Proven experience in cyber risk management and/or third-party risk management, ideally within financial services, technology, or a regulated industry. Strong understanding of risk management frameworks (e.g., ISO31000, NIST CSF, FAIR, ISO 27005). Experience in third-party/vendor risk management practices, frameworks, and tools. Excellent leadership, team management, and stakeholder engagement skills. More ❯
start to finish. Bonus points if you bring: Experience with AppSec and DevSecOps. Hands-on knowledge of Azure, AWS, and/or Google Cloud. Familiarity with standards like ISO2700X, ISO31000, NIST800, PCI-DSS. Certifications such as CISSP, CCSP, CRISC, CISM, or SABSA. Why QBE? At My Best? At QBE, we want our people to feel rewarded and inspired to perform More ❯
Manchester, Lancashire, United Kingdom Hybrid / WFH Options
Alcidion Corp
level Experience supporting cloud hosted solutions alongside a Site-Reliability-Engineering/Managed Services team Proven experience working to processes aligned to ISO9001 (quality management), ISO27001 (information security) and ISO31000 (risk management) How to apply To apply, submit a covering letter explaining why you would love to work for Alcidion and your CV to . Statement of posting You must More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
QBE Management Services (UK) Limited
unauthorized access, disclosure, or loss.? Required Qualifications: Tertiary Degree or equivalent combination of education and work experience. Preferred Qualifications: Experience with security and risk-based standards such as ISO27001, ISO31000, NIST800, and PCI-DSS. Previous information security experience in a similar role. Regional experience required, global experience preferred. Experience working with outsourced service partners. Why QBE? At My Best? At More ❯
including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139) An understanding of MOD ISN 23/09 Secure by Design Knowledge of security frameworks, such as ISO/IEC 27001, NIST 800-30, NIST 800-53 or OWASP Working with risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST More ❯
including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139) An understanding of MOD ISN 23/09 Secure by Design Knowledge of security frameworks, such as ISO/IEC 27001, NIST 800-30, NIST 800-53 or OWASP Working with risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST More ❯
