to non-technical stakeholders. Bachelor’s degree inInformation Security, Computer Science, or a related field. A Master’s degree is a plus. Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable. More ❯
to non-technical stakeholders. Bachelor’s degree inInformation Security, Computer Science, or a related field. A Master’s degree is a plus. Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable. More ❯
to non-technical stakeholders. Bachelor’s degree inInformation Security, Computer Science, or a related field. A Master’s degree is a plus. Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable. More ❯
london (city of london), south east england, united kingdom
Sanderson
to non-technical stakeholders. Bachelor’s degree inInformation Security, Computer Science, or a related field. A Master’s degree is a plus. Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable. More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
london (city of london), south east england, united kingdom
Prism Digital
security posture, and influence business-wide awareness and accountability. What you’ll bring: 5+ years in InfoSec, IT Security or Ops within a regulated environment Certification required: CISSP, CISM, CRISC, or equivalent Strong knowledge of ISO27001:2022, SOC2 Type II, NIST CSF, PCI DSS, GDPR, DORA Confident with security risk assessments, audit responses, and policy governance Hands-on cloud security More ❯
organisation experience Audit and compliance expertise Exceptional communication skills with the ability to influence at all levels Desirable Computer Science degree or related field Additional certifications (CISA, CISM, CCIE, CRISC, SANS credentials) Legal or professional services sector experience What's On Offer Competitive salary (£110-135k) and comprehensive benefits package Opportunity to work on high-profile, industry-shaping matters More ❯
with GRC software is a plus. Desired qualifications, if you have some of these great! CompTIA Security+ CertifiedInformationSystems Auditor (CISA) CertifiedinRiskandInformationSystemsControl (CRISC) CertifiedInformationSystems Security Professional (CISSP) Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Barclay Simpson
cyber risk management, frameworks, and assurance. Strong stakeholder engagement and communication skills. Experience in large, federated, and complex global organisations would be particularly valuable. Certifications such as CISM, CISA, CRISC, CISSP or ISO27001 are highly desirable. Proficiency with Power BI and a pragmatic, hands-on approach. This role offers hybrid working, with two to three days per week in a More ❯
cyber risk management, frameworks, and assurance. Strong stakeholder engagement and communication skills. Experience in large, federated, and complex global organisations would be particularly valuable. Certifications such as CISM, CISA, CRISC, CISSP or ISO27001 are highly desirable. Proficiency with Power BI and a pragmatic, hands-on approach. This role offers hybrid working, with two to three days per week in a More ❯
london, south east england, united kingdom Hybrid / WFH Options
Barclay Simpson
cyber risk management, frameworks, and assurance. Strong stakeholder engagement and communication skills. Experience in large, federated, and complex global organisations would be particularly valuable. Certifications such as CISM, CISA, CRISC, CISSP or ISO27001 are highly desirable. Proficiency with Power BI and a pragmatic, hands-on approach. This role offers hybrid working, with two to three days per week in a More ❯
london (city of london), south east england, united kingdom Hybrid / WFH Options
Barclay Simpson
cyber risk management, frameworks, and assurance. Strong stakeholder engagement and communication skills. Experience in large, federated, and complex global organisations would be particularly valuable. Certifications such as CISM, CISA, CRISC, CISSP or ISO27001 are highly desirable. Proficiency with Power BI and a pragmatic, hands-on approach. This role offers hybrid working, with two to three days per week in a More ❯
Fidelis Partnership Skills & experience University degree, preferably in Computer Science, Information Technology, Mathematics, Science or Economics Strong preference for candidates with advanced degree or relevant industry qualifications (e.g., CISA, CRISC, CISM) Strong academic background and mathematical acumen Experience with industry standard IT risk management frameworks (e.g., NIST, ISO 27001, Cyber Essentials, COBIT, COSO) 10+ years' experience in the IT RiskMore ❯
of security frameworks including ISO27001/2, Cyber Essentials Plus, CIS Top 20, Data Protection Act 2018, OWASP Top 10 Have a relevant industry certification such as CISSP, CISM, CRISC, BRMP or similar You'll be able to be yourself; we'll recognise and value you for who you are and celebrate and reward your contributions to the business. We More ❯
of design and implementation of control automation and continuous monitoring would be useful but not essential. Demonstrable experience inInformation Technology audits or IT Assurance (e.g., CISSP, CISM, CISA, CRISC, CCAK) A sound understanding of British and International Security Standards (e.g., ISO/IEC 27001, ISO/IEC 27002, NIST, CIS-20, PCIDSS) and the UK regulatory environment (e.g., ICO More ❯
and operating system experience - 7+ years of external or internal customer facing, complex and large scale project management experience - Bachelor's degree - Relevant cyber security accreditation including CISSP, CISA, CRISC, etc. and working knowledge of cyber security and technology risk management frameworks including NIST CSP, CIS Benchmarks, ISO27001, etc. PREFERRED QUALIFICATIONS - 7+ years of IT platform implementation in a technical More ❯
multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help drive personal development. More ❯
multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help drive personal development. More ❯
multinational experience . Experienced in audit (external and internal) and familiar with Internal Audit standards. Technology Risk/Technology Audit/Technology Controls Certifications: CISA, ITIL, COBIT (CISSP, CISM, CRISC, Prince2 ISO27001 desirable) Able to make a high impact on management, to manage stakeholders and to communicate clearly. Display a passion for working in teams and help drive personal development. More ❯
with AppSec and DevSecOps. Hands-on knowledge of Azure, AWS, and/or Google Cloud. Familiarity with standards like ISO2700X, ISO31000, NIST800, PCI-DSS. Certifications such as CISSP, CCSP, CRISC, CISM, or SABSA. Why QBE? At My Best? At QBE, we want our people to feel rewarded and inspired to perform at their best, that’s why we have created More ❯
the GRC team Who You Are: Degree-qualified in a relevant field such as Business, Risk, Audit, or a related discipline Ideally professionally qualified in Audit or GRC (e.g., CRISC, Lead Auditor Certificate) Experienced in audit, compliance, or risk management (minimum 1 year) Knowledgeable about ISO standards and audit techniques, with experience in Security, Business Continuity, and Sustainability programmes Strong More ❯
the GRC team Who You Are: Degree-qualified in a relevant field such as Business, Risk, Audit, or a related discipline Ideally professionally qualified in Audit or GRC (e.g., CRISC, Lead Auditor Certificate) Experienced in audit, compliance, or risk management (minimum 1 year) Knowledgeable about ISO standards and audit techniques, with experience in Security, Business Continuity, and Sustainability programmes Strong More ❯
of leading and managing a team and a budget. Experience of managing a 3rd party service and hybrid teams in a matrix management model. Desirable Criteria CISSP, CISM or CRISC certification and some formal training ininformation security standards or significant professional experience. Why Financial Ombudsman Service? We are a values led organisation. Our values define our culture, influence our More ❯