1 to 25 of 82 SOC 2 Jobs in the UK excluding London

Information Security Lead/ISO27001/SOC/GRC/Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC … 2 Type 2), act as the primary responder to customer security due diligence, and build the systems and knowledge base that allow Dexory to scale securely without friction. You'll work closely with the Head of IT & Security, embedding good security practice across engineering, product, and operations. Offices ...

many of the world’s largest hedge fund managers, private equity firms and international corporations. Our distinction flows from our carefully curated team: 2,500+ professionals characterised by tenacity, ethics and exacting excellence. Operating in key financial centres across the Americas, Asia, Europe and the Middle East, our international … Audit Committees, and to the development and continuous improvement of audit methodologies, processes and services; Examining and assessing IT policies and procedures; Contributing to SOC 1 Type 2 and SOC 2 Type 2 readiness reviews and generally assisting with the SOC 1 Type 2 ...

services; others are fully SaaS. Some customers access us over private circuits, others over the public internet. We operate in a regulated environment — HIPAA, SOC 2, and in some engagements FedRAMP — which means reliability, security, and auditability are not separable concerns. The person we hire will be comfortable … measurable value; resist the hype where it does not. Ensure AI-assisted operations meet the auditability and explainability bar required in a HIPAA and SOC 2 environment. Coaching and team-building Coach one Engineer III SRE who joins shortly after you do. Pair on incidents. Review their design ...

Manager, IT Security leads day-to-day security operations and engineering for the company: coordinating with our managed security services provider (MSSP) on SOC alerting and response, driving vulnerability and identity/access management programs, maintaining incident response readiness, and supporting our SOC 2 Type II, HIPAA … joiner/mover/leaver automation Serve as the primary internal point of contact for the managed security services provider (MSSP/vCISO) on SOC alert triage, escalation, and remediation follow-through Maintain and continuously improve the incident response playbook and runbooks, aligning internal procedures with the MSSP ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter. We’re looking for a SOC Lead who enjoys solving difficult technical challenges and wants their work to have real operational impact. What You’ll Do As a SOC … Lead, you’ll lead the everyday operation, development, and continuous improvement of the 24/7 Consolidated Security Operations Centre (SOC). You will be responsible for overseeing all Consolidated SOC functions, managing a team, and ensuring the delivery of high-quality SOC services including ...

bodies and turns them into action. Define regulatory, contractual, and breach‐notification obligations, and keep security controls aligned with compliance frameworks (e.g. PCI DSS, SOC 2) and cyber insurance requirements. Own the Information Security budget and make resourcing and tooling recommendations. Production Environment Security Define and maintain security … governance framework from an early‐maturity starting point. Strong working knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, and SOC 2. Hands‐on experience securing Microsoft Azure and Microsoft 365 environments. Experience with endpoint detection and response (Microsoft Defender preferred), SIEM, and identity platforms (e.g. ...

Dexory is transforming warehousing and logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. ...

Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying … and platforms. Contribute to a high‐performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility ...

endpoint or account security alerts. Work with Security colleagues to remediate issues and strengthen security controls. Assist with compliance activities, including maintaining evidence for SOC 2, ISO 27001, DORA or comparable frameworks. 7. Projects and Continuous Improvement Identify and implement automation opportunities that reduce repetitive administration and improve … management and Linux endpoints. Building integrations and automations using scripts, APIs or workflow tools. Experience maintaining CMDBs, asset registers and operational dashboards. Involvement in SOC 2, ISO 27001, DORA or similar audit and compliance activities. Supplier management, technology procurement and coordination of workplace technology projects. Benefits The organisation ...

Sentinel, GitHub Advanced Security, Wiz or equivalent platforms. Experience implementing DLP and data classification solutions. Experience supporting AI security initiatives. Experience working within ISO27001, SOC2 or regulated environments. Core Technical Skills Security Engineering Security architecture and design Security control implementation Vulnerability management Threat modelling Security monitoring and detection engineering Security ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

Develop and maintain the Cybersecurity GRC framework, policies, standards, and procedures in alignment with regulatory requirements (e.g., ISO 27001, NIST CSF, Cyber Essentials +, SOC 2, GDPR, CMMC Level 2,3) Develop, maintain, and socialize IT and cybersecurity policies, standards, and procedures across the organization. Oversee risk ...

working in complex, global technology environments. Experience supporting significant security transformation or tooling consolidation programmes. Familiarity with security requirements arising from ISO 27001 and SOC 2 environments. Why This Role Matters RWS is moving towards a security model where controls are increasingly embedded, automated and continuously measured , replacing ...

Cloud platforms: AWS, Azure, GCP. A background in financial services or similar regulated industries. Familiarity with compliance frameworks and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, SEC). A track record in consulting, solutions architecture, or technical coaching. Interest in technical sales ...

with containers and orchestration platforms such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

SIEM, EDR, and container security tools Counter emerging AI/ML threats using AI-assisted analysis Create security tooling and executive risk dashboards Support SOC 1 and SOC 2 audits What You’ll Need to be Considered AWS and/or Azure cloud-native security CSPM and ...

infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual leave allowance ...

raise and track issues with vendors or internal teams through timely resolution. Evidence of IGA governance controls for audit engagements (e.g., SOX, Dodd Frank, SOC 2, internal audit), preparing walkthroughs, evidence packs, and remediation tracking. Maintain technical documentation, runbooks, SOPs, and architecture diagrams; keep them current as integrations …/Azure AD, Active Directory, Amazon AWS) and common enterprise environments (Linux, Windows Server). Experience supporting audit or regulatory engagements (SOX, Dodd Frank, SOC2), including evidence preparation, control walkthroughs, and remediation tracking. Strong written and verbal communication skills; able to present technical concepts clearly to both engineering peers and ...

resilience and recovery objectives (RTO/RPO). Understanding of FinOps and cloud cost optimisation. Familiarity with security and compliance frameworks including ISO 27001, SOC 2 or GDPR. #J-18808-Ljbffr ...

casualty insurers. You’ll translate security strategy into actionable controls across cloud, applications, and data. The role emphasizes vulnerability management, incident response, and audits (SOC 1/SOC 2). Strong AWS or Azure security, CSPM/CWPP experience, and policy compliance are required. Salary ranges from ...

Assists in annual audits for industry specific reports, including ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS DSPT, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, CyberGRX. Conducts annual audits for industry specific reports, including GDPR, FEDRAM, CDSA. Required Knowledge Expert-level knowledge of UK NCSC security ...

Intune environments Ensure infrastructure and applications align with appropriate security standards and best practice Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance Apply security principles across network infrastructure, applications and systems Monitor and improve system resilience, performance and operational integrity ...