13 of 13 Permanent ISO/IEC 27001 Jobs in Scotland

standards Experience in applying UK Government security and assurance frameworks Confident communicator able to clearly articulate cyber risk Hold a recognised ISO / IEC 27001 Lead Implementer or Lead Auditor certification Hold or be working towards Principal or Chartered Cyber Security Professional (ChCSP ...

SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001 / 27017 / 27018 end‐to‐end, from policy design through to audit evidence and the audits themselves. Automate evidence collection to cut audit … teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks (e.g. ISO 42001). Relevant certifications — e.g. CISSP / ISC2, CCSK, CIPP / E, or AIGP. Experience in legal tech, AI, or another highly regulated SaaS environment. Familiarity with tools such as Vanta, Crowdstrike ...

e.g. JumpCloud), ensuring robust encryption, patching, and access control across all company devices. Cloud & Infrastructure Security: Work with engineers to harden our Kubernetes / container environments, manage IAM policies, and oversee vulnerability scanning and remediation. Technical Implementation: Be the "boots on the ground" for security. Implement and manage security … tools (MDM, EDR, SSO). Experience in the Financial Services sector, understanding the specific regulatory hurdles. Professional certifications such as CISSP, CISM, or AWS / GCP Security Specialist. Scripting proficiency (Python or Bash) to automate security checks and reporting. Working at Malted We’re based in Edinburgh and work ...

execute our security roadmap, partnering with engineering to keep infrastructure secure by design and meet enterprise standards. You will own ISMS, manage ISO 27001 certification … Type 2 audits, and oversee cloud security for AWS and Kubernetes. The role requires 4+ years in information security and a strong compliance / technical background. #J-18808-Ljbffr ...

balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and / or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. ...

Change & Problem Management procedures. Working with the Service Delivery Team and other vendors to ensure escalated tickets are dealt with correctly. Coordinate the analysis / troubleshooting of system / application issues to determine root cause and encourage future prevention. Security Monitoring and responding to security incidents using tools … managed environment Ability to competently act as the technical point contact of escalation for incidents. Experience of creating technical documentation Ability to translate Business / operational requirements into effective solutions Windows Server 2016 through to 2022, and experience of Intune, Active directory, SQL, SharePoint, Power Platform, Entra ID, Azure ...

Technology Risk / Compliance Analyst (GRC) Up to £66,000 + benefits Edinburgh or Glasgow| Hybrid — 2 days office / 3 days home Our client is a fast-growing, well-established software business providing regulatory and compliance solutions to financial services organisations. They are looking for a Technology … Risk / Compliance Analyst to join their Governance, Risk & Compliance function, reporting directly to the VP of GRC. This role can be based out of either the Edinburgh or Glasgow office, working a hybrid pattern of 2 days in the office and 3 days from home. This ...

Technology Risk / Compliance Analyst (GRC) Up to £66,000 + benefits Edinburgh or Glasgow | Hybrid - 2 days office / 3 days home Our client is a fast-growing, well-established software business providing regulatory and compliance solutions to financial services organisations. They are looking for a Technology … Risk / Compliance Analyst to join their Governance, Risk & Compliance function, reporting directly to the VP of GRC. This role can be based out of either the Edinburgh or Glasgow office, working a hybrid pattern of 2 days in the office and 3 days from home. This ...

experienced cyber security leader with: Previous experience as a Chief Information Security Officer (CISO) , Deputy CISO , or senior Head of Information Security / Cyber Security . A proven track record of leading enterprise-wide cyber security programmes. Strong knowledge of cyber governance, risk management and compliance. Experience operating within … large, complex and highly regulated environments. Excellent stakeholder management skills, with the ability to influence at executive level. Knowledge of frameworks such as ISO 27001 , NIST , Cyber Essentials and recognised security best practice. Professional certifications such as CISSP , CISM or equivalent are desirable. Contract Details Duration ...

Microsoft Purview and Microsoft 365 compliance capabilities Experience with data classification, sensitivity labels, DLP and retention controls Understanding of security frameworks such as ISO 27001, Cyber Essentials or NIST Experience supporting audits, risk assessments or assurance activities Excellent stakeholder management and communication skills Strong organisational skills ...

similar technologies. • Strong analytical and investigative skills. • Understanding of vulnerability management and incident response processes. • Familiarity with security standards and frameworks such as ISO 27001 and Cyber Essentials Plus. • Ability to interpret security alerts, logs, and system behaviour. • Experience working within governance, compliance, or audit-focused ...

Analyst £50,000- £54,000 Hybrid - 2 days per week in either Glasgow / Edinburgh office depending on location We are looking for a brilliant SOC Analyst to join a market leading organisation within the energy sector embarking on a transformation of their IT Security Team. This well-established … primary contact when assisting with Security Incident remediation. You will possess strong technical and security knowledge, and will provide technical / non technical security support to the wider Security team and organisation. We are looking for an individual that has: Expertise in Cloud (IaaS, PaaS, SaaS) in particular ...

embed best practice. You will have the opportunity to influence PAM strategy, deliver complex security projects and work with industry frameworks including NIST, NCSC, ISO27001 and CIS. Privileged Access Management (PAM) Security Engineer Responsibilities Design, implement and manage Privileged Access Management solutions, ensuring secure access to critical systems and sensitive … skills using PowerShell, Bash or similar technologies. Good understanding of authentication protocols, access controls and identity lifecycle management. Experience working with security frameworks including ISO27001, NIST and CIS. Knowledge of Web APIs including SOAP, REST and GraphQL. Understanding of threat modelling methodologies such as STRIDE. Excellent communication skills with ...