1 to 25 of 58 Permanent ISO 22301 Jobs in the UK

impact analyses and defining continuity and testing plans. Implement and maintain information security controls aligned with applicable laws, regulations, standards and best practices, including ISO 27001/27002, GDPR, Cyber Assessment Framework (CAF) and NIST CSF. Develop and maintain information security policies, standards and procedures, ensuring organisational compliance. Define … degree in Computer Engineering, Telecommunications Engineering or a related discipline. Additional Required Qualifications At least two of the following certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 22301 Lead Auditor, CEH, CCSP or SSCP. Willingness to travel when required. Desirable ...

Integrated Management Systems Engineer, you will help shape the Graphcore way. This is our integrated approach to practical, scalable management systems. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable ways of working. Your impact will reach … reality. You will be expected to speak up, take responsibility and help Graphcore improve at pace. What we’re looking for Strong understanding of ISO 9001 principles in engineering or technology‐led organisations Lead auditor qualification in ISO/IEC 27001, ISO 45001, ISO 22301 ...

risks including cybersecurity and AI usage. Responsibilities Business Continuity Strategy & Governance Develop, implement, and continuously improve the Business Continuity Management System (BCMS) aligned with ISO 22301 and industry best practices, ensuring it aligns with risk and resilience goals. Business Impact Analysis (BIA) & Risk Assessment Lead and maintain … environments. Monitoring, Reporting & Executive Communication Provide monthly BC preparedness reports to executive leadership. Regulatory & Compliance Alignment Ensure compliance with relevant standards and regulations (e.g., ISO 22301, ISO 27001, GDPR). Continuous Improvement & Awareness Promote awareness and training on business continuity across the organisation. Stakeholder Engagement and Training ...

methodology, reporting and remediation tracking. Develop supporting templates and documentation and provide knowledge transfer. Work independently while maintaining objectivity and professional challenge. Essential Requirements ISO/IEC 27001:2022 Lead Auditor certification. ISO 22301:2019 Lead Auditor certification. Demonstrable experience conducting internal audits against both standards . … reporting and stakeholder management skills. Evidence of both current Lead Auditor certifications will be required. Desirable Experience auditing complex or international organisations. Experience supporting ISO certification or surveillance audits. Information security and business continuity risk management experience. Experience with Microsoft 365, Azure and cloud environments. Consultancy ...

Graphcore in the UK seeks an Integrated Management Systems Engineer to shape our integrated approach to ISO compliance and practical operating workflows. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable working practices across engineering, operations ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commercial Enterprise Resilience Practice into Europe, the UK, and beyond, growing a portfolio … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectations Ability to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmaps Ability ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commercial Enterprise Resilience Practice into Europe, the UK, and beyond, growing a portfolio … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectationsAbility to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmapsAbility to clearly convey ...

resilience transformation programs for European clients, implementing resilient operating models, secure recovery architectures, and capabilities aligned with European regulations like DORA, NIS2, CER Directive, ISO 22301, and sector-specific guidance. Expand Booz Allen’s Commer cia l Enterprise Resilience Practice into Europe, the UK, and beyond, growing … regulatory expectations for operational resilience, digital operational resilience, cyber resilience, ICT risk, third-party risk, and critical service continuity, including DORA, NIS2, CER Directive, ISO22301, EBA ICT Guidelines and related sector specific supervisory expectations Ability to translate regulatory drivers into practical client actions, investment priorities, and implementation roadmaps Ability ...

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation’s security framework, working across … business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. The Role You’ll take a hands‐on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned with recognised standards. Key responsibilities will include ...

great opportunity for an experienced InfoSec professional who enjoys the governance, risk and assurance side of security , with a particular focus on ISO 27001, ISMS governance, audit, compliance and control assurance . You’ll play an important role in maintaining and developing the organisation’s security framework, working across … business to manage risk, strengthen controls and support the continued development of its ISO 27001 certification internationally. 🔐 The Role You’ll take a hands-on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned with recognised standards. Key responsibilities will include ...

balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities · Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. · Conduct internal audits, control reviews, and risk assessments. · Maintain and monitor … Security Manager or similar information security role. · Strong understanding of cyber security, governance, risk, and compliance frameworks. · Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. · Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. · Strong communication, stakeholder management, and report-writing ...

balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor … Security Manager or similar information security role. Strong understanding of cyber security, governance, risk, and compliance frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing ...

access management (PAM) capabilities, including approval workflows and continuous monitoring.Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation (e.g., ISO 27001, ISO 22301).Integrate IAM with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle.Oversee Conditional Access ...

Maintain and continuously improve the ISO 27001:2022 Information Security Management System, including policies, standards, procedures, documentation and Statement of Applicability. Provide security and data protection assurance for new initiatives, changes and projects, embedding security-by-design and privacy-by-design. Conduct information security risk assessments, prioritise threats … diligence for suppliers, processors and critical third parties. Partner with auditors, regulators and payment schemes; prepare evidence and support audits, certifications and reviews including ISO 27001, CHAPS, FPS, Bacs and SWIFT CSP. Produce management reporting, metrics, KRIs, dashboards and committee packs on security posture, incidents, vulnerabilities, data protection ...

Directory domains/forests and cloud identity components (Entra/Azure AD) Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO 27001, ISO 22301) Integrating IAM with HR, IT, and engineering systems throughout the user lifecycle Staying ahead of emerging technologies including passwordless ...

Audit Lead for a remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO/IEC 27001:2022 and ISO 22301:2019. You will plan and deliver audits, assess control effectiveness, interview stakeholders, and deliver reports ...

stakeholder management. Working within regulated or complex enterprise environments. Desirable Important Business Services (IBS) and impact tolerances. DORA, FCA/PRA Operational Resilience, NIS2, ISO 22301 or ISO 27001. Supplier exit planning and third-party resilience testing. Cloud, Infrastructure or Managed Service provider environments. ...

embed product thinking across the organisation. Ensure compliance with company policies and relevant information security, data protection, energy management and business continuity standards, including ISO 27001:2022, BS 10012:2017, ISO 50001:2018 and ISO 22301:2019. Key Skills & Experience: Proven Product Management experience in commercially ...

supporting the Operations Supervisor and Director with a variety of tasks, including: Accreditation Support: Assist in achieving and maintaining company accreditations, including BSI Quality, ISO 14064, ISO 22301, and more. Quality Checks: Conduct random checks to ensure adherence to Standard Operating Procedures (SOPs) and investigate any quality … team setting. Comfortable in a fast-paced environment, managing multiple projects with tight deadlines. Strong organisational skills with an eye for detail. Experience with ISO/NQA accreditations. Proven ability to manage change and adapt to shifting priorities effectively. Why Apply?/Benefits Excellent salary and regular reviews Free ...

MAIN DUTIES Information Security & Risk Management Maintain and continuously improve the ISO 27001:2022 ISMS, including the Statement of Applicability, information security policies, standards and procedures, and the supporting documentation register, ensuring they remain current, mapped to control frameworks and audit-ready. Provide proactive security and data protection assurance … Partner with auditors, regulators and payment schemes by preparing evidence, providing subject‐matter expertise, and supporting internal and external audits, certifications and reviews (including ISO 27001 surveillance and scheme assurance such as CHAPS, FPS, Bacs and SWIFT CSP). Advise stakeholders on information security and data protection regulatory obligations ...

level of growth and are leaders in their industry. Responsible for managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 Information Security Management … System PCI-DSS Payment Card Industry Data Security Standard ISO 22301 Business Continuity GDPR and Data Protection Laws Conduct regular internal audits in line with the requirements of the standards. Implement compliance initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … mobile payment systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … mobile payment systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. ...

regulated financial services environment Strong knowledge of audit standards, risk management, and internal controls Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure Advanced data analytics … Professional‐level English (written and spoken) Nice to have: Professional certifications such as CIA, CISA, CPA Additional IT/security certifications ( CISSP, CISM, CRISC, ISO 22301 , or similar) Experience with audit‐related data analytics tools What sets you apart: High ethical standards and integrity Strong analytical and problem ...

/Azure/Oracle), Root Cause Analysis, Regulatory Compliance, DORA, KPI/SLA Management, Release Management, Business Impact Analysis, Senior Leadership, ITIL 4, ISO22301, ISO/IEC 20000, CBCP, MBCI, Site Reliability Engineering (SRE), Vulnerability Management, PowerShell, Python, Splunk, CyberArk, GenAIDirector, Head of Technology Resilience and Production Operations London … analytical, decision-making and communication skills, with the ability to lead confidently and calmly under pressureDesirable: ITIL 4, ITSM tooling (ServiceNow, Jira Service Management), ISO22301/ISO20000, CBCP/MBCI certification, SRE familiarity, or experience with tools such as Splunk, CyberArk PAM, or GenAI-driven service managementReady to take ...