1 to 25 of 43 Contract ISO/IEC 27001 Jobs in the UK

Line Azure Cloud Engineer Location: London (hybrid: typically 2 days on-site; opportunities to work from Croydon / London area and possible moves towards Corsham / Farnborough based on project needs) Duration: 3 month initial + extensions Clearance : SC preffered / eligable candidates UMBRELLA ONLY … with dependable 3rd line support. What you'll be doing: * Build and manage cloud infrastructure in Microsoft Azure (IaaS-first, with exposure to SaaS / PaaS as needed) * Provide 3rd line infrastructure support for cloud and on-premises services and business applications * Support ongoing business projects-configuring and rolling ...

Architect - OutsideIR35 Contract: 6 Months IR35: OUTSIDE IR35 Location: REMOTE - UK On-site: 1 day per month (North Yorkshire) Industry: Pharmaceutical / Life Sciences Engagement: Contract Rate: 450pd+ Outside The Opportunity We are working with a pharmaceutical manufacturing organisation undergoing a significant transformation across its IT, OT, automation … leadership across pharmaceutical manufacturing, including OT, automation, MES, SCADA, DCS, PLCs, historians, BMS, EMS, laboratory systems and enterprise platforms . Define and govern IT / OT convergence and integration architectures across manufacturing and corporate environments. Develop target-state architectures and practical transition roadmaps that consider production requirements, regulatory obligations ...

with: Business Continuity Management (BCM) Disaster Recovery Planning Operational Resilience Risk Management Frameworks Internal Audit Activities Control Assessments Process Improvement Programmes Familiarity with: ISO 27001 ISO 22301 NIST Cybersecurity Framework Cyber Assessment Framework (CAF) ITIL Governance, Risk and Compliance (GRC) tools Preferred Certifications … following certifications would be advantageous but are not essential: ISO 27001 Lead Auditor or Lead Implementer CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) ISO 22301 Business Continuity Certifications CIA (Certified Internal Auditor ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

Product Security Engineer - Defence & Government Location: Luton - 90% onsite Rate: £80-£90 per hour Security Clearance: Active SC Clearance required Nationality: UK Eyes Only / Sole British National required Contract: 12 Months + The Role We are seeking an experienced Product Security Engineer to support the development and maintenance … Essential Skills & Experience Demonstrable experience developing product-based security solutions for military, defence, government or commercial products and systems. Strong experience in Product Security / Information Security / Cyber Security Engineering . Experience undertaking security risk assessments and developing risk mitigation strategies. Experience defining and managing product security ...

risk assessments and vulnerability reviews. Identify, assess, and mitigate risks across industrial and operational environments. Ensure compliance with industry standards and frameworks including: IEC 62443 NIST Cybersecurity Framework (CSF) NIS2 ISO 27001 Support compliance with sector-specific regulatory requirements. Security Architecture & Implementation Design … network segmentation, and industrial protocols. Experience managing OT security incidents, vulnerabilities, and risk assessments. Knowledge of OT-focused cybersecurity frameworks and standards, including: IEC 62443 NIST CSF NIS2 ISO 27001 Ability to engage with both technical and non-technical stakeholders at all levels. Strong ...

identify, assess, monitor and ensure risks are appropriately managed Oversee compliance and assurance against GovS007, JSP 440, GDPR and contractual security obligations, including ISO 27001-aligned controls and processes Act as the principal point of contact for security with Government Departments, Contracting Authorities, customers and industry … Clearance Deep knowledge of GovS007 and relevant aspects of JSP 440, alongside experience leading governance, risk and compliance programmes Strong understanding of information assurance / risk management and ISO 27001 principles, with practical GDPR awareness Confidence advising on contractual and legislative security requirements, supporting bids ...

remediation processes. Use testing outcomes, lessons learned and emerging threats to improve security controls and testing methodologies. Essential Experience Significant experience in penetration testing / offensive security, with the ability to lead complex testing engagements. Strong hands-on understanding of penetration testing across applications, infrastructure and technology environments. Proven … understanding of security risk assessment, vulnerability prioritisation and risk acceptance. Knowledge of recognised penetration testing methodologies and security frameworks. Desirable Experience Relevant penetration testing / offensive security certifications such as CREST, OSCP, OSWE, GPEN or equivalent. Experience operating within large, complex or highly regulated organisations. Experience across cloud environments ...

lead security risk and assurance activities, derive product security requirements and ensure appropriate security controls are incorporated into product design. This is a Product / Systems Security Engineering role rather than a corporate IT or enterprise cyber security position. Key Responsibilities Undertake security risk assessments and develop risk mitigation … assessment, risk mitigation and technical assurance experience. Experience deriving and managing technical security requirements for products or systems. Experience producing Security Cases, RMADS and / or comparable security assurance documentation. Knowledge of UK MOD and Government security standards and frameworks, including GovS 007, HMG IS1 & IS2 and relevant JSPs ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

Design, deploy and run appropriate cloud networking solutions. Where required provide out of hours or on call support. DevOps & Automation Build and maintain CI / CD pipelines using Azure DevOps or similar tools. Develop Infrastructure as Code (IaC) using appropriate tooling, currently Terraform. Promote the use of Terraform through … Engineers, QA Engineers, Infrastructure Design Manager, Infrastructure Designer, IT Cost Optimisation Managers, Tech Resilience Manager, Transformation team, Cyber Security team, Squads, 3rd parties - Fujitsu / Microsoft Knowledge, skills & experience: Include qualifications (essential / desirable), technical expertise and specific business knowledge required to perform the role Skills Professional Certifications ...

Role Title: Security Operations Lead Clearance: SC Cleared Location : Inverness or Preston | 5 days onsite Initial Contract to 31 / 03 / 2027 Pay : £500 - £600 Status: Inside IR35 Role Description: The Senior Security Incident Management Consultant operates within the Operational Integrator (OI) function and provides governance, leadership … skills Experience presenting incident risk information to senior stakeholders Desirable Knowledge of: NIST Cyber Security Framework (CSF) NCSC guidance ITIL Major Incident Management ISO 27001 Experience supporting security assurance and audit activities Experience in Defence, Government, or highly regulated sectors Key Deliverables Security Incident Management Framework ...

Analyst Location: Manchester, Hybrid | 80% remote, 20% onsite Duration: 31 / 10 / 2031 Rate - £480 - £520 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years … control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility ...

Role Title: Assurance Lead Location: Manchester | Hybrid 80% remote 20% onsite Duration: 31 / 10 / 2031 Rate - 500 - £560 CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL The candidate hasn't been outside the UK for more than 28 consecutives days during … control weaknesses, non-compliance, and improvement actions Maintain visibility of compliance obligations and control requirements Support compliance against frameworks and standards such as: ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles Coordinate remediation of identified compliance gaps Produce consolidated security governance reporting Provide visibility ...

Product Security Engineer Luton 6-month contract Paying up to Circa 93p / h (Inside IR35) Please note - Due to the nature of the work, you'll be required to hold a high level of UK Security Clearance Overview : As the Product Security Engineer / Lead security Engineer … / EU / NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30 / 37 / 53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience ...

Role: Security Architect - Contract Location: UK Wide / Hybrid Rate: Competitive Day Rate Contract Length: Initial 6 Months (Extensions Likely) Why Join This Security Architect Contract? We're partnering with one of the world's largest global security services providers, supporting enterprise clients across a wide range of industries. … Cyber Security Consulting Strong understanding of security governance, risk and compliance frameworks Experience designing and reviewing secure cloud architectures Knowledge of AWS, Azure and / or GCP security services Experience conducting threat modelling and risk assessments Strong stakeholder engagement and communication skills Experience working with enterprise security technologies ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory / LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO … Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models. Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and / or Aerospace is highly desirable). Familiarity with DevSecOps and secrets management is advantageous. Desirable Certifications CyberArk Certified Delivery Engineer (CDE) / Defender ...

Security Architect Location: UK (Hybrid / Remote as required) Security Clearance: Active SC Clearance Required Contract Length: 6-18 Months Rate: £545-£590 per day (Inside IR35) About the Role We are seeking an experienced Security Architect to join a specialist consultancy supporting the delivery of critical government projects … Security Technologies Microsoft Defender Suite Splunk Microsoft Sentinel CrowdStrike Prisma Cloud Wiz Lacework Tenable Qualys Infrastructure & DevOps Kubernetes Docker Terraform GitHub GitLab Jenkins CI / CD Security Tooling Scripting & Automation Python PowerShell Bash Preferred Certifications CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) SABSA TOGAF Microsoft ...

seeking a Lead Cyber Security Advisor for an initial 6 assignments with the option to extend. Location: East Kilbride (Glasgow) or London / Hybrid The ideal candidate will have an active security clearance and a strong background in Cyber Security and risk management within a high-threat government environment. … Skills and Experience: Proven expertise in risk management, particularly in information security, utilizing recognized methodologies such as NIST 800-30 / 37 and ISO 31000. Experienced in managing both internal and external cybersecurity risks related to IT systems, services, and data storage, especially within digital cloud services. ...

Senior DevSecOps Engineer Reading (Hybrid working available) Active SC Clearance required Up to £71 p / h Inside IR35 We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. … Senior DevSecOps Engineer, you will: Lead the design and implementation of secure DevSecOps platforms and toolchains Embed automated security controls into CI / CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated ...

Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis ...

defence, or highly regulated environments. Knowledge of Zero Trust security principles. Experience with cloud-native security tooling and security automation. Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks. Experience supporting DevSecOps and secure software delivery practices. Relevant cloud and security certifications such ...

Design Review Board activities. Review third-party solutions and provide security guidance during procurement and onboarding. Ensure solutions align with security policies, ISO 27001, NIST and client security requirements. Develop security architecture patterns, standards and design guidance. Provide security consultancy to business and IT stakeholders throughout ...