14 of 14 Permanent ISO/IEC 27001 Jobs in Avon

Analyst will help strengthen the organisations overall security posture and support a culture of continuous improvement. The role is expected to start in mid / late October 2026. DUTIES Your duties as the Cyber Security Analyst include: Support Security Compliance: Assist with maintaining compliance with applicable security standards … frameworks, including ISO / IEC 27001, ISO / IEC 27017, ISO / IEC 27018 and Cyber Essentials Plus Assist with Audit Readiness: Support the preparation, coordination and collation of evidence for internal ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

segregation of duties are consistently embedded by design. Own privileged access strategy and outcomes, including vaulting, session isolation, credential rotation and Just-in-Time / Just-Enough-Access controls - with day-to-day PAM operation delegated to specialist team leads. Own the access governance strategy - including recertification cadence, role … Access Management and Identity Governance & Administration, gained in a complex, regulated environment (financial services strongly preferred). Demonstrable experience leading a multi-year IAM / PAM / IGA transformation programme end-to-end, including target operating model design, tooling modernisation and measurable maturity uplift. Deep working knowledge ...

stewardship . Experience developing governance policies, standards and operating models. Practical experience with AI governance, AI assurance or responsible AI . Understanding of AI / model testing, evaluation and risk assessment. Strong consulting, stakeholder management and communication skills. Desirable: UK Central Government, Defence or regulated-sector experience. Defence, maritime … DMBOK, NIST AI RMF, ISO 23894, ISO 27001 or UK GDPR . MLOps, model monitoring or AI risk / control experience. Benefits: Salary up to £80,000 25 days holiday + bank holidays Private Medical Insurance Hybrid working with 2 days per week ...

location hosting environments supporting business-critical financial systems. Provide oversight of virtualisation platforms (VMware vSphere, NSX), physical compute, and enterprise storage (NetApp SAN / NAS / HCI) through effective team leadership and vendor management . Hosting and Network Manager Define and assure backup, disaster recovery, and operational resilience … strategies aligned to business RPO / RTO and regulatory expectations. Establish and enforce infrastructure security baselines and configuration standards aligned with ISO 27001, PCI-DSS, and internal risk frameworks. Drive service improvement through standardisation, automation, and Infrastructure-as-Code initiatives, improving stability, control, and operational ...

WORKING Location: Manchester; Bristol; Leeds; Glasgow; Birmingham; , Central London, Greater London - United Kingdom Type: Permanent Security Consultant United Kingdom Up to £85,000 S / C Clearable Ready to protect the systems that underpin the UK's most critical public services? We're hiring a Security Consultant to work … annum • Extensive benefits package • Continuous training provided for career progression To hear more about the Security Consultant role contact Daire McIlhatton at Reference: AMC / DMI / SC #damc ...

between technical findings and the risk decisions that senior leaders need to make. You'll bring the judgement to know when a full ISO 27001 governance programme is appropriate and when a lighter-weight approach serves the engagement better. At Lead level, your impact extends beyond … attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI / CD pipelines as part of a shift-left security approach Made Tech sponsors attainment of recognised cyber certifications for staff in scope. ...

transformation programmes Provide advisory support on complex transformation programmes shaping the future of the UK public sector Advise clients on regulatory compliance (e.g. ISO 27001, NIST, GDPR, PCI-DSS) Communicate with a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve … infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and / or cloud security experience preferred SABSA / CISSP or similar certification preferred Current government security clearance or the ability to gain clearance preferred ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM / SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting … with: Strong hands-on experience with network infrastructure and security, segmentation, firewalls, endpoint security, XDR and access control . Experience securing Cloud ( Azure and / or AWS) and on-premise environments. A security-first mindset and confidence working with both technical and non-technical stakeholders. Knowledge of frameworks such ...

Drive secure architecture at scale Define and assure enterprise, solution, and system-level security architectures Apply and tailor security frameworks such as NIST, ISO 27001, SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance ...

Annually revise and reissue Security Operating Procedures for our secure networks and core Secure Networks cloud systems Support external security-related audits such as ISO27001 and by clients including MOD Oversee authorisations of third parties who will handle information from our secure networks or connect in to them, including both … technical IT staff Able to prioritise and manage your time to achieve multiple different tasks (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53) (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs Competent ...

time between working on-site at our offices, and at home, remotely within the UK. We believe hybrid working achieves a good work / life balance for our colleagues, allowing us to connect with each other, collaborate on important work, and perform together to deliver for our customers. … will receive some financial help Employee Discount Scheme with a huge number of retailers and an app to save on the go Discounted Electric / Hybrid Car Salary Sacrifice Scheme Access to the Cycle to Work Scheme (we have showers, changing rooms and secure bike sheds on site ...