committed to delivering the highest standards of security and compliance. We are seeking a highly skilled and motivated Information Security Risk Manager to lead on A&M wide information security risk management program and join our dynamic and growing team based in either our London or Tampa … the Global Security Office Information Security Risk Register, its supporting processes, governance and reporting requirements. The successful candidate requires a strong understanding of ISO27001 security controls, exposure to the OnSpring GRC Tool and can effectively assess and communicate technical security requirements to teams … across the firm. Key Responsibilities: Risk Management Leadership and Oversight: Working to A&M Policy and industry standards and lead the end-to-end information security risk management process, ensuring risks are proactively identified, assessed, recorded, and mitigated. Assess and prioritize security risks based on enterprise-wide More ❯
team at Prevail Partners. The ideal candidate will bring deep technical knowledge of information security risks, controls and frameworks - with practical experience managing ISO27001-compliant systems and embedding secure practices across dynamic operational environments. You will work closely with the Counter Intelligence and … Security Lead, Compliance Manager, IT department, and project teams to ensure robust, proportionate, and forward-looking protection of our people, data and systems. This is a key role for a pragmatic and security-minded individual who can operate at both strategic and operational levels, supporting the business … as it expands its global footprint and develops sensitive technology solutions. Key Responsibilities Security Strategy & Governance Lead the continued development of Prevail's Information Security Management System (ISMS) in alignment with ISO27001, driving forward maturity and integration with wider business More ❯
UK. The Information Security Manager Role: As Information Security Manager, you’ll be the go-to expert for all things security, steering our ISO27001 compliance and leading security strategy across the business. From protecting internal operations to aligning with defence frameworks, your work … operations and ensure our team stays at the cutting edge of cybersecurity excellence. Key Responsibilities of the Information Security Manager: Maintain and enhance ISO27001, Cyber Essentials / Cyber Essentials+, and DCPP compliance Lead policy development and risk mitigation across the … Own security controls for our North Bristol site Support the creation of project-specific security documentation and assurance strategies Skills & Experience: Experience leading ISO27001 and cybersecurity governance Strong knowledge of NIST CSF, ISO 27005, and DCPP frameworks Confident communicator with More ❯
Employment Type: Permanent
Salary: £65000 - £75000/annum Hybrid, Great Benefits
UK. The Information Security Manager Role: As Information Security Manager, you'll be the go-to expert for all things security, steering our ISO27001 compliance and leading security strategy across the business. From protecting internal operations to aligning with defence frameworks, your work … operations and ensure our team stays at the cutting edge of cybersecurity excellence. Key Responsibilities of the Information Security Manager: Maintain and enhance ISO27001, Cyber Essentials / Cyber Essentials+, and DCPP compliance Lead policy development and risk mitigation across the … Own security controls for our North Bristol site Support the creation of project-specific security documentation and assurance strategies Skills & Experience: Experience leading ISO27001 and cybersecurity governance Strong knowledge of NIST CSF, ISO 27005, and DCPP frameworks Confident communicator with More ❯
Liverpool, England, United Kingdom Hybrid / WFH Options
MFK Recruitment
four individuals are still with the company and really enjoying their roles! As an IT Systems Specialist, the role will ensure seamless onboarding, lead IT infrastructure projects, and support compliance initiatives (SOC2 Type II and ISO27001 audits). You will … systems (e.g., email groups, Jira → HubSpot), implement SSO via JumpCloud, and manage tool integrations. Compliance Support: Partner with Vanta to maintain SOC2 /ISO27001 readiness; document controls, remediate findings, and prepare audit materials. IT Operations: Troubleshoot issues, manage device inventory, and enforce security … compliance-focused roles. Hands-on experience with Google Workspace, Jira, SSO tools (e.g., JumpCloud), and MDM solutions. Familiarity with SOC2 Type II and ISO27001 frameworks (audit processes, control implementation). Strong project management skills; ability to prioritize tasks across multiple stakeholders. Excellent communication More ❯
four individuals are still with the company and really enjoying their roles! As an IT Systems Specialist, the role will ensure seamless onboarding, lead IT infrastructure projects, and support compliance initiatives (SOC2 Type II and ISO27001 audits). You will … systems (e.g., email groups, Jira → HubSpot), implement SSO via JumpCloud, and manage tool integrations. Compliance Support: Partner with Vanta to maintain SOC2 /ISO27001 readiness; document controls, remediate findings, and prepare audit materials. IT Operations: Troubleshoot issues, manage device inventory, and enforce security … compliance-focused roles. Hands-on experience with Google Workspace, Jira, SSO tools (e.g., JumpCloud), and MDM solutions. Familiarity with SOC2 Type II and ISO27001 frameworks (audit processes, control implementation). Strong project management skills; ability to prioritize tasks across multiple stakeholders. Excellent communication More ❯
Information Security Lead – Health Tech Salary: up to £100,000 + benefits Location: London (Hybrid) I’m hiring for a standout InfoSec Lead to join one of the UK’s most ambitious health tech startups. This is a company on a mission, combining clinical … compliance as they scale. What You’ll Do Define and implement security and compliance policies and controls across infrastructure, applications, and internal systems. Lead the development and execution of the roadmap toward ISO27001 certification and other key compliance frameworks. Collaborate … regulations. Your Experience 5+ years of experience in information security and compliance, ideally in regulated environments such as health tech. Deep knowledge of ISO27001, UK GDPR, and industry best practices. Proven experience preparing for and leading ISO or similar audits. More ❯
Compliance is a plus. Certifications (Highly Valued) CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CISA (Certified Information Systems Auditor) ISO27001Lead Auditor /Implementer CRISC (Certified in Risk and Information Systems Control) GDPR … years of experience in Information Security, Compliance, or IT Risk Management. Experience with regulatory frameworks in UK & EU : GDPR (General Data Protection Regulation) ISO27001 (Information Security Management Systems) Cyber Essentials Plus (UK government-backed security framework) DORA (Digital Operational Resilience Act) - EU financial … understanding of data protection laws (UK GDPR, EU GDPR, DPA 2018) . Familiarity with risk management frameworks like NIST CSF, CIS Controls, and ISO 27005 . Experience with cyber security tools (e.g., SIEM, Malware Protection, Firewalls and others) is a plus. Strong reporting and communication skills-ability More ❯
Information Security Lead – Health Tech Salary: up to £100,000 + benefits Location: London (Hybrid) I’m hiring for a standout InfoSec Lead to join one of the UK’s most ambitious health tech startups. This is a company on a mission, combining clinical … compliance as they scale. What You’ll Do Define and implement security and compliance policies and controls across infrastructure, applications, and internal systems. Lead the development and execution of the roadmap toward ISO27001 certification and other key compliance frameworks. Collaborate … regulations. Your Experience 5+ years of experience in information security and compliance, ideally in regulated environments such as health tech. Deep knowledge of ISO27001, UK GDPR, and industry best practices. Proven experience preparing for and leading ISO or similar audits. More ❯
reliable, automated software deployments while reducing operational overhead. Set standards for Infrastructure as Code (IaC) governance, ensuring consistency and compliance. Cloud & Infrastructure Leadership Lead the transformation from traditional infrastructure to cloud-native, platform-driven operations. Provide strategic direction for hybrid, multi-cloud architecture (AWS, Azure, on-premises … . Security, Compliance & Risk Management Ensure platform security aligns with ISO27001, NIST, and GDPR compliance. Embed security-first principles into platform governance and DevOps processes. Leadership, Collaboration & Stakeholder Management Lead and mentor a team of Platform Engineers, DevOps Engineers, and … field. Azure Solutions Architect Expert / AWS Certified Solutions Architect (Professional) Desirable. Certified Kubernetes Administrator (CKA) or equivalent (Desirable). ITIL, CISSP, or ISO27001LeadImplementer (Desirable). If you think you have what it takes, apply More ❯
reliable, automated software deployments while reducing operational overhead. Set standards for Infrastructure as Code (IaC) governance, ensuring consistency and compliance. Cloud & Infrastructure Leadership Lead the transformation from traditional infrastructure to cloud-native, platform-driven operations. Provide strategic direction for hybrid, multi-cloud architecture (AWS, Azure, on-premises … . Security, Compliance & Risk Management Ensure platform security aligns with ISO27001, NIST, and GDPR compliance. Embed security-first principles into platform governance and DevOps processes. Leadership, Collaboration & Stakeholder Management Lead and mentor a team of Platform Engineers, DevOps Engineers, and … field. Azure Solutions Architect Expert / AWS Certified Solutions Architect (Professional) Desirable. Certified Kubernetes Administrator (CKA) or equivalent (Desirable). ITIL, CISSP, or ISO27001LeadImplementer (Desirable). If you think you have what it takes, apply More ❯
Are you ready to lead the evolution of cyber defence at one of the UK's leading Universities? Your leadership will be instrumental as Man Met embarks on a major security and risk transformation programme-building a resilient, agile, and forward-looking security capability that supports innovation … across the University. Manchester Metropolitan University is seeking an experienced and motivated Security Operations Centre (SOC) Manager to lead and develop our Cyber Security Operations function. In this pivotal role, you'll guide a talented team to detect, investigate, and respond to threats across a diverse and … key platforms, develop our threat management approach, and drive improvements in our incident response and vulnerability management capabilities. You'll also take the lead in developing meaningful KPIs and performance metrics to monitor operational effectiveness, inform strategic decisions, and support continual service improvement. If you're passionate More ❯
and cybersecurity stakeholders to ensure that security requirements are appropriately defined, evidenced, and governed in alignment with relevant defence and maritime standards. Responsibilities Lead or support integrating cybersecurity assurance activities into engineering and programme delivery for marine and defence projects. Develop, review, and maintain cybersecurity assurance artefacts … equivalent experience) in Cybersecurity, Information Assurance, Systems Engineering, or a related technical or defence-focused discipline. Recognised cybersecurity certifications: CompTIA, CISSP, CISM, CRISC, ISO27001Lead Auditor /Implementer, or equivalent. Familiarity with MOD, maritime, or defence-specific … frameworks: JSPs, DEFSTAN, NIST, IEC 62443, IMO or ISO/IEC 27001. SC clearance (or eligibility to obtain SC as a minimum) is required; DV clearance is desirable depending on the programme needs. Essential skills Strong understanding of cybersecurity assurance principles, risk management, and regulatory More ❯
and cybersecurity stakeholders to ensure that security requirements are appropriately defined, evidenced, and governed in alignment with relevant defence and maritime standards. Responsibilities Lead or support integrating cybersecurity assurance activities into engineering and programme delivery for marine and defence projects. Develop, review, and maintain cybersecurity assurance artefacts … equivalent experience) in Cybersecurity, Information Assurance, Systems Engineering, or a related technical or defence-focused discipline. Recognised cybersecurity certifications: CompTIA, CISSP, CISM, CRISC, ISO27001Lead Auditor /Implementer, or equivalent. Familiarity with MOD, maritime, or defence-specific … frameworks: JSPs, DEFSTAN, NIST, IEC 62443, IMO or ISO/IEC 27001. SC clearance (or eligibility to obtain SC as a minimum) is required; DV clearance is desirable depending on the programme needs. Essential skills Strong understanding of cybersecurity assurance principles, risk management, and regulatory More ❯
The Role: Lead Security Architect Job Grade: Grade 7 Length of Contract: 9 Months Level of Clearance: SC Clearance Day Rate: £650 Key Responsibilities: You will analyse and assess cyber vulnerabilities at scale for their potential business impact, using your own skill and experience, and in consultation … Cyber Professional (CCP), CREST Registered Technical Security Architect, BCS Practitioner Certificate in Information Assurance Architecture, ISC(2) Information Systems Security Architecture Professional, ISO27001 Lead Implementer. More ❯
The Role: Lead Security Architect Job Grade: Grade 7 Length of Contract: 9 Months Level of Clearance: SC Clearance Day Rate: £650 Key Responsibilities: You will analyse and assess cyber vulnerabilities at scale for their potential business impact, using your own skill and experience, and in consultation … Cyber Professional (CCP), CREST Registered Technical Security Architect, BCS Practitioner Certificate in Information Assurance Architecture, ISC(2) Information Systems Security Architecture Professional, ISO27001 Lead Implementer. More ❯
