GDPR, Cloud Security Alliance (CSA) Star framework, SOC2 Type 2 audits, InformationTechnology Infrastructure Library (ITIL), ControlObjectivesforInformationandRelated Technologies (CoBIT), etc. . click apply for full job details More ❯
cybersecurity and data privacy or a related field. Strong knowledge and hands-on experience with technology risk management frameworks and standards (e.g., ISACA/COBIT, ITIL, NIST, ISO/IEC 27000, 31000 & 22301, ISQM). Strong stakeholder engagement and management capabilities. Comfortable interacting professionally with all levels of management andMore ❯
Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable. Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA Proficiency in risk management processes, vulnerability assessments, and incident response strategies. Current technical andMore ❯
Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable. Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA Proficiency in risk management processes, vulnerability assessments, and incident response strategies. Current technical andMore ❯
Experience with third-party and outsourcing risk, AI and digital transformation risks. Experience of developing and operating Technology Risk Management Frameworks such as ITIL, COBIT, NIST, ISO. Demonstrable extensive relevant experience of technology risk management in either a 1LoD or 2 LoD capacity (2LoD preferrable). Experience in scenario analysis More ❯
Southampton, Hampshire, United Kingdom Hybrid / WFH Options
Aztec
Experience with third-party and outsourcing risk, AI and digital transformation risks. Experience of developing and operating Technology Risk Management Frameworks such as ITIL, COBIT, NIST, ISO. Demonstrable extensive relevant experience of technology risk management in either a 1LoD or 2 LoD capacity (2LoD preferrable). Experience in scenario analysis More ❯
protection requirements. Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA, and other data privacy and security standards and regulations. Provides internal customer support via assigned More ❯
or similar. General understanding of operational risk and risk-relatedcontrol frameworks and practices such (ISO 27001, NIST SP 800-53, NIST CSF, COBIT, ITIL, etc.). Experience with IAM tools and technologies, such as Microsoft Entra ID (formerly Azure Active Directory), SailPoint, or similar. Experience with CyberArk for user More ❯
Broad understanding of cyber domains (cloud, identity, operations, compliance) Hands-on experience with major cloud platforms and security technologies Familiarity with frameworks (NIST, ISO, COBIT) and regulatory compliance (DORA, NIS2) Solution architecture experience and vendor-neutral evaluation approaches Qualifications Degree in a relevant field or equivalent practical experience Preferred certifications More ❯
ITAC concepts and requirements. In-depth knowledge of the ICFR Standards (US SOX, UK Corporate Governance Code) Strong awareness of IT control frameworks (e.g. COBIT, ISO 27001, NIST) and regulatory requirements (e.g. GDPR, ISO, ITIL). Experience with Systems transformation projects and an ability to embed new ways or workings More ❯
ITAC concepts and requirements. In-depth knowledge of the ICFR Standards (US SOX, UK Corporate Governance Code) Strong awareness of IT control frameworks (e.g. COBIT, ISO 27001, NIST) and regulatory requirements (e.g. GDPR, ISO, ITIL). Experience with Systems transformation projects and an ability to embed new ways or workings More ❯
batch management) Email, messaging, and collaboration systems (Office 365, Exchange, SharePoint, instant messaging) Strong understanding of technologycontrol frameworks and industry guidance such as COBIT, NIST, ISO27001, and FFIEC. Professional certifications such as CRISC, CISA, CISM, CISSP, CCSP, and AWS Certified Solutions Architect. Experience in managing regulatory exams and relationships More ❯
CSF, PCI-DSS, UK GDPR, and NIS2, and other aviation-related legislation. Awareness of Business Continuity, IT Service Continuity, and IT Disaster Recovery (ISO25999, COBIT, PAS 56, and ITIL). Demonstrable experience in a similar Information Security governance or auditing role. Experience with GRC platforms and tools (e.g., ServiceNow, Archer More ❯
NIST CSF, PCI-DSS, UK GDPR, and NIS2 and other aviation related legislation.Awareness of Business Continuity, IT Service Continuity and IT Disaster Recovery (ISO25999, COBIT, PAS 56 and ITIL) Demonstrable experience in a similar Information Security governance role or Information Security auditing role Demonstratable experience with GRC platforms and tools More ❯
experience within a UK-regulated environment. Expertise in cyber, operational resilience, technology, payments, or third-party risk management. Knowledge of frameworks like NIST, ITIL, COBIT, ISO, SWIFT CSP, and UK payment schemes. Proficiency with data analysis tools such as SQL, SAS, Python, or R. Understanding of IIA standards. Strong desire More ❯
CompTIA Network+, CompTIA Server+, CompTIA Security+, MCSA/MCSE, Cisco Certification) preferred. Project management and IT framework trainings and certificates including PMI, PRINCE2, ITIL, COBIT an asset. Extensive working knowledge of core technologies: network, servers, storage, data center, firewall, data protection, virtualization, active directory, authentication, video surveillance, cloud and unified More ❯
CompTIA Network+, CompTIA Server+, CompTIA Security+, MCSA/MCSE, Cisco Certification) preferred. Project management and IT framework trainings and certificates including PMI, PRINCE2, ITIL, COBIT an asset. Extensive working knowledge of core technologies: network, servers, storage, data center, firewall, data protection, virtualization, active directory, authentication, video surveillance, cloud and unified More ❯
through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.). Operational Technology - Ensure the security of critical infrastructure aligns with industry standards and regulatory requirements (e.g. NIST SP 800-82, CAF, DPA More ❯
a plus but not essential. Strong understanding of data management, integration patterns (e.g., ETL, API), and security frameworks Design experience or qualifications i.e. TOGAF, COBIT, Zachman, AWS/Azure Solutions Architect etc. an advantage ERP, Financial Services Systems and associated architectures experience along with relevant platform certifications (e.g., SAP, Oracle More ❯
a plus but not essential. Strong understanding of data management, integration patterns (e.g., ETL, API), and security frameworks Design experience or qualifications i.e. TOGAF, COBIT, Zachman, AWS/Azure Solutions Architect etc. an advantage ERP, Financial Services Systems and associated architectures experience along with relevant platform certifications (e.g., SAP, Oracle More ❯
coding, testing, and debugging technologies. Experience or interest in environmental and sustainability fields is a plus. Knowledge of ISO 27001/27002, ITIL, andCOBIT frameworks is preferred. A Bachelor's Degree in IT, Cybersecurity, or Information Security, or equivalent experience, is required. Attributes Excellent communication skills, critical thinking, andMore ❯
Data, AI, Integration, M&A, workflow, automation and shift left strategy. Familiar with corporate governance and controls; SOC, EU DORA, ITIL, NIST, Regulator Requirements, COBIT, ITGC. A true people partner, with matrix management experience in a global environment. Have an analytical approach to Architecture, ensuring the trade-offs between customer More ❯
technical certifications such as CISSP, CESG Certified Professional (CCP), ISACA, CISM) and ideally have experience with Information Security management frameworks, such as ISO2700x, ITIL, COBIT or NIST or Cyber Security accreditations. Working knowledge of security tools used in the organisation such as Trend Micro, Windows Defender, Proofpoint, Zscaler and Rapid7 More ❯
Management, OCIR, Crisis Management, IT Service Management, IT continuity, Security, Risk Management, Supply Chain Resilience, Disaster Recovery Familiarity with IT service models such as COBITand ITIL would be beneficial Experience of relevant international standards for resilience, risk management, information security and service continuity Certification to relevant industry bodies such More ❯
York, Yorkshire, United Kingdom Hybrid / WFH Options
Candour Solutions
highly desirable. Excellent understanding of cyber insurance products and current market conditions. Strong knowledge of security frameworks, standards, and best practices (e.g., NIST, ISO, COBIT, etc.). Expertise in security technologies, tools, and methodologies (e.g., firewalls, encryption, penetration testing, etc.). Strong understanding of underwriting practices for cyber risks. Excellent More ❯