1 to 25 of 44 Permanent ISO/IEC 27001 Jobs in Scotland

data governance and software development, including input to research protocols, contracts, patient information sheets, information governance records (e.g. Data Protection Impact Assessments, data controller / processor role assignments, Information Asset Register, Record of Processing Activities) and applications for linkage of data with public datasets.9. Contribute at a senior level … legal, regulatory and contractual responsibilities with regard to data management, information governance and software development (e.g. data protection, intellectual property, good clinical practice, controller / processor roles, computer systems validation) are fully compliant. Production, review and approval of standard operating procedures and guidelines in support of the Information Security ...

Edinburgh, ScotlandGlobal Operations – IT / Full Time / HybridFor over four decades, Cirrus Logic has been propelled by the top engineers in mixed-signal processing. Our rockstar team thrives on solving complex challenges with innovative end-user solutions for the world's top consumer brands. Cirrus Logic … business owners to identify threats, evaluate the design and operating effectiveness of controls, and document and track risk treatment plans. This includes evaluating AI / ML use cases (internal builds and third-party services) for security, data protection, and misuse risks.Third‐Party Risk Management: Plan and execute third‐party ...

Trainer Location: Field-Based Field-Based Scotland & Northern England Salary: £60,000 Permanent role We re looking for an experienced ISO Consultant / Trainer to join a specialist management systems consultancy. This is an opportunity to take ownership of a varied portfolio of client projects, with … consultancy projects. Turning complex ISO requirements into practical business solutions. Supporting and delivering ISO and auditing training. The Consultant / trainer will have: This is a role for an experienced consultant, practical knowledge of both ISO 9001 and ISO 27001 ...

Trainer Location: Field-Based | Field-Based | Scotland & Northern England Salary: £60,000 Permanent role We’re looking for an experienced ISO Consultant / Trainer to join a specialist management systems consultancy. This is an opportunity to take ownership of a varied portfolio of client projects, with … consultancy projects. Turning complex ISO requirements into practical business solutions. Supporting and delivering ISO and auditing training. The Consultant / trainer will have: This is a role for an experienced consultant, practical knowledge of both ISO 9001 and ISO 27001 ...

relationshipsContribute to Accenture's thought leadership in OT security through publications, presentations, and client engagementsWhat You'll Need:Essential10+ years of experience in OT / ICS cybersecurity or critical infrastructure securityProven track record leading complex security programmes in regulated industrial environmentsDeep understanding of Industrial Control Systems (SCADA … GRIDExperience across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence, or Critical National InfrastructureKnowledge of security standards including NERC-CIP, IEC 62443, ISA / IEC 62443Background in both advisory and hands-on technical implementationWhat We Offer:Work on prestigious projects spanning critical national infrastructure, advanced manufacturing ...

best practices.Perform security code reviews and act as a technical SME for engineering and compliance teams.Security Testing & DevSecOpsDeploy and manage automated security tools (SCA / SBOM, SAST, DAST, Secret Scanning) within CI / CD pipelines.Apply manual network / application testing, custom scripting, and unit test cases … incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS / IPS rules.Conduct post-incident analysis and lessons learned and refine response strategies.Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input ...

seeking a Senior Identity Security Engineer to design, implement and enhance large‐scale identity environments across Microsoft Active Directory, Entra ID, PKI / ADCS and modern hybrid platforms. This role combines hands‐on engineering with leadership in security design, implementation and assessment, requiring someone who can resolve complex identity … providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body ...

stakeholder management skills with the ability to influence senior leadership.Nice-to-haves:• Experience with governance platforms and workflow tooling.• Familiarity with ISO / IEC 42001, NIST AI RMF, ISO 27001, GDPR, and related standards.• Experience operating governance boards or assurance forums. ...

Year (EMEA)One of the Best Workplaces for Women in the UK & Ireland (2023) With 3,700+ people and revenues exceeding 347m / 302m, Version 1 is a market leader in Oracle, Microsoft, and AWS consulting services – and one of the fastest-growing digital consultancies in Europe. Job DescriptionWe … build, testing, deployment and defect resolution activities. The role also includes exposure to Oracle Fusion extensions and workflow tooling. VBCS, Oracle Process Automation (OPA) / Process Cloud Service (PCS) experience is desirable at junior level. The successful candidate should be willing and able to learn these areas quickly ...

Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.Strong understanding of relevant standards and frameworks (e.g. ISO / IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability.Ability … workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and / or to perform the essential functions of the role. We will do everything we can to support you.Our Application ProcessTo understand what to expect ...

Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.Strong understanding of relevant standards and frameworks (e.g. ISO / IEC 27001, NIST CSF, CIS Controls).Proven experience owning or leading a global or enterprise‐scale security service or capability.Ability … workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and / or to perform the essential functions of the role. We will do everything we can to support you.Our Application ProcessTo understand what to expect ...

SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001 / 27017 / 27018 end‐to‐end, from policy design through to audit evidence and the audits themselves. Automate evidence collection to cut audit … teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks (e.g. ISO 42001). Relevant certifications — e.g. CISSP / ISC2, CCSK, CIPP / E, or AIGP. Experience in legal tech, AI, or another highly regulated SaaS environment. Familiarity with tools such as Vanta, Crowdstrike ...

routing policies, NAT and security objects across multiple different technologies.Design, Review & Maintain network documentation and topology diagrams.Work with third party vendors to troubleshoot outages / circuits faults etc.Participating in an on-call rotation (begins after 6 months of service)Conduct capacity planning, performance tuning and optimisation.Ensure compliance with security … Juniper). Experience in managing and troubleshooting private circuits.Experience with WAN technologies (DIA, IPSEC over internet, EWLs).Routing InfrastructureStrong understanding of routing protocols (OSPF / BGP).Experience in designing and maintaining multi-site routing topologies.Experience in troubleshooting routing problems (routing loops, asymmetric routing, route redistribution issues etc)Firewalls & Security ...

procedures, actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents.Education / Experience Qualifications:Bachelor’s Degree with 8 or more years of related experience is preferred. An equivalent combination of education and / … global organization.Experience building an IT Third-Party Risk function within a global organization.Industry recognized certifications such as the CRISC, CISA, CISSP, CISM, and / or CGEIT are preferred.Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC).Physical Requirements:Professional office environment with suitable ...

secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes / container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI / CD pipelines Perform security code reviews and provide secure coding … PoCs where appropriate Manage IAM and key management controls Support product security incident response, root-cause analysis and remediation Develop detection engineering capabilities, IDS / IPS rules and technical runbooks Monitor emerging threats and continuously improve security controls Work across engineering, security and compliance teams to drive security improvements ...

models that guarantee strict IP isolation for enterprise clients, secure sharing patterns for research partners, and the architectural groundwork for SOC 2 and ISO 27001 readiness. We'll agree concrete deliverables and milestones with you up front, so success is clearly defined on both sides. What … stacks: lakehouses, streaming, batch and real-time pipelines High-throughput telemetry, loT, or industrial time-series systems Prior involvement in SOC 2 or ISO 27001 programmes Exposure to scientific, chemical, or manufacturing data Chemistry or AI drug-discovery knowledge Why Join Chemify? Impact: You will help ...

Senior Cyber Security Engineer (CyberArk & PAM) Edinburgh, United Kingdom | Posted on 16 / 07 / 2026 SysGroup ishiring a Senior Cyber Security Engineer specialising in privileged accessmanagement, with CyberArk as the core platform. This is the senior tooling andidentity specialist role in the Cyber Security team under … managed clients, with PAM as your deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA / ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead ...

languages: Python, Go, YAML, JSON, etc. Experience with policy as code (e.g., Open Policy Agent and Rego). Git and version control workflows. CI / CD tools: GitHub Actions, GitLab, etc. Container platforms: Docker, Kubernetes. Infrastructure‐as‐code: Terraform, Ansible, Pulumi, CloudFormation. Cloud platforms: AWS, Azure, GCP. A background … market strategies. Excellent written and verbal communication skills, with the ability to translate complex technical topics to both technical and non‐technical stakeholders. AWS / Azure / GCP certifications, CISSP, CISM, or other security certifications are a plus. Perks & Benefits Competitive salary. Generous equity plan. Remote‐first working ...

reflecting how our employees are at the very heart of what we do: UK & Ireland's premier AWS, Microsoft & Oracle partner 3300+ strong, 350 / 300m revenue business 10+ years as a Great Place to Work in Ireland & UK Best Workplace for Women in the UK & Ireland by GPTW … successful outcomes and take clear ownership of the security design decisions that got there.Cloud and application security; experience securing workloads on AWS and / or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST / DAST tooling ...

platforms, machine learning environments or AI governance and security controls. Solid understanding of cybersecurity principles, frameworks and best practices(e.g., NIST Cybersecurity Framework, ISO 27001, GDPR). Knowledge of AI security risks and controls, including model security, prompt injection, data privacy, AI supply chain risks ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

Basic information Location Bristol, Edinburgh, Glasgow, London, Manchester Business Line Technology & Transformation Job Type Permanent / FTC Date published 17-Aug-2026 Req # 24465 Job description Connect to your IndustryDo you want to be at the heart of some of the biggest and most ambitious programmes undertaken … NIST, CIS).Experience as a Security Architect or in a similar role, with a strong track record of designing and implementing security controls and / or solutions and leading technical teams.Experience with architecture methodology such as TOGAF or SABSAExperience of threat and risk modellingStrong understanding of network security, encryption ...

area, gained through education, professional work, or equivalent experience. (5+ years exp)Substantial experience in Cyber Security, including practical experience securing AI systems and / or public cloud applications. (5+ years exp)Solid understanding of cyber security principles and controls, including identity & access management (IAM), encryption, network security … secure application design.Hands-on experience in public cloud security engineering and / or in the configuration / operation of security tooling, such as Web Application Firewalls (WAFs). (2+ years exp)Solid knowledge of AI technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities.Experience ...

information assets. Demonstrable experience conducting cyber security maturity assessments and best-practice reviews. Strong understanding of recognised security frameworks and standards such as ISO 27001 and Cyber Essentials. Experience developing cyber security strategies, governance frameworks or information security programmes. Ability to provide credible cyber security advice ...