101 to 125 of 521 SOC 2 Jobs in the UK

management and continuous improvement of our compliance programme, information security governance and IT operations. You will lead our approach to ISO 27001, SOC 2 and UK GDPR/data protection, acting as the primary point of contact for our external Data Protection Officer (DPO), auditors, customers and internal … and IT Operations Manager at Lunio if you have experience with: Compliance Programme Ownership: Manage and continuously improve Lunio's compliance programme (ISO 27001, SOC 2, UK GDPR), acting as the single point of contact for auditors, our external DPO, and internal stakeholders. Audit Readiness: Lead certification and ...

Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied. Support and maintain compliance with SOC 2 Type II and ISO 27001, ensuring audit evidence is prepared continuously rather than only during audit periods. Operate and improve our identity … evolve existing systems toward compliance - can look at a running estate and work out what has to change, in what order, to satisfy SOC 2/ISO 27001. Having been through an audit or certification is a bonus, not a requirement Internal workforce identity and access: IdP-backed ...

management. Automate wherever possible: zero-touch deployments, IaC for security tooling, automated provisioning and deprovisioning. - Drive compliance and certification. Lead certification efforts (ISO 27001, SOC 2) as needed to meet partner requirements. Automate where needed and treat compliance as a byproduct of good security practice. - Own IT administration … people Experience building or significantly maturing a security programme Familiarity with cloud security (AWS IAM, networking, infrastructure review) Experience with compliance frameworks (ISO 27001, SOC 2) Hands-on experience with endpoint management (Kandji, Jamf, or similar) and identity/access management Experience administering Google Workspace or equivalent Interest ...

architects, compliance teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations). Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data … with the EU AI Act as it applies to foundation models. Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA). A track record ...

Information Security Analyst to safeguard our SaaS platform across security operations, access reviews and risk management. You will help operate ISO 27001 and SOC 2 controls while learning quickly and delivering practical security improvements across the business. Based in London with hybrid work, you will collaborate with Engineering ...

Information Security Management System. As an Information Security Analyst, you will help operate and improve the controls that support our ISO 27001 and SOC 2 programmes, while also getting involved in the real security work that happens across a growing SaaS business. You will not be expected … helpful, trusted partner in the way FundApps builds, buys and operates technology. Taking full, end-to-end ownership of FundApps’ ISO 27001 and SOC 2 controls operation, managing every stage from initial evidence collection and control checks through to remediation tracking and comprehensive audit preparation. Organising and chairing ...

library so responses get faster and more consistent over time. Collect, organize, and maintain control evidence in the GRC platform; track gap remediation against SOC 2, ISO 27001, NIST CSF, and other frameworks as they are adopted. Support vendor risk assessments for SaaS and AI providers: review vendor … legal counsel on redlines. Experience responding to client security questionnaires or vendor due diligence requests. Working knowledge of at least one major compliance framework (SOC 2, ISO 27001, NIST CSF) and what evidence looks like in practice. Foundational understanding of data privacy regulations (GDPR, CCPA) and how they ...

platforms or ways of working across multiple teams. Experience working in regulated environments or with strict compliance requirements (e.g., GDPR, PCI‐DSS, SOC 2, DMA, and EU AI Act). Demonstrated ability to establish programme governance and operating models from scratch in ambiguous or fast‐moving environments. Experience … Communication Leadership Skills Decision‐Making Influencing Stakeholders Navigating Complexity Certifications & Qualifications PMP Agile Project Management Certification AWS Cloud Practitioner Industry Keywords GDPR PCI‐DSS SOC 2 DMA EU AI Act Tools & Technologies Jira Confluence Smartsheet Cloud‐Native Designs Microservices #J-18808-Ljbffr ...

Lantern's security programme as we scale. You will cover cloud and application security, vulnerability management, IAM, incident response, secure software delivery, SOC 2, risk management, and customer security assurance. You'll drive security findings into concrete actions with owners and deadlines, and manage SOC 2 ...

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US entities. You will configure Drata, map controls, and report to senior leadership while partnering with ...

security engineering, thoughtful governance and AI-first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective AI-native security programme that keeps certifications … hands-on individual contributor while building security functions from first principles. Experience maintaining security programs aligned to frameworks such as ISO 27001 and SOC 2. Strong understanding of modern software development, cloud infrastructure and secure engineering practices. Experience partnering closely with engineering organisations to build secure-by-design systems. ...

Volta is seeking a Senior Manager, Cyber Security Engineering to lead the ISO 27001 and SOC 2 Type II program across a fast-growing, security‐minded infrastructure platform. You will own controls, evidence, and ISMS documentation while collaborating with platform engineers and external auditors. You’ll drive audit ...

demand, enterprise requirements and future international markets. The role also carries significant responsibility for AI governance, security assurance and certification, including ISO 42001 and SOC 2. You will act as the senior authority on the technology estate, making and defending decisions, challenging where necessary and providing structure without creating … support scalability. Own the organisation's security posture, data governance, risk management and security controls. Lead the certification and compliance agenda, including ISO 42001, SOC 2 and relevant security standards. Establish a rolling penetration-testing programme covering internal and external systems. Own AI governance, including model and vendor ...

device builds and account provisioning Write clear knowledge base articles and user guides Security, compliance and improvement Support security and compliance frameworks such as SOC 2 and Cyber Essentials Plus Keep IT asset records and documentation accurate and up to date Automate repetitive tasks with PowerShell or Microsoft … Microsoft Defender Experience with Freshservice or a similar ITSM platform Experience with compliance and security tools such as Drata, & Aikido advantageous Awareness of SOC 2, Cyber Essentials Plus or ISO 27001 Understanding of email authentication (SPF, DKIM, DMARC) Basic networking knowledge: DNS, DHCP, Wi‐Fi and VPN About ...

coding agent workflows that remove manual steps, so the function scales on automation, not headcount Secure and audit-ready: the fleet stays managed and SOC 2 evidence generates itself, rather than being assembled by hand before an audit Who you might be We're not hiring a traditional … Edinburgh and hands-on with real hardware Bonus: Exposure to identity and device tooling such as Okta, Google Workspace or Jamf Experience with SOC 2 or security compliance Having run or automated onboarding, endpoints or internal tools before How we work This role is on-site in Edinburgh ...

These are broad, senior engineering roles, not single-language specialist posts. This is a regulated payments environment governed by frameworks including DORA, PCI DSS, SOC 2, EMI regulations and GDPR. These frameworks shape our SDLC itself, from change control and approvals to testing evidence and audit trails. Delivery … propose efficiency improvements that keep compliance intact. Familiarity with, or the ability to rapidly get to grips with, frameworks such as DORA, PCI DSS, SOC 2, EMI regulations and GDPR. You understand that the SDLC is constrained by these frameworks and can still deliver efficiently within it, using ...

financial software company in London is seeking a Global Compliance Manager to oversee compliance execution. You'll manage audits for SOC 1, SOC 2, and PCI programs, ensuring robust control implementation and corporate compliance. Ideal candidates will have 3-7 years in compliance, strong engineering collaboration skills ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

Experience designing for air-gapped, disconnected, sovereign or similarly restricted production environments. Experience leading a substantial high-assurance audit or compliance programme, such as SOC 2 Type 2, PCI DSS, DEFSTAN 05-138 or FedRAMP. Strong Linux, Kubernetes, infrastructure automation and troubleshooting expertise. The ability to write ...

.NET Core, TypeScript, React, Python, Go Datadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHog Google Workspace, Jumpcloud, Vanta, Hibob, Slack GitHub, CircleCI, ArgoCD SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 42001 Who you are You have at least 8 years of experience ...

team. About Descrial Descrial is a startup inside a twenty-year-old company TresVista has run the analytical work behind private capital since 2006. 2,000 people, 400+ clients including some of the biggest names in the industry, no outside capital and no outside board. That was the first … platform holding confidential investment data, you own identity, token architecture, permissions, tenant isolation and an audit trail of agent actions. TresVista holds SOC 2 Type 2 and ISO 27001:2022 certification. With TresVista's compliance team, you lead Descrial's readiness for both and prepare ...

Robert Half Technology are assisting a market-leading threat intelligence organisation to recruit a Privacy & Data Security Engineer on a 2-year temporary contract basis. Hybrid working - London, 2-3 days per week. Role The Privacy & Data Security Engineer will lead the technical implementation of the organisation … secure data-sharing architectures would be beneficial. Experience producing technical control documentation, audit evidence and compliance artefacts for frameworks such as ISO 27001 and SOC 2. Relevant qualifications such as CIPT, CIPM, CISSP or CISM would be advantageous. Excellent written and verbal communication skills, with the ability to explain ...

and continuous improvement.* ## Present audit findings and assurance reporting to senior leadership and governance committees.## ## **External Assurance Support*** ## Support external audit, SOC, ISO and regulatory assurance activities.* ## Coordinate internal testing activities to support customer assurance commitments.## Leverage internal audit findings to strengthen organisational readiness … highly regulated SaaS environment.* ## Professional qualifications such as: CIA, ACA/ACCA, CPA, CISA, CRISC* ## Experience working within organisations subject to SOC 1, SOC 2, ISO 27001 or similar assurance frameworks.* ## Experience using GRC platforms and audit management tools.## ## **About you and ...

scale ensuring standardized onboarding patterns and controls.* Establish guardrails and RBAC/ABAC models aligned to Zero Trust and regulatory frameworks (ISO 27001, SOC 2, NIST 800-53/63).* Define and maintain technical roadmaps, standards, and reference architectures; mentor engineers and review develop/runbooks.* Lead ...