1 to 25 of 47 Permanent ISO/IEC 27001 Jobs in Central London

data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO / IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO / IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI, GDPR, ISO ...

Monitor compliance with policies and conduct regular reviews and updates of security policies and procedures. Complete security assessments for third party suppliers, assets (buildings / retail) and projects to ensure adherence to cyber security policies and standards. Deliver and maintain the supplier risk assessment process. Identify and assess information … endpoint protection, identity and access management, vulnerability management, security testing). PREFERRED SKILLS ISO 27001 or nist framework experience. Surecloud / grc / alternatives. Exposure to ai governance frameworks (e.g. Nist ai rmf) or developing ai use-case risk assessments. Exposure to property technology ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This is a fantastic … SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

Support Assistant / AV Specialist / Unified Communications Analyst A fantastic opportunity has arisen for a AV Support Assistant / AV Specialist / Unified Communications Analyst to join our London based global law firm on permanent basis. AV Support Assistant / AV Specialist / … PowerPoint, and Excel - Knowledge of Remote Access systems and focusing on supporting remotely - Understanding of ITIL (v2 or v3), understanding of ISMS / ISO27001 would be desirable. AV Support Assistant / AV Specialist / Unified Communications Analyst In accordance with the Employment Agencies and Employment Businesses Regulations ...

advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI / ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance, risk, and compliance (GRC) Define … programme, including the ISMS, policy framework, risk registers, and audit readiness Implement and maintain compliance with ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, and relevant financial services regulations Understand the GRC landscape, implement appropriate controls, and adapt as the threat and regulatory environment shifts ...

will maintain and administer key security platforms, support client-facing security assurance activities, and help strengthen the company's security posture ahead of ISO 27001 certification. Responsibilities: * Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments. * Monitor and respond to security … governance, DLP and compliance tooling are essential for success in the role. * Hands-on experience with Netskope - web filtering, CASB and cloud security and / or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would ...

security assurance while taking ownership of key security initiatives. You'll play a central role in maintaining Cyber Essentials Plus certification, supporting ISO 27001, improving security processes, and helping embed a strong security culture across the business. What you'll be doing … management and maintenance of Cyber Essentials Plus certification. Support ISO 27001 implementation, audits and continual improvement activities. Coordinate security evidence, documentation and compliance activities. Maintain security policies, standards and procedures. Manage security questionnaires, supplier due diligence and audit requests. Track security risks, remediation actions and compliance ...

risk assessments, and advisory outputs. - Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials. Required Skills: - Experience within cyber security consulting, security auditing, or risk advisory roles. - Experience … delivering client-facing cyber risk advisory services. - Experience delivering assessments aligned with industry standards such as ISO 27001, NIST, CIS, NCSC 10 Steps, and GDPR. - Strong written and verbal communication skills, able to clearly articulate technical jargon to non-technical audiences and write impactful deliverables. - Experience ...

with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle. Oversee Conditional Access deployment, risk-based authentication, and device / state signals. Guide the operation and hardening of multi-site Active Directory domains / forests and cloud identity components (Entra / Azure … contract of employment. Qualifications Bachelor’s degree in Computer Science, Information Technology, or related field; equivalent experience considered. Approx. 7–10 years in IAM / identity engineering / architecture within large or enterprise environments; 3+ years leading complex IAM design initiatives. Prior global / large-scale enterprise ...

stakeholdersExperience working in PCI DSS compliance, IT security assurance, audit, GRC, orrisk managementPCI Professional (PCIP) (highly desirable)ISO 27001 foundation / lead implementer / lead auditorCISM, CISSP, CRISC, or similar (beneficial, not always required)SelfridgesSalaryCompetitive plus benefitsAnnuallyJob Referenceselfridges / TP / 278495 / 6839Contract TypePermanentClosing Date31 July, 2026Job CategoryITLocationLondon, United Kingdom16 July, 2026 #J-18808-Ljbffr ...

Security Advisory & Client Solutions Associate Manager / Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … delivery teams to convert opportunities into successful security engagements. The role requires a strong understanding of Microsoft's security ecosystem, including Microsoft 365 E3 / E5 / E7, Entra ID, Defender, Sentinel, Purview, Copilot and emerging technologies such as Agent 365. While primarily advisory and client-focused ...

engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role Overview Location: Central London / Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing … working within regulated industries would be highly beneficial. Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer / Auditor are advantageous. Previous experience within a Big Four consultancy would be highly desirable. What's in It for You Competitive salary with performance ...

focus on building high-impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea … O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python , Terraform , or CI / CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools ...

team of security engineers (currently 3) Act as the senior escalation point for security incidents and decision‐making Work across a modern Microsoft / Azure environment, driving improvements in M365 security and identity Influence how security is delivered across our sites, combining internal and client‐facing services … impact. What You’ll Be Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR / XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands ...

surfaces, especially for AI-powered features. Own SAST, SCA, DAST, container, and IaC scanning pipelines, using Snyk as the primary platform. Integrate with CI / CD, manage policies, and focus on developer experience and false-positive reduction. Triage and manage vulnerabilities end-to-end: classification, SLAs, fix validation … zero-trust-aligned designs. Guide secure API and microservice patterns, including input validation, rate limiting, secure session handling, and token-based security (OAuth 2.0 / OIDC). Review designs for cloud-native services and edge components, ensuring sensible security trade-offs aligned to product goals. Advise on the security ...

Microsoft security tools (Sentinel, Defender, Entra) Familiarity with frameworks such as ISO 27001, NIST, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes What You'll Be Doing … primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation. Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS. Develop and maintain security policies, risk assessments, and compliance documentation. Lead third-party risk management, including vendor assessments ...

model, while providing hands-on technical leadership to engineering teams. Key Responsibilities Own the end to end architecture of the SailPoint platform (IdentityIQ and / or Identity Security Cloud / IdentityNow) across the enterprise Define technical designs, integration patterns and architectural standards for identity governance Lead the design … identity lifecycle processes, including joiner / mover / leaver automation, provisioning and deprovisioning Architect connector integrations with enterprise applications, directories (AD, LDAP, Entra ID), HR systems (Workday, SAP SuccessFactors) and cloud platforms Design role models, RBAC frameworks, access request workflows and certification campaigns Define Segregation of Duties ...

vulnerabilities and recommending mitigations. Supporting security assurance and governance activities throughout the project lifecycle. Advising clients on security frameworks and regulatory standards including ISO 27001, NIST and GDPR. Producing security documentation, architecture artefacts and risk assessments. Working closely with architects, engineers, delivery teams and senior stakeholders. … following: Cyber Security Consulting or Security Architecture. Security risk management and security assurance. Secure architecture and solution design. Identity & Access Management (IAM / IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO ...

good practice. Key Responsibilities Compliance and Risk Management: Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials. Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes … Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent experience. Relevant certifications such as CRISC, CISA, CISM, ISO 27001 or CISSP, or a willingness to undertake similar, are desirable. Minimum of 5 years’ experience in IT governance, risk management, cyber ...

Head of Cybersecurity, Information Security to implement vulnerability remediation, secure configuration and access controls. Support compliance with relevant frameworks and standards, including ISO 27001, NIST 800‐53, NIST 800‐171, CmmC, Essential Eight and Cyber Essentials Plus. Maintain effective patching, hardening, privileged‐access and configuration‐management … competitive salary and benefits package that includes 27 days holiday per year, pension contributions, private healthcare, discounted dental insurance, enhanced maternity / parental leave, plus a whole host of others including: Cultural stimulation allowance - £250 per person per year Half days off before bank holidays Emergency care days ...

with the future state cloud-first strategy and architecture. Define and document cloud service security baselines that align with modern security frameworks (CIS, CSA, ISO27001, etc.). Define and document repeatable cloud service patterns. Drive adoption and migration from traditional technology platforms to public cloud services. Recommend tools and methodologies … Proven experience working in DevOps teams within a mission‐critical environment. Working experience in Agile methodologies and have actively managed scrums. Experience with CI / CD, Infrastructure-as-Code management and governance. Passionate about innovation and leading technological change. Passionate in creating a collaborative, caring and safe environment ...

Purpose Build, implement, and maintain the technical security controls that protect infrastructure, applications, and data. Key Responsibilities Implement and maintain security tooling (firewalls, EDR / XDR, SIEM, IAM / PAM platforms, DLP) Configure and harden cloud environments (AWS / Azure) in line with security baselines Support vulnerability … SOAR) in partnership with the SOC Support incident response - containment, investigation, and remediation of confirmed threats Automate security processes via scripting (Python, PowerShell, Terraform / IaC) Work with architects to implement designed controls (Zero Trust, network segmentation, encryption) Support audit and compliance evidence-gathering (ISO 27001 ...

Main Responsibilities Duties will include: Setting and personally delivering target architecture for the ECP data estate the data warehouse, data hub, data lake, raw / ODS layers, dimensional model, audit and schema-change tracking, and the load schedules that tie them together. Hands-on T-SQL, stored procedure … framework and PowerShell development at expert level partition design and partition-aligned indexing, clustered / nonclustered index strategy, deduplication, parallel-run cutovers, schema migration, performance tuning of high-impact production queries. Driving the in-flight ETL replatform replacing legacy SSIS jobs with a table-driven, parallel ...

industry best practices. Experience delivering security assurance reviews, audits and control effectiveness assessments. Knowledge of cloud security principles with exposure to Azure and / or AWS environments. Experience creating and implementing security policies, standards and governance processes. Understanding of broader cyber security domains such as Security Architecture, Vulnerability Management … work on complex enterprise security challenges and play a key role in helping organisations improve their cyber resilience, governance and risk posture. Reference: AMC / DMI / IAM Postcode: SW1 #damc ...

ensure rapid detection, escalation, and resolution of security alerts and major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR / XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows to automate … Access, and the Microsoft Defender Suite (Endpoint, Identity, Server, Cloud), alongside Azure Security Centre. Proven experience managing major incidents and collaborating with third-party / outsourced SOC providers. Demonstrated experience designing and operating SOAR workflows. Hands-on knowledge of Network Anomaly Detection (NAD), firewalls, LAN / WAN security ...