience gained from having previously operated within Senior Management level InfoSec / Cyber roles within the FS or FMI industries.The successful candidate must be a subject matter expert in Information Security, as the role demands a very strong knowledge in all areas of information security ...

Title: Senior Security Solutions Architect £750 - £800 p / d - Outside IR35 2-3 Days on-site - London 6 Months initial duration Role Overview The Senior Security Solutions Architect is a tactical, results-driven role responsible for addressing specific business challenges by designing, implementing, and maintaining robust security … person entities. DevSecOps Integration: Collaborate with software development teams to “shift left,” integrating security automated checks and “policy as code” directly into CI / CD pipelines. Technical Governance & Compliance: Act as a Technical Design Authority (TDA) , reviewing artifacts for accuracy and maintaining the programme’s technical standards against ...

will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI / CD security, ensuring security is embedded into how we design, build, deploy, and operate our products.This is an exciting opportunity for someone who wants … code-review tools.Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities.Automate security testing in CI / CD pipelines to detect vulnerabilities early, including building and maintaining the pipeline integrations themselves.Administer and drive adoption of GitHub Advanced Security (GHAS) : code scanning, secret ...

working with owners to establish action plans. Experience: Extensive experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and / or IT Governance functions. Experience in a financial institution or a risk advisory firm providing advice to the financial services sector, or a financial … experience with laws, regulations, guidelines, and frameworks within the financial services industry such as COSO, NIST, ISO 27001 and 27002, COBIT, GLBA, SOX. Regulatory savvy, having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk management ...