101 to 125 of 128 SOC 2 Jobs in the UK

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

design. Advising Product and Engineering on data ownership, data usage, intellectual property and the development of new AI products. Partnering with Security on SOC 2, customer security requirements, DPIAs and information security matters. About You Admitted to the US Bar – this is an absolute must. 7 - 12 years ...

controls across our Azure, AWS and SaaS environments. The successful candidate will work independently, reporting to the Head of Security Engineering, while collaborating with SOC, GRC, IT, Modern Workplace and Systems Engineering teams to build and mature our cloud security posture.Key ResponsibilitiesCloud Security FrameworkDefine and implement the cloud security … environments.Desirable Skills & ExperienceFamiliarity with Infrastructure as Code (Terraform)Knowledge of cloud network security concepts (firewalls, NSGs, VPCs, private endpoints).Exposure to compliance frameworks (ISO27001, SOC2, NCSC Cloud Security Principles).Security certifications such as AZ-500, SC-100, AWS Security Specialty, CISSP, or CCSK.Embracing our differences At Kainos, we believe ...

controls across our Azure, AWS and SaaS environments. The successful candidate will work independently, reporting to the Head of Security Engineering, while collaborating with SOC, GRC, IT, Modern Workplace and Systems Engineering teams to build and mature our cloud security posture.Key ResponsibilitiesCloud Security FrameworkDefine and implement the cloud security … environments.Desirable Skills & ExperienceFamiliarity with Infrastructure as Code (Terraform)Knowledge of cloud network security concepts (firewalls, NSGs, VPCs, private endpoints).Exposure to compliance frameworks (ISO27001, SOC2, NCSC Cloud Security Principles).Security certifications such as AZ-500, SC-100, AWS Security Specialty, CISSP, or CCSK.Embracing our differences At Kainos, we believe ...

Level Security (RLS) Multi-tenant SaaS platforms Tailwind CSS, Storybook, Docker and GitLab CI/CD AI, fintech or regulated environment experience Knowledge of SOC 2, ISO 27001 or secure SDLC practices Tech Stack Next.js, React 19, TypeScript, Tailwind CSS, Supabase, PostgreSQL, Docker, Vitest, Storybook, GitLab CI/… slightly more or less experience are encouraged to apply. This role is hybrid so you will need to be in the office at least 2 days a week in Nottingham. In return for your skills my client is paying up to £70,000 for the right candidate. Please apply ...

have: a track record of zero-downtime migrations on live systems; experience with metering, quota, or usage-data systems; worked in a compliance environment (SOC 2, ISO 27001, C5, or similar)A Note on Our Hiring Process: DeepL hires for the Company, not just a specific team. ...

and evidence requirements. - Experience translating policy or control requirements into practical backlog items, acceptance criteria and evidence artefacts. - Working knowledge of NIST-style controls, SOC 2, ISO 27001 and enterprise GRC expectations. - Experience with Trade Secret, confidential or sensitive technical data handling. - Strong documentation skills for standards, decision ...

checks within Continuous Integration systems. Triage findings of scanning tools and ensure prompt remediations. Liaising with the Fortinet Infosec team to ensure compliance with SOC 2 and ISO 27k certifications.Direct experience in these technologies is a bonus but not a requirement. We are looking for relevant experience ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

tooling support to the Security Remediation Lead and Delivery Lead for reporting, dashboards and control closure tracking. - Ensure workflow changes support NIST-style controls, SOC 2, ISO 27001 and enterprise GRC evidence expectations. - Create sustainable operating guidance for BAU teams after the remediation programme. What Youll Do - Review ...

services.Expertise designing connectivity solutions for complex enterprise networks, including Direct Connect/ExpressRoute, VPN redundancy, and Transit Gateways.Knowledge of securing VPCs to enterprise standards (SOC 2/ISO), including PrivateLink endpoints, WAF configuration, and strict Security Group architecture.Proven ability to lead "whiteboard" discovery sessions that map current- versus ...

with business objectives and IPO readiness.Foster a culture of security across the company by being a strong business-enabler.Lead and scale the Security Engineering, SOC and Security GRC organizations.Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness.Strengthen our cloud, application and … level security assessments to Board meetings, regulators, and examiners to demonstrate operational resilience and risk mitigation effectiveness.Ensure compliance with industry standards and frameworks, including SOC 1/2, ISO 2700, ISO 42001, DoRA, SOX and other applicable regulatory requirements.Embed security into the software development lifecycle while enabling engineering ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary:Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. ...

team Experience & Knowledge Required Experience: 5+ years of professional experience in cybersecurity, with at least 2+ years in a Security Operations Center (SOC) or incident response role Advanced proficiency with Microsoft Defender XDR and expert-level knowledge of Microsoft Sentinel, including KQL query writing and analytics rule development Strong … Networking/Firewalls: Exposure to Cisco Meraki and Fortinet FortiGate (desirable) Regulatory & Compliance Frameworks: NIST 2.0 Cyber Security Framework (required); NIS2, NERC CIP, SOC2, and IEC 62443 OT standards (desirable) ITIL Principles: Good understanding of ITIL principles and their application to IT service management Information Security Technologies: Firewalls, intrusion detection ...

noise and improve response times. Identify opportunities for automation and continual improvement across monitoring and response workflows. Contribute to the development and upkeep of SOC processes, runbooks, and documentation. Run and interpret vulnerability scans using Nessus, tracking remediation through to closure with the relevant teams. Support endpoint security and … Help maintain the evidence and controls that support the company's accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials Plus, and SOC 2. Learn and apply the principles of risk and information governance within the context of cyber security. Experience and Technical Requirements Two or more ...

talented Cyber Security Consultant for our client based in East London. You must have strong experience within recognised frameworks and regulations including ISO 27001, SOC2, NIST Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following … Operations, Incident Response, Security Assurance, or GRC functions. Experience managing or overseeing MSSP, SOC activities, third party management. Strong understanding of: ISO 27001, SOC2, NIST Cyber Security Framework, Incident Response methodologies, Cyber Security Governance, GDPR and regulatory compliance Certifications (one or more) CISSP CISM CRISC The Cyber Security Assurance ...

ability to align technical roadmaps with business objectives, working closely with Product, Research, and Executive teams.Enterprise Security & Compliance: Experience navigating enterprise-grade security requirements, SOC2 compliance, and implementing robust data governance frameworks.Benefits:We offer a comprehensive benefits package designed to support you as an individual. Our standard benefits include … deliver better research and insight to our clients. We are proud to be a member of the Disability Confident scheme, certified as a Level 2 Disability Confident Employer. We provide an inclusive and accessible recruitment process.Your application will be reviewed by someone from our Talent Team who will ...

and identify indicators of compromise. Contribute to threat hunting activities and proactive security monitoring. Compliance & Documentation: Support compliance and audits for ISO 27001, NIST, SOC2, Lloyd's Principle 12, and other standards. Prepare incident reports, timelines, reviews, and maintain event logs. Contribute to security documentation, runbooks, and standards. Produce metrics … experience with at least at least 3/4 years in a lead, management, or principal role in cybersecurity, combining security engineering and SOC operations or incident response with experience in regulated industry. Demonstrable experience leading and developing a security team. Confident communicator able to translate complex security risk ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This … documentation. Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits and ...

e.g., Python, Java, TypeScript, Go).Understanding of security fundamentals with relation to various cybersecurity and compliance frameworks, particularly NIST CSF, but any of PCI, SOC2, HITRUST, ISO 27001/2, or similar.Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native ...

Owning and driving consistent security operations and incident response processes across all regions• Overseeing cyber incident management, including escalation, communication, and executive reporting• Driving SOC2 Type II certification and ensuring ongoing compliance with security standards• Developing and delivering clear reporting and metrics for executive leadership and the Board• Leading continuous … also offer an extensive choice of other options to suit you! 30 days holiday a year with the option to buy up to 2 additional days. Flexible working - balancing work and life is important so our flexible working opportunities are open to all, this can include part-time ...

blockchain on-chain concepts (wallets, addresses, transactions) but no requirement to audit contracts.Familiarity with SOC operations, and post-incident forensic analysis.Familiarity with SOC2, ISO 27001, or financial audit requirementsAny relevant industry certificationCOMPENSATION & PERKSFull-time salary based on experience and meaningful equity in an industry-leading companyThis is a role ...

flag anything that breaks the segmentation model Feed findings back into prevention by working with IT and engineering to close root causesRequirementsBackground in IT, SOC operations, or other hands-on technical work Solid grasp of cloud infrastructure, ideally AWS Strong networking knowledge: can read a PCAP, spot beaconing … response workflows Experience defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry)Experience handling security audits (ISO27001 or SOC2) Familiarity with FortiGate logging and NetFlow/sFlow analysis DFIR certifications such as GCIH, GCFA, or GCIA are useful but not required Experience in energy, fintech ...

long term.High level Core dutiesManaging Internal, External and Client AuditsManagement and implementation of multiple existing and new compliance Frameworks including but not limited to SOC2, FISMA/NIST, ISO 27001 and 27701GRC tool management (implementation and operation for multiple compliance frameworks)Detailed Job DescriptionThe Technology Audit and Assurance Manager … 000Specialisation: Biotech & Health, Financial Services, Regulatory/ComplianceSector: In-houseRole Position: Compliance/Risk RolesContract Type: PermanentHours: Full TimeExperience Level: Mid Level (2-5 years), Mid Senior Level (3-7+ years)PQE: 4-6 years, 7+ yearsReference Number ...