2 of 2 Permanent ISO/IEC 27001 Jobs in Salford

IT Security Engineer Location: Salford / Hybrid (2 days per week) Are you a hands-on Security Engineer ready to lead cyber defence initiatives and shape security strategy? Join us to play a pivotal role in safeguarding our infrastructure, applications, and data. You’ll manage and optimise key tools like CrowdStrike, Microsoft Defender, and Intune, contribute to compliance efforts … Strong understanding of core cybersecurity principles and threat vectors Understanding of risk frameworks such as Cyber Essentials+, ISO 27001, CIS, PCI-DSS Experience with EDR / XDR platforms - Crowdstrike Falcon Proficiency with Microsoft security stack (Defender, Intune, MFA, etc.) Solid grasp of patch management and vulnerability assessment Ability to interpret logs and alerts to assess … threat response Clear communicator with the ability to explain risk to non-technical teams Desirable Skills Familiarity with SIEM tools (e.g. Sentinel, Splunk) Scripting / automation knowledge (e.g. PowerShell, Python) Understanding of data protection and privacy frameworks (e.g. UK GDPR) In return the successful candidate and expect hybrid working 2 days per week on-site and a salary of More ❯

for leading the ongoing management, improvement, and compliance of the Information Security Management System (ISMS) across a complex technology environment. Acting as the go-to person for security certifications (ISO27001, PCI, Cyber Essentials, Telecoms Security Act (TSA), you'll provide assurance to customers, regulatory bodies, and internal teams that robust standards and controls are met every day. Key Responsibilities Manage … and maintain compliance with all required security certifications (ISO27001, PCI, TSA, Cyber Essentials). Oversee responses to incoming customer security questionnaires and RFPs, supporting audits and regulatory engagements. Drive security awareness and training activities across the business. Foster strong relationships with Technology, IT, Security, and Internal Audit teams. Continually improve the ISMS and compliance regime, including mergers / acquisitions. … and effective execution. Evaluate maturity of NIST controls and support resilience activities. Document and manage Ofcom queries relating to the Telecom Security Act (TSA). Qualifications & Professional Skills Essential: ISO27001 Lead Auditor / Implementer, PCI Implementer, CISA. Highly desirable: ISO22301 Lead Auditor / Implementer, CISSP, CISM, CRISC. Telecoms experience and TSA awareness highly valued. Robert Walters Operations Limited More ❯