101 to 125 of 188 SOC 2 Jobs in London

Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices. Minimum requirements for the role: 2-4 years of experience in the governance, risk, and compliance space Experience implementing or maintaining vendor‐risk programs Experience performing security and maturity assessments … and requirements into clear business risks and requirements to non technical stakeholders. An ideal candidate also has: Experience working with NIST Cybersecurity Framework profiles, SOC 2, ISO 27001, or similar frameworks Experience creating workflows through automation and AI assistance Experience working within common GRC and procurement platforms such ...

would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally okay! Studies show that women … your work-from-home setup. The application journey has 3 key steps Intro call with the recruiter 30 min call with the hiring manager 2 hours of technical and behavioural interviews This process should take around 4-5 weeks - your schedule is really important to us, so we promise ...

patch management, incident response, access reviews, and privileged access or zero-trust access delivery. Delivered against a security certification or audit (TISAX, ISO 27001, SOC 2 or equivalent) on the implementation and evidence side. Scripting or infrastructure-as-code ability, enough to set the standard and review your ...

Understanding of UK and EMEIA payment regulations and industry standards. Experience with audit analytics and automated control testing. Experience with Service Organisation Controls (SOC1, SOC2, ISAE3402) reporting. Knowledge of cloud, AI and emerging technology risks. Experience supporting large banking, capital markets, asset management or insurance clients. Relevant certifications such ...

Drive Security & Compliance: Integrate security-by-design principles into our architecture, ensuring that our transaction-heavy environment meets strict financial compliance standards (PCI-DSS, SOC2). Influence & Mentor: Act as a force multiplier for the engineering organization by mentoring senior engineers, leading architecture review boards, and guiding major technical decisions. ...

outcomes in support of enterprise projects. You will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing ...

and operations teams across firms managing combined assets of over £70 billion. We are a Microsoft Agentic Launchpad cohort company alongside NVIDIA, ISO 27001, SOC 2 Type II and ISO 42001 certified, and selected for the FCA's AI Live Testing programme. About the role Forward Deployed Engineering ...

have requirements Experience working in fintech, payments or other regulated environments. Experience building internal developer platforms or self-serve infrastructure tooling. Experience supporting SOC2, ISO27001 or similar compliance initiatives. Background in SRE or platform engineering at scale (100+ engineers, 1000+ services). Experience designing connective layers or shared infrastructure ...

platforms is required. Relevant exposure may include: Identity Governance & Administration Privileged Access Management Access certifications/User Access Reviews Compliance initiatives (SOX, ISO, NIST, SOC 2) Zero Trust programs Security transformation efforts Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work ...

products and low-latency data stores (e.g. DynamoDB) Automated testing and validation frameworks for models and services Experience in regulated industries (e.g. PCI, HIPAA, SOC2), large companies, or mature engineering teams Optional familiarity with LLM tooling/RAG Why Join Us? Impact: Own high-profile ML-backed services that power ...

environment, the record is as important as the fix. Right to work in the UK. Desirable Experience supporting ISO 27001, Cyber Essentials, DSPT, DTAC, SOC 2 or comparable compliance frameworks. Scripting in PowerShell, Bash or Python. Working knowledge of DNS, DHCP, VPN and firewall fundamentals. Exposure ...

operational cadence, enablement, and forecasting discipline within a fast-growing technical sales organization. Regulatory Knowledge: Understanding of compliance frameworks such as PCI DSS, HIPAA, SOC 2, GDPR, or FedRAMP. Hyperscaler/Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly … mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already ...

realities of a fast-moving engineering-led organisation. Desirable Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance techniques in cloud-native and software engineering environments. ...

realities of a fast-moving engineering-led organisation. Desirable Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar. Experience helping organisations evolve from periodic assurance towards continuous assurance. Familiarity with assurance techniques in cloud-native and software engineering environments. ...

communicate platform strategy clearly to both technical and non-technical audiences. Bonus Experience: Exposure to relevant compliance and governance frameworks, such as ISO 27001, SOC 2 or GDPR within a research or scientific environment. Personally, you Are comfortable working in a matrixed environment, balancing multiple stakeholders and contributing ...

postmortem afterward. You understand that reliability is built through good design, not just good monitoring. Awareness of security best practices and compliance requirements (SOC 2 or similar). Cost consciousness: not just making things work, but making them work economically at scale. You've rightsized compute, managed Spot ...

and 'Analytics Leader’ Global impactwith a rapidly expanding footprint Analytics provider to the largest asset managers in the world Enterprise-grade security(ISO 27001 & SOC-2) Seamless integrationwith OMS, EMS, and collateral systems At Cassini, our client focus drives everything we do. You’ll work alongside experienced engineers, product ...

incident, problem, change management). Familiarity with information security frameworks and working within a regulated or compliance-driven environment (e.g. ISO 27001, Cyber Essentials, SOC 2) Proven experience leading or delivering technical projects end-to-end. Strong understanding of MDM and identity management platforms (JumpCloud, Jamf, Addigy, Okta ...

managed SaaS. Experience building platforms or ecosystems that enable partners or third parties to extend products. Familiarity with compliance frameworks such as ISO 27001, SOC 2, FedRAMP, IRAP, or similar. Why Join Totara? Lead a strategic function with strong executive support. Shape the future of security, trust and ...

Group is seeking a skilled Information Security Officer to strengthen our SOC2 compliance and ISO 27001 governance within our Financial services clientele. The role focuses on policy development, audits, and serving as the main point of contact for client inquiries. The ideal candidate has a Bachelor's degree, at least ...

change-failure rate) across multiple teams. Ideal, but not required Experience in financial technology or another heavily regulated industry. Has run an audit preparation (SOC 2/ISO) program. Familiar with Linear, Notion, Slack as the operating stack. What we offer Work with colleagues that lift ...

Datastores : Postgres (SQL, migrations), Redis (caching/queues). Quality & security : code reviews, type safety, lint/format, secrets mgmt, least‐privilege IAM, basic SOC2 hygiene. Communicates clearly with product sense; ships value weekly. Perks and bonuses Remote‐first freedom & flexible hours 🏠 Regular off‐sites & monthly virtual game nights 🎉 Unlimited ...

data latency, cost efficiency, and observability metrics. Collaboration & Governance Partner with Platform Operations and Security to enforce privacy, compliance, and access control frameworks (GDPR, SOC2). Work cross‐functionally with analysts, AI engineers, and platform leads to deliver production‐grade, business‐critical data products. Lead by example in data documentation ...

systems are configured according to specified requirements and industry best practices. Assess security configurations across cloud and endpoint platforms, benchmark controls against CIS, STIG, SOC2, and internal security standards, and drive remediation activities to improve security posture. Security Solution Inventory and Maintenance Own the administration, configuration, and lifecycle management … business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports and metrics demonstrating security posture, control effectiveness, and remediation progress. Scripting and Automation Develop and maintain ...

destination for millions of people planning their next move, reading the latest industry news, or just browsing what’s on the market. Location : London - 2 days per week Reports to: Head of Technology Risk and Assurance The role We areseekinga proactive and detail-oriented GRC Analyst to join … Ability to understand technical workflows and design compliance processes that enhance rather than disrupt team efficiency Whatyou’llbring to the role Demonstrable experience (typically 2–4 years) in a project management, GRC, or security-related role Familiarity with information security, privacy, or compliance-based projects Experience reporting to stakeholders ...