51 to 75 of 96 Remediation Plan Jobs in London

Senior IT Audit & Assurance Specialist

Location
Greater London, England, United Kingdom
will collaborate with data, product and engineering teams to design, test, and monitor IT controls, and support audit engagements with robust evidence and remediation plans. You will work in a hybrid setup, combining in-office collaboration with flexible remote work to help protect Sky’s data assets ...

Accessibility Specialist: Audit, Training & WCAG Lead

Location
Greater London, England, United Kingdom
standards across public and private sector projects. Working in an Agile environment, you will collaborate with developers, testers and leads, deliver training, create remediation plans, and stay up to date with accessibility tools and AI-assisted testing to improve user experiences for all. #J-18808-Ljbffr ...

AMBG - Cloud Security & Exposure Management Architect

Location
Greater London, England, United Kingdom
year. Responsibilities Lead defined workstreams or small project teams within larger cloud security and exposure management engagements. Manage assigned deliverables, including exposure assessments, remediation plans, security control improvements, and reporting outputs against agreed engagement milestones. Contribute to solution architecture and pre-sales deal shaping for cloud security, Microsoft … Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths, cloud misconfigurations, identity risks, vulnerabilities, and how to prioritise remediation based on exploitability and business impact. Understand incident response, cyber recovery, and how exposure management can reduce the likelihood and impact of security incidents. Understand ...

Senior Security Consultant - PCI DSS

Location
Greater London, England, United Kingdom
private cloud, third-party services and modern application environments. Supporting the production of high-quality PCI DSS documentation and deliverables, including assessment evidence, remediation plans and, where appropriate, RoC and AoC documentation. Supporting clients with PCI DSS v4.x requirements, including the use of Compensating Controls and the Customised … Approach where appropriate. Providing practical remediation advice, helping clients translate PCI DSS requirements into achievable technical and operational improvements. Supporting the leadership and sales teams with proposals, tenders and pre-sales activity. Quality assuring the work of other consultants where appropriate. You will need to have experience ...

Lead Application Security Engineer

Location
Greater London, England, United Kingdom
emerging technology adoption, including AI‐enabled solutions, agents, and automation where relevant. Support security assurance activities, including penetration testing, application security testing, remediation tracking, and ensuring appropriate logging, monitoring, and response considerations are built into new solutions. Define and document security requirements, architecture decisions, design recommendations, and risk … based remediation actions. Support the future growth of the application security function, including helping define ways of working, capability needs, and technical guidance for future team members as the function matures. What We're Looking For We're looking for an experienced, technically capable security professional ...

Senior Manager, Business Information Security

Location
Greater London, England, United Kingdom
experience. Working closely with leadership, product, engineering, technology and central Cyber teams across the assigned portfolio, the role supports the identification, assessment, remediation and ongoing management of cyber risk. The role helps ensure that security capabilities are deployed effectively, controls remain fit for purpose and material risks remain … across the assigned portfolio, ensuring business adoption is appropriately assessed, controlled and aligned with LSEG requirements. Identify material cyber risks, control weaknesses and remediation opportunities, ensuring treatment plans are owned, prioritised and tracked to completion. Assess inherent and residual risk, considering threat relevance, control effectiveness, business impact ...

Engineering Manager, Security

Location
Greater London, England, United Kingdom
accountability and development opportunities. Own the security engineering roadmap, aligning investment and delivery to the Group’s risk appetite, technology strategy and business priorities. Plan and deliver cross-functional security projects to agreed outcomes, timescales and budgets. Manage security technology and service providers, ensuring effective governance, performance and value. … offer Our benefits package is designed to support your wellbeing, growth, and work-life balance. It includes a highly competitive pension or 401(k) plan, private health insurance, and 24/7 access to counselling and wellbeing resources through our Employee Assistance Program. We also offer a range ...

Information Security Engineer

Location
Greater London, England, United Kingdom
operational activity and strategic technology initiatives. Information Security Engineer - Key Responsibilities Operate and develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting. Monitor security tools and alerts, supporting the detection, investigation and response to security incidents. Conduct technical investigations, root cause analysis … input into projects, infrastructure changes and technology deployments. Review technical designs and deliver pragmatic, risk-based security recommendations. Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders. Act as a key technical security contact for suppliers, partners and third-party service providers. Required ...

Vulnerability Analyst

Hiring Organisation
Robert Half
Location
London, UK
Employment Type
Full-time
function on an initial 12-month day rate contract. This role will play a key part in identifying, assessing, prioritising, and coordinating the remediation of security vulnerabilities across a complex technology estate. You will act as the bridge between technical and non-technical stakeholders, translating vulnerability findings into … actionable remediation plans and ensuring risks are effectively managed. Key Responsibilities: The Vulnerability Analyst will conduct threat and vulnerability assessments to identify security risks across the environment. Analyse and prioritise vulnerabilities based on risk, business impact, and remediation complexity. Coordinate and develop remediation plans ...

Technology Risk Manager – Post Trade Regulatory Reporting

Location
Greater London, England, United Kingdom
standards and industry best practice. The role will coordinate risk and control activity, produce management information, support governance forums, facilitate reviews, track issue remediation, and partner with engineering, product, production management, cyber, cloud, infrastructure, second‐line risk, audit, compliance and legal stakeholders. Key Responsibilities & Accountabilities Technology Risk & Control … Embed operational resilience requirements within Regulatory Reporting Solutions engineering, technology, production and change activities. Contribute to resilience assessments, scenario testing, control validation and remediation activities. Coordinate resilience‐related actions, evidence and reporting to demonstrate compliance with internal and external requirements. Work with engineering, production management, cyber, infrastructure ...

Cyber Security Consultant (Penetration Tester)

Location
Greater London, England, United Kingdom
recognised benchmarks, and cloud security reviews. You will identify and safely validate security weaknesses, explain the associated business risks clearly, and provide practical remediation advice tailored to each client. Technical delivery will account for at least 70% of the role and will remain the core focus. Depending … engagements across web applications, APIs, and internal and external network infrastructure. Work with clients to define objectives, agree scope and rules of engagement, and plan testing that meets their assurance needs. Apply manual and tool‐assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security ...

GRC Audit & Assurance Consultant

Hiring Organisation
NTT DATA
Location
London, UK
Employment Type
Full-time
activities across a complex cyber security programme. The role combines structured GRC assessment with evidence-led assurance, control and process review, gap assessment, remediation planning and stakeholder engagement. The consultant will work across IT and OT environments, using frameworks such as the NCSC Cyber Assessment Framework (CAF) where … interviews, workshops, walkthroughs and challenge sessions with business, technical and operational stakeholders. Maintain clear traceability between requirements, controls, evidence, findings, risks, recommendations and remediation actions. Distinguish between control deficiencies and evidence deficiencies, and clearly document assessment limitations or areas requiring further validation. Develop evidence-based findings with clear ...

Tech Risk and Controls Lead

Location
Greater London, England, United Kingdom
into clear control expectations for technology and process owners. You will monitor control health, lead targeted assessments where required, drive issues to durable remediation, and produce concise, executive-ready reporting on control effectiveness and risk posture. Key responsibilities Own technology risk management for your scope , including identifying material … enhancements. Lead control assessments when required , including regulatory and industry-driven assessments, and ensure strong evidence quality and audit readiness. Drive issue and action-plan management end to end: root cause analysis, remediation plans, prioritization, escalation, closure validation, and sustained control improvement. Run controls governance and reporting ...

Penetration Tester

Location
Greater London, England, United Kingdom
recognised benchmarks, and cloud security reviews. You will identify and safely validate security weaknesses, explain the associated business risks clearly, and provide practical remediation advice tailored to each client. We are looking for an individual with strong technical fundamentals, sound professional judgement and a genuine interest in helping … engagements across web applications, APIs, and internal and external network infrastructure. Work with clients to define objectives, agree scope and rules of engagement, and plan testing that meets their assurance needs. Apply manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security ...

Technology Risk Manager - Post Trade Regulatory Reporting

Hiring Organisation
London Stock Exchange Group
Location
London, UK
Employment Type
Full-time
standards and industry best practice. The role will coordinate risk and control activity, produce management information, support governance forums, facilitate reviews, track issue remediation, and partner with engineering, product, production management, cyber, cloud, infrastructure, second-line risk, audit, compliance and legal stakeholders. Key Responsibilities & AccountabilitiesTechnology Risk & Control ManagementSupport … ResilienceEmbed operational resilience requirements within Regulatory Reporting Solutions engineering, technology, production and change activities. Contribute to resilience assessments, scenario testing, control validation and remediation activities. Coordinate resilience-related actions, evidence and reporting to demonstrate compliance with internal and external requirements. Work with engineering, production management, cyber, infrastructure ...

Analyst I, Falcon Complete (Remote, GBR)

Hiring Organisation
CrowdStrike
Location
London, England, United Kingdom
perform in-depth analysis of security alerts using the CrowdStrike platform.Exercise incident handling processes across Windows, Mac, and Linux platforms.Perform malware analysis.Perform remote remediation of malware or malicious activity.Develop and improve processes for incident detection, triage, and the execution of countermeasuresProduce high-quality written and verbal communications, recommendations … implement and execute countermeasures and remediation.Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware.Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations.Programming/Scripting: experience coding in Powershell ...

Sr. Analyst, Falcon Complete (Remote, GBR)

Location
London, United Kingdom
perform in-depth analysis of security alerts. Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform malware analysis. Perform remote remediation of malware or malicious activity. Develop and improve processes for incident detection, triage, and the execution of countermeasures Produce high-quality written and verbal communications … perform analysis of associated network logs. Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations. Network Operations and Architecture ...

IT Infrastructure Core Service Manager

Location
City Of London, England, United Kingdom
relationship, supported by a strong cloud/infrastructure engineering background and the ability to assess technical designs, operational evidence and remediation plans. Strong understanding of Microsoft Azure and hybrid infrastructure services, including compute, storage, networking, role‐based access control and Azure Policy; ability to assess provider designs, operational … access; ability to assure provider controls and agree ownership with internal identity and security teams. Experience assuring provider delivery of monitoring, patching, vulnerability remediation, configuration management and technology lifecycle plans, using evidence from tools such as Azure Monitor, Log Analytics, and Tanium. Experience governing backup, restore and disaster ...

IT Infrastructure Core Service Manager

Location
Greater London, England, United Kingdom
relationship, supported by a strong cloud/infrastructure engineering background and the ability to assess technical designs, operational evidence and remediation plans.* Strong understanding of Microsoft Azure and hybrid infrastructure services, including compute, storage, networking, role-based access control and Azure Policy; ability to assess provider designs, operational … access; ability to assure provider controls and agree ownership with internal identity and security teams.* Experience assuring provider delivery of monitoring, patching, vulnerability remediation, configuration management and technology lifecycle plans, using evidence from tools such as Azure Monitor, Log Analytics, and Tanium.* Experience governing backup, restore and disaster ...

IT & Security Administrator, IT

Location
Camden Town, England, United Kingdom
activities, office changes, hardware refreshes, application roll‐outs and other IT projects. Coordinate security policies, audits, evidence requests, risk registers, risk heat maps, remediation plans and security reporting. Support supplier and third-party security reviews, client security questionnaires, tenders, requests for proposal and assurance activities. Participate in security … support security exercises. Record and elevate security incidents and suspected personal data breaches, while maintaining agreed security metrics and reporting. Coordinate vulnerability remediation, secure configuration reviews, access reviews, patching activities and endpoint-compliance evidence gathering. Support business continuity, disaster recovery and operational resilience reviews, tracking actions through ...

M365 Intelligent Service Lead

Location
Greater London, England, United Kingdom
services depend on enterprise APIs, orchestration services, data platforms or Azure AI capabilities. Own the M365 service architecture, M365 cloud operations roadmap and service plan, aligning platform direction and priorities to business demand, agreed enterprise architecture, security requirements, technology strategy and the wider CTG operating model. Provide … Ensure evidence is available to demonstrate control operation, auditability and compliance with company policies and applicable regulatory obligations. Maintain service risks, exceptions and remediation plans, escalating material concerns through the appropriate governance forums. Performance Monitoring Establish and monitor KPIs and service measures covering M365 intelligent service availability, platform ...

Technology Consultant (Resilience, PAM & IAM)

Location
Greater London, England, United Kingdom
Technology Consultant (Resilience, PAM & IAM) Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness. Contract with strong chance of extensions Location - London … Operational Resilience Privileged Access Management (PAM) Identity & Access Management (IAM) You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard. Key Responsibilities Control Assessment & Diagnosis Review underperforming controls to identify: Root causes Design ...

Cyber Security Engineer

Location
Greater London, England, United Kingdom
real transformation: Contribute to ransomware resilience, network and backup segmentation, and Cyber Essentials Plus. Build modern security capability: Support automation, ServiceNow integration, remediation workflows, and security maturity improvements. Get exposure to AI security: Work around Copilot, AI agents, Purview, and data security compliance. Broad technical remit: Microsoft security … trusted to work independently, prioritise a varied workload, and bring ideas from your own experience. Key areas include: Vulnerability management, remediation planning, reporting, and automation. Security incident triage, investigation, and response. Microsoft Defender, Entra ID/Active Directory, Conditional Access, and related controls. SIEM query building and KQL. ...

Triage Analyst

Location
Greater London, England, United Kingdom
business and service issues are managed effectively and resolved within agreed expectations.* Assess the customer and business impact of issues and coordinate appropriate remediation activities to protect service performance and customer satisfaction.* Build and maintain strong relationships with business stakeholders, client representatives and operational teams to support positive … dependencies, and providing recommendations on potential solutions.* Investigate and analyse complex business and service issues, identifying root causes and implementing effective containment and remediation plans.* Analyse issue data, service trends and recurring issues to identify opportunities for process improvement and incident reduction.* Use analytical tools, including SQL where ...

Digital Forensics and Incident Response - Assistant Vice President

Hiring Organisation
Mizuho
Location
Greater London, United Kingdom
Employment Type
Full Time
risk: Implement SOPs and refine processes. Identify potential security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat … network based intrusion prevention systems, vulnerability assessment and compliance monitoring solutions, content management tools. Strong knowledge on Vulnerability Management, with proven record of Remediation plans to reduce the threats and risk to Information Assets. Understanding of VMware technology stack. Full understanding of CIS security standards, assessment ...