1 to 25 of 141 Permanent ISO/IEC 27001 Jobs in London

pitched appropriately for each audience from shopfloor to Board; influence organisational culture to embed risk‐based thinking at every level. Regulatory Reporting (GDPR / NIS2 / DORA) & Legal Liaison Lead regulatory compliance reporting across applicable regimes, including GDPR, NIS2, and DORA; act as the primary cyber security liaison … patching currency, MFA adoption rates, vulnerability remediation SLAs, and phishing resilience scores – and report progress against targets to senior leadership and divisional stakeholders. Board / ExCo / ISC Reporting Pack Production Produce clear, authoritative, and insightful reporting packs for the Board, Executive Committee, and Information Security Committee; deliver ...

. Lead ISO 27001 and SOC 2 Type II audits, ensuring controls remain effective. Drive readiness for ISO / IEC 42001 AI certification Apply prior experience successfully obtaining ISO and SOC certifications Manage customer due diligence requests … from design to release. Perform threat modelling, define non-functional security requirements, and review designs for security impact. Guide security considerations in our AI / LLM-enabled products. Risk & Incident Management Own the company-wide incident response plan and lead tabletop exercises. Perform ongoing risk assessments, vendor security reviews ...

usable, while developing software layers for integration, aggregation and communication of the buildings systems including but not limited to: Amazon (AWS) IoT Core / Google (GCP) IoT Core Safety & Security – Intruder, Fire, Access Control, CCTV, Lifts Telecommunications & IT Systems – UC, In-Building Cellular Audio Visual Systems – Digital Signage, Wayfinding … working with a Master Systems Integrator or Controls Specialist an advantage Demonstrate an understanding and an ability to adopt the principles of: BrickSchema ( https: / / brickschema.org / ) Project Haystack ( https: / / project-haystack.org / ) Cloud Data Storage such as AWS, GCP & Azure ...

Southeastern, and TransPennine Express. Our consumer-facing brand, TicketyBoo, is a train ticket booking app available to passengers across Great Britain. We hold ISO 27001 accreditation and PCI DSS compliance, and operate in a regulated, high-availability environment where governance and security are central to everything … Familiarity with PCI DSS compliance requirements Experience supporting public sector or regulated procurement processes Knowledge of the UK rail industry or exposure to RDG / TOC commercial environments What We Offer A direct reporting line to the Managing Director and genuine influence over a business-critical programme The chance ...

across the organisation. Your role in our future: Assist with the administration and maintenance of Quadient’s ISO 27001:2022 / ISO 27701:2019 certified ISMS / PIMS Investigate and resolve security incidents Maintain risk registers and ensure risks are identified, recorded … level experience in IT or security Degree in Information Security, IT or related field (or equivalent experience) ISO 27001 Foundation / Lead Implementer / Lead Auditor ISO 27701 Foundation CompTIA Security+ Certified Information Security Manager (CISM) or similar Additional Information Rewards & Benefits ...

Note : This role could be located anywhere between Brystol, London or Derby but 2 days / week in Derby are mandatory. Who we are: ALTEN is an engineering and technology consultancy services company. We are a leading Engineering and IT consultancy operating across 30 countries, making waves … implement corrective actions. Communication and Reporting Serve as the primary liaison for quality-related issues between clients and ALTEN teams. Participate in client / ALTEN meetings (PRM / CRM) and contribute with presentations. Organize quality reviews and provide performance reports as required. C. KPIs and Performance Quality Dashboards ...

primary liaison between client quality representatives and internal ALTEN teams for all quality-related issues Participate in meetings with client and ALTEN representatives (PRM / CRM) and actively contribute with presentations Organize quality reviews with client representatives (if applicable) and provide reporting on performance and ongoing actions according … propose adaptations to processes, methods, tools, and indicators used for project monitoring Use structured methods (8D, 5M, FMEA, 5S, Six Sigma, 5WHY’s, Ishikawa / fishbone) to analyze problems and propose solutions Project Management: Define, plan and monitor corrective and preventative action plans. Further engage internal and external stakeholders ...

capabilities Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response / Next Gen Protection and Response (EDR / XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms Defensive Security Skills (desired) : Experience in security … operations design, engineering and / or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities ...

Information Security Analyst - ISO 27001, SOC2, PCI DSS Audit & Compliance - Large Government Projects London Hybrid. Full-Time Permanent £80,000 - £90,000 plus bonus & benefits We're working with a global leader in workforce management solutions to find a certified Information Security Analyst well versed … Cyber Essentials, GDPR, DORA). Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal / external audits and compliance assessments. Relevant security / audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials Assessor ...

your scope. Compliance (30%) Own our data protection function day‐to‐day: UK GDPR, US state privacy law, and cross‐border transfer mechanisms (UK / EU / US / SG). Work closely with our vCISO to maintain ISO 27001 … just mark them up. Working knowledge of UK GDPR and practical experience managing compliance programmes or certification cycles (ISO 27001 / SOC 2 exposure strongly preferred). Genuine AI literacy – you use Claude or equivalent tools in your workflow; drafting without them would feel like ...

premise and cloud environments. Compliance and Risk Management: Ensure compliance with GDPR, SRA requirements (for legal sector), ISO 27001 / 2 standards and other applicable regulations in all jurisdictions where we operate. Manage internal / external audits; regularly assess current risks; report findings … culture of security awareness. Incident Management: Act as escalation point for major incidents; coordinate response efforts; conduct post-event reviews; update disaster recovery / business continuity plans accordingly. Position responsibilities (continued) Project Management: Provide strategic input on firmwide technology projects ensuring secure design principles are followed from inception through ...

into business processes and technology delivery. Key Requirements: 10–15+ years of experience across privacy, governance, compliance, intellectual property (IP), R&D incentives and / or transfer pricing, with a strong leadership track record in complex and regulated environments. Proven experience leading AI governance, compliance, privacy or risk functions … ability to influence senior stakeholders and drive governance across multiple business functions. Excellent leadership, communication and stakeholder management skills. Relevant certifications such as CIPP / E, CIPM, ISO Lead Auditor, ISO 27001, ISO 42001 or AI governance qualifications are desirable. ...

through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1 / 2, NIST, ISO27001, COBIT, etc.). Security Assurance – Delivering robust security frameworks such as ISO 27001, NIST, and Cyber Essentials to clients, enring their … Security, Security Architecture, Security Op Model Transformation projects and Cybersecurity Assessments, Secure AI. Familiarity with core cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.). Relevant Cybersecurity qualifications such as CompTIA Security+ ...

Payments, Financial Services, or regulated industries is highly valued. Integration & Technical Architecture: Solid grasp of APIs, webhooks, REST architecture, data pipelines, and modern security / compliance standards. Can analyse client infrastructure and map it to platform capabilities. Experience with Payments (Wise, Stripe, PayPal) or Financial Services integrations is valuable. … thrive without rigid playbooks. Comfortable operating in scale-up environments where customer needs inform product direction. Security & Compliance Acumen: Understand security requirements, SOC 2 / ISO 27001, data residency, audit logging, encryption. Trusted conduit between Sales and Technology - able to articulate product capabilities on security ...

Purpose of Position As Information Security Risk Manager (f / m / d) you will own and drive Awin’s global Information Security Risk Management capability end-to-end, ensuring the business not only understands its risks but takes measurable action to reduce them. You will be accountable … implementing, or improving control frameworks Experience with GRC platforms (e.g. Hyperproof) Confident communicator (with very good English skills) - able to build relationships and challenge / influence senior stakeholders Our Offer Flexi-Week : We prioritise your mental health and wellbeing by offering you a four-day Flexi-Week (with ...

will contribute... Governance, Risk & Compliance (GRC) Leadership Lead and manage the GRC team, aligning cyber and business goals while ensuring compliance with NIS-R, ISO27001 / 2, and NIST-2. Oversee delivery plans, resource allocation, and stakeholder engagement for GRC initiatives. Training & Awareness Develop and maintain SGN’s Information … from incidents and address feedback from training delivery. Information Security Policy & ISMS Maintain a robust portfolio of security policies, standards, and procedures to support ISO27001, NIST, and NIS eCAF compliance. Ensure policies are current, reviewed regularly, and approved by key stakeholders. Manage SGN’s Information Security Management System (ISMS ...

work at least 3 days per week in the office You’ll get 25 days holiday a year and the option to buy / sell and carry over from the year before Our flexible benefits package includes private medical and dental insurance, a competitive pension scheme, cycle to work … career and guide you on your journey through BAE You’ll be part of our company bonus scheme You are welcome to join any / all of our Diversity and Support groups. These groups cover everything from gender diversity to mental health and wellbeing About our team Our people ...

Facilities Building Supervisor / Manager - Data Centre The Facilities Buildings Supervisor is responsible for all Data Centre buildings. This is a pivotal role within a 5* DC campus The key objective of the role is to work with the team to take ownership of the DCs (excluding critical plant … including efficiency, quality and fabric across the site, ensuring that all buildings are maintained in compliance with industry best practice, legislation and relevant ISO standards, that they are energy efficient and serve our teams and customers perfectly. The role takes ownership of delivering building management projects aiming ...

including efficiency, quality and fabric across the site, ensuring that all buildings are maintained in compliance with industry best practice, legislation and relevant ISO standards, that they are energy efficient and serve our teams and customers perfectly. The role takes ownership of delivering building management projects aiming … Continuity and disaster recovery plans are documented, tested, implemented and maintained with the DC Buildings Manager. Previous experience of working to and within ISO regulated processes and procedures like • ISO 9001, ISO 27001, ISO 22301, BS OHSAS ...

their digital products in order to generate maximum repeatable income, increase market share, increase profit, ensure return on investment and improve customer satisfaction / experience while responding and aligning to the Division and Group's overall portfolio strategy. The role’s workstreams / packages are validated … where they are located, to apply globally and across all industries within the division. Duties & Responsibilities: Manage the resources necessary to deliver the Product / s that they are accountable for efficiently and effectively between the relevant site (Centre of Excellence (CoE / manufacturing facility) and the Regions ...

audits covering all aspects of the IT and IS departments' activities. Typically, this will involve working under the guidance of senior team members and / or audit leads. You will conduct audits of various risk and controls, prepare and review planning, identify key risks, execute fieldwork, document work completed … / banking applications. Cloud based SAS (both Public and Private implementation) solution exposure, including risk assessments. (AWS, MS Azure, GCP) ITIL / ISO27001 / SWIFT CSP certification experience Network Infrastructure review (Firewall reviews, Penetration testing review experience) Identity & Access Management. Voice & Telephony technology exposure and audit exposure ...

incident response and internal communications Track and ensure remediation of vulnerabilities and security incidents Governance, Risk & Compliance Support implementation of frameworks such as ISO 27001, Cyber Essentials Plus, NIST, and CIS Develop and maintain security policies, standards, and procedures Conduct risk assessments and track mitigation actions … Sentinel, Defender, Microsoft Security Stack) Familiarity with frameworks such as ISO 27001, NIST, CIS, Cyber Essentials Experience assessing third-party / vendor risk Excellent stakeholder management and communication skills Ability to translate security requirements into practical business outcomes Desirable Experience working with outsourced SOC providers ...

Threat Detection, Secure Remote Access, and Adaptive Security Policies, balancing exceptional user experience with enterprise grade security. We operate under an ISO / IEC 27001 certified ISMS and an ITIL aligned service management framework, ensuring integrity, resilience, and operational excellence. Joining Zero Plus … Automate provisioning and configuration using Terraform, Azure CLI, and PowerShell. Contribute to CI / CD integration for infrastructure as code. Ensure compliance with ISO27001 standards and Zero Trust principles. Manage firewalls, access controls, and threat detection. Maintain accurate documentation and mentor junior engineers. This role gives you the opportunity ...

notices, user-impact messaging, and post-incident reviews with measurable corrective actions. Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO / MFA platforms, directories, IGA administration, ITSM workflows, HR source‐of‐truth, APIs / connectors). Lead audit and compliance execution for access controls … Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments). Strong ITSM and operational management experience: incident / problem / change / request, SLAs / SLOs, metrics, and service health reporting. Demonstrated ability to manage third-party SI partners ...

large-scale change programmes spanning IT, OT and airport operational environments. Ensure delivery methodologies are appropriate for a regulated CNI context (e.g., hybrid agile / waterfall, structured assurance checkpoints). Manage interdependencies across technology, operational and regulatory workstreams. Ensure delivery outcomes are measurable in terms of risk reduction, control … Compliance Alignment UK aviation security frameworks CNI requirements Data protection legislation Relevant standards such as National Cyber Security Centre guidance and ISO / IEC 27001 Stakeholder & Relationship Management Cyber Security leadership CIO and senior IT leadership Operational airport leadership External partners and suppliers ...