1 to 25 of 32 Permanent ISO/IEC 27002 (supersedes ISO/IEC 17799) Jobs in the UK

defend at AI speed, leaders can lead through crisis, and AI agents can be validated before they are trusted in live workflows https: / / www.immersivelabs.com / why-immersive-labs We help the world’s biggest brands like Citi, Pfizer, Humana, and HSBC, protect … over 300 employees globally, announced funding of more than $180 million and been voted a Best place to work on multiple occasions! https: / / www.immersivelabs.com / company / our-story "The speed at which Immersive produces technical content is hugely impressive ...

plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001 / 27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define … banking, energy, telecommunications and media, industrial protection, and critical infrastructure protection. Knowledge of SOC operations, digital forensics and fraud management. Experience with GRC / IRM platforms and the automation of security and compliance processes. Additional security certifications such as CGEIT, C CISO, QSA, CDPP, or Security Director certification ...

Cyber Security, Information Security, Technology Risk, IT Audit, or Operational Risk. Knowledge of cyber security frameworks including: ISO 27001 / 27002 / NIST Cybersecurity Framework / COBIT / CIS Controls Experience supporting clients through compliance assessments ...

well as Research & Development activities. The role therefore requires someone who can effectively support a technology-intensive environment spanning manufacturing operations, engineering / R&D, enterprise applications and site infrastructure. The role combines three key areas of responsibility: -Act as the Digital Technology Site Reliability Leader for Lisburn … will bring a broad Digital Technology background spanning manufacturing-site infrastructure, enterprise and business applications, business-process solutioning, SAP fundamentals, cybersecurity and project / program management. A key expectation of the role is the ability to understand business and engineering needs and translate them into scalable, sustainable ...

requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast … Proven experience with security control testing and assurance activities Strong knowledge of one or more frameworks: ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 SOC 2 / ISAE 3402 CIS Critical ...

requirements and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast … Proven experience with security control testing and assurance activities Strong knowledge of one or more frameworks: ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 SOC 2 / ISAE 3402 CIS Critical ...

including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide senior oversight of third … party / vendor security risk and critical supplier assurance. Support security assurance for customer contracts and external stakeholder requirements. Develop security reporting, KPIs and dashboards for senior management. Work with security operations and engineering teams to identify vulnerabilities, manage remediation and improve security controls. Provide security input into ...

policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess and manage information security risks … years' experience in an Information Security, GRC, compliance or security consultancy role. Practical experience implementing and managing ISO 27001 / ISMS rather than purely theoretical knowledge. Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO ...

their organisation.Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001 / 27002, SOC 2).Have a strong technical understanding of networking, computing and cyber security conceptsHave the ability to use examples and analogies … train station. We also offer railcard loan and cycle scheme to buy a new bikeFind out more about life at Immersive Labs https: / / careers.immersivelabs.comCyber threats wait for no one and neither should you. Apply now! #J-18808-Ljbffr ...

designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF / 800-53, ISO 27001 / 2 or SABSA. Understanding of identity & access management, network security, encryption, API security … testing and security assurance processes. Ability to define, document and govern security requirements throughout solution delivery. Desirable: Knowledge of NIS Regulations and ISA / IEC 62443 for OT and industrial control systems. Experience working in highly regulated industries such as utilities, energy or critical ...

Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer ...

Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.). Advise in the development of the security product strategy and roadmaps for the various internal and customer ...

highly efficient manner Provide independent assessments of the risks and controls related to the adoption of technologies including Cloud and AI / ML Participate in the assessment of emerging risks as part of strategic business risk reviews, analysis of regulatory and marketdevelopments, New Business Initiative Approvals and review … technology industry Knowledge and experience with Information Security and Risk Management standards and frameworks such as NIST, ISO 27001 / 27002 and modern development practices and supporting toolsets (e.g. Agile, DevOps) Ability to understand complex technical systems and the business processes they ...

proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR / XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR / XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical ...

proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR / XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR / XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical ...

reliability improvements Experience & Skills Required: Hands-on experience with Azure Monitoring (Application Insights, Alerts, Action Groups) Strong knowledge of OpenTelemetry (including Kubernetes) Scripting / automation using PowerShell and / or Azure CLI Experience with Terraform and GitHub Actions Ability to define SLIs / SLOs … budgets Incident response and post-incident review experience Familiarity with Docker and Kubernetes Strong communication and documentation skills Desirable: Working knowledge of .NET / C# and React / NextJS Experience with cloud cost optimisation Knowledge of Azure networking (DNS, VNets, Firewalls) Understanding of security frameworks (e.g. ...

senior leaders, translating security requirements into practical business outcomes and driving actions through to completion. You’ll ideally have: Worked in a CISO / vCISO capacity previously Proven experience in security governance, risk, compliance or security consulting roles Experience managing security risks and controls within complex enterprise environments … Strong knowledge of ISO 27001, ISO 27002, CAF and Cyber Essentials Experience supporting audits, certifications and formal assurance activities A solid understanding of incident management, vulnerability management, IAM and change management processes Excellent report writing, presentation and communication skills ...

Cyber Assessment Framework and DSPT toolkit. Develop, communicate and implement the security architecture framework (based on ISO 27001 / 27002 and NIST 800-53). Embed Rackspace’s information security policies, standards and procedures into IT services methodologies. Proactively work with … requirements within the Rackspace information security governance framework. Design and integrate security baseline standards for security devices within the technology environment (IDS / IPS, firewalls, VPN, operating systems, BYOD, etc.) Advise in the development of the security product strategy and roadmaps for the various internal and customer facing ...

inclusion – it’s a place where you can grow, belong and thrive. Your day at NTT DATA The GRC Consultant (Cyber Assurance / Security Operations Manager) is primarily responsible for ensuring the security controls (people, process, technology) are in place and operating as designed. The primary … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defence on all matters relating to cyber security, information ...

experienced and qualified information or cyber security professional, able to operate credibly in a large, sophisticated technology environment. A strong technical background and / or previous consulting experience advising senior team members on complex cyber security or technology risk matters is highly beneficial. Strong security knowledge and risk … practical risk judgement and executive communication capability. Knowledge NIST Cybersecurity Framework ISO 27001 and ISO 27002 CIS Controls Relevant regulations such as DORA Security architecture principles Cyber threat and attack-path analysis Cloud security and cyber resilience Cyber risk management ...

learning content that simulate real-world regulatory scenarios. You will apply MITRE ATLAS and D3FEND, work with ISO 27001 / 27002, NIST SP 800-53 and CSF, and help educate users on secure by design. This UK remote role offers flexible hours ...

Operations Team, Project Management Teams, global IT Teams, and outsourcing partners to deliver solutions that enhance the security program for CLS. Essential Function / Major Duties and Job Responsibilities Strategic As part of the CLS Security Engineering team, develop and implement CLS security strategy in consultation with … compliance with cyber resilience requirements Be responsible when assigned ownership of CLS Security related Regulatory and Internal Audit finding(s), and provide effective / timely resolution Design and integrate consistent security solutions across CLS on-premise and cloud environments for domains like Vulnerability Management, Endpoint Security, Data Security ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy / standards as well as industry recognized frameworks and best practice Looking ahead to future opportunities. As our business continues to grow, we are building … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information ...

security frameworks and compliance standards such as Cyber Essentials Plus, ISO 27001 and ISO 27002 Experience supporting incident response and forensic investigations Knowledge of Microsoft security technologies and cloud security principles You will ideally hold, or be working towards, industry ...

threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy / standards as well as industry recognized frameworks and best practice Looking ahead to future opportunities. As our business continues to grow, we are building … quantify and lead risk mitigation plans Work with Service Management to ensure that partners and suppliers adhere to agreed standards, policies and verify / evidence appropriate compliance and security KPIs Work closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information ...