1 to 25 of 39 Contract ISO/IEC 27001 Jobs in England

accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO / IEC 27001:2022 and ISO 22301:2019. The Role You will be responsible for developing the audit strategy … annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles. Key Requirements ISO / IEC 27001:2022 Lead Auditor certification ISO 22301:2019 Lead Auditor certification Demonstrable experience conducting internal audits against ...

comprehensive documentation (Manual, processes, procedures and controls) in accordance with contractual requirements, ISO 9001 and other applicable standards (ITIL, ISO / IEC 20000, ISO 27001, ISO 31000, etc). Develop and implement a Project Quality Plan … detail. Ability to work under pressure and manage competing priorities. Benefits: 25 days' holiday per annum + 8 days' bank holidays (options to buy / sell days) Pension - 4% employee and 4% employer Private medical insurance (including dental & optical) Life assurance Income protection Employee assistance programmes Flexible / ...

structured data, data lineage, APIs, security telemetry and integrations sufficiently to challenge data completeness and fitness for purpose. Experience defining acceptance criteria, supporting testing / UAT and documenting requirements, issues and decisions Cyber Security Risk, Security Assurance, Controls Testing, GRC, Vulnerability Management Assess control design, Endpoint security, Cloud, Identity … Secure Development, Third-Party risk, Incident Management Desirable: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor / Implementer or equivalent experience. Knowledge of NIST CSF, ISO / IEC 27001, COBIT, CIS Controls or enterprise risk frameworks. Experience with ...

Experience in cyber security risk management and risk assessments. Strong understanding of cyber security controls, risk frameworks and governance. Working knowledge of ISO 27001, ISO 27005, NIST, CIS Controls and CAF . Experience developing or maintaining cyber security policies and standards. Strong stakeholder management … applicants must have the full and permanent right to work in the UK. 'Apply Now' for immediate review! Cyber Security Risk & Policy Manager, ISO 27001, ISO 27005, NIST, CIS Controls ,Cyber Security Risk & Policy Manager. Cyber Security Risk & Policy Manager, SCADA, Risk, Cyber Security ...

Supplier Assurance Lead / Cyber Security Risk Manager / Third Party Cyber Risk Lead £500 per day - Outside IR35 - North West Based - Hybrid My client is looking for an experienced Supplier Assurance Lead to join their Cyber Security team, taking a lead role in identifying, assessing and managing … management tooling. Knowledge of supply chain risk management and vendor security assurance. Experience developing or enhancing supplier assurance processes and frameworks. Understanding of ISO 27001, NIST, Cyber Essentials and similar security standards. Experience supporting procurement and commercial teams with security-related contractual requirements. Relevant certifications such ...

Canada. We have an excellent job opportunity for you. Role Title: GRC Controls -Active SC Clearance Location: Gallows Hill, Warwick CV34 6DA - Hybrid 50 / 50 Duration: 21 / 03 / 2027 Rate: 447GBP / Day(Inside IR35) Description: We are seeking an experienced GRC Controls … Experience working within Governance, Risk & Compliance (GRC), assurance, audit, controls, or oversight functions. Strong understanding of security and technology control environments across IT and / or OT domains. Experience conducting or supporting control testing, assurance reviews, compliance assessments, or audit activities. Ability to analyse complex processes and identify control ...

Architect - OutsideIR35 Contract: 6 Months IR35: OUTSIDE IR35 Location: REMOTE - UK On-site: 1 day per month (North Yorkshire) Industry: Pharmaceutical / Life Sciences Engagement: Contract Rate: 450pd+ Outside The Opportunity We are working with a pharmaceutical manufacturing organisation undergoing a significant transformation across its IT, OT, automation … leadership across pharmaceutical manufacturing, including OT, automation, MES, SCADA, DCS, PLCs, historians, BMS, EMS, laboratory systems and enterprise platforms . Define and govern IT / OT convergence and integration architectures across manufacturing and corporate environments. Develop target-state architectures and practical transition roadmaps that consider production requirements, regulatory obligations ...

Controls & Oversight Lead Location:Warwick Hybrid 50 / 50 Duration: 21 / 03 / 2027 MUST BE PAYE THROUGH UMBRELLA Description: We are seeking an experienced GRC Controls & Oversight Lead to support the governance, assurance, and control environment across IT and Operational Technology (OT) domains. This role … Experience working within Governance, Risk & Compliance (GRC), assurance, audit, controls, or oversight functions. Strong understanding of security and technology control environments across IT and / or OT domains. Experience conducting or supporting control testing, assurance reviews, compliance assessments, or audit activities. Ability to analyse complex processes and identify control ...

Role Title: GRC Controls & Oversight Lead Location: Warwick - Hybrid 50 / 50 Duration: 21 / 03 / 2027 Rate: £(Apply online only) per day - Umbrella only Candidates must hold active SC clearance Description: We are seeking an experienced GRC Controls & Oversight Lead to support the governance, assurance … Experience working within Governance, Risk & Compliance (GRC), assurance, audit, controls, or oversight functions. Strong understanding of security and technology control environments across IT and / or OT domains. Experience conducting or supporting control testing, assurance reviews, compliance assessments, or audit activities. Ability to analyse complex processes and identify control ...

with: Business Continuity Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications … following certifications would be advantageous but are not essential: ISO 27001 Lead Auditor or Lead Implementer CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) ISO 22301 Business Continuity Certifications CIA (Certified Internal Auditor ...

Role: Security Assurance Advisor Location: London / Epsom / Birmingham / Manchester - Any location (Hybrid) Duration: 12 Months Day rate: £600 - £700 Inside IR35 We are seeking an experienced Security Assurance Consultant with a strong Governance, Risk & Compliance (GRC) background to support the security assurance and accreditation … teams, project teams, HR vetting, procurement functions and MOD representatives. Support security operating procedure updates and annual reviews. Assist with external audits, including ISO 27001 and client-led assessments. Oversee the security approval and ongoing assurance of third parties connecting to or handling information from secure ...

computerised systems. Good understanding of IT service management processes; ITIL Foundation or equivalent experience is expected. Enough technical literacy to discuss infrastructure, cloud (IaaS / PaaS / SaaS), identity and access management, and backup architectures with engineers, and to document them accurately. Experience with IT change control, CAPA … MHRA, FDA or EMA inspections involving computerised systems. ITIL 4 certification, ISO 27001 awareness, or a technical writing qualification (ISTC / STC). Process mapping skills in Visio, Lucidchart or BPMN. Personal attributes You are comfortable in two worlds: talking backups and access provisioning with ...

management, information security, environmental management or related compliance functions. Experience gained within a professional services environment would be advantageous but is not essential. Skills / Experience Required Experience in supplier management, procurement, contract management and / or third-party risk management desirable Experience supporting quality, information security … environmental management systems and associated standards, such as ISO 9001, ISO 27001 and / or ISO 14001, advantageous Experience coordinating internal or external audits desirable Professional services experience advantageous, although not essential Strong organisational skills with the ability to manage multiple ...

risk assessments and vulnerability reviews. Identify, assess, and mitigate risks across industrial and operational environments. Ensure compliance with industry standards and frameworks including: IEC 62443 NIST Cybersecurity Framework (CSF) NIS2 ISO 27001 Support compliance with sector-specific regulatory requirements. Security Architecture & Implementation Design … network segmentation, and industrial protocols. Experience managing OT security incidents, vulnerabilities, and risk assessments. Knowledge of OT-focused cybersecurity frameworks and standards, including: IEC 62443 NIST CSF NIS2 ISO 27001 Ability to engage with both technical and non-technical stakeholders at all levels. Strong ...

risk management. Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE / £85.40 Umbrella The Role You'll act as the focal point for product security within a complex engineering environment, working closely with engineering teams … line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security / risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications Reviewing ...

environments Industrial Ethernet Network segmentation Firewalls Remote access solutions Zero Trust principles Knowledge of industrial protocols such as: Modbus DNP3 OPC-UA Profinet EtherNet / IP Experience with OT cyber security frameworks and standards including: IEC 62443 NIST NIS2 ISO 27001 Experience working … Azure or AWS). Industrial IoT (IIoT) technologies. Experience with OT monitoring and threat detection platforms. Relevant certifications such as: GICSP CISSP TOGAF ISA / IEC 62443 certifications Azure Security certifications IR35 Status: Inside IR35 If you are an experienced OT Architect with a strong background ...

lead security risk and assurance activities, derive product security requirements and ensure appropriate security controls are incorporated into product design. This is a Product / Systems Security Engineering role rather than a corporate IT or enterprise cyber security position. Key Responsibilities Undertake security risk assessments and develop risk mitigation … assessment, risk mitigation and technical assurance experience. Experience deriving and managing technical security requirements for products or systems. Experience producing Security Cases, RMADS and / or comparable security assurance documentation. Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs ...

Role Title: Application Developer Location: Sheffield, Work setup: 60% Office 40% Remote Duration: 30 / 04 / 2027 Rate - £420 - £473 CONTRACTOR MUST BE ELIGIBLE FOR BPSS MUST BE PAYE THROUGH UMBRELLA We are looking for a highly skilled Application Developer with strong expertise in identity API development … data ingestion and transformation, and event-driven (Pub / Sub) architectures. This role focuses on building secure, scalable identity and access workflows across Google Cloud Platform, integrating identity services with custom APIs, Pub / Sub pipelines, and cloud-native applications. You will collaborate closely with tech leads, Cloud ...

Security Architect Location: UK (Hybrid / Remote as required) Security Clearance: Active SC Clearance Required Contract Length: 6-18 Months Rate: £545-£590 per day (Inside IR35) About the Role We are seeking an experienced Security Architect to join a specialist consultancy supporting the delivery of critical government projects … Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes Docker Terraform GitHub GitLab Jenkins CI / CD Security Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft ...

exciting opportunity to play a key role in large-scale transformation programmes spanning cloud, infrastructure, applications and network environments, including next-generation 4G / 5G technologies . As a Cyber Security Architect, you will be responsible for ensuring security is embedded into the design and delivery of business-critical … Security Architect, Security Architect, Lead Security Architect or similar. Strong knowledge of enterprise security architecture and secure-by-design principles. Experience securing AWS and / or Azure environments. Hands-on experience conducting threat modelling and security risk assessments. Strong understanding of IAM, PAM and modern authentication solutions. Experience with ...

Senior Vulnerability Management specialist / Cyber Security Analyst or Cyber Security Engineer £600-£650 per day Inside IR35 6 Months initally Remote (1-2 times onsite a month in central Southampton) My client is looking for an experienced Senior Vulnerability Analyst to join their Cyber Security team, taking … Qualys, Rapid7 or similar. Strong understanding of CVSS, CVE, CWE and common vulnerability types. Experience analysing vulnerabilities across Windows, Linux, network infrastructure, cloud and / or applications. Good understanding of patching, configuration management and security controls. Proven experience working with technical teams to drive vulnerability remediation. Strong analytical ...

Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where you'll have genuine influence. You'll be trusted to assess challenges, recommend solutions, lead ...

Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where you'll have genuine influence. You'll be trusted to assess challenges, recommend solutions, lead ...

processes, and technology roadmaps. Required Experience Strong experience within Information Security, Cyber Security, Risk Management, or Security Architecture. Hands-on knowledge of AWS and / or Google Cloud Platform (GCP) security architectures. Experience securing cloud services including networking, compute, storage, IAM, and infrastructure services. Strong understanding of cloud security … frameworks and best practices. Knowledge of security and compliance frameworks such as NIST, ISO 27001, and CSA STAR . Experience conducting security risk assessments and managing remediation activities. Strong stakeholder management and communication skills. Ability to explain complex security concepts to both technical and non-technical ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout ...