1 to 25 of 33 Permanent ISO/IEC 27001 Jobs in Hampshire

first line of defence for our clients’ technical environments. While the core of the position involves ad-hoc technical support (diagnosing issues, configuring hardware / software, and troubleshooting networks), every action you take will be guided by strict security protocols and data protection regulations. You will not only resolve … software, and network systems. Industry-specific certificates in networks, security (e.g., CompTIA Security+, CISSP Associate, or ISO 27001 Lead Implementer / Auditor) are highly desirable. Successful security clearance and vetting is mandatory for this role. Soft Skills: Excellent problem-solving skills with a focus ...

Cyber Resilience Managers and the Head of Product Security, to deliver effective security assurance and risk management. What you'll bring: Practical experience of ISO27001 / 27004 / 27005 and NIST Risk Management Framework (RMF). Experience of supporting a security risk management system for highly regulated products … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us At Leonardo, our people ...

required by ISO 27001 Ensure compliance with data protection legislation. Promoting awareness as well Stay up-to-date of statutory / legal changes impacting on information security, incorporating them into relevant policies and advising staff on their implementation Assist with internal and external audit programmes. … satisfy Identify high risk issues and escalate as required Investigate IT related complaints and incidents in conjunctions with Security Manager, Security team, and / or other departments. Also providing input for remedial action plans Closure of audit and testing non-conformities through the provision of sound remedial actions Work ...

equivalent**Knowledge / Experience:*** Substantive experience in product security* Hands-on experience with risk management frameworks and best practice like NIST SP800-37, ISO27001, and Secure by Design (ISN 2023 / 09)This is not an exhaustive list, and we are keen to hear from you even … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting**Why join us**At Leonardo, our people ...

with updated detection requirements. Lead incident response for confirmed security events - coordinating containment, remediation, and recovery. Own and manage Defender for Endpoint / XDR and Defender for Cloud Apps - maintaining configuration, reviewing alerts, and tuning detection policies. Manage SIEM rule sets - adding new detection use cases, tuning existing rules … Identity & Access Management Own the organisation's Identity & Access Management discipline - including Entra ID, Privileged Identity Management (PIM), and access governance. Monitor the joiner / mover / leaver (JML) process - ensuring accounts are provisioned, modified, and deprovisioned accurately and on time. Run and manage access reviews and access ...

evidence ready for Stage 2. This is a hands on delivery role, not an advisory one. You will have support from an established QA / Compliance function, senior management is behind this, and the company has a brilliant culture to operate within, one of the best. You will work … audits The Ideal Candidate We’re looking for the following in the successful candidate: Solid, progressive experience ISO 27001:2022 ISO27001 Lead Implementer or Lead Auditor qualification Track record of getting non IT departments to own controls, with the credibility and patience to make it stick ...

work is carried out safely and to the highest standards, including but not limited to: Health & Safety, Occupational Health & Safety, Compliance and Environmental standards / legislation. Aerodrome license and CAA standards. Appropriate Workplace Behaviour, UK Modern Slavery and General Data Protection & Retention (GDPR) Policies. Support the team with adhoc … activities / tasks as reasonably requested. About You Evidence of Right to Work in the UK. Full 5‐year employment / educational history required (with no unaccounted-for gaps). Able to obtain a clear Criminal Record Check (CRC) certificate and a Counter Terrorist Check (CTC) certificate ...

policy and work in line with the company Quality Management System. Ensuring own and Teams adherence to Axians’ Management System Manual for Quality (ISO 9001), InfoSec (ISO 27001) and ESG (ISO 14001). ADDITIONAL RESPONSIBILITIES Value Demonstration: Consistently embody and demonstrate Axians … Responsibility, Entrepreneurial Mindset and Autonomy —in all interactions and behaviours, both internally and externally. REQUIRED SKILLS AND QUALIFICATIONS Competent using Microsoft Office applications *(excel / word / outlook). Extensive years’ experience in vendor relationships with the skills to create business plans and execute against them involving multiple ...

policies, NAT, and high-availability configurationsDeploy and support FortiADC load balancers, including application delivery, traffic distribution, and high-availability designsConfigure and manage Dell L2 / L3 switching environments, including VLANs, trunking, and inter-VLAN routingDesign and maintain core routing architecture using protocols such as OSPFProvide secure VPN access into … carrier handoffsEnsure resilient and redundant network designs aligned to production requirementsFortinet Firewalls (FortiGate)FortiADC (load balancing and application delivery)Dell networking (Layer 2 / Layer 3 switching platforms)Routing (OSPF)VLAN design and network segmentationLayer 2 / Layer 3 switchingWhat You Bring to the Role:Education:Bachelor ...

Deliver cyber security assessments and assurance engagements Support Cyber Essentials and Cyber Essentials Plus assessments Conduct security reviews against recognised frameworks including ISO 27001 Review the effectiveness of technical and operational security controls Identify security risks, control gaps and areas for improvement Produce clear reports … love to hear from you. You'll be a certified Cyber Essentials Plus assessor and have exposure to some of the following areas: ISO 27001 Security assurance and compliance activities Security control assessments Risk management Vulnerability management Security governance Supplier assurance Cloud security concepts Technical security ...

Jenoptik in Farnborough is seeking an Information Technology Security Expert to provide security-focused technical support, troubleshoot issues, and ensure ISO 27001 compliance across client environments. You will document actions for audits, communicate security implications clearly, and collaborate with Global DPO and security teams to maintain ...

Support / Technical Support / 1st Line Location: Fleet Job Type: Full-time Hybrid working Technical Support Consultant, where you will be the first point of contact for customers, providing rapid response, troubleshooting, and exceptional customer interaction. This role is crucial in ensuring that customers feel supported … total of 30 days. Eligibility for company bonus scheme. Opportunities for professional development and training in information security and compliance with ISO 27001 standards. ...

Agile Framework (SAFe), agile delivery practices, and automated testing into the IT services delivered to the customer. This includes ownership of the Continuous Integration / Continuous Delivery (CI / CD) pipeline design and implementation using appropriate tooling to support agile deliveries. The engineering process and supporting toolset … design governance, configuration control, change management, verification, and release processes. Ensure engineering processes align with regulatory, customer, and internal quality standards. Own the CI / CD pipeline and tooling to support agile deliveries incorporating automated test tooling. Support broader tooling used to support the engineering processes (e.g. Azure DevOps ...

Managed Service. Accountable for gateway and guard operations, segmentation controls and compliance with security boundary requirements; experienced with multi domain routing, CDS / guard patterns and high assurance boundary architectures. This is a critical, site-based role responsible for ensuring the right skills are in place at the right … Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP / IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating and governing services within accredited ...

Description:Engineering Governance Lead / Chief EngineerLocation: Hampshire (onsite 5 days per week)Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role … implementation to verification evidence.Govern engineering tooling, including Azure DevOps Server, Jira, Confluence and Ansible, ensuring it supports effective engineering delivery and auditability.Govern the CI / CD and automated testing capability supporting Agile delivery.Support the adoption and maturity of SAFe and Agile engineering practices.Drive engineering maturity, continuous improvement and reduction ...

Elasticsearch, YML, JSON, XML) Experience with Azure cloud Significant experience in programming or advanced scripting (Python, PowerShell, C# etc.) Experience with infrastructure / configuration as code and version control (ARM, BICEP, Git) Strong Experience managing monitoring, alerting and dashboarding platforms (Azure Monitor, Prometheus, Grafana, Elasticsearch) Demonstrable experience of supporting … establish and enforce SLOs, SLAs, and error budgets. Production experience with Kubernetes and containerization (AKS) Exposure to Azure DevOps pipelines is desirable (CI / CD) Strong experience in infrastructure as a code, design and implementation strategies. Experience with AI (tools) to automate and accelerate is a plus. Efficient, effective ...

management, and enterprise risk management, combined with strong stakeholder engagement and leadership skills to drive security transformation programmes across the organisation. Qualification: BSC and / or MSc in Cyber Security, Computer Science, Information Technology, Information Security or related subject or relevant industry experience. CompTIA Security+ CASP+ (or SecurityX) Associate … membership grade with CIISEC ICS2 Certified Cloud Security Professional (CCSP), Certified Information, Systems Security Professional (CISSP), and / or Information Systems Security Architecture Professional (ISSAP) CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management Additional cloud security qualifications such as Microsoft Azure, AWS, GoogleAdvanced degree ...

real operational impact. What You’ll Do As a SOC Lead, you’ll lead the everyday operation, development, and continuous improvement of the 24 / 7 Consolidated Security Operations Centre (SOC). You will be responsible for overseeing all Consolidated SOC functions, managing a team, and ensuring the delivery … detection, incident management and response, and where required threat hunting services. Your work may include: Run the day to day operations of the 24 / 7 Consolidated SOC in line with customer requirements and SiXworks Security practices. ConsolidatedDefine and execute the SOC strategy aligned with organisational security goals. Recruit ...

implementation throughout the full lifecycle of products and services. Collaborate with software engineering, DevOps, and Information Security teams to integrate security controls into CI / CD pipelines, cloud environments, and application architectures. Promote secure development practices by championing secure coding standards, conducting code reviews, and identifying vulnerabilities early … certification such as CISSP, CISM, CISA, CEH , or an equivalent qualification demonstrating advanced security expertise. Strong knowledge of cybersecurity frameworks and standards, including ISO 27001, NIST, CIS Controls , and experience supporting their implementation and continuous improvement. Hands-on experience with security technologies, tools, monitoring platforms ...

alignment with security guardrails and regulatory requirements. Mentor engineering teams and provide guidance on cryptographic implementations, securely managing secrets, and data protection at rest / in transit. Support the rest of the Security Architecture team with daily security architecture activities (e.g. adhoc security architecture advisory services). Security Architecture … Experience: Proven track record in a Information Security Architect or Senior Security Engineering role designing secure, distributed systems within modern cloud environments (AWS / GCP). Deep Cryptography Expertise: Comprehensive practical and theoretical knowledge of symmetric / asymmetric cryptography, PKI management, digital signatures, key management systems ...

program maturity and communicate compliance status to leadership. What You Will Need: 7+ years of experience in cybersecurity compliance, governance, risk & compliance (GRC), IT / cyber risk management, or a related regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience … experience with frameworks such as GDPR, DORA, and ISO 27001 with the ability to quickly build expertise in emerging regulations. Proven experience developing, implementing, or maturing compliance programs, helping organizations strengthen governance, controls, and regulatory readiness. Excellent project management skills, with the ability to independently lead ...

Group Head of Information Technology Andover / Hybrid Cross Rental Services are looking for experienced Group Head of Information Technology, to own the full IT function and act as the strategic partner to the CFO in a high-growth, PE-backed HVAC hire business. This is a pivotal, hands … transforming immature ones Deep expertise in strategy, architecture, governance, and commercial delivery Ability to evaluate and recommend tech stacks (you define the tools – AWS / Azure, ERP, etc.) Strong financial acumen – budgeting, capex / opex, vendor ROI What we offer: Competitive salary with car allowance. 25 days’ holiday ...

Managed Service. Accountable for gateway and guard operations, segmentation controls and compliance with security boundary requirements; experienced with multi domain routing, CDS / guard patterns and high assurance boundary architectures.This is a critical, site-based role responsible for ensuring the right skills are in place at the right time … Cross Domain Solutions (CDS) and secure information exchange technologies* Network segmentation and Zero Trust Architecture* Security monitoring, SIEM, logging, and threat detection capabilities* TCP / IP networking, routing, switching, DNS, and network security principles* Secure architecture and defence-in-depth design patterns* Experience operating and governing services within accredited ...

server hardware Infrastructure automation tools such as Terraform or PowerShell At least 2 years' experience as a technical escalation point for 1st / 2nd line IT support teams. Experience with Azure, Cloudflare, Mimecast, or Zscaler is an advantage. Strong analytical and problem‐solving skills, able to work both independently … part of a team. Proven ability to deliver projects to agreed timescales and quality standards. Familiarity with ISO 27001, PCI DSS, SOC 2, or similar security frameworks. Driving license and access to a vehicle - travel to south of England data centre locations is required. What ...

equivalent demonstrable experience Strong communication, analytical and report-writing skills Desirable Experience Knowledge and application of Secure by Design principles Experience working with ISO 27001, NIST or similar security frameworks Understanding of security assurance and compliance activities Familiarity with classified or highly regulated environments Experience within ...