Southampton, Hampshire, United Kingdom Hybrid / WFH Options
NICE
will light a fire within you. So, what's the role all about? The Information Security Analyst is primarily responsible for ensuring compliance with information security frameworks such as CyberEssentials, CyberEssentialsPlus, ISO 27001, ISO 27701, ISO 42001, GDPR, and DORA. This role focuses on internal audits, regulatory compliance, and readiness for external … audits. Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, GDPR, and DORA. Framework Tracking: Monitor updates to CyberEssentials, ISO, and regulatory frameworks and ensure internal alignment. Control Documentation: Develop and maintain control narratives, walkthroughs, and documentation of compliance processes. Audit Findings: Identify control deficiencies and … coordination with IT and Security Operations teams. Have you got what it takes? Strong expertise in audit and compliance frameworks, including ISO 27001, ISO 27701, ISO 42001, GDPR, DORA, CyberEssentials, and CyberEssentials Plus. Familiarity with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience in internal and external audits, compliance More ❯
and have an Investors in People Gold accreditation. As a certification body for the Information Assurance for Small and Medium Enterprises Consortium (IASME), they are expanding their UK based Cyber Security Projects Team and are seeking a Cyber Security Assessor as part of their growth, with a view towards becoming a CyberEssentialsPlus Certification … Plus Certification body. The Cyber Security Assessor will be primarily responsible for assisting, preparing and undertaking Cyber Security Assessments and audits across Microsoft 365 and Azure for their clients. You will work closely with both the Cyber Security and PMO team to ensure that the delivery of Security Solutions and Work Packages remain on-track. Responsibilities … will also include but are not limited to: Assisting, preparing and undertaking CyberEssentials Audits based on the IASME Standard Undertaking Vulnerability Assessments and remediation Undertaking penetration testing to include infrastructure, web applications and networks Assisting with client reporting and assurance audits Undertaking CyberEssentialsPLUS audits and assessments Providing an escalation point for security More ❯
while introducing best practice across the business. You’ll work closely with the Finance & Operations team and the Technical Director, with responsibilities including: Leading the management and implementation of CyberEssentialsPlus and ISO27001 standards Overseeing network, firewall, and VPN configuration and support Managing inventory and procurement for laptops, mobiles, AV, printers, and VOIP Supporting the lab … with excellent interpersonal skills Desirable: Firewall experience with Cisco ASA and Firepower Site-to-site VPN management Exposure to K3, backup solutions, and disaster recovery Experience implementing ISO and CyberEssentials standards Why Join? You’ll be joining at a pivotal time in the company’s journey — with significant backing, a technically strong leadership team, and a genuine More ❯
Cyber Security Analyst - Utilities Sector Portsmouth - Hybrid £40,000-£52,000 iO Associates are looking for a Cyber Security Analyst to join a forward-thinking utilities provider dedicated to safeguarding essential services for the community. You'll play a key role in delivering a cyber improvement programme, enhancing security posture, and helping the organisation align with regulatory … eCAF. This is a great opportunity to work across a range of digital projects in a business that values security, resilience, and public trust. Key Responsibilities: Lead and deliver cyber security improvement programmes. Ensure compliance with relevant cyber security standards and frameworks (CAF/eCAF, ISO27001, CyberEssentialsPlus). Monitor and manage security systems … to potential threats. Identify and mitigate security risks and vulnerabilities. Analyse security logs and reports to detect anomalies or incidents. Support security audits and assessments. Develop and maintain internal cyber security policies and procedures. Provide regular reporting on incidents, risks, and compliance status. Required Skills: 3-5 years of experience in cyber security roles, with hands-on involvement More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Arqiva
Join our Cyber Security Team as a Governance, Risk and Compliance Analyst. If you have been involved in practical aspects of GRC including ISO270001, want to work with a team of dedicated professionals and are able to understand wider business impacts of GRC on a business, please read more and apply. Location We operate a flexible, hybrid working environment … Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help identify and assess information security risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track … Good analytical and problem-solving skills A proactive and collaborative approach Integrity and a commitment to confidentiality and professionalism Qualifications A bachelor's degree in computer science, information technology, cyber security, or a related field Experience and knowledge Familiarity with information security frameworks, especially ISO27001 (2013 or 2022) Basic understanding of risk management principles and security controls Interest in More ❯
Farnborough, Hampshire, South East, United Kingdom
Gama Group Limited
Security & Compliance Manager Location: Farnborough HQ Working Hours: Full-Time, 40 Hours per week We are looking for a hands-on Information Security & Compliance Manager to take ownership of cyber security and data privacy across myairops. This role balances strategic oversight with practical, day-to-day security operations. Youll be central to maintaining our SOC 2 Type II accreditation … and service availability. Collaborate with the Group CIO and DPO, contributing to wider organisational security and data privacy initiatives. Skills, Qualifications and Experience required: Essential A solid background in cyber or informationsecurity, with experience operating at a similar level in cloud environments (ideally Azure) OR possess a degree within cyber or information security with the ability to demonstrate … cloud native Experience of successfully achieving ISO27001 or preferably SOC2 Type 2 Strong understanding of application security, cloud infrastructure, and DevOps practices Awareness of industry frameworks, such as NCSC Cyber Assessment Framework, CyberEssentialsPlus and OWASP Experience managing and selecting 3rd party vendors for audit and penetration testing Experience interacting with customer security and data More ❯
What will you be doing? Act as the UK Business Unit's Cybersecurity contact, within the framework of integrated Cyber governance including Data Privacy, Ethics & Compliance, Environmental & industrial risks and Safety Activate & integrate cybersecurity "by design" in all technology projects, in particular: Risk analysis and definition of associated mitigation measures, and Ensuring that these mitigation measures are properly implemented … and validating them for any project involving critical assets Monitor the performance of cybersecurity suppliers and services, ensure Cyber Security Insurance is appropriate to meet UK requirements Participate in the management of major Cyber incidents and crisis concerning technology assets, monitor and implement associated action plans Raise awareness of Cyber risks, particularly among Division/UK top … management and Technology contacts (development security, application security Deploy a CyberEssentialsPlus program to address all in scope services across the UK, Participate in the European NIS2 program as appropriate Create training material and other resources to influence user behaviour for adoption of security policy and process What are the requirements? Extensive experience in leading IT More ❯
Milton Keynes, Buckinghamshire, South East, United Kingdom
Nextech Group Limited
Looking For: Proven experience in a 2nd/3rd line support role Strong knowledge of Windows and Mac operating systems. Experience with networking technologies (LAN, WAN, VPN, firewalls). CyberEssentialsPlus exposure Proficiency in Active Directory, Office 365, and Exchange. Experience in supporting 1st and 2nd Line teams/acting as an escalation point Excellent problem More ❯
Maidstone, Kent, South East, United Kingdom Hybrid / WFH Options
Apogee Corporation**
experience in a leadership role. Proven experience managing data governance initiatives, data quality frameworks, and reporting processes. Strong understanding of data privacy and security regulations (e.g. GDPR, ISO 27001, CyberEssentialsPlus). Expertise in Microsoft Power Platform and reporting platforms (e.g. PL-300, PL-400). Technical Skills: Familiarity with data governance tools and platforms to More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
4Square Recruitment Ltd
clients, ensuring clear communication and timely support. Work closely with clients and third parties to remediate identified vulnerabilities. Perform phishing assessments using a variety of tools and techniques. Perform CyberEssentialsPlus Assessments inline with IASME scheme. Deliver best practice advice and technical guidance to clients. Maintain up-to-date knowledge of current threats, vulnerabilities, and attack More ❯