26 to 50 of 243 SOC 2 Jobs in London

features, integrations, and architectural changes. Embed security requirements, automated testing, and review processes into agile engineering workflows. Support compliance with applicable GDPR obligations and SOC 2 controls. Maintain security documentation and evidence to support client due diligence and compliance reviews. Communicate security risks, controls, and incident response procedures … structured threat modeling methodologies and security testing. Experience integrating security practices into DevSecOps workflows and continuous integration and deployment pipelines. Working knowledge of GDPR, SOC 2, and enterprise data security requirements. Ability to collaborate effectively with cross‐functional engineering teams and communicate security considerations to technical and nontechnical ...

lasting improvement to systems and controls AI security , including prompt injection, unsafe tool execution, retrieved data and sensitive information disclosure Evidence and assurance for SOC 2, enterprise security reviews and customer due diligence, plus the reusable security patterns engineering teams adopt as standard What We’re Looking … code, and enterprise identity integrations such as OAuth, OIDC and SAML Detection engineering, SIEM or cloud security monitoring, incident response or digital forensics SOC 2, ISO 27001 or enterprise customer security reviews Penetration testing or working with external security researchers What We Offer Competitive salary with regular appraisals ...

fake domains and accounts impersonating our brands and leaders. Policy, compliance and trust. Write and enforce policies people actually follow. Prepare the company for SOC 2 or ISO 27001 with Legal & Compliance. Own the public security and trust story, including the trust page on our products. Team leadership. … half your time hands-on while leading a small, fully remote team across many time zones. Nice to have Has prepared a company for SOC 2 or ISO 27001. Has secured or evaluated AI agents and LLM-based tools in production. Has run a third-party risk program ...

demonstrations that showcase how Vanta solves the customer's specific problem, including how Vanta automates and operationalises their GRC programmes across frameworks such as SOC 2, ISO 27001, and HIPAA. Validate the feasibility of standard and semi-complex integrations and confirm alignment with customer environments, workflows, and architectures. … trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making ...

compliance requirements relevant to Nscale's operations (data protection, financial reporting, sector-specific regulations). Ensure audit, risk, and controls activities support compliance with SOC 2 Type II, ISO 27001/27017/27018, Cyber Essentials Plus, ISO 22301, and other applicable frameworks. Coordinate with Legal, Information Security … and implementing internal control frameworks across financial, operational, and IT domains. Strong understanding of compliance frameworks relevant to cloud infrastructure, data security, and AI (SOC 2, ISO 27001, GDPR, sector-specific regulations). Excellent audit and risk assessment skills, including the ability to identify control gaps and recommend ...

end. About Descrial Descrial is a startup inside a twenty-year-old company TresVista has run the analytical work behind private capital since 2006. 2,000 people, 400+ clients including some of the biggest names in the industry, no outside capital and no outside board. That was the first … implement authentication and authorisation end to end: SSO, OTP, session and JWT handling, and role-based checks on every request. Security and compliance (SOC 2, UK GDPR) shape the work: tenant isolation, least-privilege access, audit logging and secure file handling. You build integrations with the systems ...

ready and high-performing. In this senior role, you’ll lead DevOps, observability, and compliance. Tasks include architecting cloud infrastructure for growth, prepping for SOC 2/ISO 27001 audits, and setting up CI/CD pipelines for all services. You’ll also manage logging, metrics, tracing, alerts … Security best practices knowledge. Networking concepts (VPCs, DNS, load balancers, VPNs, firewalls). Database management (PostgreSQL, MySQL, NoSQL) and storage. Python or Bash skills. SOC 2, ISO 27001, or GDPR exposure. Report directly to the founders with a chance to shape their future. Got what it takes? Apply ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

findings through resolution and maintain organised documentation and repositories.* Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials.* Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that build … premises, colocation and cloud environments, including cloud security and compliance technologies.* Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits.* Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and ...

findings through resolution and maintain organised documentation and repositories. Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials. Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that build … premises, colocation and cloud environments, including cloud security and compliance technologies. Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits. Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and ...

grow, you’ll have the opportunity to build out the function and the team. Responsibilities: Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation. Lead our path to the frameworks customers ask for most, including … years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up. Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP. Experience selling into ...

same agreed standards Ensuring our infrastructure meets the security and compliance bar our clients and regulators expect, and that we can evidence it (e.g. SOC 2) Giving the business clear, reliable visibility into infrastructure cost, attributed by client and project Building a self-service platform so engineering teams … Kubernetes, CI/CD and infrastructure-as-code at scale Experience running a cloud estate that has to stand up to external audit (e.g. SOC 2) and give the business real cost visibility Clear communication — comfortable explaining architectural trade-offs to technical and non-technical stakeholders alike Familiarity ...

keep the guardrails from over-claiming. Keep the knowledge base current: update answers as the platform, certifications, and control environment change; ingest new evidence (SOC 2, ISO 27001/27701/42001, HIPAA, penetration tests); and flag stale facts before they reach a customer. Handle one-off customer … Hands-on experience with security questionnaires and the customer security-review process across formats (CAIQ, SIG, custom spreadsheets, OneTrust and similar portals) and frameworks (SOC 2, ISO 27001, GDPR/UK GDPR, NIST). Some exposure to contracts (DPAs, MSAs) and the ability to connect contract language ...

Security Architecture team, you will lead the design and operation of our US Healthcare security controls. You will own the roadmap for HIPAA compliance and SOC2 Type II certification , partnering with Engineering and Legal to build a secure, compliant platform for millions of users. Key Responsibilities Compliance Leadership: Lead annual … SOC 2 and HIPAA certifications, managing interfaces with external auditors and professional services. Policy & Risk: Define and maintain security policies; embed risk assessment activities within engineering processes and vendor management. Operational Excellence: Partner with control owners to automate evidence gathering and ensure controls reduce friction rather than creating ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … excellent organisational skills. You write clear documentation and reports, and can translate complex requirements for stakeholders at every level You’ll have at least 2 years’ experience in a related role Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and … organisational skills.* You write clear documentation and reports, and you can translate complex requirements for stakeholders at every level.* You'll have at least 2 years' experience in a related role.* Experience in a regulated industry, familiarity with other information security frameworks and assurance reports, and exposure to Jira ...

tooling and your own judgement to proactively identify gaps across cloud security, dependencies, secrets, and code. Work with the owning teams (starting with 2 to 3 where the gaps are greatest) to secure their commitment to prioritise remediation, and see it through. Write code and make infrastructure changes yourself … risks like data leakage and prompt injection, while using AI yourself to increase your impact. Support our compliance programmes, such as ISO 27001 and SOC 2, by helping teams implement and evidence technical controls. Act as a trusted voice for our technical teams, owning security issues raised with ...

standards we build against. Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection. Drive SOC 2 and get us ready for the certifications defense and aerospace customers ask about, including export control and ITAR. Secure our AI and agentic … Azure): identity and access, secrets, network security, data protection. You’ve owned security in a regulated or high-trust environment and have implemented SOC 2 yourself. Export control, ITAR, or FedRAMP experience is a big plus. Solid on threat modeling, secure architecture, and incident response. You’ve secured ...

services and modern security practices, you will take ownership of designing, deploying, and maintaining cloud infrastructure while upholding compliance with industry standards such as SOC 2. This is a mid-level role suited for an engineer with proven commercial experience who is ready to independently manage infrastructure operations, implement … Management: Monitor systems for threats, conduct regular vulnerability assessments, apply proactive patches, and support remediation efforts. Compliance & Auditing: Partner with compliance teams to maintain SOC 2 alignment, support security audits, and keep comprehensive compliance documentation and security procedures up to date. SRE Collaboration: Work closely with the Site ...

privacy notices, consent, data retention, and contractual commitments Support audits and compliance programs through evidence collection and remediation tracking Contribute to ISO 27001, SOC 2, and other compliance initiatives Support privacy, security, and third-party risk assessments and maintain risk registers Support privacy incident investigations and remediation activities … Experience with privacy assessments, documentation, supplier reviews, and customer questionnaires Understanding of cloud technology, information security principles, and frameworks such as ISO 27001 and SOC 2 Strong research, critical thinking, and problem-solving skills Clear communication skills with the ability to explain complex topics simply Organised, detail-oriented ...

assessments, including control walkthroughs, evidence gathering, gap analysis and remediation tracking. Coordinate evidence and actions for external audits and compliance assessments, including ISO 27001, SOC 2 and Cyber Essentials. Maintain clear, reusable control documentation and audit evidence so assurance activity is efficient, consistent and audit-ready. Track risk … governance, compliance, audit support, third-party risk or a related field. Working knowledge of control-based assurance and common frameworks such as ISO 27001, SOC 2 or Cyber Essentials; familiarity with NIST is beneficial. Strong analytical and organisational skills, with the ability to manage evidence, actions and deadlines ...

Risk Ledger is seeking a GRC Lead to own governance, risk and compliance. You will drive ISO 27001, SOC 2 and risk management across the business, partnering with engineers, sales and leadership to ensure evidence, reporting, and controls are effective and scalable. This hands-on role requires ...

Lantern's security programme as we scale. You will cover cloud and application security, vulnerability management, IAM, incident response, secure software delivery, SOC 2, risk management, and customer security assurance. You'll drive security findings into concrete actions with owners and deadlines, and manage SOC 2 ...

certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work … is. Risk rate each supplier as high, medium or low using our method. Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries. Review the evidence, record gaps and agree follow up actions with the supplier owner. ...

product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits. As our Senior IT Engineer … preserving evidence from devices. Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits. Support security projects, policy updates, audits and reporting. Automate, enable AI and scale Make automation ...