1 to 25 of 28 Remote/Hybrid Contract ISO/IEC 27001 Jobs

third-party assurance reports (e.g., SOC 2, ISO certifications), and historical security incident logs. Identify deal-impacting risks, quantify remediation effort (cost / timeline ranges), and advise on onboarding security priorities. Integration Roadmapping: Identify risk areas and formulate actionable post-acquisition security integration roadmaps and transition plans. … Standards & Compliance (ISO 27001 & SOC 2) Framework Governance: Assess, maintain, and mature existing security frameworks aligned with ISO / IEC 27001 and SOC 2 Type II. Develop and maintain information security policies, standards, and procedures aligned to these standards ...

Continuity (BC) readiness. Key Responsibilities Cloud Security (Azure) Implement andmaintainAzure security controls across identity, networking,computeand storage. Support governance guardrails (Azure Policy), securebaselinesand logging / monitoring for cloud workloads. Contribute to security design reviews for new services and changes to ensure secure-by-default patterns. On - Prem Security (VMware … Support hardening and secure operation of VMware vSphere (vCenter / ESXi) and associated management networks. Assistwith vulnerability remediation, patchingcoordinationand secure configuration for Windows / Linux servers. Improve segmentation and admin access controls for critical systems and management planes. Network Security (Cisco Meraki) Support secure configuration of Cisco Meraki ...

control, data security controls and AI security standards. Up to date on cybersecurity threats, risk assessment, and frameworks / regulations (GDPR, PCI, NIST, ISO27001). Proven experience in requirements identification, solution testing, and vendor product selection. Demonstrated leadership and relationship management with internal and external partners, along with excellent … risk management and security requirements with tact and tenacity to senior executives Strategic orientation with ability to act tactically as required. Strong negotiator / facilitator and consensus builder with results-oriented commitment. Ability to interact at all levels of the organisation. Key responsibilities Partner with teams for development ...

Security Management, Defence or National Security Operations. Military Leadership appointments with responsibility for people, operations and governance. Rate: £80.00 per hour Location: Stevenage Hybrid / Remote working: 3-4 days a week on site min, 1-2 remote. Contract: 37 Hours per week Overtime: Hours worked over 37 hours … Cyber Security Capability Manager Responsible for the responses and support to external requests and auditing of DEx within a cyber security context, such as ISO27001 audits, DCC and CE+ requests, GDPR requests, contractual questionnaires from customer or suppliers Coordinate vetting and access requests within the SOC in collaboration with ...

industry best practice relating to auditing, compliance and risk management. Contribute to cyber report writing and the production of Cyber Risk Profiles (CRP) Skills / Experience: Experience of ISO 27001, the NCSC Cyber Assessment Framework (CAF), DCC and Cyber Risk Profile (CRP) work. Experience … equivalent) is desirable. Experience in auditing, compliance or risk management, ideally gained in the Public Sector, particularly Defence. Understanding of NCSC CAF v3.2 / v4.0. Some MoD experience is desirable but not essential. Strong analytical and problem solving skills. Excellent communication and interpersonal skills. Ability to work independently ...

Title: SC Cleared Field Solutions Engineer Location: Hybrid / London / Bristol as and when required Duration: 6 months with possible extension Rate: Up to £650 per day Outside IR35 Must be willing and eligible to go through the SC Clearance process If you enjoy combining hands … bring: Strong networking and IT infrastructure understanding, with a focus on secure communications and encryption Real-world, hands-on experience with Linux plus scripting / programming (bash and Python) Solid grasp of PKI-what it provides, along with benefits and drawbacks Experience translating client requirements into practical technical solutions ...

Digital Identity and Trust Frameworks. Familiarity with standards and frameworks such as: ISO 27001 NIST Cyber Security Framework Cyber Essentials / Cyber Essentials Plus Supplier and Third-Party Assurance frameworks Experience supporting digital identity, authentication or secure digital services programmes. Security-related certifications such … CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent. Key Competencies Security Assurance Governance, Risk & Compliance (GRC) Third-Party Risk Management Security Assessments Risk Analysis Stakeholder Management Information Security Audit & Compliance Trust Framework Compliance Security Governance This is an excellent opportunity for a Security Assurance professional ...

DevOps (or similar tools) to deploy Infrastructure As Code into Azure – experience with ARM or Bicep templates and YAML pipelines. Experience of cloud native / serverless components hosted in Microsoft Azure including containerisation and App Service Plans Strong system monitoring tooling experience to identify and troubleshoot problems with performance … ONDmarc Experience working in a regulated industry, e.g. telecoms, financial services, utilities. Experience of Jira & Confluence for work management & documentation Networking experience – LAN / WAN / SDWAN / Azure networking such as routing, firewalls, network peering etc. Microsoft certifications relating to Infrastructure within Azure. Experience of configuration ...

Analyst (Contract) Day Rate: Up to £300 per day (Outside IR35) Contract: 6-month rolling contract Location: Liverpool (Hybrid) Keywords: Information Security, Cyber Security, ISO27001, NIST, Risk, Governance, Vulnerability Management, Incident Response, Outside IR35 A leading organisation within the transport and logistics sector is looking for an Information Security Analyst … Analyst role. Strong understanding of security principles including risk management, vulnerability management, incident response and access control. Knowledge of security frameworks such as ISO 27001, NIST or Cyber Essentials . Experience with common security technologies such as endpoint protection, firewalls, authentication and logging tools. Excellent communication ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

compliance. SFIA Level 5 capability or equivalent experience. Experience within telecommunications, mobile network operators, critical national infrastructure or emergency services. Knowledge of 4G / 5G Core Networks, Radio Access Networks (RAN), IMS, OSS / BSS platforms and network virtualisation (NFV / SDN). Understanding of Zero Trust … more about this Security Assurance Lead opportunity, hit apply or get in touch with Sophie Higginson at Anson McCade for a confidential discussion. AMC / SHI / ...

Senior DevSecOps Engineer Reading (Hybrid working available) Active SC Clearance required Up to £71 p / h Inside IR35 We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. … Senior DevSecOps Engineer, you will: Lead the design and implementation of secure DevSecOps platforms and toolchains Embed automated security controls into CI / CD pipelines Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated ...

highly regulated environment, or within His Majesty's Government (HMG). Knowledge of security frameworks (e.g. ISO 27001, NIST, and / or NCSC guidance), security risk management & security architecture. Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent) - Desirable ...

enterprise environments. Preferred Skills Experience with CyberSense or other analytics-based threat detection solutions. Knowledge of security and compliance frameworks such as NIST, ISO 27001, and GDPR. Experience with automation and orchestration tools. Relevant certifications in backup, recovery, cloud, or cybersecurity technologies. Soft Skills Excellent communication … USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at (url removed) / en-gb / privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps ...

architecture Identity & Access Management (IAM), Identity Federation and IDaaS PKI and cryptography Application Security and Secure Software Development OWASP and secure coding practices CI / CD security and security automation Cloud Security (IaaS, PaaS and SaaS) Network Security, Firewalls and Endpoint Security Infrastructure Security and Infrastructure as Code Data … beneficial: Microsoft Azure or other public cloud platforms Identity Management solutions Web Application Firewalls VMware or virtualisation technologies Software Defined Networking Storage technologies (SAN / NAS) Databases and Middleware Collaboration platforms and modern workplace technologies Desirable Certifications CISSP GIAC SABSA ISO 27001 Lead Auditor ...

Lake. Improve platform reliability, scalability, security and cloud cost optimisation. Work closely with engineering teams to onboard new enterprise data sources. Contribute to CI / CD pipelines and DevOps best practices. Required Skills & Experience We're looking for candidates with experience across several of the following technologies: Cloud & Infrastructure … Storage Azure Functions Azure Monitor Azure Logic Apps Kubernetes Azure DevOps Programming & Automation Python PowerShell Bash Terraform SQL Kusto Query Language (KQL) GitHub CI / CD Pipelines Data Engineering ETL Pipeline Development Data Integration Data Modelling Data Warehousing Cloud Data Pipelines Data Cleansing & Transformation Real Time Data Processing Infrastructure ...

accuracy, and compliance. Ensure solutions meet compliance standards (e.g. ISO 27001). AI & Data Awareness Ensure solution designs support AI / ML-enabled capabilities where relevant (e.g. data lineage, governance, feature management, and model integration patterns). Collaborate with wider technical teams to define integration … designing solutions across application, data, integration, and infrastructure domains. Strong understanding of cloud architectures (preferably Azure) and modern delivery practices (API-led, microservices, CI / CD, DevOps). Expert-level knowledge of the Software Delivery Lifecycle (SDLC) and supporting tools. Ability to produce clear and structured documentation, including HLDs ...

accuracy, and compliance. Ensure solutions meet compliance standards (e.g. ISO 27001). AI & Data Awareness Ensure solution designs support AI / ML-enabled capabilities where relevant (e.g. data lineage, governance, feature management, and model integration patterns). Collaborate with wider technical teams to define integration … risk solutions across application, data, integration, and infrastructure domains. Strong understanding of cloud architectures (preferably Azure) and modern delivery practices (API-led, microservices, CI / CD, DevOps). Expert-level knowledge of the Software Delivery Lifecycle (SDLC) and supporting tools. Ability to produce clear and structured documentation, including HLDs ...

Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

ASAP Security Clearance: Active SC Clearance IR35 Status: Outside IR35 Duration: Initial 3 months Rate: Up to £550 per day Location: Hybrid, approx. 1 / 2 days per week on site in Abingdon Overview We are supporting a client delivering a large IAM programme for a public sector … request processes Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM Knowledge of Active Directory, LDAP and hybrid identity Working knowledge of ISO 27001 and NIST CSF Strong troubleshooting and documentation skills Active SC clearance If this sounds suitable and you have active SC Clearance ...

toolkits. Proficiency in the configuration and management of Privileged Remote Access A comprehensive understanding of credential vaulting, password rotation, and check-in / check-out workflows Experience in configuring privileged session recording and monitoring systems Knowledge of service account discovery and lifecycle management processes Familiarity with onboarding Windows Server … Linux / Unix, and network devices to PAM platforms An understanding of Active Directory privileged account management practices Experience in integrating Security Information and Event Management (SIEM) systems for PAM event logging and alerting Familiarity with recognised security frameworks, including ISO 27001 and the NIST ...

supporting our central government client, who is seeking a Security Assurance Lead for an initial 6 assignments with the option to extend. Location: London / Hybrid The ideal candidate will have an active security clearance and a strong background in Cyber Security Assurance within a high-threat government environment. … Security Information and Event Management (SIEM) tools In-depth understanding of cybersecurity frameworks and standards such as the NCSC Cyber Assessment Framework, ISO 27001, NIST, COBIT, alongside SABSA and TOGAF methodologies. Solid track record in risk and threat modeling within high-threat government environments. Industry certifications ...

Experience designing, implementing and supporting CyberArk solutions Knowledge of encryption, authentication and access control technologies Understanding of security frameworks and compliance standards including ISO 27001 and GDPR Experience with SIEM technologies, firewalls or intrusion detection systems CyberArk Delivery Engineer (CDE) certification desirable TO BE CONSIDERED Please ...

Collaborate with cloud, infrastructure, and security stakeholders, providing guidance to junior team members on technical best practices. Top 5 Skills Qualys VMDR expertise - 5 / 7 years of hands-on Qualys VMDR administration and vulnerability management, including scanning configuration, optimisation, and reporting. Multi-cloud integration - Proven experience integrating Qualys … platform integration. Vulnerability remediation & frameworks - Strong understanding of the vulnerability remediation life cycle, with knowledge of security frameworks such as CIS, NIST, or ISO 27001 being a strong advantage. ...

enhancement of security policies, standards and procedures Working with stakeholders to assess risks and agree remediation priorities Monitoring and tracking risk treatment plans Supporting ISO27001-aligned governance, risk and compliance activities Contributing to wider security maturity and control improvement initiatives What We're Looking For: Experience working within GRC, cyber … security risk or information security functions Strong understanding of cyber security risk management principles Experience maintaining risk registers and conducting risk assessments Knowledge of ISO27001 and ideally ISO27005 Experience supporting governance forums, compliance activities and policy development Ability to engage confidently with technical and non-technical stakeholders Strong documentation ...