1 to 25 of 62 Permanent Cyber Essentials PLUS Jobs in London

Technical Architect SC Clearance, Azure, Technical Architecture, Cloud & Infrastructure Modernisation, Enterprise Architecture, Secure by Design, Cyber Assessment Framework (CAF), Cyber Essentials Plus (CE+), GovAssure, IT Resilience, Disaster Recovery, Business Continuity, Remote (UK) Monthly Bristol Travel Up to £100,000 + Benefits This is a fantastic Technical … high availability, disaster recovery, business continuity, and operational readiness. Demonstrated experience delivering projects aligned to security and governance frameworks such as Secure by Design, Cyber Essentials Plus (CE+), the NCSC Cyber Assessment Framework (CAF), and GovAssure. Ability to define architecture deliverables (HLD/LLD), guide engineering ...

Cyber Assurance & Risk Analyst Location: London Salary : £60,000 per annum Vacancy Type: Permanent, Full Time Closing Date : 18 of September 2026 At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World … join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict. Why This Role Matters Cyber security plays ...

Cyber Assurance & Risk Analyst Location: London Salary : £60,000 per annum Vacancy Type: Permanent, Full Time Closing Date : 18th of September 2026 At Imperial War Museums, we're driven by a shared purpose: helping people understand conflict and its impact on people's lives, from the First World … join a collaborative team who work together to protect and make these collections accessible for future generations. It's a unique opportunity to combine cyber security expertise with meaningful work that supports one of the world's leading museums of conflict. Why This Role Matters Cyber security plays ...

Moore Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands … role focused on delivering penetration tests across web applications, APIs, and internal and external network infrastructure. You will also support Cyber Essentials Plus assessments and wider technical security reviews, including vulnerability assessments, configuration reviews against recognised benchmarks, and cloud security reviews. You will identify and safely validate ...

projects, as well as brilliant colleagues to learn from and collaborate with. Essential Purpose of the role: You will join the team as a Cyber Security Analyst, providing day-to-day operational security coverage across our toolset. Working closely with the Senior Cyber Security Engineer, you will maintain … compliance alerts. Maintain and respond to security-related DDQs, keeping the security evidence library current. Assist with compliance activities and audits for ISO 27001, Cyber Essentials & Cyber Essentials Plus certification. Provide technical expertise on security best practices and risk mitigation. Collaborate with IT and business ...

assessed through external and internal audits. You will ensure that the organisation is fully compliant with the required Information Security Standards including ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST and GovAssure. This includes the responsibility for all of the control documentation and audit process … their office in South London and comes with a very competitive benefits package. Responsibilities Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management. Develop and promote policies to ensure compliance with regulations, standards and good practice ...

policies, risk assessments, and executive reporting for leadership and the board Own end-to-end audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Embed DevSecOps and secure SDLC practices into CI/CD pipelines Oversee penetration testing, red teaming … first CISO-level leadership role Experience with Zero-Trust security roadmaps, policies, and risk assessments Experience with SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53 Experience embedding DevSecOps and secure SDLC practices into CI/CD pipelines Experience overseeing penetration testing ...

role: the postholder ensures the infrastructure is secure, scalable, resilient and aligned with business needs, whilst taking a leading role in strengthening the organisations cyber security posture. The Senior IT Infrastructure Engineer line manages two UK-based engineers, leads infrastructure projects and major escalations, and collaborates closely with … Modern Workplace: Own and enhance the UKs Azure and Microsoft 365 environments, including Entra ID, Conditional Access, Intune device management and Microsoft Defender. Cyber Security Posture: Support and continuously enhance the organisations cyber security posture, hardening Microsoft 365 and infrastructure to security best practice, tightening identity and access ...

gathering and analysis Maintain and improve the Information Security Management System (ISMS) Conduct security risk assessments and maintain risk registers Assist with ISO 27001, Cyber Essentials, and client assurance audits Review and update security policies, standards, and procedures Support secure adoption and governance of AI technologies Conduct security … questionnaires and assess supplier risks Monitor third-party security compliance Support security awareness programmes and phishing simulations Develop employee guidance and educational materials Support cyber incident investigations and post-incident reviews Maintain incident response documentation and playbooks Participate in incident response exercises and tabletop testing Assist with business continuity ...

security & continual improvement of our core digital services. This is an exciting opportunity for a technology leader with expertise in Microsoft 365, cloud platforms, cyber security and modern digital technologies, including the safe adoption of AI-enabled solutions. Interviews to be held on or around 7th October Main duties … performance, resilience and continual improvement. Manage supplier relationships and third-party support contracts, ensuring effective performance and value for money. Oversee delivery of technical cyber security controls supporting Cyber Essentials Plus, DSPT and NHS cyber security standards. Ensure infrastructure, cloud and end-user computing services ...

Drive performance and operational excellence across Shared Service’s Cyber Services function Act as a technical escalation point and line manager Support threat analysis, incident response, and security assurance activities Foster a proactive culture of cyber hygiene and continuous improvement Collaborate across departments to strengthen Shared Service … security posture Deputise for the Service Desk Manager during high workload or absence periods Lead cyber service operations focused on SLA attainment, incident response, and resolution quality Oversee daily workflow distribution and prioritise emerging threats and investigative escalations Ensure complex or unresolved cybersecurity issues are escalated appropriately Line manage ...

security & continual improvement of our core digital services. This is an exciting opportunity for a technology leader with expertise in Microsoft 365, cloud platforms, cyber security and modern digital technologies, including the safe adoption of AI-enabled solutions. Interviews to be held on or around 7th October Main duties … performance, resilience and continual improvement. Manage supplier relationships and third-party support contracts, ensuring effective performance and value for money. Oversee delivery of technical cyber security controls supporting Cyber Essentials Plus, DSPT and NHS cyber security standards. Ensure infrastructure, cloud and end-user computing services ...

Security Advisory & Client Solutions Associate Manager/Manager (Microsoft Security) The Security Advisory & Client Solutions Manager is a senior, client-facing cyber security professional responsible for leading security advisory engagements, shaping strategic security opportunities, and driving growth across Microsoft-first clients. The role combines deep security consulting experience with … assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks, develop high-quality proposals and presentations ...

estate, working alongside our engineering teams on the security of what we build and over time, working directly with customers. ISO 27001, Cyber Essentials, Cyber Essential Plus, Defence Cyber Certification and the standards our sector demands are real and they matter. But we want them … endpoints and our AWS-hosted environments — driving the plan and getting stuck into the work alongside our InfraCare team Make our ISO27001 and Cyber Essentials obligations business-as-usual; automated where it can be and evidenced as a by-product of how we work Help us build ...

Kingsley Napley is seeking a Head of Information Security to lead and develop the firms cyber security capabilities ensuring the confidentiality, integrity and availability of the firm’s information systems, data and services. . Reporting into the Chief Information Officer you will maintain ownership of the firm’s ISO27001 … Information Security Management System and Cyber Essentials Plus certification plus the wider security policies and standards. What you’ll do Develop and deliver the firm's cyber security strategy in line with the firm’s goals and risk appetite. Lead and continuously improve the firm ...

services. Conduct security assessments, technical reviews and support penetration testing programmes. Support and maintain the Information Security Management System (ISMS), including ISO 27001 and Cyber Essentials Plus compliance activities. Perform risk assessments and ensure security policies, standards and procedures remain effective and up to date. Provide security … organisation. Contribute to the continuous improvement of security controls, processes, reporting and strategic security initiatives. What You’ll Bring Experience in information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure/Entra ID and cloud ...

Head of Information Security London | £100,000 to £110,000 | Hybrid, 3 days office Are you an experienced Information Security leader who can combine cyber strategy with hands-on operational leadership in a highly regulated professional services environment? We are recruiting a Head of Information Security for a leading … London law firm. Reporting directly to the CIO, you will take ownership of the firm's cyber security strategy, security operations, cyber risk and assurance, while leading the continued development of its security capability. This is a broad leadership position covering everything from the outsourced SOC and incident ...

Cyber Security Architect & Engineering Lead Hybrid/Remote: Just 1 day per month in the London office Leading UK Professional Services Firm Ready to take the technical lead on security? We're working with a leading UK professional services firm that is making a significant investment in its internal … cyber security capability. They're looking for a Cyber Security Architect & Engineering Lead to play a key role in shaping the firm's future security architecture and engineering capability. This is a senior, hands-on position where you'll have the opportunity to design, build and improve security ...

Cyber Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000/year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future … management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations. Provide clear, risk-based technical advice to senior leaders, project teams ...

threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering ISO 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI/… cybersecurity cost and sustainability perspective, ensuring security investments are well‐justified and efficiently allocated About the Candidate Bachelor’s or Master’s degree in Cyber Security, Computer Science, Physics with Computing, or a related discipline; MSc or equivalent postgraduate qualification is advantageous Proven experience in a Cloud Security Architect ...

support and mentor junior support staff. Security, compliance and audit Own assigned control areas within our certification and audit programme, covering ISO 27001, Cyber Essentials Plus, the NHS Data Security and Protection Toolkit and DTAC assessments. Prepare for and take part in external audits and surveillance visits … regulated environment, the record is as important as the fix. Right to work in the UK. Desirable Direct experience of ISO 27001, Cyber Essentials Plus, DSPT, DTAC or SOC 2 audits as an implementer rather than an observer. Infrastructure as code, ideally Terraform. Jira administration and automation. ...

ROLE We are looking for a senior IT security leader to define, implement and assure our information and cyber security posture across the firm. This is a new leadership role with broad responsibility for security strategy, standards, controls and services, operating at a level aligned to CISO capability. Location … Birmingham, Leeds, London THE ROLE We are looking for a senior IT security leader to define, implement and assure our information and cyber security posture across the firm. This is a new leadership role with broad responsibility for security strategy, standards, controls and services, operating at a level aligned ...

infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default. Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards. Work with engineering to define and enforce secure coding standards and review practices. … production environments. Solid understanding of network security, identity and access management, and secrets management in cloud-native architectures. Experience supporting UK Government security compliance: Cyber Essentials Plus, DSPF, or equivalent frameworks. Able to work effectively with development teams: comfortable reviewing code, writing runbooks, and shipping tooling yourself. ...

Cyber Security Engineer Housing Association Day Rate - £390-450 Inside IR35 Day Rate: 6-9 months Hybrid - 1 day per week in Twickenham Morgan Hunt is delighted to be partnering with a leading Housing Association to recruit an experienced Cyber Security Engineer on a 6-9 month contract … . This is an excellent opportunity for a hands‐on security professional to join an established cyber security function and play a key role in strengthening the organisation's security capabilities across applications, infrastructure, networks, data and cloud platforms. The Role Working closely with the Cyber Security Manager ...

contribute to incident root-cause analysis Participate in on-call rotations Implement network solutions meeting regional compliance and data sovereignty requirements (ISO 27001, Cyber Essentials Plus, UK G-Cloud, EU data residency/GDPR, PCI-DSS) Design, implement, and operate CrowdStrike's global cloud and data center … Technologies Soft Skills Independent Problem Solving Cross-Functional Collaboration Certifications & Qualifications CCIE JNCIE AWS Professional GCP Professional OCI Professional Azure Professional Industry Keywords Cyber Essentials Plus ISO 27001 GDPR PCI-DSS UK G-Cloud Sovereign Cloud Tools & Technologies Ansible Terraform Python Go CI/CD Pipeline OpenStack ...