4 of 4 ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in the South East

Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO … 27002, ISO 27005, ISO 31000 ISMS, Security Audits) on a permanent basis, this person will be responsible for the management of ISMS globally across the firm which covers a broad range of security activities such as Policy Development, Risk Management ...

policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF / 800-53, ISO 27001 / 2 or SABSA. Understanding of identity & access management, network security, encryption, API security … testing and security assurance processes. Ability to define, document and govern security requirements throughout solution delivery. Desirable: Knowledge of NIS Regulations and ISA / IEC 62443 for OT and industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical ...

reliability improvements Experience & Skills Required Hands‐on experience with Azure Monitoring (Application Insights, Alerts, Action Groups) Strong knowledge of OpenTelemetry (including Kubernetes) Scripting / automation using PowerShell and / or Azure CLI Experience with Terraform and GitHub Actions Ability to define SLIs / SLOs … budgets Incident response and post‐incident review experience Familiarity with Docker and Kubernetes Strong communication and documentation skills Desirable Working knowledge of .NET / C# and React / NextJS Experience with cloud cost optimisation Knowledge of Azure networking (DNS, VNets, Firewalls) Understanding of security frameworks (e.g. ...