3 of 3 Permanent ISO/IEC 27001 Jobs in Solihull

hands-on role where you'll work closely with business and IT teams to embed secure, compliant ways of working across the organisation. Responsibilities / Duties - Own and evolve information security and data protection policies, standards, and procedures. - Design and support governance processes to ensure consistent security and compliance. … Lead and support information security and data protection risk management. - Lead or support internal and external audits (ISO 27001 / GDPR), including remediation planning and tracking. - Maintain clear, audit-ready compliance evidence and reporting. - Act as a senior subject matter expert for information security, governance ...

infrastructure, including firewalls, XDR, drive encryption, DLP, web proxy, CASB, and endpoint security tools across multiple operating systems Design, implement, and maintain secure IT / OT network architectures, including Industrial DMZs (IDMZ) and robust network segmentation aligned to the Purdue Model Administer and maintain OT-specific security solutions such … network issues and participate in change management processes Ensure continuous compliance with industry standards and regulations, including ISO 27001, ISA / IEC 62443, NIST, and GDPR, as well as internal corporate policies Translate global cybersecurity policies into practical local procedures tailored ...

engineering teams, architects and third-party suppliers Ensure alignment between security architecture, enterprise architecture and technology roadmaps Support compliance with frameworks such as ISO27001 and GDPR Contribute to supplier selection and procurement, ensuring security requirements are met Support incident response activities and post-incident remediation Stay current with emerging threats … management Secure application and API design Logging, monitoring and SIEM Infrastructure, platform and endpoint security Experience working with security and compliance frameworks such as ISO27001, GDPR, NIST or CIS Excellent stakeholder engagement skills, able to communicate with both technical and non-technical audiences Pragmatic, risk-based approach with strong analytical ...