13 of 13 ISO 31000 Jobs in the UK

Response Resilience testing and scenario exercises Enterprise and Operational Risk GRC, Audit and Assurance Third-Party/Supplier Risk Risk and control frameworks including ISO 31000, ISO 27001 and NIST Strong senior stakeholder management and communication Relevant qualifications such as CBCI, MBCI, CRISC, CISA or IRM Experience ...

access, data, resilience, third-party and supply chain, software and product, change, obsolescence, and emerging technology risks. Working knowledge of relevant frameworks, including ISO 31000, ISO 27001, NIST, and COBIT. Experience using risk appetite, key risk indicators, control effectiveness, scenarios, dashboards, and executive reporting. Confidence engaging with ...

risk and regulatory trends Knowledge of relevant standards and regulation NIS Regulations and the Cyber Assessment Framework (CAF) GDPR and the Data Protection Act ISO 27001:2022, ISO 27005 and ISO 31000 PCI DSS NIST 800-30/53 CIS Top 18 and OWASP ...

implementing secure infrastructure or cloud architectures. Proven experience with risk assessment methodologies and maintaining enterprise risk registers. Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting ...

CRISC qualification. Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc. Experience of working with system, operational and strategic level risk. Demonstrable experience of threat modelling system solutions. Demonstrable experience of working with ...

architecture, policiesand procedures. Good understanding of enterprise-scalesecurity management processes and infrastructure. Experience working with current ITsecurity standards and regulations such as PCI-DSS, ISO 27001 and UK dataprotection legislation. In-depth understanding of informationsecurity control tools, for example: SplunkCloud CrowdStrike Qualys Trellix CiscoIPS F5 Centrify Experience working with … Knowledge of cryptographic services,products and HSM devices. Knowledge of wider security, audit, riskand compliance standards including: PCI-P2PE PCI-POI-PTS ISO27701 ISO27005 ISO31000 NIST GDPR Governance,Risk and Compliance tools Experience with quality managementsystems and external audit standards such as ISO 9001. #J-18808-Ljbffr ...

team members.* Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005.* Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria.* Good ability to articulate abstract ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

complex global organisations Clear understanding of M&A related technology risks Solid understanding of AI/ML risks and governance Familiarity with COBIT, ITIL, ISO 31000, COSO Strong partner management and communication skills Experience in Board and Committee risk reporting and metricsInterested in crafting how we manage technology ...

complex global organisations Clear understanding of M&A related technology risks Solid understanding of AI/ML risks and governance Familiarity with COBIT, ITIL, ISO 31000, COSO Strong partner management and communication skills Experience in Board and Committee risk reporting and metrics LSEG is a leading global financial ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat modelling of system solutions. Proven … experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...