16 of 16 Permanent ISO 27001 Lead Implementer Jobs in London

Lead Information Security & GRC Specialist London (Hybrid, 3 days in office) 80,000 - 100,000 + Benefits We're partnering with a well-established organisation that's continuing to invest in its Technology and Information Security capability. As the business continues to strengthen its security posture, they … Opportunity This is a hands-on role suited to someone who has successfully led, or played a significant role in, delivering an ISO 27001 certification programme. You'll own and continually improve the Information Security Management System (ISMS), working closely with Technology, Infrastructure, Engineering ...

development, implementation, and management of British Land's information security governance, risk, and compliance programme — ensuring alignment with regulatory requirements, industry standards (e.g. Iso 27001, nist), and good practice. As a member of a small, high-impact team, the role requires an all-rounder … standards. Monitor and report on the status of risk management activities. Compliance Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, iso 27001). Coordinate and support internal and external audits and assessments. Develop and deliver security awareness and training programs ...

Purpose: To lead 7IM’s cyber security function and own the day-to-day execution of the Cyber Security strategy across the 7IM Group. The role is accountable for protecting 7IM’s clients, colleagues, data, systems and services from current and emerging cyber threats, while supporting business … clear cyber roadmap, control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert ...

reference architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering … ISO 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks Support DevSecOps adoption and integrate security tooling and controls into CI / CD pipelines across client delivery teams Engage senior stakeholders and executive teams with clear security risk reporting, remediation guidance ...

looking for a Head of Information Security to own our end-to-end security posture, govern our risk and compliance programme, and lead our IT Operations function. This is a VP Level role with company‐wide scope. With approximately 200 employees across London, New York, Wroclaw, Antwerp … operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat modelling across the organisation Establish and maintain long‐term security architecture aligned to business strategy and regulatory requirements Guide technology decisions ...

closure. Report on security and compliance posture to leadership in clear, business-oriented terms. Compliance and certifications Drive certification and attestation efforts (e.g., ISO 27001 and / or SOC 2): design and maintain the control framework, own the documentation and evidence, and lead … rather than a once-a-year scramble. Track relevant regulatory and framework developments and translate them into practical action. Data protection and privacy Lead data protection under GDPR and UK GDPR; act as, or closely support, our Data Protection function. Maintain records of processing (RoPA), conduct Data ...

Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing still is not an option … certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor.* Experience in regulated industries, implementing relevant regulations and expectations for third-party security risk management.* Proven experience designing, running, and improving vendor ...

Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk data and translating findings into … Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) ISO 27001 Lead Implementer or Lead Auditor NCSC or other recognised cyber ...

Security Consultant Join a fast-growing technology consultancy helping organisations strengthen their cyber resilience through expert advisory services. This is an opportunity to lead high-profile consulting engagements, mentor talented consultants, and play a key role in shaping the growth of an ambitious Cyber Security practice. Role … Hybrid (2 days per week on site) Package: £75,000- £95,000pa & benefits Industry: Cyber Security / Consultancy What You'll Be Doing Lead the successful delivery of cyber security consulting engagements across a broad range of industries. Manage multiple client projects, ensuring high-quality delivery, commercial ...

looking for a Security Regulatory Compliance Specialist to lead and manage compliance with key security regulations such as NIS2, DORA, Telecom Security Act , and other applicable laws and standards. This role is responsible for monitoring evolving regulatory requirements, translating them into actionable controls, and ensuring the organization … Strong organizational and stakeholder management skills Proactive mindset with high attention to detail Might haves: Professional certifications such as: CISM, CISSP, CRISC, CISA ISO 27001 Lead Implementer / Auditor Experience working with regulators or in regulated industries (e.g. ...

Nxera Pharma is seeking an Associate Director, Cybersecurity to lead and continuously improve cybersecurity across a globally distributed biopharmaceutical environment. This is a senior, hands‐on leadership role responsible for protecting Nxera’s most valuable digital assets, including research data, intellectual property, scientific platforms, regulated information, corporate … commercially sensitive data. Reporting to the Head of IT Infrastructure, Support Services and Security, the role will act as Nxera’s cybersecurity lead, working closely with internal IT teams, business stakeholders and specialist external partners / vendors. The successful candidate will combine strategic cyber risk leadership with ...

directly with clients, solving complex security challenges, and contributing to the growth of a dynamic cyber security practice. Key Responsibilities Client Delivery Management Lead and manage the delivery of cyber security consulting engagements for clients of varying sizes and sectors. Manage a team of consultants delivering cyber … risk management methodologies. Experience managing the delivery of security consultancy projects directly to clients. Knowledge of cyber security frameworks and standards including ISO 27001, NIST CSF, and CIS Controls. Experience managing client risk assessments and security maturity reviews. Strong stakeholder management and client‐facing ...

architecture, engineering and change processes.* Partner with 2LOD to ensure alignment with regulatory expectations (e.g. DORA, UK OpRes). 3. Risk Governance & Decisioning* Lead 1LoD technology risk governance forums).* Provide independent first-line challenge to engineering, architecture, and product teams.* Escalate and drive resolution of material … .* Ensure availability of accurate, decision-ready risk data.* Drive adoption of data-led risk management across engineering teams. 7. Leadership & Operating Model* Lead and develop a high-performing technology risk team.* Define clear roles, responsibilities, and RACI across first and second lines.* Build risk capability across ...

performing technology risk team. Requirements Senior leadership in technology risk within regulated financial services. Ownership of control frameworks aligned to recognised standards (NIST, ISO, COBIT). Strong track record in risk governance and remediation of systemic issues. Operational resilience and incident management expertise. Experience engaging with regulators … executive stakeholders. Cloud and third-party risk oversight. Degree in Computer Science / Engineering or equivalent experience. Certifications (preferred): CRISC, CISM, CISSP, ISO 27001 Lead Auditor / Implementer, ITIL Expert. #J-18808-Ljbffr ...

above in Information Security, Computer Science, Information Technology or a related discipline. Professional certifications such as CCIE, HCIE, CISSP, CISM, CISA or ISO27001 Lead Implementer are highly desirable. Relevant experience in network, information security, cyber security or IT risk management, preferably within the financial … services industry. Experience in developing and implementing information security governance frameworks. Strong understanding of information security standards and frameworks such as ISO 27001, NIST Cybersecurity Framework or CIS Controls. Good knowledge of UK regulatory expectations related to cyber security, operational resilience and outsourcing risk. ...

Your level of experience will determine the amount or responsibility given to you, as a result you may also have the opportunity to lead assignments and be responsible for supervising direct reports whilst ensuring the overall success of the engagement. You will be given the opportunity … such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer / Auditor, SABSA, and TOGAF. A Mentor will be on hand to provide support and guidance throughout your journey ...