21 of 21 Permanent ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in England

Lead - ISO27001, ISO 27002, ISO 27005, ISO 31000 ISMS, Security Audits Our leading global law firm client are actively looking to take on a new GRC Lead (ISO 27001, ISO … 27002, ISO 27005, ISO 31000 ISMS, Security Audits) on a permanent basis, this person will be responsible for the management of ISMS globally across the firm which covers a broad range of security activities such as Policy Development, Risk Management ...

strong technical security knowledge with excellent governance, risk management and stakeholder-management skills. Skills and Experience: Experience leading cyber security, information security and / or compliance activities within a medium-to-large enterprise environment. Strong experience managing an enterprise information / cyber security risk register. Strong … continually improving an ISMS. Experience preparing for and participating in internal and external security audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials / Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge ...

plans Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF Develop and maintain information security policies, standards and procedures, ensuring organisational compliance Define … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection Knowledge of SOC operations, digital forensics and fraud management Experience with GRC / IRM platforms and the automation of security and compliance processes Additional security certifications such as CGEIT, C|CISO, QSA, CDPP, or Security Director certification ...

Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001 / 27002 / NIST Cybersecurity Framework / COBIT / CIS Controls Experience supporting clients through compliance assessments ...

compliance, audits, security frameworks and continuous improvement , while managing and developing an Information Security team. We're looking for: Proven experience leading cyber / information security and compliance teams Strong knowledge of NIST, NIS2, ISO 27002, Cyber Essentials Plus and GDPR Experience … managing enterprise risk registers and security metrics Experience with ISO 27002 / Cyber Essentials Plus audits and ISMS development Strong stakeholder management and leadership skills CISSP, CISM, CISA or similar certification highly desirable Teesside | Hybrid – 1–2 days on site Full-time ...

policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

with regulators and external stakeholders where required. Track regulatory findings, recommendations and actions through to closure. Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus. Knowledge & Skills: Strong understanding of cyber security principles, governance frameworks and compliance management practices. Knowledge of compliance monitoring … engagement and communication skills, with the ability to work effectively across technical and business functions. Familiarity with ISO 27001 / 27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF). Understanding of the UK regulatory landscape ...

designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF / 800-53, ISO 27001 / 2 or SABSA. Understanding of identity & access management, network security, encryption, API security … testing and security assurance processes. Ability to define, document and govern security requirements throughout solution delivery. Desirable: Knowledge of NIS Regulations and ISA / IEC 62443 for OT and industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical ...

Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer ...

reliability improvements Experience & Skills Required Hands‐on experience with Azure Monitoring (Application Insights, Alerts, Action Groups) Strong knowledge of OpenTelemetry (including Kubernetes) Scripting / automation using PowerShell and / or Azure CLI Experience with Terraform and GitHub Actions Ability to define SLIs / SLOs … budgets Incident response and post‐incident review experience Familiarity with Docker and Kubernetes Strong communication and documentation skills Desirable Working knowledge of .NET / C# and React / NextJS Experience with cloud cost optimisation Knowledge of Azure networking (DNS, VNets, Firewalls) Understanding of security frameworks (e.g. ...

inclusion – it’s a place where you can grow, belong and thrive. Your day at NTT DATA The GRC Consultant (Cyber Assurance / Security Operations Manager) is primarily responsible for ensuring the security controls (people, process, technology) are in place and operating as designed. The primary … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defence on all matters relating to cyber security, information ...

Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.) Advise in the development of the security product strategy and roadmaps for the various internal and customer facing ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy / standards as well as industry recognized frameworks and best practice Looking ahead to future opportunities. As our business continues to grow, we are building … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy / standards as well as industry recognized frameworks and best practice Looking ahead to future opportunities. As our business continues to grow, we are building … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information ...

Operations Team, Project Management Teams, global IT Teams, and outsourcing partners to deliver solutions that enhance the security program for CLS. Essential Function / Major Duties and Job Responsibilities Strategic As part of the CLS Security Engineering team, develop and implement CLS security strategy in consultation with … compliance with cyber resilience requirements Be responsible when assigned ownership of CLS Security related Regulatory and Internal Audit finding(s), and provide effective / timely resolution Design and integrate consistent security solutions across CLS on-premise and cloud environments for domains like Vulnerability Management, Endpoint Security, Data Security ...

environments in a client-facing role. You will lead assessments, architecture reviews, and security strategy aligned with ISO 27001 / 27002 and NIST standards. Location is on-site with a customer in Central London, with hybrid working options. You will guide security ...

across projects and development lifecycles (SDLC), including Agile environments Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks (e.g. ISO27001 / 2, NIST, PCI DSS) Solid understanding of data protection and regulatory requirements (e.g. FCA, ICO, PRA, GDPR) and how to apply them in practice ...

across projects and development lifecycles (SDLC), including Agile environments Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks (e.g. ISO27001 / 2, NIST, PCI DSS) Solid understanding of data protection and regulatory requirements (e.g. FCA, ICO, PRA, GDPR) and how to apply them in practice ...

management of the Cyber Security Operations team Conducting cyber security maturity assessments; continuous improvement of existing security controls and assessing new tools / capabilities for recommendation to management Perform cyber risk assessments; develop reporting metrics to articulate risk posture to Senior Management Be the key contact … e.g. ISO27001, GDPR, NIST, Cyber Essentials, ITIL) to ensure the Confidentiality, Integrity and Availability of Vitality Information Systems Deliver key Information Security initiatives / projects, in line with InfoSec and Cyber Security strategy and Enterprise Risk Management Framework Responsible for ensuring that Vitality IT assets are adequately protected ...

chargeable workshops to clients through strategic consultative engagement. An example of this would be strategy workshops, posture assessments and a gap analysis Skills / Must have 2+ years in Pre-Sales or similar role within an MSP / Reseller organisation Previous experience being part … Knowledge and / or experience using endpoint detection and threat management products Good knowledge and awareness of global Information Security Standards including ISO27002, CIS, NCSE CAF, NIST CSF Advisor in advanced cybersecurity services including SSE, SASE, SIEM, MDR / EDR Experience working with security frameworks ...

part of a larger program of works ranging from the ICT Annual Delivery Plan to business growth initiatives such as site transitions / acquisitions in the UK and Abroad. In this role, you will serve as a pillar of px’s Information Security program by driving and managing … metrics. Experience spearheading offensive security activities. Certifications such as CISSP, CISM, CISA, or similar are highly preferred. Experience of Cyber Essentials, NIST, CAFM and ISO27002 standards and a proven track record in delivering against them. What you will receive from us : Contribution towards eye test and glasses Online company discount ...