1 to 25 of 33 Permanent ISO 27001 Lead Implementer Jobs in England

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation … security framework, working across the business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. 🔐 The Role You’ll take a hands-on role across information security governance, audit and compliance, helping ensure security controls remain effective ...

Lead Information Security & GRC Specialist London (Hybrid, 3 days in office) 80,000 - 100,000 + Benefits We're partnering with a well-established organisation that's continuing to invest in its Technology and Information Security capability. As the business continues to strengthen its security posture, they … Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering ...

development, implementation, and management of British Land's information security governance, risk, and compliance programme — ensuring alignment with regulatory requirements, industry standards (e.g. Iso 27001, nist), and good practice. As a member of a small, high-impact team, the role requires an all-rounder … standards. Monitor and report on the status of risk management activities. Compliance Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, iso 27001). Coordinate and support internal and external audits and assessments. Develop and deliver security awareness and training programs ...

governance, manage cyber and information risks, and achieve or maintain compliance with recognised standards and frameworks including ISO / IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer … manage multiple client tasks or engagements, work under pressure and meet deadlines. Relevant professional certification such as ISO / IEC 27001 Lead Auditor, ISO / IEC 27001 Lead Implementer ...

policies, standards, and procedures. Own and oversee the implementation and ongoing maintenance of key compliance frameworks, including: ISO / IEC 27001,PCI DSS andAlignment with NIST and ISF frameworks. Lead and oversee security risk management, ensuring risks are identified, assessed … : Significant experience in information security governance, risk, and compliance leadership roles. Proven experience implementing and maintaining ISO / IEC 27001 and PCI DSS compliance programmes. Strong understanding of security and risk frameworks, including NIST, SCF and ISF. Experience leading third-party / ...

Purpose: To lead 7IM’s cyber security function and own the day-to-day execution of the Cyber Security strategy across the 7IM Group. The role is accountable for protecting 7IM’s clients, colleagues, data, systems and services from current and emerging cyber threats, while supporting business … clear cyber roadmap, control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert ...

assessments, penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG / MOD assurance expectations. Strong background in Security Architecture, Cyber Security … Strong stakeholder management skills, including the ability to advise technical teams and brief non-technical decision makers. Knowledge of security frameworks such as ISO 27001, NIST, CAF, Secure by Design, GovAssure or HMG / MOD security standards. Comfortable working 5 days per week ...

reference architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering … ISO 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI / CD pipelines across client delivery teams Engage senior stakeholders and executive teams with clear security risk reporting, remediation guidance ...

looking for a Head of Information Security to own our end-to-end security posture, govern our risk and compliance programme, and lead our IT Operations function. This is a VP Level role with company‐wide scope. With approximately 200 employees across London, New York, Wroclaw, Antwerp … operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat modelling across the organisation Establish and maintain long‐term security architecture aligned to business strategy and regulatory requirements Guide technology decisions ...

closure. Report on security and compliance posture to leadership in clear, business-oriented terms. Compliance and certifications Drive certification and attestation efforts (e.g., ISO 27001 and / or SOC 2): design and maintain the control framework, own the documentation and evidence, and lead … rather than a once-a-year scramble. Track relevant regulatory and framework developments and translate them into practical action. Data protection and privacy Lead data protection under GDPR and UK GDPR; act as, or closely support, our Data Protection function. Maintain records of processing (RoPA), conduct Data ...

information security strategies, frameworks, and best practi cesConduct security risk assessments, gap analyses, and aud itsSupport clients in achieving and maintaining compliance (e.g. ISO 27001, NIST, GD PR)Develop and review security policies, procedures, and documentat ionPerform vulnerability assessments and coordinate remediation effo rtsDeliver … embed security into business proces ses Required Skills & Experi enceProven experience in an Information Security Consultant or similar roleStrong understanding of security frameworks (ISO 27001, NIST, CIS Contr ols)Experience conducting threat modelling exercises and risk-based security assessm ents Desirable Qualifica tionsProfessional certifications ...

Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing still is not an option … certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk data and translating findings into … Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) ISO 27001 Lead Implementer or Lead Auditor NCSC or other recognised cyber ...

security assurance initiatives. You possess strong knowledge of recognised cyber security frameworks and standards, including ISO / IEC 27001, NIS Directives, NIST, and UK Government Functional Standards, with demonstrable experience aligning security controls to MOD requirements such as DEFSTAN … cyber security or related specialism, Cyber Essentials Assessor, Cyber Assurance Assessor, CISM, CISSP, PCIRM or ISO / IEC 27001 Lead Implementer or Lead Auditor certification. You hold, or are actively working towards, Principal ...

Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role … Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial ...

looking for a Security Regulatory Compliance Specialist to lead and manage compliance with key security regulations such as NIS2, DORA, Telecom Security Act , and other applicable laws and standards. This role is responsible for monitoring evolving regulatory requirements, translating them into actionable controls, and ensuring the organization … Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g. ...

have: Experience developing, reviewing or managing cyber security policies, standards, procedures or governance frameworks. Strong knowledge of recognised cyber security frameworks such as ISO 27001, NIST, or the Cyber Assessment Framework (CAF). Experience supporting compliance, risk management, governance or information assurance programmes. Excellent … Industrial Control Systems (ICS) security. Knowledge of cyber resilience requirements within critical national infrastructure environments. Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer / Auditor. What's on Offer Opportunity to influence cyber strategy within ...

security requirements that the design team will build to. You will work within a small, security-cleared team alongside a Secure by Design lead and a security architect, and directly with the client's design team, in an environment where accuracy, traceability and clear documentation carry real … Security+, CySA+, CISM, CISSP (or associate), ISO 27001 Lead Implementer / Lead Auditor, ISO 27005 risk, ISA / IEC 62443 Cybersecurity Fundamentals Specialist, or equivalent professional experience. Candidates working towards relevant ...

Doing As the Infrastructure & Security Manager, you'll play a pivotal role in keeping systems secure, resilient and scalable. You'll lead infrastructure strategy while remaining hands-on with day-to-day technical delivery. Key responsibilities include: Managing cloud infrastructure, networking, firewalls, servers, storage and security technologies. … acting as the first point of contact for security incidents. Managing backup and disaster recovery solutions to ensure business continuity. Driving and maintaining ISO 27001 compliance, audits and security improvements. Developing infrastructure roadmaps and implementing technical change. Supporting colleagues with internal IT infrastructure issues ...

CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding … Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture ...

CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF‐related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding … Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture ...

successfully deliver innovation, improve resilience and support secure, regulated and operationally critical environments. As part of the Expleo UK Cybersecurity Practice, you will lead the delivery of product security, cyber assurance and secure-by-design activity for a major UK defence maritime programme, supporting an autonomous surface … CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer / Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding ...

role for an engineer who is comfortable designing across operational technology, IT, networks, and physical security, and who can serve as a design lead to naval architects, systems engineers, a digital system integrator, and subsystem owners. Because the platform is designed to operate crewless, the architecture must … Expert), SABSA, TOGAF, CCNP, OSCP, ISO 27001 Lead Implementer / Lead Auditor or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly ...

frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. Represent … systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

German C1+ and strong English skills. Experience in IT / OT cybersecurity within industrial or KRITIS environments. Strong knowledge of IEC 62443, ISO 27001, NIS2, and KRITIS requirements. Experience working with OT systems and industrial control environments. Confidence engaging with technical and senior … stakeholders. Desired Skills Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer. Experience with BSI IT-Grundschutz or similar German frameworks. Exposure to manufacturing, automation, or smart factory environments. Company Benefits 30+ vacation days. Strong training and certification support. Work ...