20 of 20 ISO/IEC 27005 Jobs in the UK excluding London

Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO … broad range of security activities such as Policy Development, Risk Management, Internal & External audits & compliance etc. To be considered for this GRC Lead (ISO 27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits) role, it's ideal that ...

Cyber and Information Assurance Consultant Job Title Cyber and Information Assurance Consultant Hours Per Week 37 Reporting to Reporting to Principal Cyber Consultant / Head of Services Location Location Remote-first, with attendance at Nexor’s Nottingham office and customer locations as required. Regular UK travel may form part … lifecycle principles. Residual risk and risk acceptance. Assurance evidence and traceability. Frameworks and Standards Working knowledge of some of the following: ISO / IEC 27001. ISO / IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard ...

security operating procedures. Liaison with Security Accreditors and Security Assurance Coordinators in support of security Accreditation. What you’ll bring: Practical experience of ISO27001 / 27004 / 27005 and NIST Risk Management Framework (RMF). Experience working with a security risk management system for highly regulated … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us Time to Recharge: Enjoy generous leave with ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders. Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

Knowledge, Skills & Experience Essential Experience in cyber risk management, ideally within a regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g. … CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical ...

Role: Cyber and Information Assurance Consultant – Mid, Senior & Principal Levels Location: Nottingham / Remote-first Working Arrangement: Remote-first, with travel to Nottingham and customer sites as required Salary: £65,000–£120,000 Are you a cyber security or information assurance professional who enjoys working with customers, getting into … such as cyber risk management, security controls, threat and vulnerability assessment, security governance and risk acceptance is important. Experience with frameworks such as ISO 27001, ISO 27005, the NCSC Cyber Assessment Framework, NIST or MOD security standards would be beneficial. Experience within defence, government ...

specialized recruitment screening for high-access positions. Team Leadership & Financial Control: Manage internal security staff and external contractors, execute performance management cycles, oversee GRC / security tool budgets, and enforce vendor performance SLAs. Requirements For The Role You will have: Extensive experience leading Information Security Management, GRC, or cyber … Microsoft Defender XDR stack. Professional certification in security governance, risk, or auditing (e.g., CISM, CRISC, CISA, CISSP, or ISO 27001 Lead Auditor / Implementer). Solid technical understanding of factory OT environments, network segmentation, and industrial automation security. What We Will Offer You 37-hour working week ...

collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills / experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005 … . Producing clear, actionable risk treatment plans aligned to security objectives to treat / mitigate the identified risks. Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering Creation of security documentation to support the development of an information system, these could include: Security Aspects ...

collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills / experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005 … . Producing clear, actionable risk treatment plans aligned to security objectives to treat / mitigate the identified risks. Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering Creation of security documentation to support the development of an information system, these could include: Security Aspects ...

Analyst £50,000- £54,000 Hybrid - 2 days per week in either Glasgow / Edinburgh office depending on location We are looking for a brilliant SOC Analyst to join a market leading organisation within the energy sector embarking on a transformation of their IT Security Team. This well-established … UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn new technical skills. Right ...

assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical / nontechnical security and providing reports to the vulnerability manager. We deliver safety, warmth, and comfort to homes and businesses. Every role, whether … Security Engineering · Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. · Good understanding of Cyber Assurance Framework and experience with working with Regulators and providing compliance updates for OT environment · Knowledge of the Purdue ...

members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ability to articulate abstractrisk … approaches and its relationship to threat and vulnerability. Varied experience of assessing, defining and implementing security governance frameworks. A confident understanding of TCP / IP based networking concepts across the OSI model layer as well as the common protocols and their risks. This is not an exhaustive list ...

members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ability to articulate abstract … approaches and its relationship to threat and vulnerability. Varied experience of assessing, defining and implementing security governance frameworks. A confident understanding of TCP / IP based networking concepts across the OSI model layer as well as the common protocols and their risks. This is not an exhaustive list ...

members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ability to articulate abstract … approaches and its relationship to threat and vulnerability. Varied experience of assessing, defining and implementing security governance frameworks. A confident understanding of TCP / IP based networking concepts across the OSI model layer as well as the common protocols and their risks. This is not an exhaustive list ...