26 to 50 of 128 SOC 2 Jobs in the UK

office. You handledevice provisioning, AV, asset management, and general on-site support.If you like the idea of setting the endpoint security direction for a 2,000-person global company while also being the person a colleague can walk up to when their laptop won't behave, this role … laptop backup coverage, policy, and periodic recovery testing.• Partner with 8x8's Security team on EDR/XDR endpoint tuning and incident triage• Produce SOC 2 and ISO 27001 evidence for endpoint controls during audit cyclesLondon Site Support• Provide walk-up and desk-side support for London office ...

policies and standardsManage security review processes for all solutions to ensure they their design and implementation meets compliance requirements – including PCI-DSS, ISO 27001, SOC 1 & SOC 2 and other regional requirements Document and actively communicate any areas where the solutions and processes are not fully compliant.Identify … improve deficient conditions. To the greatest extent possible, ensure all Corporate Standards, SDLC, Change Management, and risk governance protocols are followed.Review vendor contracts and SOC reports to evaluate the impact on the company’s controls. Coordinates with third party vendors where appropriate.General Duties and Responsibilities:Reliably demonstrate accountability ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

evolving security best practices.Secure SaaS applications and infrastructure by implementing security best practices, access controls, and continuous monitoring.Ensure compliance with security frameworks (ISO 27001, SOC 2, PCI-DSS) by developing governance, implementing necessary controls, and securing business processes.Collaborate with both non-engineering teams and IT to drive improvements … Technology, or a related field.You’re an accomplished Security Operations Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment.You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools.You're proficient in scripting ...

Cloud platforms (AWS, Azure, GCP) A background in financial services or similar regulated industries Familiarity with compliance frameworks, and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, and SEC compliance requirements) A track record in consulting, solutions architecture, or technical coaching. Interest ...

innovation and business objectives.Nice to HaveExperience securing AI-enabled products, platforms or digital services.Familiarity with recognised security frameworks such as ISO 27001, ISO 42001, SOC2, NIST AI RMF or OWASP AI Top 10.Experience working with cloud environments including Azure, AWS or Google Cloud.Security certifications such as CISSP, CISM, CCSP ...

observability and monitoring stacks (e.g., CloudWatch, Prometheus, Grafana, Datadog)Knowledge of data sovereignty, residency requirements and compliance frameworks relevant to AI workloads (e.g., FedRAMP, SOC 2, ISO 27001, NIST 800-53, HIPPA, PCI, HITRUST, GDPR)Familiarity with data protection regulations and AI Security frameworks (e.g., GDPR, NIST ...

alert triage.Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate.Maintain alignment to PCI DSS, SOC2, ISO27001 NIST, and CIS frameworks. Produce documentation and evidence to support audit and assurance activities.AI SecurityDesign and implement guardrails for AI/LLM systems, covering … and frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation.Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud.Nice to haveAZ-500, AWS Certified Security – Specialty, or equivalent cloud security certification.Experience integrating ...

deploying applications into K8 and Docker environmentsData Loss Prevention (DLP) and SaaS security governance.Advanced detection engineering or SOAR playbook development.Experience supporting ISO 27001 or SOC 2 audits.Relevant certifications (e.g. CISSP, CISM, GIAC).Workplace & BenefitsAt Deliveroo we know that people are the heart of the business and we prioritise ...

centres and cloud.o Executing and concluding security controls maturity assessments against industry standards such as the NIST Cyber Security Framework, ISO27001/2, SOC2, etco Working closely with stakeholders to review all projects and initiatives, assessing them for appropriate/correct levels of security design and controls.o Identification ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing ...

DevOps and DevSecOps practices and how these can be integrated into managed cyber offerings.• Knowledge of global cyber frameworks including NIST CSF, ISO 27001, SOC 2, PCI DSS, CIS, MITRE ATT and CK, and regulatory requirements across multiple jurisdictions.• Excellent written and verbal communication skills with experience presenting ...

Security, Zero Trust & ComplianceEmbed Zero Trust principles across hybrid cloud—identity, segmentation, encryption, and posture control.Align infrastructure with regulatory and compliance frameworks (ISO 27001, SOC2, CIS, NIST).Define security integration patterns across cloud and on‐prem: IAM, PAM, KMS, certificates, secrets management.Partner with security architects to ensure platform designs meet ...

enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!Location: Remote, within UKAbout … engineering teams, and embed them into CI/CD and GitOps workflows.Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with ...

quality. Competent in working with a range of clients, from SMEs to large enterprise environments.Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials)DesirableIndustry-recognised certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.Exposure to penetration testing ...

native firewalls, and web application firewalls.Encryption at rest and in transit, and key management across multi-cloud environments.Working knowledge of relevant compliance frameworks (e.g. SOC 2, ISO 27001, and sector-specific regimes) as applied to cloud architecture.FinOps & Cost OptimisationPractical experience with cost visibility and management tooling (Cost Explorer ...

CNAPP tools such as Wiz, including custom configuration rules and graph queries.Direct experience mapping cloud-native controls to frameworks like NIST CSF, ISO 27001, SOC2, or CIS Benchmarks.Deep operational knowledge of AWS and GCP native security suites.Proficiency in applying the Security Pillar from AWS and Google Cloud Architecture Frameworks.Ability ...

integrate mandatory security checks.Impress Us More By Having (Desirable)Proven experience working with and adhering to FinTech-related certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, DORA or similar regulated environments.Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP.BenefitsWhy ...

and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders … GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. ...

security incidents, red/blue exercises, detection work, and post-incident actions, improvements, and other investigatory/preventative follow-ups.Support technical control work for SOC 2, ISO 27001, EU CRA, and related frameworks, working with GRC where security engineering input is needed.Raise the tribe's security capability ...

systems, and cloud environments (AWS, Azure, GCP).Enterprise readiness. Ensure the platform is configured, secured, and monitored to meet enterprise security and compliance requirements (SOC 2, ISO 27001, data residency, etc.).Bridge field back to product. Push field learnings into the core platform so the next deployment ...

skills, able to explain security tradeoffs to technical and non-technical audiences, including senior leadershipFamiliarity with security certifications, frameworks, and standards (FedRAMP, ISO 27001, SOC 2, PCI-DSS)Share our values, and work in accordance with those valuesPlease note that we welcome interest from candidates with varying levels ...

haves:Experience with ElasticSearch/ELK stack in production.Familiarity with AWS, GCP, Snowflake, Datadog, Okta.Knowledge of security standards and frameworks (ISO 27001, OWASP, SOC 2, PCI-DSS).Experience in a regulated fintech or payments environment.Reverse engineering and analysis of minified/obfuscated code.Not ticking every ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … . Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...