1 to 25 of 47 Contract ISO/IEC 27001 Jobs in England

Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging / monitoring for cloud workloads. Contribute to security design reviews for new services and changes to ensure secure-by-default patterns. On - Prem Security (VMware … Support hardening and secure operation of VMware vSphere (vCenter / ESXi) and associated management networks. Assistwith vulnerability remediation, patchingcoordinationand secure configuration for Windows / Linux servers. Improve segmentation and admin access controls for critical systems and management planes. Network Security (Cisco Meraki) Support secure configuration of Cisco Meraki ...

Senior and Principal Security Architects £50-£90 per hour (Dependent on experience and level) - Inside IR35 12 month contracts Hybrid - 2 / 3 days a week on site - Warton (PR4) **Applicants must have the right to work in the UK** **Successful applicants must be eligible for SC / DV clearance** Role Purpose / Overview Highly experienced security architects with strong technical credentials across enterprise, cloud, network and classified environments. Responsible for designing end-to-end secure architectures (HLD / LLD), leading Design Authorities and Technical Design Authorities, and providing architectural assurance across multi-supplier programmes ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

Title: SC Cleared Field Solutions Engineer Location: Hybrid / London / Bristol as and when required Duration: 6 months with possible extension Rate: Up to £650 per day Outside IR35 Must be willing and eligible to go through the SC Clearance process If you enjoy combining hands … bring: Strong networking and IT infrastructure understanding, with a focus on secure communications and encryption Real-world, hands-on experience with Linux plus scripting / programming (bash and Python) Solid grasp of PKI-what it provides, along with benefits and drawbacks Experience translating client requirements into practical technical solutions ...

frameworks, maturity assessments and target operating model development. Produce high-quality, traceable technical documentation, architecture artefacts, decisions and recommendations. Work effectively within sprint-based / agile delivery environments, managing multiple priorities and delivering outputs to agreed timescales. Skills & Experience Essential 10+ years' experience working with Operational Technology within large … industrial, utilities or manufacturing environments. 5+ years' experience designing, operating or securing OT systems , including BMS, HVAC, electrical power systems, fire systems, lifts and / or smart building platforms. Extensive experience designing enterprise OT / ICS architectures across complex programmes. Proven experience leading OT architecture, security and network ...

Digital Identity and Trust Frameworks. Familiarity with standards and frameworks such as: ISO 27001 NIST Cyber Security Framework Cyber Essentials / Cyber Essentials Plus Supplier and Third-Party Assurance frameworks Experience supporting digital identity, authentication or secure digital services programmes. Security-related certifications such … CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent. Key Competencies Security Assurance Governance, Risk & Compliance (GRC) Third-Party Risk Management Security Assessments Risk Analysis Stakeholder Management Information Security Audit & Compliance Trust Framework Compliance Security Governance This is an excellent opportunity for a Security Assurance professional ...

good practice. KEY RESPONSIBILITIES Compliance and Risk Management: · Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. · Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. · Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. · Minimum of 5 years' experience in IT governance, risk management, cyber ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

security gaps, and recommend SailPoint-based solutions to improve governance and compliance. Ensure SailPoint solutions comply with regulatory and security frameworks such as ISO 27001, SOX, GDPR, NIST, and industry-specific governance requirements. Support capacity planning, scalability, high availability, disaster recovery, and performance optimization of SailPoint … transformation initiatives. Desired Skills and Experience level: 10 - 12 years' experience primarily around IAM background and strong Sailpoint experience covering below. SailPoint IdentityIQ and / or SailPoint Identity Security Cloud (ISC) IAM, IGA, JML, RBAC, ABAC REST, SOAP, SCIM APIs Active Directory, Azure AD / Entra ID, LDAP ...

escalation through governance forums Produce consolidated certificate reporting, dashboards and metrics for operational and security governance boards Define evidence requirements and support internal / external audit and assurance activities Essential Skills & Experience: Experience in Digital Certificate Management, PKI Governance, Cyber Security Governance, Information Assurance or GRC Strong understanding … certificate life cycle management, certificate-related operational risk, and governance / assurance practices Experience working within multi-supplier, SIAM or complex outsourced environments Strong stakeholder management and supplier coordination skills Experience producing governance reporting and risk-based management information Desirable: Knowledge of enterprise PKI, Public CAs (DigiCert, Sectigo, Entrust ...

business Support the ongoing management of information security and compliance frameworks Maintain risk registers and support risk management activities across the organisation Coordinate ISO27001 and ISO9001 certification activities, including audit preparation and engagement with external auditors Manage compliance documentation, audit schedules, corrective action logs and improvement plans Provide Risk & Compliance … bring Experience within a Risk, Compliance, Governance, Information Security or GRC role Strong understanding of GDPR and UK data protection requirements Experience supporting ISO27001 certification, audits or information security governance activities Experience managing risk registers and compliance processes Strong stakeholder management skills, with the confidence to work with internal teams ...

looking for: Experience in supplier assurance, risk management, compliance, or audit Understanding of third-party risk and data protection requirements Knowledge of ISO 27001, ISO … NIST, or similar frameworks Strong stakeholder management and communication skills Ability to assess controls and present findings clearly Relevant certifications (CISA, CRISC, CIPP / E) desirable What's in it for you? Work within a collaborative security and compliance function Exposure to complex supplier, regulatory, and client environments Opportunity ...

Role Title: Senior Cryptography & Information Security SME Duration: contract to run until 26 / 02 / 2027 Location: Knutsford, Hybrid 3 days per week onsite Rate: up to £662.40 p / d Umbrella inside IR35 Role purpose / summary We are seeking an experienced Senior Cryptography … Foundation or Practitioner ISO 27001 Lead Implementer or Lead Auditor Cryptography & PKI Certifications Entrust PKI Certification Thales Luna HSM Training / Certification DigiCert PKI Certifications Venafi Professional Certification Microsoft Security Certifications Preferred Technical Tools & Platforms HSM Platforms Thales Luna HSM Entrust nShield HSM AWS CloudHSM ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

Role Title: Vulnerability Management Lead Duration: contract to run until 31 / 03 / 2027 Location: Inverness or Preston. Hybrid Rate: up to £644 p / d Umbrella inside IR35 Clearance required: Sole UK Nationality with Active SC Clearance. Role purpose / summary he Senior Vulnerability … remediated, evidenced, and reported to the client through a risk-based and audit-ready approach, without performing technical remediation activities. What This Role Does / Does Not Do Does Govern, assure, challenge and coordinate Provide enterprise-wide vulnerability risk visibility Drive supplier accountability Support risk-informed decision making Does ...

Analyst Location: Manchester, Hybrid | 80% remote, 20% onsite Duration: 31 / 10 / 2031 Rate - £480 - £520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years … control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility ...

Role Title: Assurance Lead Location: Manchester | Hybrid 80% remote 20% onsite Duration: 31 / 10 / 2031 Rate - 500 - £560 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutives days during … control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility ...

Role: Security Architect - Contract Location: UK Wide / Hybrid Rate: Competitive Day Rate Contract Length: Initial 6 Months (Extensions Likely) Why Join This Security Architect Contract? We're partnering with one of the world's largest global security services providers, supporting enterprise clients across a wide range of industries. … Cyber Security Consulting Strong understanding of security governance, risk and compliance frameworks Experience designing and reviewing secure cloud architectures Knowledge of AWS, Azure and / or GCP security services Experience conducting threat modelling and risk assessments Strong stakeholder engagement and communication skills Experience working with enterprise security technologies ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

Senior DevSecOps Engineer Reading (Hybrid working available) Active SC Clearance required Up to £71 p / h Inside IR35 We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. … Senior DevSecOps Engineer, you will: Lead the design and implementation of secure DevSecOps platforms and toolchains Embed automated security controls into CI / CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated ...

Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis ...

embed security requirements into projects and BAU activities. Essential Experience The successful candidate should have: Strong hands-on experience administering Microsoft Entra ID / Azure Active Directory. Good knowledge of Identity & Access Management (IAM) principles and controls. Experience implementing or supporting Conditional Access and access governance. Knowledge of RBAC … Microsoft Sentinel Microsoft Power Platform governance Data Loss Prevention (DLP) PowerShell administration or automation Cyber security frameworks including Cyber Essentials Plus, NIST or ISO 27001 Microsoft certifications such ...

defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such ...