1 to 25 of 511 Permanent ISO/IEC 27001 Jobs in London

bias, misuse, hallucination, privacy, IP, safety), proposing mitigations and helping companies to define documentation. Advice is aligned to recognised frameworks (e.g., ISO / IEC 23894 AI risk management, ISO / IEC 42001 AI management systems, ISO / IEC 27001 / 27701, NIST AI RMF) and emerging AI assurance standards from the National Physical Laboratory. Evaluate & Monitor Progress: TDAs track organisational progress throughout the deployment journey, providing targeted technical assurance input for high-risk or complex projects. They use the baseline assessment ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world's largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You'll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

recruit an ISO 27001 and ISO 27018 Information Security Analyst to strengthen our Information Security and Audit / Compliance functions. Alfa Systems sits at the heart of some of the world’s largest asset finance companies, across 26 countries which means information security … compliance with ISO 27001 and ISO 27018 on point. You’ll get involved in SSAE 18 / ISAE 3402 SOC 1 Type 2 and SSAE 18 SOC 2 Type 2 assurance audits, spot opportunities to improve our security controls and processes, and contribute ...

Security Architect Department: Digital Employment Type: Permanent Location: Cheltenham Compensation: £75,000 - £85,000 / year Description PoloWorks are currently recruiting this role on behalf of our parent company Marco Group. We are looking for an AI Security Architect to own the security posture of AI tooling across … governance model for AI tooling, and will act as the Group's technical authority on generative AI risk – including data leakage, prompt injection, agentic / tool-use risk and model access control. The role will also support engineering teams in embedding secure practices where AI-assisted development tools ...

work you do here directly contributes to Europe’s technological independence. What you'll do You co-own our natively ISO / IEC 27001-based ISMS: policies, Statement of Applicability, risk management, internal audits and the preparation of certification and customer audits. Because … handling and management reporting. Who you are You have several years of experience in information security management or GRC and know ISO / IEC 27001 thoroughly. You have worked with BSI IT-Grundschutz in practice and understand how it differs from a native ...

testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define, coordinate … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification issued ...

environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal / external audit functions. Develop understanding of regulated industry compliance requirements and communicate how we control activities to meet global regulatory obligations. Liaise with customers … being a trusted advisor, facilitator and creative problem solver. Implement continuous improvements to the security organization and the program management process. Share program / project process frameworks, tools, and best practices that can be adopted throughout the organization. Apply a working knowledge of global information security regulation and policy ...

engagement with regulators and external stakeholders where required. Track regulatory findings, recommendations and actions through to closure. Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus. Knowledge & Skills: Strong understanding of cyber security principles, governance frameworks and compliance management practices. Knowledge of compliance … stakeholder engagement and communication skills, with the ability to work effectively across technical and business functions. Familiarity with ISO 27001 / 27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF). Understanding of the UK regulatory landscape for cyber security ...

within our DNA. Invest in us andwe'llinvest in you!. Job Description Open to SC Clearedand SC eligible candidates the Technical Architect (Oversight / Technical Owner) will act as the senior technical owner within the Version 1 delivery organisationworking closely with a key customer. The role is accountable … Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO / IEC 27001, ISO / IEC 20000-1 and OWASP practices. Strong stakeholder management and communication skills ...

work closely with client security leadership (BISOs and CISOs), assurance specialists, architects, engineers, product owners and delivery teams, acting as the cyber security authority / SME across projects, technology releases, and product implementations. Join our Digital & Data team working alongside product, design and a wide range of other experts … right controls in place. Embed into interdisciplinary client teams as a cyber security SME, providing authoritative advice and guidance on the design, application / implementation and operation of security controls of all types of security controls and technologies. Act as a trusted cyber security specialist within client delivery teams. ...

intercepting disciplines. Your responsibilities As our new Control Engineer, you will work on the development and implementation of control philosophies for substations and HV / MV networks. Moreover, your responsibilities will include specifying, designing and applying control and protection solutions for a wide range of complex national and international … architectures, including RTUs, PLCs, and protection relays, ensuring reliable integration with primary equipment and SCADA systems. Experience applying relevant standards and legislation within SCADA / ICS / DCS and networks, including IEC 62443, NIS2, IEC 61508, ISO / IEC ...

operational security positions. Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO / IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners … positions. (Lead Criteria) Knowledge across relevant information security and privacy management frameworks and legislation, such as NIST, the NIS Regulations 2018, ISO / IEC 27001, ITIL, COBIT, Data Protection Act 2018 (GDPR). Proven experience of working with strategic vendors and partners ...

Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based / Ad-Hoc Travel Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing … house. Location: Home Based (UK) with Ad-Hoc travel to sites Salary: £55,000 to £65,000 per annum D.O.E + benefits Skills / Requirements for the Technical Cyber Security Lead: Strong hands-on security experience in a Microsoft environment, including M365, Entra ID, Defender, Purview, Azure and Windows ...

hosted SaaS products for regulated industries — covering identity verification, lettings compliance, e-signing, uptime monitoring and secure document storage — alongside business, technology and Oracle / SAP ERP consulting and ISO 27001-led security audits. Everything we ship is designed around UK data residency … engineering team What we are looking for A relevant degree or equivalent professional experience 4+ years' cyber-security experience Cloud-security experience (AWS and / or Azure) Working knowledge of security frameworks such as ISO 27001 and Cyber Essentials Experience preparing for and supporting audits ...

business impact analyses, business continuity and IT disaster recovery plans and their testing (including the AWS cloud environment), helping ensure recovery objectives (RTO / RPO) are documented, achievable and evidenced, with lessons learned fed into improvements. Data Protection Governance Support the Data Protection Officer in operating the bank … security awareness and data protection training to foster a strong risk awareness culture across the bank. Requirements EDUCATION & TRAINING Bachelor's degree in Information / Cyber Security, Computer Science or a related discipline; equivalent professional experience may be considered. Relevant professional certifications are strongly preferred, for example CISM, CISSP ...

organizational requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part … Proven experience with security control testing and assurance activities Strong knowledge of one or more frameworks: ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 SOC 2 / ISAE 3402 CIS Critical Security Controls Strong analytical and problem-solving ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure in several countries … here, not your previous salary Equity in Volta, giving you the opportunity to share in the company's long-term success Retirement / pension contributions Comprehensive health, wellbeing and insurance benefits Generous number of vacation days each year Additional Information Equal Opportunity Volta is an equal opportunity employer. ...

Senior Information Security Manager, Risk, Compliance, Security, London, Hybrid / Remote to £65,000 A leading independent authority are requiring a Senior Information Security Manager to play a pivotal role in their Compliance team. The Reporting to the Head of Compliance, you will lead the ISO 27001 … incidents, and contributing to policy development. The key responsibilities of this role are to oversee information security standards by managing and continually improving ISO 27001-certified Information Security Management System, leading business continuity management for information and technology risks, and supporting the organisation’s development ...

represent Mozilla credibly and confidently in front of external auditors. Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor / Implementer) are a plus. Commitment to our values: Welcoming differences Being relationship-minded Practicing responsible participation Having grit What you'll get: Generous performance … time home office stipend. Annual professional development budget. Quarterly well-being stipend. Considerable paid parental leave. Employee referral bonus program. Other benefits (life / AD&D, disability, EAP, etc—varies by country). About Mozilla Mozilla exists to build the Internet as a public resource accessible to all because ...

Notified Body audits, with a focus on Design and Development aspects. Champion compliance in software development by translating complex and opaque IEC / ISO standards into clear, actionable processes that engineering teams can follow. What we will look for SaMD Experience : Prior experience working … doing the defining work of your career. We take care of you. We offer comprehensive private medical and dental cover through Bupa 24 / 7 mental health coaching and wellbeing support through Sonder a £100 / month Healthy Heidi's wellness stipend a £500 home office budget ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts ...

distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling — https: / / enginebystarling.com / careers / engineering / As a Security Engineer at Engine, you'll be working on helping … Manager (EKM) and Secret Manager — including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI / CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills — in security we write our own scripts ...

drive down lead times and change failure rates. Secure SDLC: embed technical security requirements across the development lifecycle, optimising automated security controls within CI / CD pipelines, and ensuring well informed platform and product security architecture decisions drive strong protection, resilience and scalability. Corporate IT & Access Controls: Manage … Production Infrastructure functions at consumer scale (tens of millions of active users). Product Integration: Demonstrated experience partnering with Product, Design, and Mobile / Backend Engineering teams to ship user-facing features to roadmap. Audit Track Record: Successful execution and ongoing maintenance of ISO 27001 ...

stakeholders. As a cyber security advisory lead, you will ideally have relevant skills and experience working in cyber security using best practices (e.g., ISO27001, NIST Cyber Security Framework, NIS Regulations) and / or experience working in Infrastructure (IT / OT) or Cloud environments with cyber security responsibilities … cyber security technologies for use in complex environments. information security management concepts to support solutions and processes. industry good practice and frameworks such as: ISO27001, IEC62443, NIST Cyber Security Framework, CIS Critical Security Controls. relevant legislation and regulation such as: Data Protection Act (DPA), Network and Information Systems (NIS) Regulation ...

subprocessor changes, breach notifications, SLA performance. Maintain the supplier and outsourcing registers, including preparation for the FCA's material third party register under PS26 / 2 (rules in force 18 March 2027). Track concentration risk and exit plans for critical suppliers. 2. Inbound due diligence and customer assurance … Security to take to ExCo and the Risk Committee. 5. Vulnerability and findings management Consolidate findings across sources — EDR, cloud security posture, SAST / DAST / SCA, secrets scanning, penetration tests — into a single view with agreed severity definitions and remediation SLAs. Triage, route and chase remediation with ...