2 of 2 Permanent ISO/IEC 27005 Jobs in London

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

activities. Promote a proactive and risk-informed culture across the organisation. Knowledge & Skills: Thorough understanding of cyber risk frameworks and assessment methodologies, including ISO 27005 and NIST Risk Management Framework. Ability to develop and maintain cyber risk registers, taxonomies, risk scoring methodologies and risk appetite frameworks. … years with significant responsibility for cyber risk management. Proven track record of conducting or overseeing cyber risk assessments using recognised methodologies such as ISO 27005, NIST RMF, FAIR or OCTAVE. Experience developing, maintaining and governing cyber risk registers within complex organisations. Establishing or facilitating risk governance ...