1 to 25 of 72 Permanent ISO/IEC 27001 Jobs in the South West

security requirements throughout the product and system development lifecycle . Lead threat modelling and risk assessments , applying recognised frameworks such as ISO / IEC 27001, NIST 800-30 / 53, and ISO 31000. Use and configure industry-standard threat-modelling … advice on secure architectures, ensuring risks are understood, prioritised, and mitigated. Ensure compliance with MOD and HMG standards, including JSPs, Def Stan 05-138 / 05-139 , and ISN 23 / 09 Secure by Design . Support incident response, security investigations, and remediation activities for product and system ...

administrating the security of both internal and external corporate network communications, including, routers, switches, firewalls, DMZ, servers, Wi-Fi, OT, telephony and LAN / WAN / VPN communication services. Constantly reviewing the IP space across the organisation ensuring that the TCP / IP stack, VLANs, IP Subnet … performance and security. Work closely with NIBE SOC teams and internal security engineers to ensure all preventative security measures are implemented and Zero Day / critical threats are extinguished in line with internal resolution targets. Collaborate with other business teams to ensure the proper use of systems. Coordinate investigations ...

Monitor and administer the security of our internal and external corporate network communications, including routers, switches, firewalls, DMZ, servers, WiFi, OT, telephony and LAN / WAN / VPN communication services. Constantly review the IP space across the organisation ensuring our TCP / IP stack, VLANs, IP Subnet … progressive experience in an IT security role maintaining secure networks in a MS-Windows and Linux environment. Expert knowledge of and experience in LAN / WAN / VLAN communications, VPN configuration and enterprise wireless networking. Firewall configuration, management and monitoring experience is essential. Experience of Fortigate products preferable. ...

Security and Governance Manager, ISO27001, c £ 50000 - 60000+ benefits, nr Cheltenham, Gloucestershire. 3 days in the office, 2 days WFH Growing company are looking for an IT Security and Governance Manager who will co-ordinate all the governance and compliance including Certifications such ISO 27001, Cyber … join a global company that is going through an exciting period of growth and expansion. If you have the required skills and experience around ISO27001 please send your CV for a full brief. This role is based in the Cheltenham / Gloucester area and requires 3 days a week ...

multi-site environment. This role is key to protecting critical systems and ensuring secure, reliable IT operations. Key Responsibilities Design, manage, and secure LAN / WAN / VPN, firewall, WiFi, and network communications. Monitor and improve network security posture, performance, and threat landscape. Administer firewalls, routers, switches, DMZs … documentation, asset records, and provide service updates. Skills & Experience 5+ years’ experience in an IT security or network security role. Strong knowledge of LAN / WAN / VLANs, VPNs, TCP / IP, and enterprise WiFi. Hands-on firewall experience (Fortigate preferred). Experience in Microsoft Windows, Active ...

security documentation Support clients in defining business led security requirements and secure-by-design solutions Interpret and apply ISO 27001 / ISO 27002, NIST, NCSC CAF, and MOD security frameworks Engage confidently with technical and non-technical stakeholders, including senior leaders Contribute … understanding of ISO 27000-series standards and security risk frameworks Familiarity with NCSC guidance and legacy IA standards Experience operating within MOD / defence-aligned security frameworks (e.g. JSP 604, JSP 440, JSP 902) Ability to clearly articulate risk and assurance outcomes to diverse stakeholders Qualifications Essential ...

based Internal Developer Platform as a product, enabling self-service environment provisioning and repeatable golden paths. Develop and maintain Infrastructure as Code (Terraform and / or Bicep) modules and reusable templates for AKS, networking, storage, databases, and app runtimes. Implement and evolve CI / CD pipelines (HL version … delivery. Introduce and run GitOps for Kubernetes (AKS preferred), patterns and multi-environment promotions. Own platform observability: metrics, logs and traces using Azure Monitor / Log Analytics / Application Insights, plus Datadog / Grafana where appropriate. Embed security by design: Azure Policy, Defender for Cloud, secrets management ...

inclusive, and progressive. Staff have respect and loyalty, are passionate about all we do, and proud of what we achieve. Job Description Hours: 24 / 7 shift, 4 on 4 off (2 days 7am-7pm, then 2 nights 7pm-7am, then 4 days off) Overall purpose … ticketing system is fully up to date. Key responsibilities for this job: Installation of server, network and storage hardware with associated cabling / patching Perform cabling / patching duties of both copper and fibre for a variety of different client requirements Decommission hardware and prepare for shipping whilst ...

ticketing system is fully up to date. Key responsibilities for this job: Installation of server, network and storage hardware with associated cabling / patching Perform cabling / patching duties of both copper and fibre for a variety of different client requirements Decommission hardware and prepare for shipping whilst … Rota to provide support for client access at Data Centre's, Client Migrations, Smart Hands Requests, Installation works for Managed Hosted clients, Scheduled maintenances / upgrades for Managed Hosting and Infrastructure upgrades, Circuit Down / Faults and any other works deemed Out Of Hours Internally ...

ticketing system is fully up to date. Key responsibilities for this job: Installation of server, network and storage hardware with associated cabling / patching Perform cabling / patching duties of both copper and fibre for a variety of different client requirements Decommission hardware and prepare for shipping whilst … Rota to provide support for client access at Data Centre's, Client Migrations, Smart Hands Requests, Installation works for Managed Hosted clients, Scheduled maintenances / upgrades for Managed Hosting and Infrastructure upgrades, Circuit Down / Faults and any other works deemed Out Of Hours Internally ...

tools (DocuSign, Vanta, Drata, Asana, Trello) Excited about building your career in legal ops, compliance, or governance Nice-to-have: experience in tech / SaaS environments, certifications like CIPP / E, CIPM, ISO 27001 Lead Implementer, or ICA Certificate in Compliance. What we offer … days a year Health and Wellbeing Company sick pay Spill and Health Shield cash plan Community and Culture Free Caption.Ed & TalkType for 5 friends / family 2 volunteer days, team socials, away days & a dog-friendly office Hiring process Apply - Send your CV and cover note. Initial conversation ...

engineering, ideally in defence, space, or critical infrastructure Familiarity with MOD, NCSC, and ISO standards (e.g. ISO 27001 / 2, NIST 800-series, JSP 604) Competence in requirements engineering and systems thinking Practical experience with security in software and / or system … communications DevSecOps awareness or experience with security automation Benefits: Annual Company Bonus 25 Days holiday not including bank holidays with the option to buy / sell up to 5 days Competitive pension contribution Continuous professional development including incentives Access to online Udemy training facility Flexible working arrangements Bike ...

working (with occasional trips to Chippenham office as and when needed). This is a newly created position where the role is a 50 / 50 split between strategic oversight and hands-on delivery. It involved direct collaboration with wider IT teams and business stakeholders to ensure secure practices … regulatory frameworks within region and best practices (such as ISO 27001, NIST CSF, Cyber Essentials). Professional certifications - CISSP, CISM, ISO27001 On Offer Salary up to £95,000 Company bonus 25 days annual leave Remote working (occasional visits to office near Chippenham) Enhanced pension contribution Private ...

best practices in security assurance Experience Required Experience in information security, risk management, or assurance roles. Desirable qualifications - CISM, CRISC, CISSP, CISA, CGEIT, ISO 27001 Lead Auditor (or equivalent) Hold an active and transferable SC clearance Strong analytical skills with the ability to interpret technical … Remote first role with very occasional travel. Career Development: Continuous learning and professional growth. Benefits Package: Includes Private Health Care, Cash Back Plan, Buy / Sell Holiday Options, Life Assurance, and more. Interested? Submit your application to learn more about this exciting opportunity. Reasonable Adjustments: Respect and equality ...

infrastructure, SysOps or Security role; Active Directory management; AWS ecosystem, especially AppStream 2.0. NTFS permission & Group Policy configuration & management; Microsoft RDS Architecture (RemoteApp / RDWeb Gateway / RDS Broker); Virtual Windows 2016 DC Servers / File Server with SMB file shares; Site-to-Site VPN configuration & maintenance … interest in pursuing an Information Security specialism. Desirable: IaaS and PaaS environments; SQL; VMWare Cloud Director; SharePoint Windows IIS security & management; Security & GDPR compliance (ISO27001 / ISO27032 / ...

achieve it. It would be beneficial if you had coding or scripting skills to automate security checks, or experience managing build servers and CI / CD infrastructure. To thrive at Bluefruit, you should be curious, diplomatic, and genuinely enjoy the puzzle of fitting compliance requirements into Agile workflows. … required, but your ability to balance security with enablement should be second to none. About us At Bluefruit, we dont just talk about work / life balance we actively encourage it. From flexible working hours, to letting our people create their own working environment, we work hard to ensure ...

Cyber Security Generalist £68,000 - 85,000 GBP Hybrid WORKING Location: Bristol, South West - United Kingdom Type: Permanent Cyber Security Generalist - Associate Manager (Bristol / Cheltenham, Southwest UK) Salary: £68,000-£85,000 per year (depending on level and experience) + £5,750 car allowance Working Model: Hybrid / … supported to enhance both technical and consultancy skills. For further information feel free to reach me at 02895213213, or simply apply! Reference: AMC / RKI Reference: AMC / RKI / Cyber Security Generalist Postcode: BS34 #riki ...

Strong written and verbal communication skills Ability to work independently, manage workload and meet deadlines Desirable Experience UK Cyber Security Council professional registration (Chartered / Principal / Practitioner) Experience working in MOD, defence or central government environments Knowledge of Secure by Design principles and assurance tooling Experience … Security Manager or Security Lead on complex programmes Knowledge of government security standards and policy (e.g. MOD / HMG frameworks) Experience with: NCSC Cyber Assessment Framework (CAF) GovAssure audits ISO 27001 or similar audit activity NIST Cyber Security Framework Supplier assurance and supply chain security ...

architectural patterns. Promote Secure by Design principles to reduce information risk. Validate security controls and their effectiveness. Deliver security architecture for cloud deployments (private / public). Design and scope IT Health Checks and interpret outcomes. Identify and mitigate security risks in solution architectures. Conduct threat modelling and risk … technical cyber role. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG / NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS / Azure Architect, CISSP ...

Title: Platform Engineer - AWS / Terraform. Location: Remote with occasional travel to Head Office - Bristol or Milton Keynes. Salary 60k - £75k Plus Benefits Working Hours (Full time): Monday to Friday (40 hours per week) 08:30 - 17:30 (1 hour break) Hybrid Working Pattern Benefits: Hybrid Working Policy Generous … SaaS product range, you will manage our AWS Cloud production, dev and test infrastructure using Infrastructure-as-Code techniques and tools, along with CI / CD pipelines. You will employ DevOps and security best practices in all tasks. You will work closely with the Development and Test Managers ...

DC2E / SERAPHIM Security Engineer - 6 months - SC Cleared - Hybrid We are seeking an experienced Security Engineer to support the delivery of secure infrastructure and systems within the DC2E / SERAPHIM programme. This is a hands-on security engineering role, working closely with architecture, engineering, and security assurance … secure by design, compliant, and accreditation-ready, supporting delivery across multiple security domains. Key Responsibilities Provide hands-on security engineering support across the DC2E / SERAPHIM solution Work closely with Project Management, Architecture, Security Assurance, and Engineering teams Design and document secure system and infrastructure solutions ...

protection across diverse environments. Conduct risk assessments for new technologies and suppliers. Monitor for threats, investigate alerts, and support incident response. Maintain compliance with ISO27001, CIS18, and internal governance standards. Lead vulnerability management and penetration testing initiatives. What We're Looking For Minimum 5 years' experience in Information Security. Relevant ...

week on-site due to workload classification and dependant on business need. Security Clearance : British Citizen This role will require DV Clearance. Restrictions and / or limitations relating to nationality and / or rights to work may apply. As a minimum and after offer stage, all successful candidates … DHCP, Sites and Services and Replication Proven experience managing AD within multi-forest, air-gapped or secure enclave environments. Experience with Azure AD / Entra ID, ADFS, and hybrid identity solutions under strict compliance controls Proficiency in PowerShell for automation, auditing and reporting Identity and Access Management service support ...

with significant influence: you will design systems, implement tooling, measure productivity gaps, and drive adoption of better practices across the engineering organisation. Requirements CI / CD Infrastructure & Tooling Own and operate CI / CD systems (GitHub Actions, runners, caching, artifact storage). Maintain stability, scalability, and cost-effectiveness … pipelines. Build and maintain systems for our monorepo. Ensure CI / CD observability, with metrics flowing into Datadog / Slack. Pipeline Instrumentation & Optimisation Analyse pipelines for inefficiencies (e.g., flaky tests, redundant steps, lack of caching). Recommend and implement optimisations (parallelisation, test selection, caching strategies). Define benchmarks ...

with significant influence: you will design systems, implement tooling, measure productivity gaps, and drive adoption of better practices across the engineering organisation. Requirements CI / CD Infrastructure & Tooling Own and operate CI / CD systems (GitHub Actions, runners, caching, artifact storage). Maintain stability, scalability, and cost-effectiveness … pipelines. Build and maintain systems for our monorepo. Ensure CI / CD observability, with metrics flowing into Datadog / Slack. Pipeline Instrumentation & Optimisation Analyse pipelines for inefficiencies (e.g., flaky tests, redundant steps, lack of caching). Recommend and implement optimisations (parallelisation, test selection, caching strategies). Define benchmarks ...