1 to 25 of 27 Permanent SOC 1 Jobs in England

Manager role You’ll own compliance execution at Light. Reporting to the Head of Finance & Core Ops , you’ll be responsible for running our SOC 1, SOC 2, and PCI programmes end to end, keeping us audit-ready, and making sure controls actually work in practice. This … Kubernetes via Tanka/Jsonnet Datadog and CloudWatch for logging and monitoring 25 engineers scaling to 50+, distributed team What you’ll own Run SOC 1, SOC 2 (Type I & II), and PCI DSS etc compliance programmes Plan and manage audits, timelines, and auditor relationships Own evidence ...

these tools daily and know how to get real leverage from them. You'll own the operating rhythm for frameworks like ISO 27001, SOC 1, SOC 2, HIPAA and future standards that matter to our customers. You'll keep evidence organised, controls running, policies up to date … drive action across teams, and keep the bar high. Focus/Ownership You'll own Humaans' security compliance programme end‐to‐end, including ISO, SOC 1, SOC 2, HIPAA and future frameworks we choose to pursue. You'll manage audit cycles throughout the year, coordinating with external ...

more information. Responsibilities/Skills Own the day-to-day execution of Dexory's ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison Maintain our GRC platform - keeping controls, evidence, and risk registers current … with ISO 27001 as an implementer or internal auditor; genuine ownership, not just process participation Solid working knowledge of SOC 1 and SOC 2 frameworks (AICPA Trust Services Criteria) Familiarity with cloud security principles, particularly AWS Nice to Have Certs (ISO 27001 Lead Implementer, CISM, CISA, CISSP ...

Certinia Proposal Manager as applicable.Supports calls with customers to highlight security within products.Supports compliance audits and readiness initiatives (driven by frameworks such as SOC 1, SOC 2, ISO 27001, ISO 42001, FedRAMP).Monitors control remediation efforts with stakeholders across various functions in different geographies & time zones.Document … Governance, Risk & Compliance (GRC) or with an IT audit background.Experience implementing or auditing information security programs based on industry frameworks such as ISO 27001, SOC 1, SOC 2, FedRAMP, or similar.Bachelor’s Degree or equivalent work experience in Computer Science, Engineering, Accounting, or related field required.Strong, customer ...

financial software company in London is seeking a Global Compliance Manager to oversee compliance execution. You'll manage audits for SOC 1, SOC 2, and PCI programs, ensuring robust control implementation and corporate compliance. Ideal candidates will have 3-7 years in compliance, strong engineering collaboration skills ...

policies and standardsManage security review processes for all solutions to ensure they their design and implementation meets compliance requirements – including PCI-DSS, ISO 27001, SOC 1 & SOC 2 and other regional requirements Document and actively communicate any areas where the solutions and processes are not fully compliant.Identify … improve deficient conditions. To the greatest extent possible, ensure all Corporate Standards, SDLC, Change Management, and risk governance protocols are followed.Review vendor contracts and SOC reports to evaluate the impact on the company’s controls. Coordinates with third party vendors where appropriate.General Duties and Responsibilities:Reliably demonstrate accountability ...

policies and standardsManage security review processes for all solutions to ensure they their design and implementation meets compliance requirements – including PCI-DSS, ISO 27001, SOC 1 & SOC 2 and other regional requirements Document and actively communicate any areas where the solutions and processes are not fully compliant.Identify … improve deficient conditions. To the greatest extent possible, ensure all Corporate Standards, SDLC, Change Management, and risk governance protocols are followed.Review vendor contracts and SOC reports to evaluate the impact on the company’s controls. Coordinates with third party vendors where appropriate.General Duties and Responsibilities:Reliably demonstrate accountability ...

policies and standardsManage security review processes for all solutions to ensure they their design and implementation meets compliance requirements – including PCI-DSS, ISO 27001, SOC 1 & SOC 2 and other regional requirements Document and actively communicate any areas where the solutions and processes are not fully compliant. … deficient conditions. To the greatest extent possible, ensure all Corporate Standards, SDLC, Change Management, and risk governance protocols are followed. Review vendor contracts and SOC reports to evaluate the impact on the company's controls. Coordinates with third party vendors where appropriate. General Duties and Responsibilities: Reliably demonstrate accountability ...

and close the coverage gaps where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with … software or SaaS company serving regulated enterprise customers, and of facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes ...

.NET Core, TypeScript, React, Python, Go Datadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHog Google Workspace, Jumpcloud, Vanta, Hibob, Slack GitHub, CircleCI, ArgoCD SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 42001 Who you are You have at least 8 years of experience ...

ability to assimilate easily into teams Strong technical skills and a working knowledge of SOX IT General Controls, COSO, SOC 1, and SOC 2 Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards Effective analytical and critical thinking abilities Entrepreneurial nature, self‐motivated, ethical ...

reports, penetration testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements. Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations to stakeholders. Supplier … security assessments of cloud providers, SaaS vendors, technology suppliers, and outsourced service providers. Strong understanding of security frameworks and standards including ISO 27001, NIST, SOC 1/2, CIS Controls, and cloud security best practices. Experience evaluating security controls across identity management, network security, encryption, vulnerability management, incident ...

reports, penetration testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements. Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations to stakeholders. Supplier … security assessments of cloud providers, SaaS vendors, technology suppliers, and outsourced service providers. Strong understanding of security frameworks and standards including ISO 27001, NIST, SOC 1/2, CIS Controls, and cloud security best practices. Experience evaluating security controls across identity management, network security, encryption, vulnerability management, incident ...

audit reports, penetration testing results, independent assurance reports, and supporting evidence.Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements.Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations to stakeholders.Supplier Assurance & Continuous … conducting security assessments of cloud providers, SaaS vendors, technology suppliers, and outsourced service providers.Strong understanding of security frameworks and standards including ISO 27001, NIST, SOC 1/2, CIS Controls, and cloud security best practices.Experience evaluating security controls across identity management, network security, encryption, vulnerability management, incident response ...

communication skills, and ability to assimilate easily into teams. Strong technical skills and a working knowledge of SOX, COSO, SOC 1, and SOC 2. Effective analytical and critical thinking abilities. Entrepreneurial nature, self-motivated, ethical, and dependable. Strong project management skills. High energy with a commitment ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and ...

and procedures sharp and our compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18/ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and ...

programmes. Understanding of UK and EMEIA payment regulations and industry standards. Experience with audit analytics and automated control testing. Experience with Service Organisation Controls (SOC1, SOC2, ISAE3402) reporting. Knowledge of cloud, AI and emerging technology risks. Experience supporting large banking, capital markets, asset management or insurance clients. Relevant certifications such ...

payment modernisation programmes.Understanding of UK and EMEIA payment regulations and industry standards.Experience with audit analytics and automated control testing.Experience with Service Organisation Controls (SOC1, SOC2, ISAE3402) reporting.Knowledge of cloud, AI and emerging technology risks.Experience supporting large banking, capital markets, asset management or insurance clients.Relevant certifications such as CISA; CISM; CISSP ...

logistics with data intelligence in the UK. We seek an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence across engineering, product and operations. You’ll partner with the Head ...

inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.Blockchain.com is looking for an experienced Chief Information Security Officer (CISO) to lead our global cyber security organization as we continue … with business objectives and IPO readiness.Foster a culture of security across the company by being a strong business-enabler.Lead and scale the Security Engineering, SOC and Security GRC organizations.Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness.Strengthen our cloud, application and ...

inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions. Blockchain.com is looking for an experienced Chief Information Security Officer (CISO) to lead our global cyber security organization as we continue … objectives and IPO readiness. Foster a culture of security across the company by being a strong business-enabler. Lead and scale the Security Engineering, SOC and Security GRC organizations. Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness. Strengthen our cloud ...

ideal candidate has 3–5 years in public accounting or industry IT audit, progressing toward CISA or CIA, with knowledge of SOX ITGC, COSO, SOC1/SOC2 and standards like ISO 27001 and NIST. You will work in a collaborative team across engagements. #J-18808-Ljbffr ...

meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control ...