1 to 25 of 60 Permanent ISO 27001 Lead Implementer Jobs in the UK

services. About the role Our compliance strategy is written. This role makes it happen. First, it takes every company in our group to ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, with controls … HaloPSA and Employment Hero for policy acknowledgement and records What you will be doing Group certification programme Gap-assess every group company against ISO 9001, ISO 27001, ISO / IEC 42001 and Cyber Essentials Plus, and agree ...

ISO 27001 Consultant Remote (UK) | £45,000-£55,000 + Excellent Benefits Are you an experienced ISO 27001 professional looking for a varied consultancy role where you can make a genuine difference? This is an excellent opportunity … maintain recognised information security standards. You'll work with a diverse range of clients, including healthcare and medical technology businesses, supporting them with ISO 27001 implementation, Cyber Essentials and wider regulatory compliance. Working remotely from home, you'll ideally be based within ...

Compliance & Security Manager (GRC) Permanent Remote (UK-based) ISO 27001 Lead Implementer or Lead Auditor certification — essential An opportunity to take real ownership of security and compliance at a fast-growing tech company. Our client … maintain security and compliance documentation including policies, procedures, and support materials across information security and compliance programmes Take full ownership of ISO 27001 certification — driving continuous improvement and leading preparation for internal and external audits Manage the internal Data Protection compliance programme, ensuring adherence ...

here is not a paperwork exercise at the edge of the business. It is a condition of doing business. We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure … control is actually working or only described. What You Will Be Doing Compliance Execution Implement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline. Operate our GRC platform ...

role will lead the design, build and operationalisation of the ISMS in line with ISO / IEC 27001:2022. Key Responsibilities Conduct enterprise-wide ISO 27001:2022 gap assessment Define ISMS scope, context, governance … documentation and KPI dashboard Qualifications: ISO 27001 Lead Implementer and / or Lead Auditor. #J-18808-Ljbffr ...

help you make your moment. Join Team Purple. Join IFS. Job Description We are hiring a Senior Director – Technology GRC to lead governance, risk and compliance across Cloud, Product and Technology within our Trust and Intelligence organization. This senior leadership role will strengthen how we build … Product, Engineering, Cloud Operations, Cybersecurity, Data Protection, Legal and enterprise risk and compliance stakeholders. Role overview As Senior Director – Technology GRC, you will lead the governance, risk and compliance capability for IFS Cloud, Product and Technology. Your remit covers the security, data protection, compliance and responsible ...

seeking a technically skilled professional who combines strong interpersonal skills with a deep understanding of cyber security principles, data protection, and ISO 27001 standards. In this role, you will act as the first line of defence for our clients’ technical environments. While the core … security protocols and data protection regulations. You will not only resolve technical faults but also ensure that all support activities align with our ISO 27001 Information Security Management System (ISMS). This role requires direct communication global colleagues and customers to explain security implications ...

Lead GRC Consultant required to join a well established global technology company with a strong base in Edinburgh. This is a senior role within the Information Security team, focused on governance, risk and compliance, with responsibility for helping shape and continually improve the organisation’s security framework … CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer / Lead Auditor would be advantageous, but are not essential. The company boasts one of the best offices in Edinburgh City Centre, offering a stunning, modern ...

hold us to the same standard they hold their own suppliers to. Our own assurance is part of the product promise: we are ISO 27001 certified, hold Cyber Essentials Plus and have achieved SOC 2 Type 1. The team works closely with Engineering, Product … Finance, making security and compliance something that helps the business win and keep customers rather than slowing it down. This role As GRC Lead you'll own Risk Ledger's governance, risk and compliance work day to day: our certifications, our enterprise risk management, our policies ...

payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations … engagements across merchant and service provider environments, including assessment and non-assessment activities. Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity. Conducting PCI DSS gap assessments, readiness reviews and compliance assessments. Assessing ...

covering identity verification, lettings compliance, e-signing, uptime monitoring and secure document storage — alongside business, technology and Oracle / SAP ERP consulting and ISO 27001-led security audits. Everything we ship is designed around UK data residency and UK GDPR from day one, because … security and auditability are non-negotiable. Twelve months in, you'll have established a steady rhythm of risk and vulnerability assessments, kept our ISO 27001 and Cyber Essentials programmes on track, tightened our incident response plans and made audits uneventful. You'll work closely ...

recruiting for an Information Security Officer to join a growing organisation based in Farnborough. This is a varied role combining information security, ISO 27001, data protection and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical … will be responsible for: Troubleshooting hardware, software and network-related issues Identifying, triaging and escalating potential security incidents Ensuring support activities follow ISO 27001 and data protection requirements Maintaining accurate documentation and audit trails Supporting the implementation of security controls and best practice Identifying ...

Information Security Lead / ISO27001 / SOC / GRC / Permanent At Dexory, we are transforming the warehousing and logistics industry through data intelligence. We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO … 27001, SOC 1 Type 2, SOC 2 Type 2), act as the primary responder to customer security due diligence, and build the systems and knowledge base that allow Dexory to scale securely without friction. You'll work closely with the Head of IT & Security, embedding good security ...

ensure cybersecurity risks are effectively identified, assessed, communicated, and managed in accordance with business objectives and risk appetite. Responsibilities Team Leadership & Management: Lead, develop, and support a high-performing team of Cybersecurity Analysts. Set goals, monitor performance, provide feedback, and support professional development. Recruit, interview, onboard … reviews, and vulnerability analyses. Compliance & Reporting: Support compliance with relevant security, privacy, data protection, and AI governance regulations and standards, including PCI-DSS, ISO 27001, SOC, NIST Cybersecurity Framework, HIPAA, GDPR, and emerging AI regulatory expectations. Produce reports covering risk assessments, compliance posture ...

exciting strategy to serve an even wider section of the market, with innovative products and services. As the Information Security Manager, you will lead Hometrack’s information security framework, ensuring our data, technology, and operational practices meet the rigorous standards expected by our banking and mortgage lending … partners. You will be accountable for the ownership and maintenance of our ISO 27001 and Cyber Essentials certifications, driving continuous improvement in our overall security posture. This is a visible, high-impact role requiring both strategic ownership and hands-on governance to ensure security ...

track gap remediation Cyber Essentials Plus Deliver the annual renewal, including technical testing and remediation Monitor scheme changes and ongoing compliance Framework Alignment (ISO 27001, NIST CSF) Evidence alignment and run gap and maturity assessments Produce alignment statements for clients and auditors No formal … ISO 27001 certification held or sought PCI DSS Maintain scoping, segmentation and the annual assessment cycle Coordinate ASV scans and penetration testing Complete attestations with acquirers and assessors Vulnerability Management and Security Testing Validate scan coverage, track remediation and report metrics Coordinate penetration testing ...

delivery of the wider security strategy and improvement plan. Provide leadership, guidance and technical oversight to Information Security Officers within the team. Lead significant security projects and initiatives from assessment and design through to implementation. Own and drive improvements to the organisation's ISMS, security controls … overall cyber maturity . Lead security assessments across infrastructure, networks, endpoints, applications, cloud environments and data. Provide security input into technical architecture and design decisions. Work with technical teams to implement appropriate security controls around identity, access management, SSO and federated services . Oversee information security risk ...

lead the firm's information security assurance activities, maintain the firm's information security certifications by coordinate of certification activities, and provide independent assessment of security control effectiveness. To also assist in the firm's information security risk management framework, working with the enterprise risk team. … enable the firm to meet its regulatory and contractual obligations within it's risk tolerance. Main duties and responsibilities Own and maintain the ISO 27001:2022 Information Security Management System Coordinate internal and external certification audits Manage the lifecycle of policies, standards and supporting ...

safe and secure internet. This role is responsible for maintaining and advancing Mozilla's Information Security Management System (ISMS) and supporting our ISO 27001 and SOC 2 Type 2 compliance programs — from policy and control design through audit readiness and certification. The ideal candidate … mature the ISMS, including the Statement of Applicability (SoA), risk treatment plans, and the Management Review Meeting (MRM) process and cadence. Support ISO 27001 and SOC 2 Type 2 audit execution—helping determine scope, preparing evidence and narrative artifacts, participating in auditor interviews ...

continually improve the organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST / CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks … endpoints, applications and data. Identify, assess and manage information security risks, including maintaining risk registers and tracking remediation. Lead and support internal and external security audits , including evidence gathering, control testing and remediation of findings. Manage technical security risks within Data Protection Impact Assessments and policy exceptions. ...

auditors, and enterprise partners expect provable, continuously operating security controls — not slide decks or one‐off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region‐specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close … party / ICT vendor oversight, and digital operational resilience testing. GDPR implementation experience is a strong bonus. Experience supporting SOC 2 and / or ISO 27001 audits (strong plus). Ability to translate regulatory requirements into technical controls. Strong working knowledge of AWS security ...

will oversee the delivery of client engagements across a range of security and assurance frameworks, including ISO / IEC 27001 and Cyber Essentials, while identifying opportunities to enhance service offerings, strengthen team capability and support business growth. Working closely with colleagues across Data … Oversee the successful delivery of client engagements across a range of information security and assurance disciplines, including ISO / IEC 27001, Cyber Essentials and wider governance, risk and compliance activities, whilst driving collaboration across Information Security, Data Privacy, Business Continuity, Enterprise Risk ...

Cyber Security Architect & Engineering Lead Department: IT Infrastructure Employment Type: Permanent - Full Time Location: City, London Reporting To: Head of Information Security Compensation: £75,000 / year Description We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape … applications and integration platforms. Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead ...

assurance frameworks across a diverse technology environment. Key Responsibilities: Own and maintain the technology governance framework, including project portfolios, roadmaps, risks and dependencies. Lead CIS Controls Self Assessment (CIS CSAT) activities and coordinate improvement plans. Coordinate ISO 27001 gap assessments … security advisers and specialist suppliers. What We're Looking For: Strong experience in technology governance, risk, compliance or assurance. Good working knowledge of ISO 27001 and information security frameworks. Experience with cyber security improvement programmes, audits and remediation plans. Understanding of technology project governance ...

plans. Assess the effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement . Translate security frameworks and requirements, including ISO 27001 and NIST CSF , into practical operational controls. Support audit, assurance and compliance activities , including ISO 27001 … principles . Experience conducting or supporting technology / security risk assessments and maintaining risk registers. Good knowledge of security control frameworks such as ISO 27001 and NIST CSF . Experience assessing control design and effectiveness , identifying gaps and supporting remediation. Understanding ...