1 to 25 of 28 SOC 2 Jobs in the UK

hackajob is partnering directly with Dexory to hire for this role. Information Security Lead/ISO27001/SOC/GRC/Location: Wallingford - Oxfordshire (Hybrid) onsite circa 3 days minimum per week Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently … recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type 2), act as the primary responder to customer security due diligence, and build the systems and knowledge base that allow Dexory to scale ...

Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive reporting. The engineer acts as the primary SME for vulnerability risk decisions and drives continuous improvement … escalation for L1 analysts; mentor team members and review scan configurations and reports. • Lead or support internal VM audits and contribute to ISO 27001, SOC 2, or regulatory compliance evidence. TECHNICAL SKILLS & KNOWLEDGE • Deep expertise in enterprise VM platforms: Qualys VMDR (including TruRisk), Tenable Security Centre/Tenable.io ...

Data Center, Network, and Application Infrastructure domains. The role is responsible for scanner architecture and tuning, risk-based prioritisation, integration with patch management and SOC functions, automation of VM workflows, and executive reporting. The engineer acts as the primary SME for vulnerability risk decisions and drives continuous improvement … escalation for L1 analysts; mentor team members and review scan configurations and reports. Lead or support internal VM audits and contribute to ISO 27001, SOC 2, or regulatory compliance evidence. TECHNICAL SKILLS & KNOWLEDGE Deep expertise in enterprise VM platforms: Qualys VMDR (including TruRisk), Tenable Security Centre/Tenable.io ...

emerging areas such as AI governance and sustainability. Key Responsibilities Governance, Assurance & Compliance Own major certification and assurance programmes including ISO 27001, ISO 9001, SOC 2 and other recognised frameworks. Lead audit planning and execution across multiple standards. Manage cyber insurance, regulatory compliance and third-party assurance activities. … including: Security Strong understanding of cloud and SaaS security models. Experience managing security incidents and post-incident governance. Practical implementation of ISO 27001 and SOC 2 within engineering environments. Deep understanding of UK GDPR, EU GDPR and wider privacy regulations. Knowledge of AI governance, ethics and regulatory considerations. ...

Information Security & Compliance Lead (GRC) Job Title: Information Security & Compliance Lead Location: Oxfordshire - Hybrid 2 days per week on site Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a fast-growing, globally active software and data solutions enterprise looking to appoint an experienced Lead … . In this position, you will drive the operational security initiatives necessary to achieve and maintain formal security frameworks and attestation standards (including SOC 2 Type I/II lifecycles). You will translate complex trust criteria into practical, sustainable controls, bridge operational gaps, coordinate external audits, and ...

across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused … clients to improve security programmes and regulatory compliance The Person: Good years of experience within cybersecurity, technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and/or GCP environments Degree qualified in Cyber Security ...

across modern cloud environments. The ideal candidate will have experience across governance, risk and compliance activities, strong knowledge of frameworks such as ISO 27001, SOC 2, GDPR and DORA, and a solid understanding of cloud platforms including AWS, Azure and GCP. Strong communication skills and a customer-focused … clients to improve security programmes and regulatory compliance The Person: Good years of experience within cybersecurity, technology or GRC Strong understanding of ISO 27001, SOC 2, GDPR, DORA and related frameworks Experience with AWS, Azure and/or GCP environments Degree qualified in Cyber Security ...

Compliance Officer (ISO 27001, SOC2, GDPR) Fully Remote (Visit to the Milton Keynes Office once a month) £45,000 - £50,000 + Bonus & Benefits Are you a hands-on compliance professional who thrives on variety and ownership? Do you have experience delivering ISO, SOC & GDPR audit & compliance projects? Join … and governance is critical. You'll manage and maintain ISO 27001, ISO 9001 and ISO 22301 certifications, lead GDPR and data protection compliance, oversee SOC 2 - Type II controls, coordinate business continuity and disaster recovery activities, and support customer audits and due diligence requests. You'll also play ...

Auditor & Controls Analyst Key Experience: IT Audit, Technology Risk, ITGC, IT Application Controls, ISA 315, SOC 1, SOC 2. Required Skills/Experience: - Deliver testing over ITGCs, IT application controls, interface controls, automated controls and IPE with limited supervision. - Support ISA 315-aligned IT understanding and risk assessment … and risks arising from IT. * Prepare clear, review-ready workpapers, testing templates, issue summaries and RACMs. * Support financial statement audit-related technology controls assurance, SOC 1, SOC 2 and regulatory assurance engagements as required. Required Skills/Experience: - Experience in IT audit, technology risk, controls assurance ...

helping the business get real value out of what it already owns. Running alongside this is a wider compliance programme, including a move toward SOC 2, which the identity workstreams feed directly into. You would be working closely with a newly appointed senior security leader and, because … comparable IGA and PAM tooling, with enough technical grounding to hold credibility with engineering teams Exposure to compliance and audit-driven change, with SOC 2 or ISO 27001 experience a distinct advantage Available at short notice and able to commit to two days a week on site ...

Cloud platforms (AWS, Azure, GCP) A background in financial services or similar regulated industries Familiarity with compliance frameworks, and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, and SEC compliance requirements) A track record in consulting, solutions architecture, or technical coaching. Interest ...

and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders … GDPR and relevant information security standards or best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. ...

Network Security Engineer Job Title: IT Security Engineer Location: Oxfordshire - Hybrid (2 days per week on-site) Industry: Enterprise SaaS/Technology Solutions About the Role We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer … . Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

newly created senior leadership position, reporting directly to the CTO. With Cyber Essentials Plus already achieved and a 24/7 outsourced SOC in place, the organisation is now focused on achieving ISO 27001 certification, strengthening its governance and compliance framework, and ensuring the secure adoption of a rapidly … continuity, AI security and governance, and information security - acting as the authoritative voice on cyber and security matters across the organisation. Location: London, hybrid (2-3 days onsite) Package: £ + excellent benefits Key Responsibilities: Own security monitoring, incident response and security tooling, working closely with the outsourced SOC ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

trust center platforms (e.g., Loopio, Responsive, SafeBase) and GRC tools (e.g., Drata, Vanta). Ability to read and interpret security documentation, penetration test reports, SOC 2 audit reports, and architecture diagrams. Comfort with process automation concepts—scripting, workflow builders, or no-code/low-code tools to reduce ...

platforms Design and implement data protection controls including classification, DLP, encryption, retention, and access policies Interpret and implement compliance requirements including GDPR, ISO 27001, SOC 2, and client security obligations Lead SaaS/vendor security assurance, including risk assessments, architecture reviews, and due diligence Support incident response, resilience ...

Cyber Essentials Plus (CE+). Familiarity with Secure by Design (SbD) principles and JSP 453 assurance activities. Understanding of vendor risk management, SOC2, or NIS2 directives. Previous experience performing duties as a Crypto Custodian or Alternate Custodian. Relevant industry certifications such as CISA, CRISC, CISM, or CISSP. ...

Risk or Information Security, you will be comfortable working with a range of stakeholders and possess: Experience working with frameworks such as ISO 27001, SOC 2, Cyber Essentials, NIST or CIS Controls Experience supporting organisations through audits or compliance assessments Strong communication and stakeholder management skills The ability ...

team, within tight timescales, to budget and a high level of quality. - Experience preparing, supporting, or auditing certification audits (e.g., ISO 27001, SOC 2, Cyber Essentials). Cyber Security Auditor In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon ...

problem analysis and appropriate escalation. - Supporting the operation of corporate security controls and maintaining evidence for ISO 27001. - Helping the organisation prepare for future SOC 2 requirements. - Maintaining accurate SaaS, licensing, asset and access records. - Identifying duplicated, unused, unmanaged or potentially high-risk technology across the business. - Using ...

design. Advising Product and Engineering on data ownership, data usage, intellectual property and the development of new AI products. Partnering with Security on SOC 2, customer security requirements, DPIAs and information security matters. About You Admitted to the US Bar – this is an absolute must. 7 - 12 years ...

Level Security (RLS) Multi-tenant SaaS platforms Tailwind CSS, Storybook, Docker and GitLab CI/CD AI, fintech or regulated environment experience Knowledge of SOC 2, ISO 27001 or secure SDLC practices Tech Stack Next.js, React 19, TypeScript, Tailwind CSS, Supabase, PostgreSQL, Docker, Vitest, Storybook, GitLab CI/… slightly more or less experience are encouraged to apply. This role is hybrid so you will need to be in the office at least 2 days a week in Nottingham. In return for your skills my client is paying up to £70,000 for the right candidate. Please apply ...

and evidence requirements. - Experience translating policy or control requirements into practical backlog items, acceptance criteria and evidence artefacts. - Working knowledge of NIST-style controls, SOC 2, ISO 27001 and enterprise GRC expectations. - Experience with Trade Secret, confidential or sensitive technical data handling. - Strong documentation skills for standards, decision ...

tooling support to the Security Remediation Lead and Delivery Lead for reporting, dashboards and control closure tracking. - Ensure workflow changes support NIST-style controls, SOC 2, ISO 27001 and enterprise GRC evidence expectations. - Create sustainable operating guidance for BAU teams after the remediation programme. What Youll Do - Review ...