5 of 5 Permanent ISO 31000 Jobs in London

their deployment within EO and Global security teams. About you Security and Risk Expertise Demonstrable experience applying security and risk-based standards, including ISO 2700X, ISO 31000, NIST 800, and PCI-DSS. Strong understanding of how to identify security weaknesses and take accountability for driving mitigations through ...

Experience assessing and managing IT services, cyber, data, and AI-related risks within complex, global organizations. Knowledge of enterprise risk management frameworks (COSO ERM, ISO 31000), security frameworks (NIST CSF, ISO 27001), AI risk frameworks (NIST AI RMF), and key risk indicators (KRIs).Excellent written and verbal ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...

executive stakeholders, the successful candidate will lead security assessments, maturity reviews, regulatory readiness programmes, and strategic security transformation initiatives aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, DORA, NIS2, Cyber Essentials, and GDPR. They will confidently engage with C-level leaders, facilitate workshops and executive playbacks … development. Experience delivering strategic assessments and security transformation programmes. Comfortable operating across both business and technical stakeholder groups. Industry & Regulatory Knowledge – Strong understanding of: ISO 27001, 31000, 42001:2023 NIST Cybersecurity Framework (NIST CSF) 2.0 & NIST AI RMF CIS Controls Cyber Essentials & Cyber Essentials Plus DORA, NIS2 ...

access reviews, segregation of duties, system changes, and other IT controls.* Help develop and enhance processes, controls, and procedures that support both SOX and ISO 27001 compliance frameworks.* Maintain accurate, audit-ready documentation, control evidence, and compliance records.* Partner with the Governance, Risk & Compliance team to identify control gaps … within ERP environments, including user access management, segregation of duties, and change management controls.* Familiarity with information security, governance, and risk frameworks such as ISO 27001 and ISO 31000.* Experience supporting internal and external audits and working with auditors and regulatory bodies.* Knowledge of control automation tools ...