21 of 21 Permanent ISO 22301 Jobs in London

impact analyses and defining continuity and testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define … degree in Computer Engineering, Telecommunications Engineering or a related discipline. Additional Required Qualifications At least two of the following certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 22301 Lead Auditor, CEH, CCSP or SSCP. Willingness to travel when required. Desirable ...

methodology, reporting and remediation tracking. Develop supporting templates and documentation and provide knowledge transfer. Work independently while maintaining objectivity and professional challenge. Essential Requirements ISO/IEC 27001:2022 Lead Auditor certification. ISO 22301:2019 Lead Auditor certification. Demonstrable experience conducting internal audits against both standards . … reporting and stakeholder management skills. Evidence of both current Lead Auditor certifications will be required. Desirable Experience auditing complex or international organisations. Experience supporting ISO certification or surveillance audits. Information security and business continuity risk management experience. Experience with Microsoft 365, Azure and cloud environments. Consultancy ...

access management (PAM) capabilities, including approval workflows and continuous monitoring.Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation (e.g., ISO 27001, ISO 22301).Integrate IAM with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle.Oversee Conditional Access ...

Maintain and continuously improve the ISO 27001:2022 Information Security Management System, including policies, standards, procedures, documentation and Statement of Applicability. Provide security and data protection assurance for new initiatives, changes and projects, embedding security-by-design and privacy-by-design. Conduct information security risk assessments, prioritise threats … diligence for suppliers, processors and critical third parties. Partner with auditors, regulators and payment schemes; prepare evidence and support audits, certifications and reviews including ISO 27001, CHAPS, FPS, Bacs and SWIFT CSP. Produce management reporting, metrics, KRIs, dashboards and committee packs on security posture, incidents, vulnerabilities, data protection ...

Directory domains/forests and cloud identity components (Entra/Azure AD) Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO 27001, ISO 22301) Integrating IAM with HR, IT, and engineering systems throughout the user lifecycle Staying ahead of emerging technologies including passwordless ...

Audit Lead for a remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO/IEC 27001:2022 and ISO 22301:2019. You will plan and deliver audits, assess control effectiveness, interview stakeholders, and deliver reports ...

stakeholder management. Working within regulated or complex enterprise environments. Desirable Important Business Services (IBS) and impact tolerances. DORA, FCA/PRA Operational Resilience, NIS2, ISO 22301 or ISO 27001. Supplier exit planning and third-party resilience testing. Cloud, Infrastructure or Managed Service provider environments. ...

supporting the Operations Supervisor and Director with a variety of tasks, including: Accreditation Support: Assist in achieving and maintaining company accreditations, including BSI Quality, ISO 14064, ISO 22301, and more. Quality Checks: Conduct random checks to ensure adherence to Standard Operating Procedures (SOPs) and investigate any quality … team setting. Comfortable in a fast-paced environment, managing multiple projects with tight deadlines. Strong organisational skills with an eye for detail. Experience with ISO/NQA accreditations. Proven ability to manage change and adapt to shifting priorities effectively. Why Apply?/Benefits Excellent salary and regular reviews Free ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection assurance … Partner with auditors, regulators and payment schemes by preparing evidence, providing subject‐matter expertise, and supporting internal and external audits, certifications and reviews (including ISO 27001 surveillance and scheme assurance such as CHAPS, FPS, Bacs and SWIFT CSP). Advise stakeholders on information security and data protection regulatory obligations ...

level of growth and are leaders in their industry. Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 Information Security Management … System PCI-DSS Payment Card Industry Data Security Standard ISO 22301 Business Continuity GDPR and Data Protection Laws Conduct regular internal audits in line with the requirements of the standards. Implement compliance initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … mobile payment systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. ...

regulated financial services environment Strong knowledge of audit standards, risk management, and internal controls Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure Advanced data analytics … Professional‐level English (written and spoken) Nice to have: Professional certifications such as CIA, CISA, CPA Additional IT/security certifications ( CISSP, CISM, CRISC, ISO 22301 , or similar) Experience with audit‐related data analytics tools What sets you apart: High ethical standards and integrity Strong analytical and problem ...

/Azure/Oracle), Root Cause Analysis, Regulatory Compliance, DORA, KPI/SLA Management, Release Management, Business Impact Analysis, Senior Leadership, ITIL 4, ISO22301, ISO/IEC 20000, CBCP, MBCI, Site Reliability Engineering (SRE), Vulnerability Management, PowerShell, Python, Splunk, CyberArk, GenAIDirector, Head of Technology Resilience and Production Operations London … analytical, decision-making and communication skills, with the ability to lead confidently and calmly under pressureDesirable: ITIL 4, ITSM tooling (ServiceNow, Jira Service Management), ISO22301/ISO20000, CBCP/MBCI certification, SRE familiarity, or experience with tools such as Splunk, CyberArk PAM, or GenAI-driven service managementReady to take ...

have the following Experience in the aviation or transport sector.Familiarity with cloud-based recovery solutions and emerging technologies.Professional certifications such as CBCI, ITIL, or ISO 22301.Developing and maintaining comprehensive IT disaster recovery plans aligned with Heathrow’s business continuity framework.Coordinating with cybersecurity, IT services, and business continuity teams ...

Excellent understanding of UK regulatory landscape for Operational Resilience, including the Bank of England, PRA, and FCA policy frameworks, alongside established BCM standards (e.g. ISO 22301) Excellent communication and interpersonal skills with ability to form effective relationships at different levels Fluency in Mandarin is a plus ...

time-sensitive regulatory deliverables. Experience supporting audits and regulatory engagements. Preferred Qualifications, Capabilities, and Skills: Working knowledge of recognized resilience/BCM frameworks (e.g., ISO 22301) and UK operational resilience practices (service mapping, impact tolerances, scenario testing). Relevant certifications (e.g., CBCP, MBCI) or similar. Bachelor ...

internal tooling). Experience improving data quality, controls, and reporting automation (e.g., exception reporting, standardised taxonomy). Familiarity with resiliency/risk frameworks (e.g., ISO 22301, FFIEC, NIST) and evidencing governance via metrics/reporting. Experience supporting regulatory engagements and audits with traceable, data-driven responses. Relevant degree ...

resilience matters clearly and confidently. Demonstrable success translating regulatory requirements into practical, business focused resilience strategies and action plans. Professional qualifications such as CBCI, ISO 22301 or similar are advantageous, although equivalent experience will also be considered. Additional information We’re always looking to recognise and reward ...

experience with IBS mapping, ITOLs, BIAs and dependency mapping. Proven scenario testing and control assurance experience. Knowledge of UK Operational Resilience regulation, BCM/ISO 22301 and DORA. Strong stakeholder management and communication skills. Advanced Excel, PowerPoint and Word capability. Able to operate independently and deliver at pace. ...

criteria ahead of final manager sign-off. Audit coordination: gather and coordinate evidence packs and technical documentation to support Sedex ethical-sourcing audits alongside ISO 9001, 14001 and 22301 certifications. Reporting: assist the Compliance & Quality Manager with monthly reporting by tracking product-level compliance and fault-ratio data. ...

criteria ahead of final manager sign-off. Audit Coordination: Gather and coordinate evidence packs and technical documentation to support Sedex ethical-sourcing audits alongside ISO 9001, 14001, and 22301 certifications. Reporting: Assist the Compliance & Quality Manager with monthly reporting by tracking product-level compliance and fault-ratio data. ...