9 of 9 Permanent Remediation Plan Jobs in the City of London

Cyber Essentials and Cyber Essentials Plus, and the Telecommunications (Security) Act 2021. Identify risks, provide actionable recommendations, and support clients with remediation planning and regulatory alignment. Produce clear audit reports and present findings to client stakeholders. Proven experience in cybersecurity auditing, ideally in a consultancy or client‐facing ...

Review of Key Performance and Key Risk Indicators for Data Governance and provide recommendations on action plans to improve these indicators. Review business remediation plans for Data Governance controls for reasonableness and appropriateness, providing recommendations on improvements as necessary. Day to day administration of business services such ...

Responsibilities Develop, implement and maintain information security policies, procedures and governance frameworks. Manage information security risks, maintain the risk register and oversee remediation activities. Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus , alongside relevant contractual and regulatory requirements. Conduct risk assessments, internal audits, compliance reviews … information security governance, risk management, data protection and compliance. Experience working with technical and cyber security teams to assess risks and deliver remediation plans. The ability to manage multiple projects, priorities and change initiatives simultaneously. Excellent communication, analytical, problem-solving and stakeholder management skills. A strong customer-focused ...

investigation develops. Supporting client recovery, including rebuild and restoration sequencing driven by business priority, and ensuring known weaknesses are not reintroduced. Implementing the remediation and hardening work identified through the incident, where clients engage us to deliver it. Working to the NIST Cyber Security Framework and incident response … Assessing cloud configuration against CIS Benchmarks and NIST using tooling including Prowler, ScubaGear and PingCastle, and turning technical findings into prioritised, business-contextualised remediation plans. Reviewing third‐party software, cloud applications and SaaS platforms as part of supplier and technology assurance work. Supporting client compliance and assurance requirements ...

lead growth and management of our InfoSec program across cloud-hosted applications and infrastructure. You will write security policy, design controls, and craft remediation plans while engaging stakeholders across engineering and leadership. You will also own security testing standards, implement Terraform controls, and coordinate with auditors ...

them. Implement security controls in Terraform when that work is assigned to you, and review infrastructure as code changes that affect security. Plan and run the independent security assessments our customers require, such as penetration tests and third-party security assessments, and those we commission ourselves. Agree the scope … approved, specify the work and verify the result. Explain security issues to engineers who need to change something, delivery leads who need to plan around it, and executives who need to decide, at the depth each one needs. Required skills & experience 7+ years in software or cloud security with ...

relationship, supported by a strong cloud/infrastructure engineering background and the ability to assess technical designs, operational evidence and remediation plans. Strong understanding of Microsoft Azure and hybrid infrastructure services, including compute, storage, networking, role‐based access control and Azure Policy; ability to assess provider designs, operational … access; ability to assure provider controls and agree ownership with internal identity and security teams. Experience assuring provider delivery of monitoring, patching, vulnerability remediation, configuration management and technology lifecycle plans, using evidence from tools such as Azure Monitor, Log Analytics, and Tanium. Experience governing backup, restore and disaster ...

vendor-delivered or vendor-supported applications, including delivery governance and relationship management. Experience managing application resiliency and operational readiness, including incident management and remediation planning. Experience working in a regulated or controls-driven environment, including assessing risk, implementing controls, and addressing control gaps. Strong communication skills, with … across engineering, product, operations, and senior stakeholders. Preferred qualifications, capabilities, and skills Familiarity with technology risk and controls frameworks and with managing control remediation through established governance processes. Experience adopting AI-assisted engineering tools responsibly, with attention to security, data handling, and compliance expectations. Background in infrastructure, platform ...

deployment and operability perspective. Drive automation initiatives that reduce manual effort and increase deployment consistency. Perform root cause analysis, troubleshooting, bug investigation, and remediation of issues across pre-production environments. Collaborate with the central DevOps team to align tooling, standards, and deployment methodologies. Participate in on-site … through setup and upgrades. Receive and review software release notes, translating them into accurate environment configurations ahead of deployment. Communicate technical issues and remediation plans clearly to both technical and non-technical stakeholders. Create and maintain deployment documentation, runbooks, and operational procedures. Conduct formal handover of deployed environments ...