9 of 9 ISO 31000 Jobs in the UK

CRISC qualification. Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc. Experience of working with system, operational and strategic level risk. Demonstrable experience of threat modelling system solutions. Demonstrable experience of working with ...

team members.* Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005.* Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria.* Good ability to articulate abstract ...

Direct knowledge and experience of the followingmethodologies and standards: NIS Regulations and Cyber Assessment Framework (CAF) GDPR and Data Protection Act ISO27001:2022, ISO27005, ISO31000 PCI DSS NIST 800-30/800-53 CIS Top 18 and OWASP Top 10 What you'll receive A combined pension contribution ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat modelling of system solutions. Proven … experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...

contractual obligations and risk tolerances. Internal Audit Support the successful renewal and ongoing maintenance of Clyde & Co's Cyber Essentials, Cyber Essentials Plus, and ISO 27001 certifications by coordinating evidence collection, tracking remediation activities, engaging stakeholders and assisting with audit requirements. Reporting, Governance and Continual Improvement Facilitate/establish … essential. Operational knowledge of one or more international information security standards, risk management and control frameworks/practices e.g. ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53 or CSF and SOC2 reporting. Demonstrable experience of having worked with one or more of the following: - Third Party Risk Management ...