8 of 8 ISO 31000 Jobs in the UK

established risk process, relevant controls and support internal and external assessments* Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.* Provide subject matter expert input in maintenance of relevant process documentation as required in addition … process, ToRs, training, etc.**Skills and Experience*** Has experience in Risk Management role* Experience in monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)* Good communication and engagement skills are vital for this role ...

established risk process, relevant controls and support internal and external assessments Support the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition … process, ToRs, training, etc. Skills and Experience Has experience in Risk Management role Experience in monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards) Good communication and engagement skills are vital for this role ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

contractual obligations and risk tolerances. Internal Audit Support the successful renewal and ongoing maintenance of Clyde & Co's Cyber Essentials, Cyber Essentials Plus, and ISO 27001 certifications by coordinating evidence collection, tracking remediation activities, engaging stakeholders and assisting with audit requirements. Reporting, Governance and Continual Improvement Facilitate/establish … essential. Operational knowledge of one or more international information security standards, risk management and control frameworks/practices e.g. ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53 or CSF and SOC2 reporting. Demonstrable experience of having worked with one or more of the following: - Third Party Risk Management ...

executive stakeholders, the successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks … development. Experience delivering strategic assessments and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2 ...