1 to 25 of 39 Contract ISO/IEC 27001 Jobs in the UK

network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO / SAE 21434 , from item definition through to attack feasibility rating and risk treatment. Defining and embedding security requirements across the secure development lifecycle, covering … firmware, embedded systems, cloud services, APIs, CI / CD and software supply-chain security. Improving vulnerability intake, triage, remediation and reporting, plus SBOM / dependency visibility and product security incident readiness. Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation. What we need ...

third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges), and advise on onboarding security priorities. Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans. … Standards & Compliance (ISO 27001 & SOC 2) Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO / IEC 27001 and SOC 2 Type II. Develop and maintain information security policies, standards, and procedures aligned to these standards ...

Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging / monitoring for cloud workloads. Contribute to security design reviews for new services and changes to ensure secure-by-default patterns. On - Prem Security (VMware … Support hardening and secure operation of VMware vSphere (vCenter / ESXi) and associated management networks. Assistwith vulnerability remediation, patchingcoordinationand secure configuration for Windows / Linux servers. Improve segmentation and admin access controls for critical systems and management planes. Network Security (Cisco Meraki) Support secure configuration of Cisco Meraki ...

secure-by-design and automation-first culture. Embed cryptography governance and controls in designs, adhering to Cryptography Standards and aligning with NIST, FIPS, ISO27001 / 2, SOC2, DORA, HIPPA, PCI DSS, and relevant financial services and privacy regulations. Experience Advanced knowledge of applied cryptography, encryption technologies (including PGP / … exchange mechanisms. Broad knowledge of regulatory and controls / frameworks in industry (NIST, FIPS, ISO, IETF, PCI, SOC, CSF, ISO27001, DORA, GDPR, SABSA / TOGAF) Ability to translate cryptographic policy and standards into practical, secure-by-design architecture patterns and engineering-ready solution designs. Experience engaging ...

Senior and Principal Security Architects £50-£90 per hour (Dependent on experience and level) - Inside IR35 12 month contracts Hybrid - 2 / 3 days a week on site - Warton (PR4) **Applicants must have the right to work in the UK** **Successful applicants must be eligible for SC / DV clearance** Role Purpose / Overview Highly experienced security architects with strong technical credentials across enterprise, cloud, network and classified environments. Responsible for designing end-to-end secure architectures (HLD / LLD), leading Design Authorities and Technical Design Authorities, and providing architectural assurance across multi-supplier programmes ...

Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Rate: £80.00 per hour Location: Stevenage Hybrid / Remote working: 3-4 days a week on site min, 1-2 remote. Contract: 37 Hours per week Overtime: Hours worked over 37 hours … Cyber Security Capability Manager Responsible for the responses and support to external requests and auditing of DEx within a cyber security context, such as ISO27001 audits, DCC and CE+ requests, GDPR requests, contractual questionnaires from customer or suppliers Coordinate vetting and access requests within the SOC in collaboration with ...

Coordinator 12 month contract Based in Stevenage Offering 80ph Inside IR35 Do you have experience in ISO27001 / CE+ Lead / Auditor? Do you have knowledge of SOC functions and operating models? Do you want to work with an industry-leading company? If your answer to these … with the Cyber Security Capability Manager Responsible for the responses and support to external requests and auditing within a cyber security context, such as ISO27001 audits, DCC and CE+ requests, GDPR requests, contractual questionnaires from customer or suppliers Coordinate vetting and access requests within the SOC in collaboration with ...

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

Analyst (Contract) Day Rate: Up to £300 per day (Outside IR35) Contract: 6-month rolling contract Location: Liverpool (Hybrid) Keywords: Information Security, Cyber Security, ISO27001, NIST, Risk, Governance, Vulnerability Management, Incident Response, Outside IR35 A leading organisation within the transport and logistics sector is looking for an Information Security Analyst … Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such as endpoint protection, firewalls, authentication and logging tools. Excellent communication ...

Assessment and Supplier Segmentation Data Management and Centralised Compliance Records Monthly MI and reporting Training and education across both the business and suppliers Qualifications / Experience Demonstrable experience in a similar role and an understanding of ISO 27001 Strong Communication Skills Excellent Organisational skills Time … with GDPR regulations, we are making you aware that to proceed with your application we will need to contact you via email, telephone and / or text message. To receive future job alerts from us, you will be required to provide consent within our marketing preference options. The link ...

Title: SOC Analyst Location: On-site, London moving to hybrid 3 days on-site after 2-week induction Start Date: Immediate Contract length: 31 / 03 / 26 further extensions expected Clearance Required: BPSS (must be obtained prior to onboarding) Day rate: £400 - £500 Candidates must hold … work effectively within a collaborative SOC team Desirable Skills Experience with incident documentation and reporting Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001) Ability to adapt quickly to new tools, threats, and operational priorities Any relevant certifications (e.g., Security+, CySA+, Microsoft SC-series, GIAC ...

Develop and maintain information security policies, standards, and procedures aligned to business objectives. Run security risk assessments, maintain risk registers, and drive risk treatment / remediation plans. Compliance, Audit & Assurance Support compliance programs (e.g., ISO 27001, SOC 2, GDPR and other applicable regulations). Coordinate … internal / external audits, track findings, and ensure timely remediation and evidence management. M&A Cyber Due Diligence (Pre- and Post-Deal) Lead or support cybersecurity due diligence for mergers, acquisitions, and divestitures / carve-outs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges ...

Contract Cyber Security Consultant Reading HQ 3-4 days a week onsite Security clearance is essential Up to £104 p / h Inside IR35 We are seeking an experienced security cleared Cyber Security Consultant professional to play a key role in a large scale, complex technology programme operating within … large-scale transformation or complex technology programmes Relevant security certifications such as CISSP, CISM, CCSP, SABSA, ISO 27001 Lead Auditor / Implementer, or equivalent Occasional travel to company sites, suppliers or stakeholder locations may be required. ...

experienced Cloud Security Engineer, your working day will include but not be limited to: DevSecOps & SDLC Champion integration of security testing into CI / CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection Enable self-serve security tooling for development … coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing Secure Development Lifecycle and Vulnerability Management. Understanding and practical experience of ISO27001:2022 controls and audit processes Desirable AWS Security Specialty or similar certification Experience in regulated environments (healthcare, financial services) Familiarity with NHS DSPT Technical knowledge ...

highly regulated environment, or within His Majesty's Government (HMG). Knowledge of security frameworks (e.g. ISO 27001, NIST, and / or NCSC guidance), security risk management & security architecture. Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent) - Desirable ...

seeking an experienced Microsoft Entra ID / Cloud Identity Specialist to support a key improvement programme focused on strengthening Microsoft Entra ID, with the impact of reducing identity-related risk and improving access controls. Working as part of a wider cyber security and infrastructure team, you will lead … other PAM technologies SailPoint, Saviynt, Microsoft Identity Manager or other IGA platforms Zero Trust identity security initiatives Public Sector environments Cyber Essentials / ISO27001 aligned security programmes What You'll Deliver Reduction in identity-related cyber risk. Remediation of any identified critical and high-risk identity vulnerabilities. Improved access ...

respond to incidents. Collaborate with IT teams to integrate security solutions into infrastructure. Ensure compliance with industry regulations such as GDPR, HIPAA, and ISO 27001. Stay updated on emerging cybersecurity threats and best practices. Qualifications & Requirements Proven experience in Cybersecurity, Computer Science, or related field. Experience in data ...

experience designing, building, and supporting cloud solutions using AWS (essential). Experience working within Agile Scrum teams delivering in iterative sprints. Experience with CI / CD pipelines, containerisation, automation, and DevOps practices. Experience with Test-Driven Development (TDD) and Behaviour-Driven Development (BDD). Strong understanding of distributed systems … infrastructure. Experience using monitoring and logging tools such as Splunk, Grafana, or the ELK Stack. Knowledge of security frameworks and compliance standards, including ISO 27001, NIST, and GDPR. Strong analytical, troubleshooting, and problem-solving skills. Excellent communication and stakeholder management skills. Bachelor's degree in computer ...

will need to be either SC Cleared or BPSS, moving to SC Cleared. PAM Technical Specialist – Key Skills: Demonstrable experience in greenfield IAM / PAM implementations, preferably using Entra ID, CyberArk, BeyondTrust, or similar platforms. Proven ability to lead technical delivery while mentoring junior engineers or analysts. Experience providing … Connect). Familiarity with SaaS security, user lifecycle management, and enterprise access models. Working knowledge of security and compliance frameworks such as CAF, ISO 27001, NIST CSF, and GDPR. Analytical and investigative skills with the ability to identify risk patterns and remediation actions. Knowledge of Privileged ...

Senior Qualys Engineer - Contract UK-based | Hybrid / Flexible Working6-12 Month Contract (Likely Extension)Inside IR35 £550We're looking for an experienced Senior Qualys Engineer to support the expansion and optimisation of an enterprise-wide vulnerability management platform within a large, complex organisation. Key Responsibilities Expand and optimise … best practice guidance Skills & Experience Strong hands-on experience with Qualys VMDR Deep understanding of vulnerability management and asset discovery Strong networking knowledge (TCP / IP, DNS, firewalls, routing, VPNs) Experience working in large-scale enterprise environments Exposure to AWS, Azure or GCP is desirable Scripting and automation experience ...

accuracy, and compliance. Ensure solutions meet compliance standards (e.g. ISO 27001). AI & Data Awareness Ensure solution designs support AI / ML-enabled capabilities where relevant (e.g. data lineage, governance, feature management, and model integration patterns). Collaborate with wider technical teams to define integration … designing solutions across application, data, integration, and infrastructure domains. Strong understanding of cloud architectures (preferably Azure) and modern delivery practices (API-led, microservices, CI / CD, DevOps). Expert-level knowledge of the Software Delivery Lifecycle (SDLC) and supporting tools. Ability to produce clear and structured documentation, including HLDs ...

Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

ASAP Security Clearance: Active SC Clearance IR35 Status: Outside IR35 Duration: Initial 3 months Rate: Up to £550 per day Location: Hybrid, approx. 1 / 2 days per week on site in Abingdon Overview We are supporting a client delivering a large IAM programme for a public sector … request processes Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM Knowledge of Active Directory, LDAP and hybrid identity Working knowledge of ISO 27001 and NIST CSF Strong troubleshooting and documentation skills Active SC clearance If this sounds suitable and you have active SC Clearance ...

significant experience across security, resilience and risk management within a complex organisation. You will bring: Extensive cyber security leadership experience. Strong knowledge of ISO 27001, NIST or equivalent frameworks. Experience of business continuity, disaster recovery and organisational resilience planning. Knowledge of Facilities Management and Estates, including ...

senior stakeholders, suppliers and technical delivery teams. Desirable: Experience within regulated or security sensitive environments. Knowledge of Zero Trust principles. Familiarity with NIST, ISO 27001, CAF or similar security frameworks. Experience securing complex SaaS platforms and enterprise integrations. Reasonable Adjustments: Respect and equality are core values ...