9 of 9 ISO 31000 Jobs in the UK

Experience assessing and managing IT services, cyber, data, and AI-related risks within complex, global organizations. Knowledge of enterprise risk management frameworks (COSO ERM, ISO 31000), security frameworks (NIST CSF, ISO 27001), AI risk frameworks (NIST AI RMF), and key risk indicators (KRIs). Excellent written ...

CRISC qualification. Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc. Experience of working with system, operational and strategic level risk. Demonstrable experience of threat modelling system solutions. Demonstrable experience of working with ...

architecture, policiesand procedures. Good understanding of enterprise-scalesecurity management processes and infrastructure. Experience working with current ITsecurity standards and regulations such as PCI-DSS, ISO 27001 and UK dataprotection legislation. In-depth understanding of informationsecurity control tools, for example: SplunkCloud CrowdStrike Qualys Trellix CiscoIPS F5 Centrify Experience working with … Knowledge of cryptographic services,products and HSM devices. Knowledge of wider security, audit, riskand compliance standards including: PCI-P2PE PCI-POI-PTS ISO27701 ISO27005 ISO31000 NIST GDPR Governance,Risk and Compliance tools Experience with quality managementsystems and external audit standards such as ISO 9001. #J-18808-Ljbffr ...

team members.* Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005.* Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria.* Good ability to articulate abstract ...

Direct knowledge and experience of the followingmethodologies and standards: NIS Regulations and Cyber Assessment Framework (CAF) GDPR and Data Protection Act ISO27001:2022, ISO27005, ISO31000 PCI DSS NIST 800-30/800-53 CIS Top 18 and OWASP Top 10 What you'll receive A combined pension contribution ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

environment. Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30/37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. Demonstrated … ability to provide advice, guidance, and assurance documentation in line with security standards, including NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within ...

keen to speak with candidates who have Strong information risk management experience, including use of methodologies such as NIST 800-30/37 and ISO 31000. CISSP, CISM or CRISC qualification Experience working with system, operational and strategic levels of risk and performing threat modelling of system solutions. Proven … experience using multiple cyber threat intelligence feeds and turning them into actionable reports. Experience providing advice, guidance and assurance against standards such as NIST, ISO 27001, CIS, CAF, HMG GovS 007 and NPSA. Experience managing internal and external cyber security risks to IT systems, services and data storage, particularly ...