2 of 2 Permanent ISO/IEC 27005 Jobs in the South East

supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile / DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube ...

collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills / experience as described below. Essential experience includes: Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005 … . Producing clear, actionable risk treatment plans aligned to security objectives to treat / mitigate the identified risks. Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering Creation of security documentation to support the development of an information system, these could include: Security Aspects ...