1 to 25 of 130 Permanent ISO/IEC 27001 Jobs in the South East

implementation and continual improvement of the organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO / IEC 27001, Cyber Essentials Plus and other required standards. Monitor the security, health and performance of the IT environment, identifying … System (ISMS). Good understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO / IEC 27001 and Cyber Essentials Plus. Experience mentoring or providing technical leadership to junior IT professionals. Experience with infrastructure automation ...

Information Security Lead / ISO27001 / SOC / GRC / Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001 … Wallingford, Oxford and looking for someone who can do 3 days minimum on site ideally more. Any experience within robotics or start up / scale up environments highly desirable. Responsibilities / Skills Own the day-to-day execution of Dexory's ISO 27001 ...

management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into Data ...

including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

first line of defence for our clients’ technical environments. While the core of the position involves ad-hoc technical support (diagnosing issues, configuring hardware / software, and troubleshooting networks), every action you take will be guided by strict security protocols and data protection regulations. You will not only resolve … software, and network systems. Industry-specific certificates in networks, security (e.g., CompTIA Security+, CISSP Associate, or ISO 27001 Lead Implementer / Auditor) are highly desirable. Successful security clearance and vetting is mandatory for this role. Soft Skills: Excellent problem-solving skills with a focus ...

Senior Information Security Manager, Risk, Compliance, Security, London, Hybrid / Remote to £65,000 A leading independent authority are requiring a Senior Information Security Manager to play a pivotal role in their Compliance team. The Reporting to the Head of Compliance, you will lead the ISO 27001 … incidents, and contributing to policy development. The key responsibilities of this role are to oversee information security standards by managing and continually improving ISO 27001-certified Information Security Management System, leading business continuity management for information and technology risks, and supporting the organisation’s development ...

client organisations in line with UK regulations. · Assess compliance against UK GDPR and the Data Protection Act 2018, the NIS Regulations, ISO / IEC 27001, Cyber Essentials and Cyber Essentials Plus, and the Telecommunications (Security) Act 2021. · Identify risks, provide actionable recommendations … consultancy or client-facing role, with strong knowledge of UK legal frameworks and compliance standards. · Relevant certifications, for example CISA, CISSP or ISO 27001 Lead Auditor. · Excellent communication and stakeholder engagement skills, with the ability to work independently across multiple client engagements. Why Consultants choose ...

Enterprise Engineering team are responsible for a variety of services offered to our customers. These include: Bespoke hardware / software developments to provide customers with the ability to better manage their remote site traffic, and user experience, as part of an NSSLGlobal solution. Meeting with external customers to design … fleets and remote sites, including bespoke designs, virtualisation, High Availability, traffic prioritisation, integration into existing infrastructure, and ongoing support. Finding off the shelf products / developing in-house products / system design and integration to best suit the needs of our business and our clients, testing / ...

delivery of secure, resilient network infrastructure across on-premises data centres and hybrid cloud environments Architect network segmentation, Zero Trust access models, and VPC / VLAN designs that enforce security policy without over-complicating operations Define network resilience, failover, and disaster recovery strategies aligned with business continuity requirements Security … runbooks, decision trees, and architectural standards that allow teams to move fast while staying secure Infrastructure Security Implementation: Implement and manage firewalls, intrusion detection / prevention, DDoS mitigation, and threat monitoring across network layers Establish secure supply chain practices for infrastructure: vendor management, procurement policy, and third-party risk ...

understand business requirements and convert them into technical specifications and solutions. Experience working alongside functional consultants and business stakeholders. Familiarity with SAP S / 4HANA development concepts and frameworks. Exposure to SAP BTP and modern SAP development tools. Experience working within Agile delivery methodologies. Strong analytical and problem-solving … Fiori, SAP UI5, and OData development. Exposure to CDS Views and RAP development frameworks. Experience working within consultancy or client-facing project environments. Location / Working Pattern Based in Slough, UK Hybrid working arrangement. Required onsite in Slough Tuesday to Thursday each week. Remote working available on remaining working ...

Enterprise Engineering team are responsible for a variety of services offered to our customers. These include: Bespoke hardware / software developments to provide customers with the ability to better manage their remote site traffic, and user experience, as part of an NSSLGlobal solution. Meeting with external customers to design … land networks for fleets and remote sites, including bespoke designs, traffic prioritisation, integration into existing infrastructure, and ongoing support. Finding off the shelf products / developing in-house products / system design and integration to best suit the needs of our business and our clients, testing / ...

Azure Site Recovery); HP server refresh; Reviewing and improving Data Loss Prevention; Enhancing SFTP security. This role is targeted to be 80% infrastructure / 20% 2nd / 3rd line support, but a little more time may be spent with support at the start, to help improve their capability. … infrastructure upgrades, migrations and patching programmes Strong troubleshooting, documentation and project delivery skills Windows Server Microsoft 365 Active Directory VMware, SAN storage and backup / recovery solutions (ideally Veeam) Desired Skills SQL Server and Windows Server admin knowledge Experience working within regulated or security-focused environments Exposure to Cyber ...

cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24 / 7 threat monitoring, detection, and response. Sophos offers industry‐leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint … track record of delivering across multiple teams. Solid knowledge of cybersecurity frameworks (NIST 800-53, ISO 27001, SOC 2, and / or FedRAMP) and hands‐on audit experience. Enough technical depth to be the team's technical point of contact: comfortable reasoning about cloud infrastructure ...

Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF / 800-53, ISO 27001 / 2 or SABSA. Understanding of identity & access management, network security, encryption, API security … penetration testing and security assurance processes. Ability to define, document and govern security requirements throughout solution delivery. Desirable: Knowledge of NIS Regulations and ISA / IEC 62443 for OT and industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical national infrastructure. ...

cost reduction strategies, and migration pathways to cloud environments Drive improvements in Azure cost management: cost drivers, budgets and alerts, Advisor reviews, and reservation / commitment strategies. Build and maintain reusable project templates and Infrastructure as Code (IaC) modules so new workloads are provisioned consistently and correctly. Lead … reusable deployment templates using Infrastructure as Code (e.g. Bicep, Terraform, ARM). Strong understanding of Azure cost management: cost drivers, budgets and alerts, reservations / savings plans, and Azure Advisor Experience defining and enforcing cloud governance frameworks: Azure Policy, management groups, RBAC, and tagging / naming standards. Experience ...

finance services or insurance sectors. Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS / Azure), incident response, and governance. Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services. Demonstrable experience applying artificial intelligence … concepts, including model limitations, bias, explainability, data protection and emerging AI regulation and standards (for example the EU AI Act and ISO / IEC 42001). Awareness of AI-specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply ...

security architectures, controls and technologies Developing cyber security strategies and implementation roadmaps Supporting incident response and business continuity planning Applying frameworks including NIST, ISO 27001, CIS and CAF Providing specialist advice across complex Defence and Government environments Cyber Security Manager Essential Skills Strong background within cyber … information security Experience working within Defence, Government or National Security environments Knowledge of security frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing ...

required by ISO 27001 Ensure compliance with data protection legislation. Promoting awareness as well Stay up-to-date of statutory / legal changes impacting on information security, incorporating them into relevant policies and advising staff on their implementation Assist with internal and external audit programmes. … satisfy Identify high risk issues and escalate as required Investigate IT related complaints and incidents in conjunctions with Security Manager, Security team, and / or other departments. Also providing input for remedial action plans Closure of audit and testing non-conformities through the provision of sound remedial actions Work ...

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth understanding of information security control tools Experience ...

Senior DevOps Engineer AWS / Kubernetes / Terraform / CI / CD / Infrastructure as Code Oxfordshire (Hybrid - 2 days a week in the office) £85,000 - £110,000 DOE Want to be the senior voice on infrastructure, with real say over how software reaches … strong DevOps or SRE background, with recent hands-on AWS experience Deep Kubernetes experience, ideally including on-premises clusters, plus Helm Terraform, CI / CD pipelines and GitOps tooling, with Docker and Linux Experience managing artifact repositories and integrating single sign-on Scripting in Bash and Python ...

Network Engineer Cisco / Arista / SD-WAN / Multi-Site European WAN Sunbury-on-Thames (Hybrid - 3 days on-site p / w) £50,000 - £60,000 + Benefits Are you a network specialist who wants genuine ownership rather than a ticket queue? This … work alongside internal MIS colleagues and third-party vendors. Your Skills & Experience Core Networking: Solid hands-on Cisco experience across routing and switching, LAN / WAN, VPNs, VLANs, firewalls and wireless in a business-critical environment. Arista: Any commercial exposure to Arista is a significant advantage given the migration ...

equivalent**Knowledge / Experience:*** Substantive experience in product security* Hands-on experience with risk management frameworks and best practice like NIST SP800-37, ISO27001, and Secure by Design (ISN 2023 / 09)This is not an exhaustive list, and we are keen to hear from you even … could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https: / / careers.uk.leonardo.com / gb / en / security-and-vetting**Why join us**At Leonardo, our people ...

budgets. Support supplier evaluations, procurement activities and technology selection processes where required. Information Security & Compliance Ensure solutions align with organisational compliance requirements, including: ISO 27001 ISO 27701 ISO 9001 Cyber Essentials Plus UK GDPR Data Protection Act 2018 Apply security-by-design … quality, security and continuous improvement. Benefits of working here Competitive salary. Hours 36 hours 15 minutes per week Contract Permanent Location Selsey, West Sussex / Hybrid Target is an Employee Ownership trust - you will become a beneficiary after 12 months employment Annual dividends eligible after 12 months service (subject ...

with updated detection requirements. Lead incident response for confirmed security events - coordinating containment, remediation, and recovery. Own and manage Defender for Endpoint / XDR and Defender for Cloud Apps - maintaining configuration, reviewing alerts, and tuning detection policies. Manage SIEM rule sets - adding new detection use cases, tuning existing rules … Identity & Access Management Own the organisation's Identity & Access Management discipline - including Entra ID, Privileged Identity Management (PIM), and access governance. Monitor the joiner / mover / leaver (JML) process - ensuring accounts are provisioned, modified, and deprovisioned accurately and on time. Run and manage access reviews and access ...

evidence ready for Stage 2. This is a hands on delivery role, not an advisory one. You will have support from an established QA / Compliance function, senior management is behind this, and the company has a brilliant culture to operate within, one of the best. You will work … audits The Ideal Candidate We’re looking for the following in the successful candidate: Solid, progressive experience ISO 27001:2022 ISO27001 Lead Implementer or Lead Auditor qualification Track record of getting non IT departments to own controls, with the credibility and patience to make it stick ...