1 to 25 of 90 Permanent ISO/IEC 27001 Jobs in the South West

Code generation + Automated code review + Intelligent testing + Documentation support + Development acceleration* Establishing responsible AI governance aligned with ISO / IEC 42001 principles* Ensuring AI-assisted development practices are implemented securely and consistently* Promoting AI literacy and prompt engineering capability across engineering … opportunities**Security, Compliance & Engineering Standards**You will:* Lead secure-by-design engineering practices* Support ISO 27001 and ISO / IEC 42001 initiatives* Define and enforce coding standards, review processes, and quality expectations* Improve engineering quality metrics and continuous improvement practices* Support ...

Trainer Location: Field-Based | Field-Based | Scotland & Northern England Salary: £60,000 Permanent role We’re looking for an experienced ISO Consultant / Trainer to join a specialist management systems consultancy. This is an opportunity to take ownership of a varied portfolio of client projects, with … consultancy projects. Turning complex ISO requirements into practical business solutions. Supporting and delivering ISO and auditing training. The Consultant / trainer will have: This is a role for an experienced consultant, practical knowledge of both ISO 9001 and ISO 27001 ...

Analyst will help strengthen the organisations overall security posture and support a culture of continuous improvement. The role is expected to start in mid / late October 2026. DUTIES Your duties as the Cyber Security Analyst include: Support Security Compliance: Assist with maintaining compliance with applicable security standards … frameworks, including ISO / IEC 27001, ISO / IEC 27017, ISO / IEC 27018 and Cyber Essentials Plus Assist with Audit Readiness: Support the preparation, coordination and collation of evidence for internal ...

management principles and methodologies. Experience working with recognised frameworks and standards, including: NIST Cybersecurity Framework (CSF) NCSC Cyber Assessment Framework (CAF) ISO / IEC 27001 and ISO / IEC 27005 CIS Critical Security Controls COBIT Experience analysing risk … Days) Statutory & Contributory Pension EAP with Help@Hand Gym Membership Benefits Cycle to Work and Electric Vehicle Schemes Flexible Working Annual Away Days / Company Socials Diversity and Inclusion As an equal opportunities employer, we are committed to creating a work environment that supports, celebrates, encourages and respects ...

robust cybersecurity policies, procedures and frameworks. Ensure compliance with relevant data protection laws, including UK GDPR, ISO standards, including ISO / IEC 27001, Cyber Essentials Plus and industry best practice. Lead incident response planning, security audits, risk assessments and remediation efforts. … experience leading digital transformation and systems integration projects. Excellent leadership, communication and stakeholder management skills. Professional certifications such as CISSP, CISM, ISO / IEC 27001 Lead Implementer or Auditor, or similar. Experience working in regulated, public sector or educational environments. Please note ...

business operations.You will be responsible for maintaining and developing our Integrated Management System (IMS), ensuring continued compliance with internationally recognised standards including ISO 9001, ISO 20000-1, ISO 27001 and ISO 14001. You will also play a key role … working relationships across all levels of an organisation.Strong analytical, problem-solving and organisational skills, with the ability to manage multiple priorities effectively.DesirableAuditor qualification and / or working knowledge of one or more of the following standards: ISO 27001, ISO 14001, ISO ...

Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST SP 800-30 and ISO / IEC 27005, and maintain entries in the design risk register. Capture security requirements and maintain the traceability thread from threat to risk to control … related discipline. Suitable qualifications may include BSc, MSc, CompTIA Security+, CySA+, CISM, CISSP (or associate), ISO 27001 Lead Implementer / Lead Auditor, ISO 27005 risk, ISA / IEC 62443 Cybersecurity Fundamentals Specialist, or equivalent professional experience. Candidates working towards relevant ...

Title: Product Security Engineer Information AssuranceLocation: Ashton Vale, Bristol + Hybrid Working ArrangementsCompensation: Competitive Salary + BenefitsRole Type: Full time / PermanentRole ID: SF75386Shape the future of secure engineering and protect what matters most.At Babcock, we’re working to create a safe and secure world, together. If you join … similarly regulated sectors (desirable).Qualifications for the Product Security Engineer - Information AssuranceRelevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor.Security ClearanceThe successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. Must be Sole ...

Title: Product Security Engineer Information Assurance Location: Ashton Vale, Bristol + Hybrid Working Arrangements Compensation: Competitive Salary + Benefits Role Type: Full time / Permanent Role ID: SF75386 Shape the future of secure engineering and protect what matters most. At Babcock, we’re working to create a safe … regulated sectors (desirable). Qualifications for the Product Security Engineer - Information Assurance Relevant higher education qualification or industry certification such as CISSP, CISM, or ISO27001 Lead Implementer / Auditor. Security Clearance The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role. ...

Design framework; Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-37 / 53); Support Information Assurance based engagements with Partners / suppliers and Authority representatives; Support and contribute towards Security Working Groups and forums with … Security artefacts, such as: Technical Risk Assessments, Security Operating Procedures (SyOPs), Test Security Instructions, Security Cases, etc. Essential Skills & Experience Passion for Information Security / Assurance and continuous learning.; Self-motivated, problem solver, organised and in possession of good business acumen; Team player but able to work effectively alone ...

supporting audit activities It would also be great (but not essential) if you had exposure to cloud security, security automation or architecture, FCA / PRA / DORA and cyber resilience requirements, mentoring or leading technical projects, SIEM / EDR / IAM tooling, Microsoft Purview … / JSON for queries and automation What's on offer: £65,000 base salary with discretionary annual bonus Hybrid working - just 2 days a week in the Bath office 34 days' holiday (including bank holidays), with the option to buy or sell up to 5 additional days Private medical ...

coordinate remediation activities. Develop and maintain security policies, controls and standards. Produce management reporting, dashboards and compliance metrics. Plan, conduct and document internal ISO 27001 audits. Support third-party risk management and supplier security assurance activities. Help maintain compliance with frameworks and regulations such as ISO … 27001, NIS Regulations and Cyber Essentials. Support information security awareness initiatives and promote a strong security culture. Assist in security incident investigations and remediation activities. Work with business stakeholders to improve information governance practices and data ownership accountability. What we're looking for: Experience administering or supporting Microsoft ...

opportunity for someone who enjoys balancing strategic security governance with technical delivery, while also supporting key networking initiatives. This is a 90% Information Security / 10% Network Engineering role, making it ideal for someone whose passion is cyber security but who is comfortable maintaining and supporting enterprise network infrastructure … firewalls and routing technologies. Contribute to disaster recovery planning, network resilience and high availability initiatives. Skills required: Enterprise firewall technologies including Cisco Firepower (ASA / FTD) and Palo Alto. Cisco networking technologies including Catalyst switching, Layer 2 / 3, OSPF and VPNs. Network security controls including Cisco ...

function and the wider Corporate Security Office deliver on the relevant strategy & roadmap for Thales UKAnalyse technical, physical, environmental and personnel security risks, advise / support relevant stakeholders around risk assessments and controlsAnalyse supplier related security incidents and support Security Incident Team as well manage relevant stakeholders.Support Procurement … organisationSupport with maintaining the ISMS through promoting the established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and / or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input ...

applied effectively. Willingness and ability to hold the required security clearance for highly classified environments. Professional security qualification such as CISSP, CISM, Security+, ISO 27001, Certified Cyber Professional or equivalent experience. Knowledge of cyber and information risk frameworks or methodologies. This is not an exhaustive list … role requires Developed Vetting (DV) vetting so you must be eligible for this level of clearance.For more information and guidance please visit:https: / / careers.uk.leonardo.com / gb / en / security-and-vetting Why join us At Leonardo, our people are at the heart ...

Cyber Security Consultant / Security Architect Salary: Up to £90,000 This is a client-facing role supporting MOD and public sector environments across secure design, cyber assurance, risk management and technical security architecture. We need someone who can review technical designs, understand security risk, advise on controls, support … acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG / MOD assurance expectations. Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. Experience working in defence, MOD, public sector, government ...

party penetration testing and remediation. Lead blameless post-mortems after significant incidents. Escalation & On-Call Management: Act as a senior escalation point for platform / application issues. Manage (and participate in / provide cover for) the out-of-hours on-call rotation for P1 / P2 incidents … into the departmental risk register and coordinate evidence, controls, and documentation required for regulatory and customer audits (e.g., ISO 27001 / ISO 9001). FinOps & Stakeholder Collaboration: Act as the primary point of contact for internal / external queries. Collaborate with FinOps ...

supporting their skill development. Infrastructure Management: Oversee the design, implementation and ongoing support of IT infrastructure in the UK office, including virtualisation platforms (VMware / Nutanix), server, storage and network estate, ensuring systems are secure, high-performing and scalable. Cloud and Modern Workplace: Own and enhance the UKs Azure … incidents, leading investigation, containment and post-incident review alongside the global IT team. Compliance Initiatives: Lead and contribute to compliance activity including Cyber Essentials / Cyber Essentials Plus, ISO 27001 and GDPR, supporting audits, evidence gathering and remediation. Project Leadership: Lead infrastructure and security projects ...

enable interoperability across Defence systems. Establish and support data governance frameworks, including data quality, metadata, lineage, and master data management practices. Contribute to AI / data governance principles, emerging technology assessments, and horizon scanning activities. Support the development of reusable patterns, guidance, and Communities of Practice to uplift data … teams. Experience 5+ years proven experience as a Data Architect within UK Defence or Critical National Infrastructure environments. Experience working across enterprise architecture and / or solution data architecture layers, bridging strategic and technical domains. Experience delivering across full system lifecycles (e.g. CADMID), including concept, design, and in‐service ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 25 years' experience within Operational Technology or Industrial Cyber Security. Experience with OT / ICS environments including SCADA, DCS, PLCs or RTUs . Understanding of Industrial IoT (IIoT) and industrial communications. Knowledge of OT cyber risk, security architecture and monitoring. … Experience within energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Familiarity with NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP or NIST CSF . Experience working within Agile delivery teams. What's on Offer Hybrid working (minimum ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

need as an Operational Technology (OT) Cyber Security Consultant 610 years' experience within Operational Technology or Industrial Cyber Security. Strong experience securing OT / ICS environments including SCADA, DCS, PLCs, RTUs and industrial communications . Expertise across Industrial IoT (IIoT), OT cyber risk, security architecture and security monitoring . … projects across energy, utilities, transport, oil & gas, water, nuclear or critical infrastructure . Strong knowledge of NCSC CAF, ISO 27001 / 27005, IEC 62443, NERC CIP and NIST CSF . Experience leading client engagements and working with senior technical stakeholders. Experience working within ...

operational reality supports the security claims we make to customers, partners and auditors. Lead our assurance and certification activity, including Cyber Essentials Plus, ISO 27001 and other relevant standards. Bring together the security expertise that already exists across the business into one coherent, prioritised programme … similar role, ideally where systems are delivered into and operated within customer environments. A track record of achieving and maintaining certifications such as ISO 27001 and Cyber Essentials Plus, including managing audits. Practical understanding of securing deployed infrastructure, including firewalls, patching, secure configuration and equipment lifecycle ...

inclusive, and progressive. Staff have respect and loyalty, are passionate about all we do, and proud of what we achieve. Job Description Hours: 24 / 7 shift, 4 on 4 off (2 days 7am-7pm, then 2 nights 7pm-7am, then 4 days off) Overall purpose … ticketing system is fully up to date. Key responsibilities for this job: Installation of server, network and storage hardware with associated cabling / patching Perform cabling / patching duties of both copper and fibre for a variety of different client requirements Decommission hardware and prepare for shipping whilst ...