1 to 25 of 39 Permanent ISO/IEC 27001 Jobs in the South West

breaches affecting products Your skillset may include: Knowledge of HMG standards (including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139) An understanding of MOD ISN 23 / 09 Secure by Design Knowledge of security frameworks, such as ISO / IEC 27001, NIST 800-30, NIST 800-53 or OWASP … Working with risk management frameworks and methodologies (e.g., ISO 27001 / 2, ISO27005 / 31000, NIST 800-30, NIST 800-53) Please reach out to Lewis Dunn @ ARM if you are interested or simply have some questions - E: or DD: Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource More ❯

breaches affecting products Your skillset may include: Knowledge of HMG standards (including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139) An understanding of MOD ISN 23 / 09 Secure by Design Knowledge of security frameworks, such as ISO / IEC 27001, NIST 800-30, NIST 800-53 or OWASP … Working with risk management frameworks and methodologies (e.g., ISO 27001 / 2, ISO27005 / 31000, NIST 800-30, NIST 800-53) Please reach out to Lewis if you are interested or simply have some questions - E: or DD: (phone number removed) Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced More ❯

Microsoft Dynamics Nav Developer. This is an excellent opportunity to make a meaningful impact within a collaborative and forward-thinking environment. The Role at a Glance: Microsoft Dynamics NAV / BC Developer - C / AL / AL. 100% Remote UK £60,000 - £70,000 Training and Development Contributory pension scheme, Perkbox Membership Company: Leading provider of tailored … chain, inventory management and the back-office; benefiting both the NHS and healthcare suppliers Pedigree: First GS1 UK Approved Solution for inventory management in the NHS. ISO / IEC 27001:2022 Certified. ISO Certified Awards: Extensive awards in the Heath Tech, Innovation & Supply Chain Categories Other Tech Innovations: 360 Healthcare Management … Familiar with Microsoft SQL Server, XML, APIs, and other OOP languages (e.g., C#, Java). Tooling & Standards: •Experienced with DevOps, GitHub, and automated testing tools. •Knowledge of ISO9001 and ISO27001 standards and integrated management systems. Consultancy & Mentoring: •Consultancy experience in Microsoft Dynamics NAV / BC implementations. •Familiar with third-party NAV / BC tools such as Tasklet Mobile More ❯

Microsoft Dynamics Nav Developer. This is an excellent opportunity to make a meaningful impact within a collaborative and forward-thinking environment. The Role at a Glance: Microsoft Dynamics NAV / BC Developer - C / AL / AL. 100% Remote UK £60,000 - £70,000 Training and Development Contributory pension scheme, Perkbox Membership Company: Leading provider of tailored … chain, inventory management and the back-office; benefiting both the NHS and healthcare suppliers Pedigree: First GS1 UK Approved Solution for inventory management in the NHS. ISO / IEC 27001:2022 Certified. ISO (Apply online only) Certified Awards: Extensive awards in the Heath Tech, Innovation & Supply Chain Categories Other Tech Innovations … Familiar with Microsoft SQL Server, XML, APIs, and other OOP languages (e.g., C#, Java). Tooling & Standards: • Experienced with DevOps, GitHub, and automated testing tools. • Knowledge of ISO9001 and ISO27001 standards and integrated management systems. Consultancy & Mentoring: • Consultancy experience in Microsoft Dynamics NAV / BC implementations. • Familiar with third-party NAV / BC tools such as Tasklet Mobile More ❯

Microsoft Dynamics Nav Developer. This is an excellent opportunity to make a meaningful impact within a collaborative and forward-thinking environment. The Role at a Glance: Microsoft Dynamics NAV / BC Developer - C / AL / AL. 100% Remote UK £60,000 - £70,000 Training and Development Contributory pension scheme, Perkbox Membership Company: Leading provider of tailored … chain, inventory management and the back-office; benefiting both the NHS and healthcare suppliers Pedigree: First GS1 UK Approved Solution for inventory management in the NHS. ISO / IEC 27001:2022 Certified. ISO (Apply online only) Certified Awards: Extensive awards in the Heath Tech, Innovation & Supply Chain Categories Other Tech Innovations … Familiar with Microsoft SQL Server, XML, APIs, and other OOP languages (e.g., C#, Java). Tooling & Standards: • Experienced with DevOps, GitHub, and automated testing tools. • Knowledge of ISO9001 and ISO27001 standards and integrated management systems. Consultancy & Mentoring: • Consultancy experience in Microsoft Dynamics NAV / BC implementations. • Familiar with third-party NAV / BC tools such as Tasklet Mobile More ❯

Birmingham, Bristol, Manchester, Reading, St Albans Business Line Enabling Functions Job Type Permanent / FTC Date published 07-Aug-2025 19967 Connect to your Industry Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can … experience Required Qualifications: Bachelor's degree (or equivalent) in cybersecurity, information systems, computer science, or other technology-related field, or equivalent experience Proven combined experience in the information security / cybersecurity domain, with a focus on policies and standards, or cybersecurity governance and risk management Strong ability to clearly communicate complex cybersecurity statements to technical and non-technical audiences … at various hierarchical levels Deep knowledge of common information security management frameworks and standards, such as ISO / IEC 27001 / 27002, NIST 800-53, and the NIST Cybersecurity Framework Soft skills: collaboration, teamwork, persuasion, attention to detail, time management, prioritization, resourcefulness Advanced proficiency with MS Office products, primarily MS Word, Excel More ❯

objectives, future growth ambitions and product lines. Compliance: Ensure the company's security posture meets the requirements of the NHS Data Security and Protection Toolkit (DSPT), Cyber Essentials Plus, ISO27001:2022 and other relevant frameworks. Risk management: Lead the information security risk management program, including identification, assessment, mitigation, and monitoring of information security risks across all systems, applications, and operations. … experience with UK healthcare security standards and regulations, including demonstrable expertise with the NHS Data Security and Protection Toolkit (DSPT), Digital Technology Assessment Criteria (DTAC) and NCSC CAF. ISO 27001:2022 implementation & maintenance: Hands-on experience with the successful implementation, certification, and ongoing maintenance of an ISO 27001 Information Security Management System … AWS, GCP), including knowledge of cloud security best practices and compliance frameworks Certifications: Relevant industry certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer / Auditor, or similar. Supplier Security Management: Experience in conducting due diligence and ongoing monitoring of third-party security posture, specifically SaaS. Threat Intelligence: Experience in leveraging threat intelligence to More ❯

objectives, future growth ambitions and product lines. Compliance: Ensure the company's security posture meets the requirements of the NHS Data Security and Protection Toolkit (DSPT), Cyber Essentials Plus, ISO27001:2022 and other relevant frameworks. Risk management: Lead the information security risk management program, including identification, assessment, mitigation, and monitoring of information security risks across all systems, applications, and operations. … experience with UK healthcare security standards and regulations, including demonstrable expertise with the NHS Data Security and Protection Toolkit (DSPT), Digital Technology Assessment Criteria (DTAC) and NCSC CAF. ISO 27001:2022 implementation & maintenance: Hands-on experience with the successful implementation, certification, and ongoing maintenance of an ISO 27001 Information Security Management System … AWS, GCP), including knowledge of cloud security best practices and compliance frameworks Certifications: Relevant industry certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer / Auditor, or similar. Supplier Security Management: Experience in conducting due diligence and ongoing monitoring of third-party security posture, specifically SaaS. Threat Intelligence: Experience in leveraging threat intelligence to More ❯

sacrifice scheme Life Insurance (3x annual salary) Employee Assistance Programme (EAP) and workplace wellbeing initiatives Private Healthcare cash-back scheme Flexible working hours and location, open to part-time / condensed hours Flexible benefits, such as: Cycle to Work, volunteer days / opportunities and charity events Enhanced parental leave packages and enhanced sick pay Training and development opportunities … team building, company-wide events Role specifics Salary range: Market rate Reporting to: Head of Platform Key stakeholders: Technology and Product, InfoSec, Support Organisational Framework Level: 3 About you / Job Summary We are seeking a pragmatic and highly skilled DevSecOps Engineer to join our Platform team. In this role, you will be responsible for identifying, prioritising and remediating … prem systems. Define and run patch management processes for virtual machines, containers and serverless functions. Integrate vulnerability scanning (e.g. Qualys, Sonar Cloud, Tenable or Azure-native scanners) into CI / CD pipelines. Security Analysis & Incident Response Perform root-cause analysis of security incidents and vulnerabilities. Conduct threat modelling, code and infrastructure reviews. Develop and execute incident response procedures, leveraging More ❯

reporting. Liaise with customers and provide regular updates. Coordinate product support and resolve technical issues. Maintain documentation and configure products for delivery. Ensure compliance with ISO 9001 / 27001 standards. Requirements: Degree in STEM or equivalent experience. Strong project management and communication skills. Familiarity with Linux and collaboration tools (e.g. Jira, Confluence). Experience working … to ISO 9001 / 27001 quality and security processes. Software Development background highly beneficial, coding skills in Python, JavaScript would be of benefit Previous experience in defence / security and software / hardware development is a plus. Full UK driving licence and willingness to travel in the UK and potentially overseas This role More ❯

standard configurations, and associated tools. Architecture Design: Design modular, secure, and scalable architecture tailored to various user profiles. Automation: Automate OS and application deployment, configuration, and update processes. CI / CD Pipelines: Design and implement CI / CD pipelines for packaging and distributing software to endpoints. Operational Collaboration: Work closely with Operation teams to ensure operational availability and … encryption, EDR). ITIL Processes: Knowledge of ITIL processes, particularly asset and configuration management. Compliance Frameworks: Experience working in environments subject to compliance frameworks such as ISO / IEC 27001 or SOC 2 is highly valued. Soft Skills: Strong analytical and problem-solving skills, excellent communication and interpersonal skills, and strong leadership and … discount schemes - gym membership, restaurants, cinema tickets, and much more! Regular social club events, spontaneous reward events throughout the year Flexible Private Medical & Dental care programmes Sponsorship of visas / comprehensive relocation packages Bank Holiday Swap - our holiday swap program allows you to change it for another day of your choice! Relaxed dress code policy Learning and Development Our More ❯

defence industry, seeking a skilled Project Manager to lead technical projects from proposal through delivery. Youll manage budgets, schedules, and customer relationships, ensuring work meets ISO 9001 / 27001 quality and security standards. Key Responsibilities: - Plan, track, and report project progress and budgets. - Liaise with customers in person, via email, and online meetings. - Produce written … and configure products for delivery. Requirements: - Degree in Computer Science, Engineering, Physics, or Maths (or equivalent experience). - Proven technical project management experience. - Knowledge of ISO 9001 / 27001, Linux, and collaboration tools (e.g., Confluence, Jira, Gitlab). - Advantageous: Defence sector experience, software development (Python, HTML / JS), hardware production knowledge. - Excellent communication, problem … solving, and organisational skills. - Able to obtain UK Developed Vetting security clearance. - Full UK driving licence and willingness to travel (UK / international). Benefits: - 25 days holiday + bank holidays - 10% pension contribution, bonus scheme, six-monthly salary reviews - Private medical, life, and critical illness cover - Free parking, small friendly office - £50£80k salary More ❯

A Defence client of ours is currently in the market for a Product / Project Manager to join a team of growing team based in Tewkesbury. In the role you will be responsible for the Planning Management and tracking of technical project progress and budgets etc. Day-to-day responsibilities include: Providing progress reports to customers through written reports … and oral presentations. Writing project proposals and processing customer orders. Delivering projects in line with ISO 9001 / 27001 quality and security processes. Coordinating multiple products through-life support and logistical support to customers. Coordinating support responses for customers with technical problems. Working with customers and developers to diagnose and resolve issues. Maintaining and reviewing … issue logs with customers and developers. Maintaining product / project documentation for internal and external use. Configuring products with customer configuration data prior to delivery. The right candidate will meet the below requirements: Experience of managing, tracking and reporting technical project progress. Experience working to ISO 9001 / 27001 quality and security processes. Familiarity More ❯

Job Title: Cyber & Information Security Lead Type: Full Time & Permanent Location: Hybrid / Bath, England About the Role: Seeking a senior cyber and information security professional to lead on safeguarding critical healthcare technology platforms. This role is ideal for someone with strong expertise in compliance, risk management, and security governance—particularly within public sector or regulated environments—who’s … Key Responsibilities: Security Strategy : Define and maintain a robust security strategy aligned with business goals and growth. Compliance : Ensure adherence to key standards including DSPT, Cyber Essentials Plus, and ISO27001:2022. Risk Management : Lead the identification and mitigation of information security risks across all operations. Security Architecture : Oversee secure system and software design throughout the development lifecycle. Incident Response : Manage … security, ideally in a CISO or equivalent role within software or health tech. Healthcare Standards : Strong knowledge of UK healthcare security frameworks like DSPT, DTAC, and NCSC CAF. ISO 27001 : Proven track record in implementing and maintaining ISO 27001:2022-certified ISMS. Secure by Design : Deep understanding of secure SDLC and embedding More ❯

down to the successful candidate. You can expect: Design and manage scalable, secure cloud environments using Azure Bicep, ARM, or Terraform Lead the implementation of DevSecOps practices including CI / CD, secrets management, zero-trust security, and vulnerability management Develop secure cloud-native architectures including microservices, containers, and serverless patterns Ensure compliance with industry security and privacy standards ( e.g. … ISO 27001, SOC 2, GDPR) Secure containerised environments, including Kubernetes and Docker Collaborate with developers to integrate secure deployment pipelines across the SDLC Support deployments in client environments, including on-prem and multi-cloud Continuously improve infrastructure processes for performance, reliability, and security Where you'll be stretched (and thrive): We're growing fast: That means … skillsyou'll need to succeed in this role Deep experience in Azure infrastructure (with IaC using Bicep, ARM, or Terraform) Hands-on knowledge of DevSecOps tooling and techniques (CI / CD, secrets management, threat modelling) Experience implementing security standards across cloud and hybrid environments Familiarity with container security ( e.g. Docker, Kubernetes) A strong understanding of compliance frameworks such as More ❯

post-incident reviews and recommend improvements. Forensic Analysis Investigate incidents, perform root cause analysis, preserve digital evidence, and produce forensic reports. Security Tools Manage tools such as firewalls, IDS / IPS systems, and endpoint protection solutions; evaluate and recommend new technologies. Documentation Maintain detailed logs and reports of incidents, assessments, and analyses for internal stakeholders. Collaboration Partner with IT … What We re Looking For IT Expertise Strong knowledge of IT infrastructure, especially cloud platforms; AWS experience preferred. Security Tools Proficiency Hands-on experience with Palo Alto firewalls, IDS / IPS, and endpoint protection. Network Security Knowledge Deep understanding of VPNs, network protocols, and security architecture. Incident Management Proven ability to detect, analyse, and resolve security threats and malware. … both technical and non-technical stakeholders. Project Management Experience managing security projects and working with cross-functional teams. Certifications Relevant qualifications such as CEH, CCSP, CompTIA Security+, or AWS / Azure certs are highly desirable. This fantastic role come with a highly competitive salary which is reviewed annually, and comes with an excellent benefits package which includes a More ❯

post-incident reviews and recommend improvements. Forensic Analysis - Investigate incidents, perform root cause analysis, preserve digital evidence, and produce forensic reports. Security Tools - Manage tools such as firewalls, IDS / IPS systems, and endpoint protection solutions; evaluate and recommend new technologies. Documentation - Maintain detailed logs and reports of incidents, assessments, and analyses for internal stakeholders. Collaboration - Partner with IT … What We’re Looking For IT Expertise - Strong knowledge of IT infrastructure, especially cloud platforms; AWS experience preferred. Security Tools Proficiency - Hands-on experience with Palo Alto firewalls, IDS / IPS, and endpoint protection. Network Security Knowledge - Deep understanding of VPNs, network protocols, and security architecture. Incident Management - Proven ability to detect, analyse, and resolve security threats and malware. … both technical and non-technical stakeholders. Project Management - Experience managing security projects and working with cross-functional teams. Certifications - Relevant qualifications such as CEH, CCSP, CompTIA Security+, or AWS / Azure certs are highly desirable. This fantastic role come with a highly competitive salary which is reviewed annually, and comes with an excellent benefits package which includes a More ❯

post-incident reviews and recommend improvements. Forensic Analysis – Investigate incidents, perform root cause analysis, preserve digital evidence, and produce forensic reports. Security Tools – Manage tools such as firewalls, IDS / IPS systems, and endpoint protection solutions; evaluate and recommend new technologies. Documentation – Maintain detailed logs and reports of incidents, assessments, and analyses for internal stakeholders. Collaboration – Partner with IT … What We’re Looking For IT Expertise – Strong knowledge of IT infrastructure, especially cloud platforms; AWS experience preferred. Security Tools Proficiency – Hands-on experience with Palo Alto firewalls, IDS / IPS, and endpoint protection. Network Security Knowledge – Deep understanding of VPNs, network protocols, and security architecture. Incident Management – Proven ability to detect, analyse, and resolve security threats and malware. … both technical and non-technical stakeholders. Project Management – Experience managing security projects and working with cross-functional teams. Certifications – Relevant qualifications such as CEH, CCSP, CompTIA Security+, or AWS / Azure certs are highly desirable. This fantastic role come with a highly competitive salary which is reviewed annually, and comes with an excellent benefits package which includes a More ❯

Location: Bristol, GB, BS16 1EJ Onsite or Hybrid: Job Title: Cyber Security Lead Location: Warrington, Bristol or Leicester Compensation: Up to £58,104 + Benefits Role Type: Full time / Permanent Role ID: SF66104 At Babcock we're working to create a safe and secure world, together, and if you join us, you can play your part as a … out of the ordinary. We are looking for a Cyber Security expert with proven working experience within a complex organisation responsible for critical defence programmes. Closely working with government / MOD client, programme partners, and design collaborators, you will ensure the highest standards of cybersecurity across all stages of development. Day-to-day, you'll have the following responsibilities … entries, Risk Balance Cases, Information Asset Owner forms, Supplier Assurance Questionnaires. Experienced in relevant Security Policy and Cyber Security Frameworks including the GovS 007, MOD Secure by Design (SbD), ISO27001 - Information Security Management Systems, NIST, NCSC IA Guidance Qualifications for the Cyber Security Lead Educated to degree level or holds a relevant professional qualification or equivalent experience. Security Clearance The More ❯

network protocols, VPNs, and security architecture. Experience in incident detection, analysis, response, forensic and malware analysis. Skills in scripting and automation (Python, PowerShell). Knowledge of frameworks like ISO 27001, NIST, Cyber Essentials. Understanding of risk management, data protection, GDPR, and PII. Ability to produce clear security documentation and communicate technical info effectively. Solid organizational skills More ❯

client's risk profile and operational needs. Guide clients in developing and improving their incident response processes, including playbook creation and alignment with security frameworks like NIST and ISO 27001. Regularly review and optimise SIEM configurations to reduce false positives, improve detection accuracy, and adapt to evolving threat landscapes. Advisory & Compliance: Advise clients on aligning SIEM deployments with … of experience in SIEM consulting, SOC, or security operations roles with a focus on threat detection and response. Strong understanding of threat detection methodologies, security frameworks (e.g., NIST, ISO 27001), and compliance requirements. Experience with SIEM design and architecture, data ingestion, log management, and custom dashboard creation. Familiarity with cloud-native security solutions and knowledge of More ❯

improvement Areas of Knowledge We are looking for people who have working experience or comfortable teaching (or able to learn) in the following areas: Network Security (e.g., Firewalls, IDS / IPS, VPNs) Operating System Security (e.g., Windows, Linux hardening) Ethical Hacking and Penetration Testing (e.g., reconnaissance, vulnerability scanning, exploitation) Security Operations (e.g., SIEM, SOC analysis) Incident Response and Digital … Forensics Cryptography and Secure Communications Cloud Security (e.g., AWS, Azure, GCP security best practices) Application Security (e.g., OWASP Top 10) Compliance and Governance (e.g., GDPR, ISO 27001) Security Tools (e.g., Wireshark, Nmap, Metasploit, Kali Linux) Person Specification: Experience delivering cybersecurity training or mentoring professionals in a security capacity Strong ability to develop learners from intermediate to More ❯

improvement Areas of Knowledge We are looking for people who have working experience or comfortable teaching (or able to learn) in the following areas: Network Security (e.g., Firewalls, IDS / IPS, VPNs) Operating System Security (e.g., Windows, Linux hardening) Ethical Hacking and Penetration Testing (e.g., reconnaissance, vulnerability scanning, exploitation) Security Operations (e.g., SIEM, SOC analysis) Incident Response and Digital … Forensics Cryptography and Secure Communications Cloud Security (e.g., AWS, Azure, GCP security best practices) Application Security (e.g., OWASP Top 10) Compliance and Governance (e.g., GDPR, ISO 27001) Security Tools (e.g., Wireshark, Nmap, Metasploit, Kali Linux) Person Specification: Experience delivering cybersecurity training or mentoring professionals in a security capacity Strong ability to develop learners from intermediate to More ❯

closely with senior leadership to ensure all technical initiatives align perfectly with our wider organisational strategy. Ensuring everything we do complies with industry standards and regulatory requirements (like ISO 27001, NIST). Championing a culture of continuous improvement, knowledge sharing, and operational excellence across your teams. Representing our technical function in client engagements, providing expert thought More ❯

closely with senior leadership to ensure all technical initiatives align perfectly with our wider organisational strategy. Ensuring everything we do complies with industry standards and regulatory requirements (like ISO 27001, NIST). Championing a culture of continuous improvement, knowledge sharing, and operational excellence across your teams. Representing our technical function in client engagements, providing expert thought More ❯