7 of 7 Permanent ISO/IEC 27005 Jobs in England

Cyber and Information Assurance Consultant Job Title Cyber and Information Assurance Consultant Hours Per Week 37 Reporting to Reporting to Principal Cyber Consultant / Head of Services Location Location Remote-first, with attendance at Nexor’s Nottingham office and customer locations as required. Regular UK travel may form part … lifecycle principles. Residual risk and risk acceptance. Assurance evidence and traceability. Frameworks and Standards Working knowledge of some of the following: ISO / IEC 27001. ISO / IEC 27005. NCSC Cyber Assessment Framework. NIST Cybersecurity Framework. MOD Defence Standard ...

wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK* Analyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controls* Analyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.* Support Procurement … with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessments* Support the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.* Provide subject matter expert input ...

wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UK Analyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controls Analyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders. Support Procurement … with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessments Support the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

activities. Promote a proactive and risk-informed culture across the organisation. Knowledge & Skills: Thorough understanding of cyber risk frameworks and assessment methodologies, including ISO 27005 and NIST Risk Management Framework. Ability to develop and maintain cyber risk registers, taxonomies, risk scoring methodologies and risk appetite frameworks. … years with significant responsibility for cyber risk management. Proven track record of conducting or overseeing cyber risk assessments using recognised methodologies such as ISO 27005, NIST RMF, FAIR or OCTAVE. Experience developing, maintaining and governing cyber risk registers within complex organisations. Establishing or facilitating risk governance ...

collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills / experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005 … . Producing clear, actionable risk treatment plans aligned to security objectives to treat / mitigate the identified risks. Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering Creation of security documentation to support the development of an information system, these could include: Security Aspects ...