17 of 17 Permanent ISO/IEC 27001 Jobs in Oxfordshire

Objectives & Outcomes Define and socialise target state architectures across Azure / AWS / GCP (networking, identity, landing zones, operations). Deliver reference architectures and reusable patterns for containerised, serverless, and data workloads. Establish / extend Cloud Landing Zones (policy, guardrails, RBAC, tagging, network segmentation). Lead migration and modernisation (re‐host / re‐platform / re‐factor) for priority applications. Implement IaC at scale (Terraform preferred; standard modules; pipelines). Build observability (logs, metrics, traces, SLOs) and resilience (HA, DR, RTO / RPO). Drive FinOps—cost transparency, budgets, showback / chargeback, right‐sizing. Embed security‐by‐design and compliance (CIS, NIST, ISO 27001, FCA / NHS … / PCI as applicable). Key Responsibilities Architecture & Design Produce HLDs / LLDs, diagrams, ADRs, non‐functional requirements, and traceability to business goals. Select and justify cloud services (compute, storage, data, AI / ML, integration). Define multi‐cloud connectivity (hub‐and‐spoke, transit gateways, ExpressRoute / Direct Connect / Cloud Interconnect, SD‐WAN). More ❯

Objectives & Outcomes Define and socialise target state architectures across Azure / AWS / GCP (networking, identity, landing zones, operations). Deliver reference architectures and reusable patterns for containerised, serverless, and data workloads. Establish / extend Cloud Landing Zones (policy, guardrails, RBAC, tagging, network segmentation). Lead migration and modernisation (re‐host / re‐platform / re‐factor) for priority applications. Implement IaC at scale (Terraform preferred; standard modules; pipelines). Build observability (logs, metrics, traces, SLOs) and resilience (HA, DR, RTO / RPO). Drive FinOps—cost transparency, budgets, showback / chargeback, right‐sizing. Embed security‐by‐design and compliance (CIS, NIST, ISO 27001, FCA / NHS … / PCI as applicable). Key Responsibilities Architecture & Design Produce HLDs / LLDs, diagrams, ADRs, non‐functional requirements, and traceability to business goals. Select and justify cloud services (compute, storage, data, AI / ML, integration). Define multi‐cloud connectivity (hub‐and‐spoke, transit gateways, ExpressRoute / Direct Connect / Cloud Interconnect, SD‐WAN). More ❯

nine out of ten days auditing. You'll need to be comfortable with interacting and speaking to different people in all capacities. To ensure you have a good work / life balance, we like to minimise the travel requirements on our Auditors wherever possible, which may also include some remote auditing. That means for this role, we're looking … audits for Qualified Trust Service Providers (QTSPs) under the eIDAS Regulation. Evaluating systems, policies, and processes for adherence to standards such as ETSI EN 319 401, 319 411-1 / -2, EN 319 421 and other relevant specifications. Producing and reviewing detailed audit reports with actionable recommendations. Staying updated on legislative changes and technical standards within the trust services … Required Skills & Experience Proven experience in digital trust services or information security. In-depth knowledge of eIDAS Regulation and related ETSI standards. Certifications such as CISA, ISO / IEC 27001 Lead Auditor, or equivalent (preferred). Strong understanding of cryptographic principles and Public Key Infrastructure (PKI). Excellent analytical skills and attention to More ❯

and lead technical and cultural change. You will:** Modernise and redesign the tech landscape** Strengthen security & compliance (ISO 27001, ISO 27701, Cyber Essentials / Plus)** Partner with the Governance Manager on data governance** Ensure staff feel confident and supported with technology What You'll Ideally Bring: ** Proven IT Manager experience** Strong strategic thinking … opportunity. Please apply or contact Matthew MacAlpine at Cathcart Technology. Cathcart Technology is acting as an Employment Agency in relation to this vacancy. For more jobs please visit http: / / jobs More ❯

internal security strategy within our Managed Services environment. This is a strategic and hands-on leadership position - you'll oversee security governance, ensure compliance with leading frameworks (Cyber Essentials, ISO27001, NIST), and maintain a strong internal security posture across our systems and services. You'll lead Quarterly Security Reviews (QSRs), manage client risk registers, and act as a trusted advisor … risk registers. Translate technical risks into meaningful business impacts and recommendations. Manage internal and client risk registers and exception processes. Oversee security compliance across frameworks such as Cyber Essentials+, ISO27001, and NIST . Ensure secure deployment and monitoring of core MSP systems (RMM, XDR, PSA, backup, etc.). Collaborate with service and project teams to embed security into delivery and … presenting to senior stakeholders and enjoy leading teams and shaping best practice. Essential Skills & Experience 5+ years in IT security or MSP environments . Strong understanding of Cyber Essentials, ISO27001, or NIST frameworks. Experience managing patching, vulnerability, and risk governance . Skilled communicator with the ability to explain risks to non-technical audiences. Proven experience leading client-facing security reviews More ❯

Role: IT SecOps Engineer Contract Type: Permanent Location: Banbury / Hybrid working, 3 days in office. This role can be based out of any office on the Chiltern network Salary: Up to £58,000 per annum Closing Date: Monday 24th November 2025 There is an expectations to travel to different Chiltern sites outside of your base location to support … risk and exploitability assessments against vulnerabilities and live threats. Serve as a subject matter expert in vulnerability management for incident response and risk assessments. Oversee patching compliance and report / escalate vulnerabilities for remediation. Security tooling and Process Improvement Manage the deployment of new security tools, ensuring existing tools are maintained and tuned. Identify gaps, implement enhancements, and drive … protection. An understanding of network infrastructure such as VPNs, firewalls, switches, routers, LANs, Intrusion Detection, and vulnerability scanning. Understanding of IT and cyber security frameworks, standards, and regulations (examples: ISO27001, NIS2, GDPR, and CAF). Understanding of the Cyber Kill Chain and MITRE ATT&CK frameworks. Ability to collaborate effectively with various internal and external stakeholders. Relevant certifications such as More ❯

Role: IT SecOps Engineer Contract Type: Permanent Location: Banbury / Hybrid working, 3 days in office. This role can be based out of any office on the Chiltern network Salary: Up to 58,000 per annum Closing Date: Monday 24th November 2025 There is an expectations to travel to different Chiltern sites outside of your base location to support … risk and exploitability assessments against vulnerabilities and live threats. Serve as a subject matter expert in vulnerability management for incident response and risk assessments. Oversee patching compliance and report / escalate vulnerabilities for remediation. Security tooling and Process Improvement Manage the deployment of new security tools, ensuring existing tools are maintained and tuned. Identify gaps, implement enhancements, and drive … protection. An understanding of network infrastructure such as VPNs, firewalls, switches, routers, LANs, Intrusion Detection, and vulnerability scanning. Understanding of IT and cyber security frameworks, standards, and regulations (examples: ISO27001, NIS2, GDPR, and CAF). Understanding of the Cyber Kill Chain and MITRE ATT&CK frameworks. Ability to collaborate effectively with various internal and external stakeholders. Relevant certifications such as More ❯

configurations, hardware and networking skills experience of IT management, developing IT strategies, and budget management experience of supervising / managing small teams cyber security experience including knowledge of ISO27001 / ISO277001 On offer Salary of up to £59,000 plus excellent company benefits, including hybrid and flexible working options Robert Half Ltd acts as an employment business for … dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: gb / en / privacy-notice. More ❯

is a hands-on role with significant influence: you will design systems, implement tooling, measure productivity gaps, and drive adoption of better practices across the engineering organisation. Requirements CI / CD Infrastructure & Tooling Own and operate CI / CD systems (GitHub Actions, runners, caching, artifact storage). Maintain stability, scalability, and cost-effectiveness of pipelines. Build and maintain … systems for our monorepo. Ensure CI / CD observability, with metrics flowing into Datadog / Slack. Pipeline Instrumentation & Optimisation Analyse pipelines for inefficiencies (e.g., flaky tests, redundant steps, lack of caching). Recommend and implement optimisations (parallelisation, test selection, caching strategies). Define benchmarks and KPIs (e.g., build times, flakiness %, cost per run). Measure and report on … productivity gaps (e.g., time lost to flaky tests, slow builds, manual release steps). Onboarding & Documentation Maintain up-to-date documentation on SDLC processes, CI / CD, release flows, and GitHub usage. Provide templates, playbooks, and starter kits. Automate repetitive onboarding processes. GitHub & SDLC Guardrails Own GitHub governance (branch protections, repo standards, integrations). Implement base SDLC guardrails (PR More ❯

maintain a deployment infrastructure for web and native applications that adheres to client security requirements Collaborate with design team and project teams to ensure the technical feasibility of UI / UX designs Support business development, marketing and design with HEOR website performance improvement, accessibility and maintenance Contribute to new project proposal development by identifying solutions to client needs Provoke … with operational research group colleagues to develop HEOR coding best practices Support the development and implementation of solutions to optimise internal processes and productivity e.g. via internal web apps / tools Requirements What you'll bring to the team: Proven experience as a full-stack developer working in the consulting, life sciences or the pharmaceutical industry Degree or equivalent … frameworks like Jest, Mocha, and Cypress Knowledge of authentication, security best practices, and frameworks such as ISO 27001 and Cyber Essentials Plus Experience with CI / CD pipelines using GitHub Actions or Azure DevOps If you are passionate about building innovative web applications and eager to make a difference in healthcare through technology, we would More ❯

Bring: Proven experience in a senior security, governance, or assurance role A professional qualification (e.g., CISSP, CISM) or relevant degree Strong knowledge of frameworks such as Cyber Essentials, GDPR, ISO27001, and NIST Technical expertise in Cloud, Data Analytics, Microsoft / AWS / Azure environments Experience managing change projects and influencing cross-functional teams Excellent communication and stakeholder engagement More ❯

services Excellent communication skills and a customer-first mindset A collaborative approach and solid problem-solving abilities Experience with Microsoft 365 security tools and knowledge of GDPR or ISO 27001 compliance would be an advantage. Why join us? We’re proud of our friendly, inclusive culture and commitment to professional growth. You’ll have the chance More ❯

a long-standing MSP relationship. In addition, the IT Manager will help the organisation to maintain it's security stance and compliance with key standards such as as ISO 27001 and Cyber Essentials Benefits: 25 days holiday, plus an extra 3 for Christmas 5% Pension contribution Life Assurance Flexible hours EAP What do I need? A … be able to lead the development and delivery of the organisation's IT roadmap Experience of vendor management and managing third party suppliers A good awareness of IT Security / Cyber Security A broad understanding of Microsoft technical environments, including Microsoft 365 Solid experience and understanding of networking and general IT hardware So What's Next? If you are More ❯

Security Lead Oxfordshire / Hybrid / Permanent / up to £65,000 About the Role We're seeking a Security Lead to take ownership of both client-facing and … internal security strategy within our Managed Services environment. This is a strategic and hands-on leadership position - you'll oversee security governance, ensure compliance with leading frameworks (Cyber Essentials, ISO27001, NIST), and maintain a click apply for full job details More ❯

Information Security Manager Location: Oxfordshire Salary: £48,000 – £57,000 Contract: Permanent, Full-Time Hybrid Working: 50 / 50 split Team size: 1 direct report (Junior InfoSec Analyst) Ready to lead the charge in safeguarding cutting-edge science? Join my client , a world-renowned research organisation, as their Information Security Manager . This is your chance to make a … diverse teams What we’re looking for Proven experience in Information Security Management or similar Professional qualification (CISSP, CISM) or relevant degree Strong knowledge of frameworks: Cyber Essentials, GDPR, ISO27001, NIST Technical expertise in Cloud, Data Analytics, Security Technologies Experience managing security within business and tech-led projects Excellent communication skills – able to make complex concepts simple A strategic thinker More ❯

and mentoring junior engineers. Ensure scalability and reliability of the overall solution, handling large amounts of genomic, and other multi-modal data. Drive best practices for security, testing, CI / CD, and observability across the stack. Enhance performance and responsiveness of user interfaces for data-heavy applications. Champion usability, ensuring interfaces meet the needs of clinicians and researchers. Continuously … experience in FastAPI (or similar API frameworks), and SQL databases. Hands-on experience with cloud platforms (AWS, GCP, or Oracle Cloud) and managed services. Experience with Docker, Kubernetes, CI / CD automation, and Git-based collaborative workflows. Knowledge of secure, scalable architectures, e.g., microservices and serverless (e.g., Oracle Functions, AWS Lambda). Understanding of Agile development. Knowledge of security … management tools. Experience mentoring junior engineers and promoting engineering excellence. Familiarity with UX collaboration tools (e.g., Figma) and accessibility best practices. Knowledge of relevant ISO standards (e.g., ISO27001) and SaMD certification. Knowledge of Nextflow. Key Attributes: Collaboration. Willingness to learn and cross train / upskill in new technology. Willingness to be hands on to explore new technology More ❯

Own the organisation's security posture ensuring tools, processes and teams meet defined standards Requirements - Proven experience in a security leadership or governance role - Strong understanding of Cyber Essentials, ISO27001 and NIST Frameworks - Familiarity with posture metrics and modern security tooling - Relevant Certifications (CISSP, CISM, ISO27001) Reasonable Adjustments: Respect and equality are core values to us. We are proud of More ❯